Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.mft
File:                     KY7S_WrVxbVoffYUonXC_ISNTpQ.mft (raw, json)
Hash identifier:          PrsvzCf5ewBfz25nQAMmJRV9fRaPlgCI9TG1j5PJS9g=
Subject key identifier:   B0:36:85:E8:40:40:AE:F3:72:A7:53:06:42:B6:0A:22:91:8B:A4:15
Authority key identifier: 29:8E:D2:FD:6A:D5:C5:B5:68:7D:F6:14:A2:75:C2:FC:84:8D:4E:94
Certificate issuer:       /CN=298ED2FD6AD5C5B5687DF614A275C2FC848D4E94
Certificate serial:       0284
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KY7S_WrVxbVoffYUonXC_ISNTpQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.mft
Manifest number:          027B
Signing time:             Thu 30 Jan 2025 19:07:36 +0000
Manifest this update:     Thu 30 Jan 2025 19:07:36 +0000
Manifest next update:     Sat 01 Feb 2025 19:07:36 +0000
Files and hashes:         1: KY7S_WrVxbVoffYUonXC_ISNTpQ.crl (hash: pdYjJ2qF121uOE6YKFvEqDCxhA/kjkcqbG4Zee5+cKQ=)
                          2: _ImarZLfEV40V5siaRNDJV-q3xY.roa (hash: np9OZP0OhnoRTbu1v/+2OR9BLSS04OLSHac2XL0oQrg=)
                          3: yrF0SRYRWfMvPeHlHMm-z9BTVKQ.roa (hash: huL5OTQfKgfJ+e3UruHkSHDp9OKhM03ld8L7od488gc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 644 (0x284)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=298ED2FD6AD5C5B5687DF614A275C2FC848D4E94
        Validity
            Not Before: Jan 30 19:07:36 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=B03685E84040AEF372A7530642B60A22918BA415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4e:c5:43:f2:41:c1:58:1f:f2:6b:c8:89:6a:
                    9c:a3:c3:3a:ff:fe:f1:0c:55:e8:13:49:bf:8b:b1:
                    eb:13:04:81:5f:11:1c:73:a7:a4:04:51:38:8b:88:
                    02:49:da:61:e0:18:4d:22:f1:c3:fc:4c:3a:45:87:
                    9a:19:90:ea:21:1b:78:6f:57:b2:2a:b9:bb:d9:9d:
                    c0:45:9b:73:99:48:44:1f:ce:87:cd:70:d0:be:48:
                    ab:6b:2b:c5:68:21:79:93:1f:b0:2e:e6:9b:93:66:
                    ff:27:db:e4:4b:da:0c:11:92:be:a6:1b:37:36:5b:
                    79:72:cf:d0:6e:92:e3:7f:40:0c:2e:b3:41:f8:3d:
                    26:d1:ef:50:6a:a9:91:58:7d:23:a0:9e:98:7c:73:
                    73:6c:86:16:4b:cb:51:20:ab:91:5d:b8:73:a9:99:
                    8a:93:df:1f:80:52:25:2c:e6:1a:96:d8:75:5b:5e:
                    24:97:18:bb:69:70:30:31:b4:d0:0e:63:ad:2e:f0:
                    14:ef:af:34:38:cf:e8:58:9a:49:7a:ec:d6:4e:e5:
                    be:4a:f6:f1:21:d9:8a:c6:ec:7a:48:ef:47:3b:74:
                    ce:8b:6f:ad:f9:82:38:70:4f:4b:7f:b4:37:42:f8:
                    0a:3f:34:e7:64:83:55:ef:97:f6:e1:c8:b2:2a:d8:
                    2d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:36:85:E8:40:40:AE:F3:72:A7:53:06:42:B6:0A:22:91:8B:A4:15
            X509v3 Authority Key Identifier:
                keyid:29:8E:D2:FD:6A:D5:C5:B5:68:7D:F6:14:A2:75:C2:FC:84:8D:4E:94

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KY7S_WrVxbVoffYUonXC_ISNTpQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:f7:b6:4c:a4:9c:83:d6:17:41:c4:7f:60:7e:f2:63:fb:e3:
         ab:59:41:ee:2d:47:09:08:89:54:1c:f9:c8:1d:50:b5:2e:8e:
         c9:84:8b:31:44:12:ac:ab:86:dd:30:e7:63:c8:f9:02:e2:56:
         00:ee:05:72:5d:0b:d7:94:c0:f9:37:67:70:9f:90:86:2d:ad:
         68:5f:46:a4:24:51:e4:e0:5d:20:14:41:f3:8c:17:dc:83:08:
         0b:aa:81:39:10:93:b6:7a:51:55:f1:60:d0:7d:3c:3b:39:af:
         b0:3e:5a:ab:c5:1c:97:c8:c6:b8:d1:8f:9f:0c:11:46:1b:a4:
         8a:63:5d:e0:14:6d:d1:55:a6:9c:ad:61:4d:70:fa:c9:5c:12:
         85:53:13:2a:79:e6:ce:9e:1c:0c:90:3a:95:1a:a9:48:a1:b1:
         23:ff:e0:6f:2b:80:2c:d2:8e:9f:86:04:cc:35:81:6a:55:29:
         89:58:21:32:9c:96:ad:ee:30:ac:3f:e5:3b:2c:69:6a:4f:5b:
         46:80:88:81:47:b0:f3:3d:63:e0:eb:3d:c4:2a:eb:10:b8:84:
         aa:0e:3d:07:3f:60:6a:35:4d:5e:a4:a8:62:f3:61:30:ce:14:
         45:de:9e:06:30:d1:cc:6d:bd:b6:6b:33:cc:fe:9e:82:e3:61:
         a8:96:e1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:12:03 2025 by rpki-client