Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.mft
File:                     UqPwGYAJgDtRZd5ey2H9RRJGz6s.mft (raw, json)
Hash identifier:          E5HBwZKlqGvwbWL5MBOqwa1bSKtQSFfRxP2Vy6RsXzM=
Subject key identifier:   9C:49:BC:1E:B6:65:DB:30:E8:51:2F:81:5D:1B:9F:82:1F:FD:50:3C
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Certificate issuer:       /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial:       0BD2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.mft
Manifest number:          0B8A
Signing time:             Thu 21 Dec 2023 12:56:14 +0000
Manifest this update:     Thu 21 Dec 2023 12:56:14 +0000
Manifest next update:     Sat 23 Dec 2023 12:56:14 +0000
Files and hashes:         1: -p8WEGMYsL-nNvQ0U7_uRP0gQCI.roa (hash: /KgUwfV61HcPkY2CSbRcyJuoU12ScNYWR4GZ2WZA/SU=)
                          2: 54N4UMppOF4APeYQbgc9lzll2Qw.roa (hash: mJpFXQUjdbmVP4zXsNqYCNciO7uvyUF1s/kMBUPeQyQ=)
                          3: 5xNzhdCl_HiSMPM2e4iwTIhtnfw.roa (hash: i7kjXPLBBIKOdWtSPhuYBCJ3eruuV7OgagW2zDmUMoU=)
                          4: 68Raa6ElHGliLVt1Ihu5Y2PIlE4.roa (hash: ZKA4h1dp5TH8G1eZVob9A+2bTjV76R5lWb+dOvjmURY=)
                          5: EZ1T3JOpr_vopjBncW_TiSZJjQM.roa (hash: ol2YmQFBCXM/uBv/aYkRlSUzi+eU1QWUdGJA7lkQsso=)
                          6: KArwH-JVoKbAPOpukEhn72nTNQ4.roa (hash: +WbGzKNWog2Ye0meL1PE286y3+n1kv784Lq1BUXxRyI=)
                          7: KalH2YUuVZ338iEBll6z652fAcE.roa (hash: 0l9Oofm1NwOq+KTJi2SY2q5vqsMyFxmB9XSsbMcah3s=)
                          8: MakGoW4bgzxVqEhGB-kq25x7DOw.roa (hash: zVbhT7WA9wxF4dL1GcouCBGinCZ5Wq1Pyam7ncWDp0M=)
                          9: Qmz8SuqrTcZrLdimYhvV5Vi_qWI.roa (hash: Hvhw1pVPg5/g0ZO0ygnj9knR35x0bUHQy0HxjObTaS0=)
                          10: UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl (hash: vtceOgtvS2ITi/4VEHH57zWEOpCRVJ0k9dYtzxhD2Ro=)
                          11: Z2wP8aIpPHvw4n1PYbQJXq6iZZs.roa (hash: L5Z4Q17z6w+yZ9VAywnBoLXQAtp+1SZWlTnahEm8SIw=)
                          12: _JctYeNS356cCyLk40dQAHxoz34.roa (hash: vOrHKDGK/DNkYx12sm5HbsTSleovnfNwUvNRrmFU36E=)
                          13: j2SHkPCYa0C8TDOGUX9WZ2gE6NM.roa (hash: 3qFkiF8VywlmuLLascw5qjECoDSNktVvUZv4r0dvHMM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3026 (0xbd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
        Validity
            Not Before: Dec 21 12:56:14 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=9C49BC1EB665DB30E8512F815D1B9F821FFD503C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f4:ef:86:da:60:a0:7a:b7:28:eb:b9:7a:1d:
                    62:5a:e9:64:65:14:34:db:d8:eb:fc:11:f8:67:b5:
                    03:37:5b:1f:ae:0c:9b:80:27:61:b7:2b:0a:13:66:
                    8b:a6:fb:55:77:fb:1a:77:a7:75:0e:08:9c:36:f7:
                    6d:b7:45:ac:4f:d3:25:f8:f7:f6:92:cb:23:8a:dc:
                    06:17:b8:05:d2:65:58:a4:bc:8c:80:60:a2:89:e8:
                    c7:f8:40:ce:1f:6c:4f:fa:d4:07:c7:7b:d9:20:ea:
                    f5:15:4d:cb:a4:7e:08:b8:91:cf:26:85:aa:c7:0d:
                    81:c9:6c:ba:c5:ed:2e:6b:94:ac:3e:2e:ba:df:f5:
                    5b:78:80:d4:f7:32:d9:35:bd:b3:26:cf:e6:2f:57:
                    03:d0:cd:ea:68:54:51:ce:a6:5b:0b:d9:8d:28:d8:
                    8b:4f:a1:32:78:71:19:6e:6c:9b:68:3a:63:5d:14:
                    0b:76:e8:ae:73:48:4e:81:ee:9b:f2:7d:ba:ce:77:
                    cd:32:f3:6a:52:03:2a:12:a1:96:ec:b9:cd:bd:25:
                    72:98:4a:c6:7f:af:b7:4b:7d:f9:c6:f7:df:af:7f:
                    03:ab:ec:ed:74:5a:30:14:c9:6b:fc:b5:42:3c:0a:
                    29:91:87:46:bd:9f:d3:59:d4:28:e0:07:3e:8c:a3:
                    8c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:49:BC:1E:B6:65:DB:30:E8:51:2F:81:5D:1B:9F:82:1F:FD:50:3C
            X509v3 Authority Key Identifier:
                keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d5:04:cb:3a:4e:6f:47:ea:c1:01:81:b3:3e:b7:92:4c:a2:
         15:12:83:ca:a5:80:e7:27:a2:77:65:65:2c:62:43:3f:02:cf:
         ac:bd:38:fc:d6:76:99:13:80:e9:08:f7:2d:49:00:f3:71:6c:
         a1:24:37:ce:6b:61:80:4a:1e:90:dc:c0:f9:3a:dc:5b:34:ec:
         5c:58:39:90:07:e3:ad:41:0e:3e:c9:d2:7e:a5:c5:32:16:3a:
         ee:18:4b:b8:9f:bc:58:17:70:9b:7d:2b:4a:3e:ed:8d:9b:aa:
         9e:18:08:83:00:06:2f:ef:b3:00:49:a5:c5:b9:be:00:a9:04:
         e5:70:cf:83:08:89:35:c9:05:4d:56:c0:75:56:00:a7:bd:ae:
         ce:8f:0c:48:6d:cb:cf:21:3f:b3:65:63:4f:79:3e:b3:89:59:
         88:ce:19:5b:04:d4:eb:52:15:5b:f1:60:5b:8a:4f:c6:a5:8d:
         b1:dd:49:bf:18:96:43:08:f4:16:22:52:c9:35:29:16:ab:af:
         42:bd:39:b9:47:cc:02:80:bb:3d:09:28:3a:83:c5:7b:41:0f:
         c3:7c:71:46:52:09:c8:ef:d1:d7:86:11:a6:e4:e6:a4:6c:b1:
         2e:d1:04:a6:22:57:83:fc:b8:36:e1:3b:9e:84:ec:c6:4a:24:
         56:88:d1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----