Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/ASPIRAPPS/0/5EB6AF02551276002662D6C1ED9C35397EEA2DCF.mft
File:                     5EB6AF02551276002662D6C1ED9C35397EEA2DCF.mft (raw, json)
Hash identifier:          vHNbAkMb/4B0+NiTLz3+UiVllX81oKZB7dp9HIHJ8Gc=
Subject key identifier:   B2:C4:03:92:47:03:A0:F7:57:65:65:63:B0:E5:09:03:85:5E:2E:6D
Authority key identifier: 5E:B6:AF:02:55:12:76:00:26:62:D6:C1:ED:9C:35:39:7E:EA:2D:CF
Certificate issuer:       /CN=5EB6AF02551276002662D6C1ED9C35397EEA2DCF
Certificate serial:       3923A4D86749D7E0D52ECB7C0C7251F92F58B44C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5EB6AF02551276002662D6C1ED9C35397EEA2DCF.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/0/5EB6AF02551276002662D6C1ED9C35397EEA2DCF.mft
Manifest number:          02
Signing time:             Mon 11 May 2026 17:36:20 +0000
Manifest this update:     Mon 11 May 2026 17:31:20 +0000
Manifest next update:     Tue 12 May 2026 21:17:20 +0000
Files and hashes:         1: 5EB6AF02551276002662D6C1ED9C35397EEA2DCF.crl (hash: DcTQv7tQVFBKRxQmYw/idW3m0HOX7hpjPRT3FkX3QcI=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:23:a4:d8:67:49:d7:e0:d5:2e:cb:7c:0c:72:51:f9:2f:58:b4:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EB6AF02551276002662D6C1ED9C35397EEA2DCF
        Validity
            Not Before: May 11 17:31:20 2026 GMT
            Not After : May 12 21:17:20 2026 GMT
        Subject: CN=B2C403924703A0F757656563B0E50903855E2E6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a9:70:f9:61:87:fc:32:f2:45:df:b5:0c:ad:
                    02:ed:bc:1d:c6:ad:43:46:76:c6:9a:84:42:49:61:
                    88:d3:1c:e3:17:ff:d3:59:3e:37:98:8f:30:30:78:
                    75:69:67:31:13:8a:49:62:85:a3:24:c1:d0:a9:3f:
                    31:ff:a4:7c:3d:be:44:01:8e:18:54:ad:44:56:e3:
                    a4:f2:6e:07:47:89:59:05:cd:fa:fe:e2:e0:d3:68:
                    65:27:4a:01:fc:fc:54:fc:44:aa:6b:f3:c1:f6:da:
                    59:58:bb:45:22:11:1e:aa:b5:3e:5a:42:37:da:51:
                    9a:19:22:77:4b:32:9e:58:18:74:98:90:70:b2:6a:
                    c2:bf:6e:e3:22:43:59:17:4e:68:0a:42:5b:c2:a1:
                    95:b9:ed:16:5c:39:f5:ad:ac:e5:2f:46:4e:fe:23:
                    9e:16:54:f3:07:13:9f:86:a6:8a:64:d5:47:29:4d:
                    e0:ab:1b:23:d4:d6:45:47:f7:1f:60:8e:b5:28:9b:
                    03:b9:88:a6:a9:e4:5f:c3:8c:81:8e:8d:20:04:55:
                    38:5e:92:bf:96:77:84:43:92:cf:e0:08:d7:dd:6c:
                    93:02:e2:ba:f7:22:00:46:42:3e:d5:30:66:0f:49:
                    80:4f:b6:18:0d:2c:36:80:c9:df:f2:58:5f:b9:e5:
                    1b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C4:03:92:47:03:A0:F7:57:65:65:63:B0:E5:09:03:85:5E:2E:6D
            X509v3 Authority Key Identifier:
                keyid:5E:B6:AF:02:55:12:76:00:26:62:D6:C1:ED:9C:35:39:7E:EA:2D:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/0/5EB6AF02551276002662D6C1ED9C35397EEA2DCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5EB6AF02551276002662D6C1ED9C35397EEA2DCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/0/5EB6AF02551276002662D6C1ED9C35397EEA2DCF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:50:28:0a:66:74:5b:8e:5f:15:43:49:bb:8b:53:2c:7c:13:
         dd:27:2a:b1:32:6b:d2:c0:de:c5:1d:6b:ca:bf:93:79:eb:ad:
         32:99:af:a3:b1:23:46:60:b3:ce:4c:17:95:bb:d4:c8:e8:1e:
         88:eb:82:92:8b:91:7d:18:82:3f:03:d6:8c:6d:04:58:6e:3a:
         65:d3:c9:27:83:87:95:92:b5:61:05:ef:04:97:07:d9:d9:6e:
         93:35:cc:f8:5a:d2:09:00:a7:4e:bf:4b:ed:3a:f8:ea:f3:da:
         10:b7:4a:79:e9:dc:8d:1e:a1:a8:8b:cf:d6:e7:74:0f:db:e3:
         ab:e6:1b:15:e8:70:34:f7:8a:3f:81:3b:95:23:e5:88:b6:01:
         67:20:f6:2c:d9:86:38:d5:17:59:bd:ed:01:e6:11:4c:27:1a:
         bf:06:3f:be:ab:88:45:0d:a8:53:1d:e7:1d:3f:c1:98:40:7a:
         60:82:08:02:7b:ca:ca:d2:a6:92:7d:86:63:43:5c:67:40:96:
         5c:d6:d3:8d:13:9f:f0:16:75:e0:ad:24:af:36:2c:20:50:9c:
         70:99:51:34:ea:c9:0b:ec:0b:eb:d4:74:71:f7:cb:35:40:25:
         17:71:bb:ae:06:92:8c:4f:a3:d0:53:7d:db:e3:45:3b:2e:f0:
         3f:a7:06:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:53:21 2026 by rpki-client