Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WNCL/nUQardI5rZJgEK_E2yBFTvLEsME.mft
File:                     nUQardI5rZJgEK_E2yBFTvLEsME.mft (raw, json)
Hash identifier:          YhAofbUQJmE7OFj89hOqVENXOw+vVgH/3aUllrWIXQs=
Subject key identifier:   01:25:9E:C8:F3:24:14:A5:F2:80:DB:DA:54:9D:F1:6C:0F:13:C9:22
Authority key identifier: 9D:44:1A:AD:D2:39:AD:92:60:10:AF:C4:DB:20:45:4E:F2:C4:B0:C1
Certificate issuer:       /CN=9D441AADD239AD926010AFC4DB20454EF2C4B0C1
Certificate serial:       0C31
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/nUQardI5rZJgEK_E2yBFTvLEsME.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WNCL/nUQardI5rZJgEK_E2yBFTvLEsME.mft
Manifest number:          0C22
Signing time:             Wed 11 Sep 2024 17:48:16 +0000
Manifest this update:     Wed 11 Sep 2024 17:48:16 +0000
Manifest next update:     Fri 13 Sep 2024 17:48:16 +0000
Files and hashes:         1: CJl79NAAby0hwrOGBgzhx4rCZRs.roa (hash: wuC001/b4d9UcpoJkPm8EUTCjhXl4RS34WiP8B0ZV2Q=)
                          2: m--XTl6ODQna1y2GDkzIokNNgMg.roa (hash: bJSGzBvM3DP1aL5VrOhy0VwGKk0F4h/0rlV81Vgh67I=)
                          3: nUQardI5rZJgEK_E2yBFTvLEsME.crl (hash: 34o9cUttsfBAFooxhq+uKQdtmiiOj9OugmSPAigoA2g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3121 (0xc31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D441AADD239AD926010AFC4DB20454EF2C4B0C1
        Validity
            Not Before: Sep 11 17:48:16 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=01259EC8F32414A5F280DBDA549DF16C0F13C922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:04:71:d5:4f:ae:e9:72:e7:f3:24:3b:75:14:
                    85:e3:64:05:ca:a8:61:02:db:10:07:ad:68:3e:b1:
                    8d:de:0a:78:34:02:30:b8:ce:be:66:6c:82:a0:25:
                    fc:3f:bc:cd:93:21:c0:36:79:95:48:ab:fb:8c:39:
                    3f:19:e4:06:f0:ee:a4:1c:ca:65:7e:d3:53:6f:99:
                    b7:48:af:68:b7:bd:84:42:82:62:41:e9:c4:09:a7:
                    ea:e7:56:38:f6:47:52:ba:4d:34:80:3f:ff:fd:9e:
                    9d:ad:3b:58:62:3a:db:6b:42:af:55:f9:17:0c:41:
                    f5:47:80:f0:6f:81:c5:8b:96:0b:7b:ab:4d:fc:49:
                    5a:c7:34:6a:96:bc:90:b3:1b:13:d6:fe:7a:7a:84:
                    66:b1:d4:18:cf:04:91:73:20:f9:e5:7e:8d:10:db:
                    6f:68:57:18:9e:b2:28:18:00:3f:77:e1:26:e9:bc:
                    fc:7c:75:2d:4a:d0:9b:e4:31:60:0f:ad:34:87:bc:
                    27:40:67:67:5e:50:94:34:ea:b1:71:01:a5:1b:8f:
                    e7:25:94:9f:24:b7:78:46:1d:39:87:93:b7:88:29:
                    b9:d8:ca:42:43:d3:17:3b:36:2b:78:8b:d6:fc:cd:
                    16:0e:6d:5e:e9:c0:48:ae:9f:2f:42:ed:57:f3:f9:
                    92:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:25:9E:C8:F3:24:14:A5:F2:80:DB:DA:54:9D:F1:6C:0F:13:C9:22
            X509v3 Authority Key Identifier:
                keyid:9D:44:1A:AD:D2:39:AD:92:60:10:AF:C4:DB:20:45:4E:F2:C4:B0:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WNCL/nUQardI5rZJgEK_E2yBFTvLEsME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/nUQardI5rZJgEK_E2yBFTvLEsME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WNCL/nUQardI5rZJgEK_E2yBFTvLEsME.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e8:9a:12:d7:76:25:24:00:b2:47:ae:cf:82:b2:f2:5e:36:
         17:31:5b:55:cb:a9:ed:3d:6d:31:ea:9c:00:9b:cb:35:4c:be:
         5c:c1:f0:43:9b:e1:64:f6:5f:59:dd:ac:8d:91:7c:f3:7a:e5:
         cc:8f:76:55:b7:61:06:dc:97:c1:7f:95:04:c0:db:59:25:be:
         6d:6f:60:cd:2e:28:30:f5:36:8a:7e:29:f8:aa:fa:8e:dd:6b:
         e3:4e:bc:7a:5f:16:ba:88:89:c7:b3:aa:ce:c6:eb:4c:36:0c:
         5c:76:8e:51:2e:74:76:d5:04:60:0a:7d:a9:e8:8d:13:e5:b8:
         2e:34:5f:f9:ad:fe:a3:04:e5:66:1e:b4:38:35:9c:63:6e:ef:
         e9:a8:48:d1:35:6b:55:0b:a2:da:73:5d:5f:86:6f:e8:74:d0:
         3d:39:35:72:f7:29:30:3b:be:d6:13:88:8e:8b:d7:91:5d:79:
         9c:39:6a:1f:7c:0a:cb:14:fe:93:29:b6:69:5d:54:c3:e8:9c:
         52:b5:2b:fe:80:83:12:55:28:25:ba:db:d5:e2:07:13:68:4b:
         fb:4c:b7:ee:5c:a9:0a:6f:49:73:bc:bc:57:18:cc:bf:51:f2:
         dc:76:20:81:b9:32:e6:35:31:56:6a:97:0b:2e:0c:fe:51:5d:
         10:d9:f0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 09:36:27 2024 by rpki-client on console.sobornost.net