Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.mft
File:                     2E8003B145695D652CFF3D58625D3B0A3535AD84.mft (raw, json)
Hash identifier:          1UQpgizOcnC28Sop0ZQ93akwstxusGrULvcVCu1/kE8=
Subject key identifier:   B2:EB:99:22:1F:63:37:46:BB:53:1D:1F:66:02:FC:40:BC:EB:F5:66
Authority key identifier: 2E:80:03:B1:45:69:5D:65:2C:FF:3D:58:62:5D:3B:0A:35:35:AD:84
Certificate issuer:       /CN=2E8003B145695D652CFF3D58625D3B0A3535AD84
Certificate serial:       3EC02E0BC2CAC13462C70BC0C9D318FD63F5A807
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2E8003B145695D652CFF3D58625D3B0A3535AD84.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.mft
Manifest number:          01
Signing time:             Mon 11 May 2026 15:49:43 +0000
Manifest this update:     Mon 11 May 2026 15:44:43 +0000
Manifest next update:     Tue 12 May 2026 18:34:43 +0000
Files and hashes:         1: 2E8003B145695D652CFF3D58625D3B0A3535AD84.crl (hash: 56DoUQxF+jChaL4dyemCNQUd7DaSHMDs4WiC5S0rb0E=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c0:2e:0b:c2:ca:c1:34:62:c7:0b:c0:c9:d3:18:fd:63:f5:a8:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8003B145695D652CFF3D58625D3B0A3535AD84
        Validity
            Not Before: May 11 15:44:43 2026 GMT
            Not After : May 12 18:34:43 2026 GMT
        Subject: CN=B2EB99221F633746BB531D1F6602FC40BCEBF566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1d:2a:c4:f5:dc:45:c5:b6:36:22:14:62:da:
                    46:46:0c:08:ab:eb:32:1b:88:ee:7a:94:fc:45:f0:
                    a9:bc:98:9a:7b:d1:69:23:c9:e6:c0:ad:b3:f3:61:
                    5a:b7:a2:6c:90:47:4a:a1:ea:16:61:bb:56:91:1b:
                    95:9b:6b:89:cb:66:f5:f9:5d:3d:b3:ac:82:f1:fc:
                    71:e5:3e:ff:a3:8f:01:c3:a7:02:8b:0d:de:4a:9e:
                    1e:63:d3:4b:80:a5:ee:f2:76:81:04:41:82:a8:9d:
                    b8:e4:56:fb:d2:ae:07:9d:30:19:b5:b2:f1:03:b0:
                    cf:dc:96:99:0a:31:6a:00:5d:4c:b8:7d:cc:fc:95:
                    7c:60:81:63:12:8a:1d:69:f7:e5:db:8f:48:66:db:
                    6f:92:13:e4:14:ec:f5:22:65:29:d3:f8:e0:bf:fb:
                    be:84:c9:b9:d1:2b:99:1f:b0:24:5a:2b:64:d4:f0:
                    a2:a0:68:b1:87:f0:4d:d6:ae:74:20:ec:5b:77:1a:
                    b4:7e:79:78:d9:d5:f8:24:d2:da:d5:57:4b:2d:fa:
                    63:ff:0d:8b:ef:9c:36:8e:12:d7:dd:88:7c:4d:ba:
                    f8:b2:96:b3:6e:5f:d0:1e:f0:5e:53:a2:bd:47:4f:
                    69:98:f0:3e:e9:e7:1a:b5:74:0e:6f:db:e1:b5:f7:
                    26:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:EB:99:22:1F:63:37:46:BB:53:1D:1F:66:02:FC:40:BC:EB:F5:66
            X509v3 Authority Key Identifier:
