Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/HWME1204/0/B76FD1E694797D3247661AEF17ADB42F18FF37F9.mft
File:                     B76FD1E694797D3247661AEF17ADB42F18FF37F9.mft (raw, json)
Hash identifier:          Y9usqBdKvzoD1KFq9qhdSb8NWbTDCfUQk4SKnH62HTI=
Subject key identifier:   71:DC:86:F7:95:F8:D2:86:6D:DA:D6:F0:55:2E:02:32:78:22:1F:C5
Authority key identifier: B7:6F:D1:E6:94:79:7D:32:47:66:1A:EF:17:AD:B4:2F:18:FF:37:F9
Certificate issuer:       /CN=B76FD1E694797D3247661AEF17ADB42F18FF37F9
Certificate serial:       32C4AE7CCAA92B91896C5051C1A123F6F068E4FC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B76FD1E694797D3247661AEF17ADB42F18FF37F9.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HWME1204/0/B76FD1E694797D3247661AEF17ADB42F18FF37F9.mft
Manifest number:          02
Signing time:             Mon 11 May 2026 17:04:31 +0000
Manifest this update:     Mon 11 May 2026 16:59:31 +0000
Manifest next update:     Tue 12 May 2026 18:21:31 +0000
Files and hashes:         1: 3130332e3132362e3138302e302f32322d3234203d3e203138303436.roa (hash: a8xqBAe2caapH+ozlzEc+y43Zwh4KNtvwAmfNpRDkMo=)
                          2: B76FD1E694797D3247661AEF17ADB42F18FF37F9.crl (hash: WBMNgFk4K9U2teAtO6vsfTjRqOyiUjqU+0/MUbev0kU=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:c4:ae:7c:ca:a9:2b:91:89:6c:50:51:c1:a1:23:f6:f0:68:e4:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B76FD1E694797D3247661AEF17ADB42F18FF37F9
        Validity
            Not Before: May 11 16:59:31 2026 GMT
            Not After : May 12 18:21:31 2026 GMT
        Subject: CN=71DC86F795F8D2866DDAD6F0552E023278221FC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:59:a3:ac:9b:2c:13:d6:ce:44:69:d6:d7:bf:
                    2f:34:43:2b:7f:37:ea:c8:cc:08:05:40:50:c3:8d:
                    7f:28:c2:96:5b:06:89:68:40:b9:ee:ab:07:8d:09:
                    92:49:79:f2:ff:2e:df:c0:76:af:2c:18:04:89:f0:
                    a0:93:5a:40:5d:c3:eb:ca:e8:e6:6d:dc:9d:96:ad:
                    7a:c5:e3:7b:be:81:de:70:c8:98:7f:a2:94:4e:ce:
                    b7:d2:37:f9:c2:aa:d2:c3:97:94:a8:87:5c:b1:ab:
                    05:8e:97:e2:68:ec:36:76:98:72:7d:6e:64:51:5e:
                    05:da:ea:64:e8:f0:f4:04:e5:26:aa:f3:d0:4e:93:
                    91:b8:9b:2c:7c:df:1f:b3:e5:50:6f:90:37:c4:39:
                    b8:7d:65:4e:8d:e4:10:50:cc:a9:f5:6e:93:b4:ea:
                    65:b3:0e:70:c3:c9:de:15:4a:d2:17:13:6e:cc:83:
                    af:d6:9d:3f:89:36:ea:88:93:18:e7:e9:72:17:06:
                    df:eb:4f:a8:2c:6a:19:f6:2e:4b:a3:f6:9e:e6:45:
                    bc:63:5f:2f:7c:88:5b:54:94:8e:0f:bc:a6:40:0c:
                    ed:98:ae:d1:b0:2c:1f:21:bb:c1:07:7a:16:8c:95:
                    c5:8e:dd:e9:6d:af:4e:c5:d2:a5:c2:80:b7:93:df:
                    b3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DC:86:F7:95:F8:D2:86:6D:DA:D6:F0:55:2E:02:32:78:22:1F:C5
            X509v3 Authority Key Identifier:
                keyid:B7:6F:D1:E6:94:79:7D:32:47:66:1A:EF:17:AD:B4:2F:18:FF:37:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HWME1204/0/B76FD1E694797D3247661AEF17ADB42F18FF37F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B76FD1E694797D3247661AEF17ADB42F18FF37F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HWME1204/0/B76FD1E694797D3247661AEF17ADB42F18FF37F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:39:c3:55:58:bf:54:74:18:c5:9d:e5:53:bd:fc:f1:69:d1:
         f9:06:fb:38:e1:3b:3f:ca:8b:20:eb:6e:9d:b9:56:be:6c:94:
         dd:59:1b:74:ae:6f:6b:14:c2:6a:75:69:ac:02:c0:a0:ae:fa:
         ba:32:f5:c7:b2:43:23:35:a7:fe:6f:33:59:a2:56:7b:ed:41:
         0b:e5:94:a7:03:d6:d5:88:e5:09:99:6a:cb:90:bc:18:9d:b3:
         ee:f8:6c:15:4b:50:fd:e9:20:aa:99:97:ff:ac:dc:7e:ab:21:
         1d:1a:9b:23:77:65:0e:b7:1a:b4:d4:99:b5:90:f1:9c:54:e9:
         0c:9e:e0:dd:85:ec:0b:10:cc:74:0a:9a:83:e3:95:9b:98:76:
         87:2a:fd:18:c2:5c:11:dc:af:19:21:ff:e4:a8:5f:f7:fb:03:
         74:47:23:44:40:52:34:97:93:72:86:b7:97:13:ea:aa:6a:f8:
         00:5c:75:3c:50:d1:aa:c2:85:3d:aa:61:2b:37:b0:49:ef:8e:
         82:bc:95:e0:24:01:7b:bd:7f:6e:5c:39:20:20:46:28:11:10:
         eb:e4:29:34:2c:a7:c0:7a:1e:35:c5:cf:9a:ba:2b:2f:67:c9:
         33:90:95:c6:7c:7b:ed:9f:71:a9:6f:41:ad:49:60:09:3d:f5:
         62:54:b8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:49:47 2026 by rpki-client