Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft
File:                     Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft (raw, json)
Hash identifier:          FiB4eJVshVyCqqWoG/DYT2jJhTb1vsx517sslvntB4w=
Subject key identifier:   BD:F5:E7:4C:32:5D:4E:53:72:05:6C:A0:EA:73:23:8E:F4:74:1D:1A
Authority key identifier: 67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9
Certificate issuer:       /CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9
Certificate serial:       0FA5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft
Manifest number:          0F9D
Signing time:             Thu 30 Jan 2025 20:07:10 +0000
Manifest this update:     Thu 30 Jan 2025 20:07:10 +0000
Manifest next update:     Sat 01 Feb 2025 20:07:10 +0000
Files and hashes:         1: Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl (hash: nfscPDkfA5+0rw3ECNts38MABBpNNelTZ9edAdAVz/4=)
                          2: olRGVNao7ukqWNth7suSau0xNa4.roa (hash: aaVvBIWkYh6mF9JgUq77aJ2HCevxxzfAE1Skgbqe8KI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4005 (0xfa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9
        Validity
            Not Before: Jan 30 20:07:10 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=BDF5E74C325D4E5372056CA0EA73238EF4741D1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:24:3a:12:a8:72:83:3a:41:63:15:11:52:87:
                    39:78:c6:cd:5e:b8:a2:53:b3:15:c7:7b:cc:69:ec:
                    c8:68:60:6a:22:9f:ab:a3:1b:66:e5:2d:d3:5d:4b:
                    ca:11:9e:51:0d:e7:7b:cf:09:27:9f:7a:5d:d6:4f:
                    fd:95:3b:74:2f:cc:78:3d:86:36:1d:9f:8e:67:92:
                    13:d4:46:03:56:00:53:2a:51:59:01:a7:e5:c9:74:
                    15:cc:39:3f:ea:be:28:ff:e2:a2:c3:b6:c8:04:a1:
                    9b:ec:1f:01:71:99:23:2b:69:af:81:ad:b5:a1:55:
                    ac:fb:2b:e0:e4:fd:c2:31:80:6e:1c:04:1b:7a:7a:
                    92:81:ba:b9:d8:63:bd:5f:1a:1a:1f:81:74:0c:68:
                    82:48:36:45:a5:c7:80:46:8e:7c:6c:08:61:9c:c0:
                    99:b8:ed:c2:c1:22:2c:f6:3b:1f:64:c8:30:d5:6e:
                    39:da:b5:65:f2:ad:9f:fa:29:ef:bd:6f:5c:51:f3:
                    c5:e6:20:06:f4:12:26:47:f8:f9:88:6f:a5:66:bf:
                    02:8f:f5:2c:70:e4:a9:4a:cf:5d:70:0e:92:cd:29:
                    08:90:35:4a:00:21:81:0b:89:d8:53:6b:ab:25:7f:
                    80:97:c5:57:2f:ec:b8:86:2c:94:17:ef:0a:84:6e:
                    10:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F5:E7:4C:32:5D:4E:53:72:05:6C:A0:EA:73:23:8E:F4:74:1D:1A
            X509v3 Authority Key Identifier:
                keyid:67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:4f:a2:2e:18:32:27:58:c0:e6:7a:18:16:a6:dd:cf:a8:33:
         c9:16:49:60:72:42:59:ef:41:31:96:8a:d0:5f:71:94:db:e2:
         eb:a1:ff:e7:f1:d8:5b:23:7d:5e:8d:f6:0a:f0:2a:68:cd:62:
         db:12:9e:5f:ef:e9:bd:2b:17:68:5f:f2:23:99:a2:49:d4:80:
         e6:78:eb:ff:cd:32:7e:ae:3a:62:bc:ae:cd:07:45:ff:59:8e:
         4b:b2:ee:b3:19:d9:96:bd:1e:b2:d7:de:e1:14:e3:28:da:97:
         80:2e:5b:44:5c:59:4f:aa:2e:11:3d:e0:a3:4a:46:01:ea:a8:
         c2:af:bd:de:4d:95:d8:c0:d9:06:e8:0e:99:f9:df:7e:c2:e1:
         1a:cb:75:f3:c7:9a:d7:ae:cc:39:66:ab:d3:4c:e6:81:74:c3:
         51:5c:62:70:63:28:cb:ee:6d:71:65:1c:10:d3:63:33:2c:8b:
         04:39:12:51:b9:96:74:05:4d:d0:bb:72:85:e4:b5:12:9f:97:
         8b:74:94:e3:a2:77:4a:68:9d:75:eb:44:57:6f:67:68:ac:43:
         22:1f:14:12:1e:96:91:28:5f:59:a3:e7:56:b3:ad:5f:c0:08:
         5b:c2:65:d4:d3:e1:ba:0d:88:7f:23:85:5b:8e:80:3b:00:f9:
         a4:b8:c3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 10:06:57 2025 by rpki-client