Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/639Ki3shDbkgjtWANXBF5Zcd4NM.mft
File:                     639Ki3shDbkgjtWANXBF5Zcd4NM.mft (raw, json)
Hash identifier:          FEIWW1/gaxjlnWeROfyp30nk2tHP+rJpJI75JLHKo+0=
Subject key identifier:   C6:A2:9D:DF:66:72:B4:B2:BC:E6:75:15:86:81:5C:B8:8C:94:C3:F3
Authority key identifier: EB:7F:4A:8B:7B:21:0D:B9:20:8E:D5:80:35:70:45:E5:97:1D:E0:D3
Certificate issuer:       /CN=EB7F4A8B7B210DB9208ED580357045E5971DE0D3
Certificate serial:       0494
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/639Ki3shDbkgjtWANXBF5Zcd4NM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/639Ki3shDbkgjtWANXBF5Zcd4NM.mft
Manifest number:          048B
Signing time:             Mon 28 Apr 2025 09:50:15 +0000
Manifest this update:     Mon 28 Apr 2025 09:50:15 +0000
Manifest next update:     Wed 30 Apr 2025 09:50:15 +0000
Files and hashes:         1: 639Ki3shDbkgjtWANXBF5Zcd4NM.crl (hash: vOvmcvm8xz+ddIYxWukKHjAwawl7nOHwgTaEei6lOMk=)
                          2: QjWH8IvvcQRnRJwyrC-yfGiXzHs.roa (hash: PZ9YEwp2XR9xSBGCVl6iG4XZkPUrM/aSAEYSJqEG048=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/639Ki3shDbkgjtWANXBF5Zcd4NM.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/639Ki3shDbkgjtWANXBF5Zcd4NM.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/639Ki3shDbkgjtWANXBF5Zcd4NM.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 22:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1172 (0x494)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB7F4A8B7B210DB9208ED580357045E5971DE0D3
        Validity
            Not Before: Apr 28 09:50:15 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=C6A29DDF6672B4B2BCE6751586815CB88C94C3F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ee:fa:15:8c:15:9a:4d:1c:8b:ed:2f:a6:30:
                    71:6e:32:0a:3f:9e:03:fa:73:5b:3c:c1:6f:14:e8:
                    07:0c:56:1f:ee:4e:7e:71:31:a1:af:e5:b7:3d:c9:
                    ba:2e:17:47:e1:d0:f8:0e:22:06:73:6a:8e:5f:c4:
                    43:cb:58:6a:9a:a5:1f:08:b4:e1:bb:60:67:97:99:
                    93:b5:40:a2:41:02:0c:d3:99:cc:19:34:5c:4f:11:
                    d5:66:75:21:59:c9:34:34:d2:f5:ea:95:70:2a:9b:
                    12:bf:29:9a:66:58:be:b6:e6:61:56:10:ea:9e:87:
                    12:b4:44:1b:64:6c:a3:ad:8b:78:4d:4a:4e:fd:f7:
                    e9:a6:16:bb:20:7b:ac:33:37:49:bd:bd:18:b2:e6:
                    45:fe:8c:4f:08:e7:34:6f:b7:92:18:8f:74:1c:c9:
                    8d:11:e8:7a:b1:7a:ba:14:0d:5a:43:89:16:b6:75:
                    3f:5c:bc:c2:e7:13:53:47:12:1f:12:93:7d:90:bd:
                    3e:c3:6d:70:09:f5:e2:5f:5e:d0:03:49:6a:a9:8d:
                    07:7c:f1:2c:3b:a7:95:d3:09:df:93:b2:66:8e:2f:
                    06:30:cf:78:34:29:89:46:bc:f3:22:3a:b1:43:2d:
                    1d:71:8e:38:d8:67:db:b4:02:24:76:0f:76:15:e9:
                    c8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A2:9D:DF:66:72:B4:B2:BC:E6:75:15:86:81:5C:B8:8C:94:C3:F3
            X509v3 Authority Key Identifier:
                keyid:EB:7F:4A:8B:7B:21:0D:B9:20:8E:D5:80:35:70:45:E5:97:1D:E0:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/639Ki3shDbkgjtWANXBF5Zcd4NM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/639Ki3shDbkgjtWANXBF5Zcd4NM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/639Ki3shDbkgjtWANXBF5Zcd4NM.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:43:6d:43:53:4a:52:08:f6:5e:f0:55:5f:77:c1:ca:31:9e:
         6d:c0:3b:5f:1d:68:ca:75:ed:80:fb:cc:27:53:55:10:54:03:
         66:b6:7b:51:0d:15:ca:c0:5e:5e:81:3a:12:2b:89:5a:20:d0:
         e1:75:64:98:ec:4b:d8:47:18:6f:77:32:17:8c:96:0a:a8:39:
         7e:2e:90:c5:89:6d:eb:a2:80:c4:e6:53:36:d1:82:0c:fc:74:
         3c:92:f2:91:50:a3:b2:ca:f3:a0:67:3c:e4:51:6a:c7:61:cf:
         ba:8f:c2:87:c7:10:89:08:71:57:69:d4:ea:c0:a9:53:97:84:
         25:2c:31:83:8d:48:c6:de:c2:51:5e:8f:92:cd:00:89:10:01:
         7a:29:ec:94:6f:97:50:36:4b:31:e1:5e:2e:6f:e5:a6:6f:5e:
         e3:3b:5d:76:c8:43:d3:68:52:5c:67:db:e8:80:5b:8e:98:63:
         fc:c3:56:de:72:72:07:09:c5:bf:51:94:8f:38:de:f2:07:f8:
         1c:3e:d6:57:af:f9:60:7c:1f:13:e6:e8:92:0d:48:98:54:b9:
         f2:2c:14:5b:90:00:f3:d7:de:68:88:84:91:78:9a:b8:7f:e5:
         db:39:e9:54:f2:90:68:16:fc:83:b2:4c:ec:e5:3d:5b:cd:ef:
         17:9c:d7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:12:33 2025 by rpki-client on console.sobornost.net