Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft
File:                     U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft (raw, json)
Hash identifier:          Hz12QKvfNp+bwbcHPPSC4VZ4q11nZtCVa305NH1fXW0=
Subject key identifier:   C2:36:1B:CD:A2:73:94:38:24:CF:5C:A4:F4:A5:74:71:43:93:9E:B5
Authority key identifier: 53:CB:7B:17:F4:F7:D2:50:DC:9B:A2:CD:D6:1A:74:2D:BA:37:FC:10
Certificate issuer:       /CN=53CB7B17F4F7D250DC9BA2CDD61A742DBA37FC10
Certificate serial:       0CD0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft
Manifest number:          0CC4
Signing time:             Mon 28 Apr 2025 09:49:00 +0000
Manifest this update:     Mon 28 Apr 2025 09:49:00 +0000
Manifest next update:     Wed 30 Apr 2025 09:49:00 +0000
Files and hashes:         1: 4PWaK3-naPPpKMlC7XnZSi5d5rk.roa (hash: 4O3+RBdGcbnoHIwkp4BuGY7rZCtpRlna7VhhTYPc6yc=)
                          2: 5qbfWFQMEV8Jnpte8t4LSv4m8F0.roa (hash: MB8DovGhVLMt92Wvxg5JLs3SXyfm5ZuQfWynMc/DUmQ=)
                          3: 92ya2HAEtksonPTMXYpkFAqpfjU.roa (hash: YD+KmS2ykCOOl0iyh2sL17zDhgQH959X/HFE3cNdy10=)
                          4: U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl (hash: 61oI6Eq/JB55W1T1KCz+RJxhnFhPR4105nhYiX3XyKc=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 22:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3280 (0xcd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53CB7B17F4F7D250DC9BA2CDD61A742DBA37FC10
        Validity
            Not Before: Apr 28 09:49:00 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=C2361BCDA273943824CF5CA4F4A5747143939EB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a3:6f:e3:cd:db:54:f5:fe:14:0d:01:e3:62:
                    17:da:d1:fd:19:ff:b9:fc:a3:23:8a:e9:6b:2e:fc:
                    6b:03:41:84:d8:37:5a:e8:0f:e0:c5:00:8a:fa:d8:
                    9f:6b:11:e2:71:4a:02:6e:35:db:ff:3d:22:69:bc:
                    91:81:9a:42:d1:09:42:8a:39:03:9d:8e:d7:94:3e:
                    b1:02:8e:8f:49:f6:99:b5:88:47:0e:88:58:1f:9c:
                    13:c1:f9:a1:af:43:14:1e:7a:86:8d:8b:c0:8c:fe:
                    27:d1:35:26:e3:c4:6d:3f:51:2b:fd:1e:5b:f7:7e:
                    d4:57:e4:0f:5e:1d:ad:df:5f:3f:a7:13:f5:1c:8b:
                    20:2d:c7:77:55:fe:cc:43:d2:28:aa:21:48:03:49:
                    68:19:63:46:e0:9f:c2:56:31:e9:75:4e:41:7e:d8:
                    75:20:52:df:b7:77:3f:8b:1e:02:04:a1:12:36:a5:
                    8b:20:f0:46:7f:62:b0:25:a9:ba:a2:5b:10:7b:50:
                    f1:25:9e:43:73:10:47:a9:04:85:3c:39:65:51:52:
                    6e:38:55:c3:30:71:22:12:fe:1c:b3:1c:2f:5e:13:
                    46:77:8a:73:42:15:66:05:dc:24:9d:25:ab:3a:0d:
                    98:7c:b4:9d:82:d3:40:b5:dd:bc:34:25:79:e1:eb:
                    0f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:36:1B:CD:A2:73:94:38:24:CF:5C:A4:F4:A5:74:71:43:93:9E:B5
            X509v3 Authority Key Identifier:
                keyid:53:CB:7B:17:F4:F7:D2:50:DC:9B:A2:CD:D6:1A:74:2D:BA:37:FC:10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:73:97:90:4a:b2:28:79:5f:85:36:47:a1:8b:8b:bb:ef:23:
         64:1c:72:9b:ea:7a:0b:8e:72:47:cd:28:04:56:06:00:8d:83:
         c1:20:d9:b4:79:07:fc:8f:95:59:22:77:a8:b1:bb:70:18:a5:
         ee:ae:49:14:74:01:82:bc:92:43:da:fc:b1:f3:2c:cd:9b:d1:
         99:cc:af:66:65:80:ce:db:e6:38:51:b3:4d:c1:ad:d7:76:cc:
         9f:e5:57:d2:44:50:0e:ae:e7:5c:a8:5e:34:c3:d6:89:46:b6:
         92:8b:a7:2c:5b:74:62:9b:e5:6d:3f:1d:39:c1:5a:8b:fe:fe:
         63:f6:f4:c1:6a:fa:74:e9:a4:d8:9c:66:96:d7:e3:88:9e:8b:
         e6:89:c8:34:50:5b:18:29:9b:27:6f:d9:b7:e9:bb:cc:8b:75:
         37:ed:67:23:de:de:5a:ec:66:d9:cb:9d:aa:d7:9d:dc:09:5e:
         b3:90:e0:a0:d0:5a:01:60:47:22:2f:e8:b1:c3:f5:93:2b:49:
         09:35:60:8c:29:dc:76:d3:f8:e0:86:cc:81:05:6b:6c:11:b8:
         99:35:ff:14:28:d4:e4:61:c0:72:64:dc:c5:19:85:0f:75:d4:
         cd:76:5b:08:61:9b:91:d7:d0:64:3b:54:9c:74:dc:97:48:0b:
         59:e9:c1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:12:56 2025 by rpki-client on console.sobornost.net