Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.mft
File:                     cJhPAIyij2R120JjU7_RxDPYvBo.mft (raw, json)
Hash identifier:          m7UN8aWGWGeJzPm9aoTTnf/RCQ/9oUA1QcZAeRGD48g=
Subject key identifier:   E9:C6:02:C2:C3:AB:88:79:C8:2F:5A:CD:6A:4B:0E:AC:A0:20:AA:66
Authority key identifier: 70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A
Certificate issuer:       /CN=70984F008CA28F6475DB426353BFD1C433D8BC1A
Certificate serial:       0D6C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.mft
Manifest number:          0D36
Signing time:             Sat 17 May 2025 21:54:42 +0000
Manifest this update:     Sat 17 May 2025 21:54:42 +0000
Manifest next update:     Mon 19 May 2025 21:54:42 +0000
Files and hashes:         1: 1nMjymujxDc_PAe8gjFd6J-I8w4.roa (hash: /g1VuA52uVSm9s9ILINxofywoKvACqUgz2NMNS8PTeg=)
                          2: Kw5iW9SrMFSMowkICxV4HcPCwKY.roa (hash: xSdKXiq1kR4Mcin8WOojtY/rtN+9/n17Tg+t0iQlJuw=)
                          3: XvW3FGlq0MFwhXB7t0o-dj0Rhq4.roa (hash: xUZ9aj/msdMfDuid9fi8MaQ7M0Vz0xUZWTH2CagJStg=)
                          4: _-pNbKWWYFAD4VesqFNxb2PL_TE.roa (hash: J+3UrHRxIL6I3H9twAhPye2dlQO/7S+qJIqFdUdoIX4=)
                          5: cJhPAIyij2R120JjU7_RxDPYvBo.crl (hash: fdvUAtUVtMaPz3+81zHvlnzhsfbh2ZQiK7Wewyg8oZ4=)
                          6: jXDPeJq12ggj_MB4JIPiVa-V8ZU.roa (hash: nIHOOuv3XT3n0mjrT4eEruvLbkstdVLcvYWH7R8pMW4=)
                          7: p-wpyQFKkeOZDS24yiG1JiKxTl8.roa (hash: tHNaIdIOqqssW+YRuN2cfBlhdro3BgfRlPnHRO47XPM=)
                          8: qMbeSyjhHXyD4w6cTf56vM7mnYM.roa (hash: m0IIzcScgG69zmN5STDBCX9SqtewkoDgoRQbLSowxe8=)
                          9: qgPderFvMtC8xgv2j31eaFQXadQ.roa (hash: 2ERQBzdG2DHxFL6HzQd2ct0pQ+HNmcR8ByKQCokdztI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3436 (0xd6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70984F008CA28F6475DB426353BFD1C433D8BC1A
        Validity
            Not Before: May 17 21:54:42 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=E9C602C2C3AB8879C82F5ACD6A4B0EACA020AA66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:96:4a:e6:25:b3:c9:a8:72:89:ad:c7:e8:56:
                    3c:86:b4:8d:a9:ce:31:78:73:63:8c:c0:5a:40:91:
                    71:02:e9:57:06:67:78:de:2b:fe:e2:fb:d5:0e:8e:
                    b2:a0:ec:68:64:cf:ac:dc:7e:4c:d7:de:9a:e5:e9:
                    f2:cb:23:50:2e:01:3b:53:2e:83:33:ef:99:70:f9:
                    b6:64:e8:67:bc:04:c8:e3:c2:19:57:1a:f0:c6:44:
                    1f:e7:18:6f:e3:cc:e9:57:c0:8a:a6:d4:ca:46:ef:
                    89:49:09:3e:0c:77:de:08:05:16:58:6a:7d:df:cf:
                    47:b1:df:75:97:7c:2f:16:a2:e2:bc:9b:dc:07:8a:
                    40:f6:83:a0:47:ce:ac:6b:d8:26:8a:b2:77:19:6c:
                    9d:3e:4e:af:14:ae:9f:73:ec:d3:66:9c:e2:7c:29:
                    d5:18:b0:f8:d5:c0:25:11:0d:37:ef:44:0f:3e:c1:
                    e1:77:56:47:fa:79:3c:bd:82:c7:a8:72:e4:46:e1:
                    16:02:f0:03:98:ea:d5:46:a3:2b:85:d0:36:21:e6:
                    ab:c0:58:c3:35:b6:4f:76:ee:76:bf:89:34:b0:f8:
                    6a:ac:73:98:89:85:1c:a8:e2:bd:42:29:fa:a5:ac:
                    98:95:fa:aa:ae:22:25:1b:31:cd:b9:75:f1:b0:a0:
                    1a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C6:02:C2:C3:AB:88:79:C8:2F:5A:CD:6A:4B:0E:AC:A0:20:AA:66
            X509v3 Authority Key Identifier:
                keyid:70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:4a:a7:86:3e:e5:5b:4f:c1:75:4d:37:26:9f:a8:05:25:c5:
         3a:74:5d:6a:9d:d2:13:b8:fe:1a:9b:cc:a2:30:bb:b6:e3:9a:
         f8:50:42:80:36:dc:4b:a6:c0:ff:84:17:05:14:6a:05:07:6d:
         65:a4:ff:1e:57:55:37:88:8c:47:50:9f:fa:47:2d:26:22:a2:
         2a:a1:a1:94:24:2e:de:68:6d:0e:70:5f:cc:cb:54:6f:5d:23:
         61:f1:fd:a6:95:ba:99:13:66:66:e4:2a:09:59:40:0f:09:27:
         27:6d:7d:10:ef:a1:38:96:d8:ae:95:4d:25:b9:ec:3e:9b:e0:
         f5:15:43:8b:3e:c3:ed:51:95:6a:8b:89:63:ca:17:7b:bf:3e:
         44:18:72:50:17:5a:51:b3:20:94:d0:02:7b:6d:ab:76:70:d7:
         be:ed:4e:d7:40:14:06:97:19:cc:c4:64:48:40:b4:53:58:f8:
         98:32:0a:b4:24:5c:7c:fb:16:ec:59:a2:c1:7d:28:3e:2d:54:
         c1:42:9b:98:6c:d5:92:15:bb:bc:12:69:d9:ba:f3:be:8e:89:
         52:ad:d9:73:c4:72:1c:6d:85:4e:ac:f3:fb:f8:f9:13:ac:6e:
         5b:8c:8b:56:94:3c:3e:ae:9d:21:ea:55:30:4a:dd:1e:c0:da:
         11:00:8c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 00:32:21 2025 by rpki-client