Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft
File:                     36jEVIFcMBdFbqO0p9ACE7uFyWU.mft (raw, json)
Hash identifier:          hQ1tGll4A+qCcMJGDudUKpYO2ZjyLOa7YRUEoU0Gdoc=
Subject key identifier:   E3:D8:A0:FB:CF:FB:30:39:E9:A8:1A:F6:06:A6:70:73:E1:15:85:5F
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Certificate issuer:       /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial:       134A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft
Manifest number:          10C0
Signing time:             Fri 31 Jan 2025 15:37:40 +0000
Manifest this update:     Fri 31 Jan 2025 15:37:40 +0000
Manifest next update:     Sun 02 Feb 2025 15:37:40 +0000
Files and hashes:         1: 0hVhEC1G23IYg-9_24o8fgvLnNM.roa (hash: nNHi5LVGyhLoe5oGbm1pbWFNL/DmE07s9dKfeiFopGM=)
                          2: 1aMUolWyTRNoo_RgeWlVhbuVN-U.roa (hash: lEvD0eJTbGVejCzkQCPR72VUpUAchnpZRut9c/DPxFg=)
                          3: 36jEVIFcMBdFbqO0p9ACE7uFyWU.crl (hash: c9DKWGyjJW1cwbq/jTLMcNq1lkAyLtZeC/vkOarp9wQ=)
                          4: 6LVSIALAZUau6oV6NZ-8yYVbcU0.roa (hash: 5hlTH1YGOmYVHY8L3EU4T3ry/gSFJ8bKBtk4PsAaqE8=)
                          5: 7tX0r5nQP-QrtegWTSmn1D0ulA4.roa (hash: 5gKLF/ymxlvMoEbVARrJ1fG7uhPrngVYL8zdL+XHCJw=)
                          6: DV2qoKpeJSUNGzYbWyOmJlWk76A.roa (hash: EOhPp4FGS4TVJUZcwoY9eybO9MvdfLBWJh8e/GyRw80=)
                          7: I3uPBf2OuYEr-eMp9abjj-XgqWs.roa (hash: srTfKbGbJ3SgSA5xI37fAZFA0zZRfrkP/b1Xt88WunI=)
                          8: M_LLu_jS03is1be-N-9cb7MAgEk.roa (hash: trR5hWHCDc81ubrVuioiDnQa61ckc+Pq1NpX6GHxZyY=)
                          9: MogQit98IbgTdcg7PxwXx4GpO-g.roa (hash: 5fwf4uq9HEschhxe4yxhS1e3qBs5BbhDQ3W2PQRJ+vE=)
                          10: OL9Rh5L7w4EgomU7xH4udM9ggVs.roa (hash: dH+TBovbnW1OuAEbE/MKgzSOsIJ8YzmYxBJQWB0Z50k=)
                          11: SBJCxFUCVL9zof9UWf7rcyEHIAY.roa (hash: B2nVTz56QjQvAhS9CU0Zz9H7/N1iWc8uCCNrqEoYmwE=)
                          12: X77p89oWCka5b1Gj0NHPhlZbz6A.roa (hash: sZdkMGUW1yN2uadzLII0Vv9MawoNg2Q2WqTweiw3FWs=)
                          13: ZnK9JgZYTsfv_FrdpO_szNWK_WE.roa (hash: MegBc9C89Ke8zhecntJeUMeQYjGYoRvxsFiyhlULHxE=)
                          14: ZzKF2AHdSLyVzSIwVrw4P6vM1qk.roa (hash: jSi1dByO+ZHvPNyOdgCs0LLKowtX92o5ZwP2yA2GSzE=)
                          15: ffIa2KR6Aj7h7s3-w4bbu4GZBkc.roa (hash: UvUKUBMCmw9ceAa5jndy1iefdmUmheb1aePDK8Nba7s=)
                          16: hpL3ZtIGVoo_FHSmUAYlC787dMU.roa (hash: hybdDFD6bQpJPYX+tKBTCyV6FVJmTgwP22bXWIjVsxM=)
                          17: kxTjUbZ2SvOkWMGddLkPc7xlY0E.roa (hash: MG8hX4OnI/l15DTmieSgrOk+6K+5AO8V8yQ1EKUR8+g=)
                          18: lPjjQAa9YjMY3PXnYpR1IOY7-6I.roa (hash: sfIxAt+svBBFa/KEcFp7lApoeHX5O6HWW+80fq+2oeE=)
                          19: mzoGZVDKggrQ6WMRHubSOfh5RrI.roa (hash: Z6VB2tlxnfYwhMvF/TqM2mFFA++GkPcOtNJJjG+xuMo=)
                          20: ombhiwVnXK1K4y6NI-fJLgRVEOM.roa (hash: WN28jQy3RDJtZs0Xvg58uWk4+I5dEvXYClLuKOBIkio=)
