Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APNT/wlKNjFtnb9miTf2n6SF0V7cxAmM.mft
File:                     wlKNjFtnb9miTf2n6SF0V7cxAmM.mft (raw, json)
Hash identifier:          KDFGiwcs4LtIlDjMUNUzQDDQXHl9WBObvT36g4L3Vvo=
Subject key identifier:   71:73:A7:EB:C9:8E:FF:B3:35:7F:06:17:2B:5A:D2:56:B7:EE:B7:BC
Authority key identifier: C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
Certificate issuer:       /CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Certificate serial:       1241
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/wlKNjFtnb9miTf2n6SF0V7cxAmM.mft
Manifest number:          1212
Signing time:             Mon 15 Apr 2024 03:52:22 +0000
Manifest this update:     Mon 15 Apr 2024 03:52:22 +0000
Manifest next update:     Wed 17 Apr 2024 03:52:22 +0000
Files and hashes:         1: wlKNjFtnb9miTf2n6SF0V7cxAmM.crl (hash: KiUb/1CBBoPk6ZHB/zomCNGIQvj8D1hRy6bjQGI4tIM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4673 (0x1241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
        Validity
            Not Before: Apr 15 03:52:22 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=7173A7EBC98EFFB3357F06172B5AD256B7EEB7BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9e:53:69:46:df:b9:9e:c4:e4:5e:e7:c8:77:
                    35:de:52:2c:12:1a:4b:06:c4:11:83:4b:e6:6f:18:
                    a0:e0:81:c9:f3:ea:32:6c:8b:df:f4:34:d3:76:c5:
                    da:1a:60:28:57:7b:3b:24:77:34:b2:47:bc:f0:59:
                    28:54:a1:ad:56:84:15:51:3c:c5:cf:9b:70:9e:56:
                    7b:8a:7a:eb:41:4c:a2:e7:02:61:92:04:46:e4:39:
                    25:c7:8b:27:4a:5c:41:cb:13:de:f7:ee:52:62:f2:
                    42:3e:e2:93:c0:c0:ec:2c:91:86:6b:52:44:e4:52:
                    e4:0f:2b:5e:fb:fc:6b:52:77:e6:0b:1c:52:97:95:
                    dc:c3:44:7d:97:2f:c3:44:f3:0c:a5:c1:74:ab:3a:
                    e1:3b:58:b0:ba:5b:96:e2:45:10:0a:5c:8a:84:21:
                    f2:f0:72:42:04:b0:88:cd:3e:a8:ca:69:23:94:34:
                    c7:41:89:f9:5b:02:ad:44:ca:76:cc:13:74:92:98:
                    41:ae:f8:26:11:20:55:15:72:6f:f9:d5:df:77:f2:
                    d0:5a:f4:13:14:a5:1a:bd:7d:72:fc:a5:f5:e8:df:
                    d4:4b:43:b8:e1:68:c7:86:fe:75:d7:e8:c9:f8:15:
                    36:d6:bd:f7:cf:c5:66:40:76:e5:05:c3:04:d6:7a:
                    4c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:73:A7:EB:C9:8E:FF:B3:35:7F:06:17:2B:5A:D2:56:B7:EE:B7:BC
            X509v3 Authority Key Identifier:
                keyid:C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/wlKNjFtnb9miTf2n6SF0V7cxAmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/wlKNjFtnb9miTf2n6SF0V7cxAmM.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:39:3a:10:90:b0:08:dc:c6:7c:e8:e9:53:45:2c:e9:a2:54:
         be:2c:e1:d5:67:a1:ac:6f:38:b5:f9:fe:28:d5:f3:a8:54:b7:
         f1:c4:70:48:82:f1:3c:d3:07:83:08:2d:fe:72:e8:01:c2:ea:
         e6:c1:4a:c0:50:91:67:76:87:7a:b9:ee:7b:bf:1e:fd:70:6d:
         67:a2:d2:72:03:a6:c8:4b:96:a3:bd:5b:a8:ee:a9:bf:24:f6:
         0a:8a:6d:e1:ad:87:a5:cb:56:0d:0a:c1:19:a4:db:01:99:60:
         11:e5:17:95:33:b9:8e:48:f0:76:50:fc:dd:a1:85:d0:cf:ba:
         06:1b:9a:ef:70:7c:49:95:33:2a:ea:6a:51:2a:9a:cf:eb:74:
         24:f6:1c:76:30:b6:f3:80:d0:e4:87:9f:7d:3e:26:8f:ab:c8:
         66:36:e7:ce:5b:4f:6a:45:c2:5c:34:10:3f:e9:d4:05:54:ec:
         b9:1d:77:34:6f:53:6c:58:d2:d4:ad:1b:0f:9e:4c:33:85:72:
         8f:c1:f1:99:76:9b:12:64:0d:10:5a:e0:af:97:25:e6:25:a3:
         4e:31:8d:ed:75:a2:08:6d:60:a7:73:ea:d2:ea:d2:1a:23:5c:
         c3:b3:b9:50:ba:65:b2:83:fc:03:1f:24:f8:48:8d:8d:2f:35:
         9b:ed:8d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 07:21:18 2024 by rpki-client on console.sobornost.net