Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/HLHKcKMySPs9rui_QeLap2p9z9M.mft
File:                     HLHKcKMySPs9rui_QeLap2p9z9M.mft (raw, json)
Hash identifier:          hNNtoMMzq3Mx06SAp2gcx05EL8s+ukCH3HePHvTcifA=
Subject key identifier:   E0:27:7D:BA:0F:00:95:1D:64:ED:B3:02:11:A9:45:26:D2:70:A5:7E
Authority key identifier: 1C:B1:CA:70:A3:32:48:FB:3D:AE:E8:BF:41:E2:DA:A7:6A:7D:CF:D3
Certificate issuer:       /CN=1CB1CA70A33248FB3DAEE8BF41E2DAA76A7DCFD3
Certificate serial:       0BD5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/HLHKcKMySPs9rui_QeLap2p9z9M.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/HLHKcKMySPs9rui_QeLap2p9z9M.mft
Manifest number:          0BC2
Signing time:             Tue 16 Apr 2024 13:32:22 +0000
Manifest this update:     Tue 16 Apr 2024 13:32:22 +0000
Manifest next update:     Thu 18 Apr 2024 13:32:22 +0000
Files and hashes:         1: HLHKcKMySPs9rui_QeLap2p9z9M.crl (hash: irjR2S6vCUEcHCzLym6eIqnUHJLZ1xgtQJKRs1DScdQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3029 (0xbd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB1CA70A33248FB3DAEE8BF41E2DAA76A7DCFD3
        Validity
            Not Before: Apr 16 13:32:22 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=E0277DBA0F00951D64EDB30211A94526D270A57E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:6a:49:cb:ba:0f:9d:eb:11:62:8e:f3:81:0f:
                    92:b5:bd:64:e6:0d:58:53:b8:af:b0:7c:b6:be:0a:
                    5a:0a:a5:20:87:13:1f:ae:a6:db:e9:20:f7:94:d0:
                    46:9f:f8:55:fe:bc:17:a0:5f:44:c0:6b:ec:50:3f:
                    1b:b9:5b:a3:58:fe:af:19:c1:ef:59:ef:9e:02:b1:
                    16:e5:91:3c:2d:77:41:cb:ea:96:36:0c:9a:ea:2d:
                    0a:33:11:b0:6b:f0:15:a8:ae:99:e9:df:ea:7c:7f:
                    da:c6:1e:3b:40:47:a7:7d:b8:30:d3:d8:77:01:89:
                    29:14:09:b8:c3:12:13:a3:fe:05:df:8a:05:c6:c6:
                    73:6d:eb:8f:46:7e:f2:4e:5b:a9:2e:51:28:43:06:
                    8b:2f:89:28:40:04:17:af:8f:69:9e:f4:5f:7b:77:
                    3f:96:f8:14:4f:03:c2:42:f2:a8:2d:a4:89:cd:bc:
                    72:0b:a9:ee:39:13:3b:6b:19:9a:00:47:2b:0b:a2:
                    8d:fd:32:f1:5f:05:da:52:fc:12:17:1a:73:66:48:
                    90:68:6e:8d:7d:b6:96:60:74:a8:27:25:41:56:bf:
                    59:85:57:6a:6a:fa:2d:03:52:b9:bc:3d:09:d9:93:
                    da:b2:56:97:e1:0c:29:0c:4a:40:e8:c2:9f:67:48:
                    7f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:27:7D:BA:0F:00:95:1D:64:ED:B3:02:11:A9:45:26:D2:70:A5:7E
            X509v3 Authority Key Identifier:
