Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TDTGROUP/fgiPiaYWMuF9kZ-UPpegmr0DyTs.mft
File:                     fgiPiaYWMuF9kZ-UPpegmr0DyTs.mft (raw, json)
Hash identifier:          B4pUib5heP8e/LuV6j+wS1TTUVUDdu+J9wqUCG4nqmc=
Subject key identifier:   17:D5:1F:95:C1:39:70:EF:EF:2C:73:09:91:E3:6A:0C:D2:11:22:21
Authority key identifier: 7E:08:8F:89:A6:16:32:E1:7D:91:9F:94:3E:97:A0:9A:BD:03:C9:3B
Certificate issuer:       /CN=7E088F89A61632E17D919F943E97A09ABD03C93B
Certificate serial:       0C52
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/fgiPiaYWMuF9kZ-UPpegmr0DyTs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TDTGROUP/fgiPiaYWMuF9kZ-UPpegmr0DyTs.mft
Manifest number:          0C52
Signing time:             Thu 30 Jan 2025 17:08:40 +0000
Manifest this update:     Thu 30 Jan 2025 17:08:40 +0000
Manifest next update:     Sat 01 Feb 2025 17:08:40 +0000
Files and hashes:         1: fgiPiaYWMuF9kZ-UPpegmr0DyTs.crl (hash: Q3V3WIGk8/yXdvK55NrpsyeKnT2IAC6RBQqteQS4PgI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3154 (0xc52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E088F89A61632E17D919F943E97A09ABD03C93B
        Validity
            Not Before: Jan 30 17:08:40 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=17D51F95C13970EFEF2C730991E36A0CD2112221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3b:c1:83:27:26:00:8d:2d:23:18:9b:b8:ff:
                    82:76:95:14:a0:a3:01:1a:94:de:38:f9:b7:ef:97:
                    3e:e0:76:13:c5:d3:0f:71:0c:e9:b6:b9:f1:98:c3:
                    92:11:d2:3a:19:ff:f7:89:ce:11:a2:3e:d7:22:57:
                    37:74:ea:e8:b2:44:71:8d:c2:69:b6:d8:bc:7c:5f:
                    d7:3c:51:23:7b:a2:c6:f1:fb:22:6d:1a:85:ad:81:
                    ae:d5:bd:f3:0c:3b:2b:e1:88:ca:57:5f:63:27:7f:
                    1d:f6:75:fc:dc:84:a0:64:34:83:5b:7b:c0:a7:e4:
                    25:d8:88:bb:a1:2e:ec:2c:ed:fc:7c:9e:61:b8:a9:
                    d1:9b:b7:c7:d6:42:57:6b:b3:39:da:45:57:97:60:
                    5d:59:f1:e3:68:01:44:3f:73:8d:7b:33:88:5f:9d:
                    fe:8a:a8:3c:b7:d4:b8:b4:5d:cb:6c:7f:52:d4:03:
                    63:35:b3:89:bc:2a:77:50:b5:e2:87:c1:16:00:51:
                    3d:fb:35:04:68:63:40:70:3e:07:b1:52:fa:98:f3:
                    0e:e6:d9:80:a3:1d:e5:b0:14:89:00:58:9f:0e:68:
                    3c:60:b2:12:5c:85:2f:09:10:2d:b3:78:57:7a:eb:
                    39:43:55:db:fd:ba:c5:46:8f:d2:2c:66:fa:63:89:
                    2d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D5:1F:95:C1:39:70:EF:EF:2C:73:09:91:E3:6A:0C:D2:11:22:21
            X509v3 Authority Key Identifier:
                keyid:7E:08:8F:89:A6:16:32:E1:7D:91:9F:94:3E:97:A0:9A:BD:03:C9:3B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TDTGROUP/fgiPiaYWMuF9kZ-UPpegmr0DyTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fgiPiaYWMuF9kZ-UPpegmr0DyTs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TDTGROUP/fgiPiaYWMuF9kZ-UPpegmr0DyTs.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:74:82:27:52:8f:6f:31:cf:25:40:df:69:fd:53:39:27:d2:
         1d:ed:a2:62:66:eb:a9:7a:70:01:0e:3a:f7:56:c8:d4:1e:20:
         cf:7b:75:22:47:aa:0b:4a:cc:19:6b:39:ae:75:e6:88:f6:c3:
         57:12:e2:30:c1:35:2f:56:b4:40:57:7e:d2:57:76:29:3c:65:
         2d:de:9e:d9:19:fd:ee:d6:67:d9:82:42:bb:27:e0:fe:28:e1:
         e2:f5:05:63:53:4f:ea:26:42:e5:ac:f7:96:98:0e:50:cf:4b:
         11:ec:24:98:65:73:44:db:68:86:df:1e:7d:a2:85:e5:d8:f1:
         ff:4b:11:cf:ac:6f:d6:0e:ce:77:d6:8f:43:9e:e3:ce:68:b4:
         af:46:b9:df:50:b4:d9:4c:92:b3:a3:8d:7b:e0:a9:fb:f0:2d:
         58:90:50:4b:29:54:b4:b6:17:57:b2:a5:cf:e6:87:fe:bc:d7:
         70:3f:d4:b5:da:1b:68:5c:bd:3f:72:ac:48:3c:6d:a4:c9:f9:
         cd:40:34:8b:d6:51:c5:e5:a7:67:9c:4d:84:12:db:d7:3e:cf:
         9e:a2:05:51:fa:1b:22:f8:ca:ee:5f:58:c2:e2:1f:86:4d:ac:
         50:bf:8a:e7:8d:81:c8:b9:84:0f:19:e8:74:1b:6a:f2:90:34:
         6a:98:6e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:36:57 2025 by rpki-client