Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft
File:                     AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft (raw, json)
Hash identifier:          9NuGtm139ndJiNCq+utV6xY4GmLGRhW/wm5QxqVbSZo=
Subject key identifier:   94:8F:B8:3C:7E:91:44:68:18:51:11:CA:F0:7E:F2:FA:5E:44:BD:1C
Authority key identifier: AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B
Certificate issuer:       /CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B
Certificate serial:       199243FF0B0548E6733A2388BAFD658546F48A49
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft
Manifest number:          06
Signing time:             Mon 11 May 2026 17:56:13 +0000
Manifest this update:     Mon 11 May 2026 17:51:13 +0000
Manifest next update:     Tue 12 May 2026 19:01:13 +0000
Files and hashes:         1: 3130332e35312e39302e302f32332d3332203d3e20313331363537.roa (hash: 6/l/GHeRi+L26SSSmyoeIRzt/9QvcP9wUHNuiJTW0HI=)
                          2: AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl (hash: qRCo5JPm+EWaMwszy+69fWmQa9+Xg5aiftBDBx9nep8=)
                          3: 3130332e35312e39302e302f32332d3332203d3e20313334383233.roa (hash: tH36wJqzGsCI/o8hR/0a7GCLOKwO8H/LX8RVs1GWaks=)
                          4: 323430303a633965303a3a2f33322d3438203d3e20313334383233.roa (hash: tWF65JRIBYKnWmqjJzuJTpKo/cPf/CgMxXepVjUbTSQ=)
                          5: 323430303a633965303a3a2f33322d3438203d3e20313331363537.roa (hash: upFELCP3DHkRWuwf+Xm0sVZKdOzGkDLBh+WiG2O5joQ=)
                          6: 3230322e352e31302e302f32332d3332203d3e20313331363537.roa (hash: zCUned2k9nVUaWCk/pD8/VUXQUBPTJnpl6eX7zZ2e9s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:92:43:ff:0b:05:48:e6:73:3a:23:88:ba:fd:65:85:46:f4:8a:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B
        Validity
            Not Before: May 11 17:51:13 2026 GMT
            Not After : May 12 19:01:13 2026 GMT
        Subject: CN=948FB83C7E914468185111CAF07EF2FA5E44BD1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:55:9f:6a:37:5d:6e:48:43:8a:cc:41:2c:c1:
                    60:d4:85:1c:f0:db:e7:ad:43:f5:1d:fa:0c:a2:0c:
                    67:23:fd:bc:e8:94:5d:2d:61:cc:1f:a2:c6:56:25:
                    43:b1:10:89:b2:ae:41:64:d8:3e:c8:d1:2b:10:21:
                    1f:c4:0f:1c:57:04:50:6b:1c:57:a3:ca:0e:5a:a8:
                    8e:6b:34:7f:4b:43:fd:56:50:96:a3:96:3c:59:c7:
                    02:e2:c4:dd:c3:4a:84:de:4e:3c:ea:4a:6f:e4:73:
                    d7:e1:82:4f:45:86:ef:cd:17:b8:4e:99:f1:d7:6d:
                    86:dd:bd:3a:ce:98:88:47:45:ac:87:09:a7:85:2e:
                    48:2a:ba:5b:b3:70:c5:5e:86:d4:54:b0:60:33:56:
                    f0:1f:3b:88:35:24:ed:f0:73:f8:d7:65:e3:47:0b:
                    4e:da:00:5d:6f:22:73:9f:f5:2e:cc:dd:4e:60:55:
                    7b:95:10:59:09:d5:2a:66:d8:a6:66:1a:94:da:9a:
                    c2:1b:fb:f3:39:5f:e2:c5:45:72:04:a1:04:10:8b:
                    94:a3:51:ce:09:b5:ce:8e:ca:82:c8:07:ae:7c:10:
                    ec:09:bc:3d:ef:f3:69:11:86:4c:50:b8:a4:15:55:
                    6b:47:44:cd:6f:cd:ed:05:1c:54:1d:87:2c:5d:1b:
                    a5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:8F:B8:3C:7E:91:44:68:18:51:11:CA:F0:7E:F2:FA:5E:44:BD:1C
            X509v3 Authority Key Identifier:
                keyid:AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:1b:95:d2:1f:89:5a:0c:71:c0:41:8d:0b:74:1f:7c:71:26:
         95:f0:8a:4e:8b:46:d8:e6:1e:d5:ef:28:2c:f6:50:bc:85:ea:
         90:15:c2:6c:b2:b3:d2:44:fe:b6:5d:38:fd:3e:2e:14:29:77:
         27:23:b0:c2:21:9d:57:2a:c7:ad:d5:98:b8:a3:9d:53:2f:d7:
         94:ed:27:cd:49:be:b5:d4:a6:c0:d5:c7:7c:68:9f:9f:dc:63:
         50:27:7f:ef:7b:55:ef:69:18:52:4f:a3:2a:39:4c:27:41:e2:
         64:b1:13:ea:6a:95:7d:fd:a8:25:63:13:ec:65:66:64:45:cb:
         d1:14:86:be:02:30:9b:2c:94:eb:d8:6d:f5:42:2f:75:a0:f9:
         02:a7:b7:54:d0:8c:2e:7d:9a:d8:20:03:0d:84:c1:1a:9d:b6:
         ed:f4:95:9c:b4:42:df:1e:4e:cc:41:a1:d4:ca:54:cb:8e:21:
         e6:fa:49:09:cc:7c:b7:e9:1d:fa:53:7e:c7:26:ca:5e:09:9c:
         99:b6:c6:3b:9d:fb:59:c2:1d:fc:d2:3c:3b:d6:4c:86:5d:b7:
         3c:d2:85:0b:81:bd:33:07:58:c9:0d:55:aa:f2:c3:9e:60:6e:
         7b:16:41:5d:5c:fa:ac:3a:3e:47:ed:cd:ce:8b:d1:b9:7b:03:
         87:d0:0e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----