                keyid:2E:80:03:B1:45:69:5D:65:2C:FF:3D:58:62:5D:3B:0A:35:35:AD:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2E8003B145695D652CFF3D58625D3B0A3535AD84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:52:5f:ec:03:dd:95:ab:af:c4:f8:3d:a5:36:93:3c:73:13:
         f7:e6:14:bf:dc:79:5c:e5:45:2a:02:ca:f4:6c:e4:75:99:f2:
         b9:62:00:41:01:30:80:79:e3:14:7b:f3:64:6b:f9:7b:44:ec:
         30:4d:25:2d:70:c7:a0:9e:df:5b:ec:d1:cb:e3:cf:ad:76:80:
         09:e3:a8:54:88:3a:d4:7e:42:b5:36:5c:bd:4a:a3:0f:3b:40:
         84:23:34:41:36:02:4a:d0:6e:94:20:7e:0b:a8:e1:0c:f6:33:
         f8:5a:cb:ae:03:3a:05:62:9f:c4:42:d6:8e:94:07:f6:ad:45:
         2e:56:55:c2:a6:0d:c1:f9:d9:31:61:ba:1e:d4:9a:41:e0:b1:
         9c:78:18:75:3d:af:8a:02:a3:99:89:fe:59:64:f9:3b:cb:50:
         15:f6:51:f4:7b:90:41:2b:c8:13:e5:95:53:b4:ae:b1:ce:b6:
         24:5c:c9:84:b5:38:fa:d5:d7:18:c2:ee:91:04:23:74:34:d0:
         be:d1:be:13:54:3f:51:0c:fd:73:82:98:dc:64:27:2f:82:88:
         b6:4b:72:3a:46:0e:de:a9:62:81:58:61:3c:5b:5c:7f:00:86:
         dd:7e:55:8d:13:f5:de:39:f8:34:d9:e7:09:71:4d:12:06:a9:
         7e:5f:8c:89
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgIUPsAuC8LKwTRixwvAydMY/WP1qAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU4MDAzQjE0NTY5NUQ2NTJDRkYzRDU4NjI1RDNCMEEz
NTM1QUQ4NDAeFw0yNjA1MTExNTQ0NDNaFw0yNjA1MTIxODM0NDNaMDMxMTAvBgNV
BAMTKEIyRUI5OTIyMUY2MzM3NDZCQjUzMUQxRjY2MDJGQzQwQkNFQkY1NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIHSrE9dxFxbY2IhRi2kZGDAir
6zIbiO56lPxF8Km8mJp70WkjyebArbPzYVq3omyQR0qh6hZhu1aRG5Wba4nLZvX5
XT2zrILx/HHlPv+jjwHDpwKLDd5Knh5j00uApe7ydoEEQYKonbjkVvvSrgedMBm1
svEDsM/clpkKMWoAXUy4fcz8lXxggWMSih1p9+Xbj0hm22+SE+QU7PUiZSnT+OC/
+76EybnRK5kfsCRaK2TU8KKgaLGH8E3WrnQg7Ft3GrR+eXjZ1fgk0trVV0st+mP/
DYvvnDaOEtfdiHxNuviylrNuX9Ae8F5Tor1HT2mY8D7p5xq1dA5v2+G19ybXAgMB
AAGjggHoMIIB5DAdBgNVHQ4EFgQUsuuZIh9jN0a7Ux0fZgL8QLzr9WYwHwYDVR0j
BBgwFoAULoADsUVpXWUs/z1YYl07CjU1rYQwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1hULzAv
MkU4MDAzQjE0NTY5NUQ2NTJDRkYzRDU4NjI1RDNCMEEzNTM1QUQ4NC5jcmwwbwYI
KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50
dy9ycGtpL1RXTklDQ0EvMS8yRTgwMDNCMTQ1Njk1RDY1MkNGRjNENTg2MjVEM0Iw
QTM1MzVBRDg0LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j
Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1hULzAvMkU4MDAzQjE0NTY5NUQ2NTJD
RkYzRDU4NjI1RDNCMEEzNTM1QUQ4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKFSX+wD3ZWrr8T4PaU2
kzxzE/fmFL/ceVzlRSoCyvRs5HWZ8rliAEEBMIB54xR782Rr+XtE7DBNJS1wx6Ce
31vs0cvjz612gAnjqFSIOtR+QrU2XL1Kow87QIQjNEE2AkrQbpQgfguo4Qz2M/ha
y64DOgVin8RC1o6UB/atRS5WVcKmDcH52TFhuh7UmkHgsZx4GHU9r4oCo5mJ/llk
+TvLUBX2UfR7kEEryBPllVO0rrHOtiRcyYS1OPrV1xjC7pEEI3Q00L7RvhNUP1EM
/XOCmNxkJy+CiLZLcjpGDt6pYoFYYTxbXH8Aht1+VY0T9d45+DTZ5wlxTRIGqX5f
jIk=
-----END CERTIFICATE-----
Generated at Tue May 12 22:47:44 2026 by rpki-client