                keyid:1C:B1:CA:70:A3:32:48:FB:3D:AE:E8:BF:41:E2:DA:A7:6A:7D:CF:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/HLHKcKMySPs9rui_QeLap2p9z9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HLHKcKMySPs9rui_QeLap2p9z9M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/HLHKcKMySPs9rui_QeLap2p9z9M.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:8b:1b:f2:ca:f3:c6:90:6d:ed:69:fc:40:70:73:b2:32:8b:
         b8:63:e4:d0:17:44:55:a0:0e:b1:3a:ed:38:69:4e:3c:89:75:
         cd:55:48:05:ba:4a:e1:b1:a1:e1:24:4e:d9:1f:e0:e3:f0:27:
         8a:e9:54:da:e8:b9:bf:d8:04:36:e1:8f:80:f5:f9:4a:e1:08:
         99:3f:a4:e1:33:52:cf:8b:3a:1b:4e:7e:75:ef:d2:31:f3:3b:
         a4:cd:8b:db:9f:38:97:af:80:0f:be:66:79:95:cb:e4:99:41:
         b3:e5:cc:08:78:f6:e9:67:6b:08:a6:66:35:bb:58:37:ef:9e:
         2a:69:57:4e:59:77:d2:2c:81:a8:93:b3:9a:2c:08:53:ee:c1:
         ab:23:20:62:ef:90:a8:b1:48:9c:5f:34:77:37:e4:86:40:ad:
         2d:e8:1d:2b:6c:ed:64:13:ef:27:e3:b6:e8:5f:8c:55:93:43:
         78:81:d8:e3:e7:fe:a5:d1:96:de:2e:b7:f3:c5:c8:0b:30:93:
         89:8f:b1:70:45:c9:27:21:19:b1:79:91:ce:83:c2:8e:ae:6b:
         ee:5f:68:e4:04:53:05:30:18:7b:e4:32:db:73:03:18:f4:50:
         d7:85:a9:2e:88:dd:e7:88:79:e7:3e:26:7f:81:0a:af:21:28:
         01:bc:0a:1f
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgICC9UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUNC
MUNBNzBBMzMyNDhGQjNEQUVFOEJGNDFFMkRBQTc2QTdEQ0ZEMzAeFw0yNDA0MTYx
MzMyMjJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEUwMjc3REJBMEYwMDk1
MUQ2NEVEQjMwMjExQTk0NTI2RDI3MEE1N0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDyaknLug+d6xFijvOBD5K1vWTmDVhTuK+wfLa+CloKpSCHEx+u
ptvpIPeU0Eaf+FX+vBegX0TAa+xQPxu5W6NY/q8Zwe9Z754CsRblkTwtd0HL6pY2
DJrqLQozEbBr8BWorpnp3+p8f9rGHjtAR6d9uDDT2HcBiSkUCbjDEhOj/gXfigXG
xnNt649GfvJOW6kuUShDBosviShABBevj2me9F97dz+W+BRPA8JC8qgtpInNvHIL
qe45EztrGZoARysLoo39MvFfBdpS/BIXGnNmSJBobo19tpZgdKgnJUFWv1mFV2pq
+i0DUrm8PQnZk9qyVpfhDCkMSkDowp9nSH8HAgMBAAGjggIHMIICAzAdBgNVHQ4E
FgQU4Cd9ug8AlR1k7bMCEalFJtJwpX4wHwYDVR0jBBgwFoAUHLHKcKMySPs9rui/
QeLap2p9z9MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV1NOLVRX
L0hMSEtjS015U1BzOXJ1aV9RZUxhcDJwOXo5TS5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvSExIS2NLTXlTUHM5cnVpX1FlTGFwMnA5ejlNLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvV1NOLVRXL0hMSEtjS015U1BzOXJ1aV9R
ZUxhcDJwOXo5TS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCq
ixvyyvPGkG3tafxAcHOyMou4Y+TQF0RVoA6xOu04aU48iXXNVUgFukrhsaHhJE7Z
H+Dj8CeK6VTa6Lm/2AQ24Y+A9flK4QiZP6ThM1LPizobTn5179Ix8zukzYvbnziX
r4APvmZ5lcvkmUGz5cwIePbpZ2sIpmY1u1g3754qaVdOWXfSLIGok7OaLAhT7sGr
IyBi75CosUicXzR3N+SGQK0t6B0rbO1kE+8n47boX4xVk0N4gdjj5/6l0ZbeLrfz
xcgLMJOJj7FwRcknIRmxeZHOg8KOrmvuX2jkBFMFMBh75DLbcwMY9FDXhakuiN3n
iHnnPiZ/gQqvISgBvAof
-----END CERTIFICATE-----
Generated at Thu Apr 18 09:38:52 2024 by rpki-client on console.sobornost.net