Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKBOXTECH/pcHFqPEOrUhsU4QNdZiGWLHSbLY.mft
File:                     pcHFqPEOrUhsU4QNdZiGWLHSbLY.mft (raw, json)
Hash identifier:          FY+lLfl1n01QYG7T5OF860cPG8kEhYEx1Bw+BOHQDHY=
Subject key identifier:   5A:77:88:C7:A2:A5:10:BC:92:39:DD:13:9D:AD:AA:B9:19:20:A3:61
Authority key identifier: A5:C1:C5:A8:F1:0E:AD:48:6C:53:84:0D:75:98:86:58:B1:D2:6C:B6
Certificate issuer:       /CN=A5C1C5A8F10EAD486C53840D75988658B1D26CB6
Certificate serial:       1036
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/pcHFqPEOrUhsU4QNdZiGWLHSbLY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KKBOXTECH/pcHFqPEOrUhsU4QNdZiGWLHSbLY.mft
Manifest number:          1036
Signing time:             Mon 08 Jan 2024 06:27:16 +0000
Manifest this update:     Mon 08 Jan 2024 06:27:16 +0000
Manifest next update:     Wed 10 Jan 2024 06:27:16 +0000
Files and hashes:         1: pcHFqPEOrUhsU4QNdZiGWLHSbLY.crl (hash: UDuaiIsWE4tyqlrOqqFhzMPxsilSNC6A3TDSNw8D3r4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4150 (0x1036)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C1C5A8F10EAD486C53840D75988658B1D26CB6
        Validity
            Not Before: Jan  8 06:27:16 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=5A7788C7A2A510BC9239DD139DADAAB91920A361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cb:bf:97:76:c8:0b:74:36:98:23:ce:be:b7:
                    f7:0b:8d:be:fe:d2:2f:3b:ec:51:b3:e5:7c:c0:f3:
                    44:e4:88:3b:be:3f:85:6a:19:ba:93:bd:d6:38:61:
                    70:b7:f1:b4:0f:9c:74:cd:dd:d7:db:39:9a:05:11:
                    f8:d0:bc:00:e1:de:cd:f9:b9:ba:bd:4d:44:ea:39:
                    9d:d0:25:c1:0a:a0:98:bc:dd:98:c9:4b:1d:1c:66:
                    cb:0a:42:81:e1:64:7d:38:40:e8:12:38:19:0f:2b:
                    65:63:cd:66:0c:a7:f7:2b:81:33:76:55:c4:cb:01:
                    f1:73:32:d2:ed:a5:a2:8c:59:3c:cf:6f:42:70:a5:
                    50:6c:ca:3a:98:fd:d8:77:e6:7d:13:53:d9:14:cf:
                    65:86:d4:aa:42:1e:bb:91:77:23:89:7a:f4:37:ee:
                    5b:82:ac:72:ce:c6:7d:c4:61:96:90:d8:29:8a:98:
                    e5:8b:e7:a5:cf:6e:32:25:84:b1:28:ea:c4:28:14:
                    9e:5c:2d:75:bd:90:8c:21:3f:78:96:c4:40:59:7d:
                    ca:6d:a7:e4:03:6b:ce:bd:54:55:f7:95:7f:eb:51:
                    e4:fe:26:25:8e:9e:9c:50:86:e8:ae:53:cc:d4:21:
                    7d:be:72:19:94:60:76:b7:39:4b:e9:2c:11:e5:fc:
                    a8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:77:88:C7:A2:A5:10:BC:92:39:DD:13:9D:AD:AA:B9:19:20:A3:61
            X509v3 Authority Key Identifier:
                keyid:A5:C1:C5:A8:F1:0E:AD:48:6C:53:84:0D:75:98:86:58:B1:D2:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKBOXTECH/pcHFqPEOrUhsU4QNdZiGWLHSbLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pcHFqPEOrUhsU4QNdZiGWLHSbLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKBOXTECH/pcHFqPEOrUhsU4QNdZiGWLHSbLY.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:1f:43:1c:f3:ee:9c:9d:5a:79:a5:6e:f7:2f:f3:3c:fb:94:
         d9:47:d9:71:a6:4a:cc:69:c8:c2:78:8c:5f:5c:6c:3e:87:7b:
         92:57:36:cc:55:5e:56:84:ff:96:ab:1f:ed:d2:cb:d4:f8:5e:
         38:23:60:b1:cf:98:6b:ef:c4:2d:5a:ea:ad:96:20:99:9e:51:
         89:53:70:93:74:9a:37:2c:83:e5:51:a9:2e:25:33:50:ae:98:
         97:49:ec:c4:8b:7b:ad:92:f7:32:c8:aa:45:07:c4:56:1e:d6:
         43:94:5f:9c:5c:f3:6c:71:0a:62:89:01:66:7c:1a:7f:c1:e1:
         1e:d5:e8:22:ac:0c:71:5c:f3:bc:c0:5e:2f:2e:0d:b1:7f:ff:
         1b:91:e2:42:e6:55:8d:8b:68:53:72:ba:66:1b:8f:bc:7c:cb:
         91:de:a6:f9:94:a8:bc:af:f8:41:69:37:ac:bb:e4:62:61:87:
         b9:b2:d7:f0:a2:29:bb:aa:20:c5:1d:e4:1e:f7:d7:27:8a:5b:
         8b:b2:b8:f7:7c:a5:85:2e:d3:1b:03:97:5b:95:96:9f:92:a8:
         f0:7d:c9:65:84:77:c0:bf:14:b1:f3:8c:93:a1:4d:a1:fc:17:
         b1:0a:fa:20:8a:fb:48:da:d4:97:9c:3f:24:0f:5d:83:71:7a:
         42:6e:49:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:01:50 2024 by rpki-client on console.sobornost.net