Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/BEBITTECH/1/A8276AEEC87F13CADA9A333ABA2A18940080AA0E.mft
File:                     A8276AEEC87F13CADA9A333ABA2A18940080AA0E.mft (raw, json)
Hash identifier:          sfTzG4lHoTWaC4MiY/ZQaG4gsf7TQfav8XWs4shy71E=
Subject key identifier:   8A:7E:20:51:91:98:0F:92:74:EE:A2:B4:26:03:FD:43:51:6A:87:FF
Authority key identifier: A8:27:6A:EE:C8:7F:13:CA:DA:9A:33:3A:BA:2A:18:94:00:80:AA:0E
Certificate issuer:       /CN=A8276AEEC87F13CADA9A333ABA2A18940080AA0E
Certificate serial:       266E1A6F3A510C1CFD9758A17E6624274339CE43
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/A8276AEEC87F13CADA9A333ABA2A18940080AA0E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/BEBITTECH/1/A8276AEEC87F13CADA9A333ABA2A18940080AA0E.mft
Manifest number:          02
Signing time:             Mon 11 May 2026 17:56:09 +0000
Manifest this update:     Mon 11 May 2026 17:51:09 +0000
Manifest next update:     Tue 12 May 2026 19:03:09 +0000
Files and hashes:         1: A8276AEEC87F13CADA9A333ABA2A18940080AA0E.crl (hash: Wc4SJY34+m/oWlQLiz+jKsTloB90aukGFmXpF48SR+Q=)
                          2: 3133382e3235322e35322e302f32342d3234203d3e20333936393832.roa (hash: +wNXmjOjpLX88xeyxgZcSM9qbzxjqpN7lhbcZ9zSAQo=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6e:1a:6f:3a:51:0c:1c:fd:97:58:a1:7e:66:24:27:43:39:ce:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8276AEEC87F13CADA9A333ABA2A18940080AA0E
        Validity
            Not Before: May 11 17:51:09 2026 GMT
            Not After : May 12 19:03:09 2026 GMT
        Subject: CN=8A7E205191980F9274EEA2B42603FD43516A87FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ed:ad:8c:de:84:85:6d:8c:de:97:d1:75:bb:
                    1f:5e:39:97:45:19:af:0e:a2:0c:35:01:fe:6b:d2:
                    9a:1a:ac:8e:a5:f9:e2:b2:87:b0:f3:73:60:e4:2c:
                    29:c1:97:6d:1b:61:36:d3:b7:ac:c2:d7:22:67:8d:
                    e7:a4:a9:ef:2f:84:5b:ca:81:d4:ee:10:c5:12:c6:
                    42:f4:1e:a0:3e:a5:5d:9f:40:e2:59:45:00:ab:2c:
                    85:80:75:9f:33:93:ea:d8:44:23:29:95:3e:0a:5f:
                    f9:a4:e8:fc:e8:64:db:bb:66:63:40:4f:74:bd:3e:
                    08:69:36:d3:68:4e:58:5a:2e:cb:6b:db:3b:51:d5:
                    a6:82:03:cc:76:eb:20:50:9d:9e:11:c6:74:f3:37:
                    4a:62:12:21:44:4b:fb:7b:a1:98:4b:dc:be:1b:c1:
                    fa:73:05:c2:0b:4a:b9:2d:5d:d1:12:86:fd:10:a2:
                    82:a2:97:52:1a:6e:d9:f7:05:44:92:fa:ed:c6:52:
                    63:30:33:9c:83:e0:f2:42:6d:41:79:dc:02:64:9b:
                    05:65:1d:37:21:39:2c:5e:32:24:97:c8:b9:34:1e:
                    d6:ab:77:d6:be:a2:2b:18:e7:f3:55:45:75:15:6a:
                    f8:bc:e2:42:a9:8d:2d:2b:22:76:4f:a5:20:26:b0:
                    fc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:7E:20:51:91:98:0F:92:74:EE:A2:B4:26:03:FD:43:51:6A:87:FF
            X509v3 Authority Key Identifier:
                keyid:A8:27:6A:EE:C8:7F:13:CA:DA:9A:33:3A:BA:2A:18:94:00:80:AA:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/BEBITTECH/1/A8276AEEC87F13CADA9A333ABA2A18940080AA0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/A8276AEEC87F13CADA9A333ABA2A18940080AA0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BEBITTECH/1/A8276AEEC87F13CADA9A333ABA2A18940080AA0E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:4f:66:b9:e3:7a:b5:df:8a:d4:f9:ae:02:85:fd:9e:52:a6:
         53:85:07:1c:85:40:b2:ba:83:01:d6:00:43:cf:81:cf:cc:05:
         75:e9:f5:bc:d6:7a:c6:f2:1d:24:cb:85:6f:6a:9c:bb:85:97:
         3d:92:aa:f0:c7:57:44:d5:6e:8e:fa:c8:da:e9:e0:4c:dc:67:
         61:84:4d:04:8d:ef:5e:4a:eb:18:a5:28:43:33:d0:6d:57:54:
         91:ca:25:5f:63:74:2d:17:d5:ee:14:d3:ab:33:62:8b:e3:a2:
         ee:cf:db:52:6e:df:5d:82:88:eb:df:58:04:62:27:0a:81:75:
         62:a6:0b:57:a5:4b:e5:40:02:67:e7:a0:0f:42:99:c7:c4:d0:
         dc:5e:b0:2c:c0:0d:39:b3:7d:02:74:4f:66:c0:9b:e7:4e:87:
         ae:0a:97:a9:ce:ee:de:e8:e5:7b:55:b6:ed:d9:5d:2c:61:ac:
         9d:72:44:1c:ec:64:98:dd:3b:53:96:8d:8b:d3:35:80:c3:5b:
         e6:fe:14:60:98:2f:7c:14:a0:54:0f:e5:fa:ae:e3:66:21:a4:
         91:63:67:68:54:c6:26:0d:44:a9:71:52:0b:85:4a:c3:9d:f7:
         83:39:0b:91:c5:96:e0:c6:2b:f6:f1:9c:ed:19:58:3d:58:94:
         94:07:f0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:45:57 2026 by rpki-client