                          21: oqL4GG55yuFwSZ-Hwc79xBPZrxY.roa (hash: o9r/HicinzelOLCTWIYhbhxSk7aKIQnwSGTt0E0xGiI=)
                          22: sc8v15c0TO83pfglST_EzqQXaVM.roa (hash: 3c/KbiuDmJhv3wWSOxSZ+ueOZ3oE1u32D4oe6wdlQ3Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4938 (0x134a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
        Validity
            Not Before: Jan 31 15:37:40 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=E3D8A0FBCFFB3039E9A81AF606A67073E115855F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6d:4c:96:9d:90:56:1e:17:3a:7d:ad:d1:c9:
                    37:4c:e8:b9:74:39:be:5d:e2:9c:46:0a:06:a6:af:
                    53:57:b8:c9:18:60:67:9b:a1:56:2b:cb:24:4d:0e:
                    06:fd:a5:5e:f7:4e:ab:c4:2d:77:d1:55:8c:32:c2:
                    28:50:95:25:a3:51:c7:a8:ec:f2:66:69:1b:2f:46:
                    43:b3:64:2e:6f:33:76:cf:45:23:2c:55:1b:db:4a:
                    65:91:f8:f0:d1:1c:16:a0:55:73:25:ba:07:fe:f7:
                    bb:7d:be:67:90:3d:d5:bf:4e:95:c6:b3:64:8d:d1:
                    79:33:3a:b4:05:04:5f:ec:df:ba:c5:12:0a:1b:3f:
                    b5:bf:ed:fa:80:d7:17:72:2f:25:e1:02:cf:38:e8:
                    c4:53:f2:b7:20:09:7a:2c:43:df:e0:b1:f9:40:7d:
                    7a:d0:b5:ad:87:72:8d:3f:1b:1d:16:9a:22:87:69:
                    eb:e6:28:a0:8a:12:7f:cf:69:c0:83:ef:5c:10:8b:
                    60:52:8b:9a:a7:2f:8c:6a:f2:11:ef:9f:66:15:03:
                    56:c1:e7:30:6e:cc:41:42:f6:1b:3f:b2:95:67:b0:
                    91:69:bb:c3:f6:ab:2f:63:af:b2:5f:23:0f:37:ae:
                    21:74:a0:76:aa:b7:bd:13:9d:95:62:b6:90:d7:e5:
                    cd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D8:A0:FB:CF:FB:30:39:E9:A8:1A:F6:06:A6:70:73:E1:15:85:5F
            X509v3 Authority Key Identifier:
                keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:2a:dc:3c:41:42:35:29:b9:ac:e9:21:5d:09:fb:84:99:6b:
         61:dc:b8:95:c2:cd:12:63:5b:27:33:4b:d8:a9:ff:77:b1:16:
         da:55:61:9b:e3:56:9a:7a:5d:cd:4d:6a:f1:36:c5:ce:fd:46:
         76:6c:14:e4:53:bd:d3:55:70:49:a2:c8:7e:8b:79:00:70:57:
         c7:c2:9e:06:77:25:32:fe:b5:c6:b7:2b:05:ad:c7:bc:99:cc:
         00:53:ce:d0:d7:19:12:40:ac:a4:fa:39:3b:5e:a9:a9:a7:6a:
         26:f4:1e:74:0f:23:6b:99:c3:f9:c9:b1:ee:6d:58:a5:80:fa:
         9d:19:19:e9:eb:15:7e:69:ae:70:f3:e7:f4:18:c9:36:f6:f8:
         bb:71:e5:08:33:65:a6:ac:61:c9:a7:3d:02:96:f7:e2:61:d1:
         72:24:0c:58:0b:a4:90:7e:aa:2f:34:f2:b7:be:17:da:98:5a:
         73:f3:7f:72:fe:45:02:2a:63:5e:5e:b4:70:d4:1e:ed:c4:45:
         57:0d:1c:f8:cb:2b:b9:80:5d:78:53:c7:8b:14:77:fe:a1:38:
         e9:ef:a8:f3:d7:f9:9a:4b:9a:3b:41:c0:46:8d:18:64:a7:3b:
         0a:c2:c7:b6:22:3f:e5:c9:62:7b:20:83:6b:22:15:a0:36:97:
         01:c9:b0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:27:56 2025 by rpki-client