Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.mft
File:                     DHiWFkKgS-EycI2xk9e6kWsrZ8s.mft (raw, json)
Hash identifier:          n3Rf41bTuNZ5fqsLnZhNiFGxVFxthv3scsNwfTkmq1k=
Subject key identifier:   3D:B0:24:D6:88:AB:7E:FA:16:CA:8D:EA:3D:AC:25:06:15:88:D8:5D
Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
Certificate issuer:       /CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Certificate serial:       0DD9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.mft
Manifest number:          0D5B
Signing time:             Thu 15 May 2025 23:21:54 +0000
Manifest this update:     Thu 15 May 2025 23:21:54 +0000
Manifest next update:     Sat 17 May 2025 23:21:54 +0000
Files and hashes:         1: 5kLVt5wiwHNeH9Mid1exm_G1yVM.roa (hash: lzMUOTnYdsjGx5KRwfV8XxKaTN4xWAD2dIU0x2nQ12g=)
                          2: 63DawYufUruIiM5XKuTgaIDNPo0.roa (hash: vrWF7EmkhfCiAe47r0Vm5SDfwIhaSw/yvoSIaLec7So=)
                          3: DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl (hash: vLiSeuphY/rUK6IpZnbceEwrJesl5xfYZflWaVFAu9w=)
                          4: IpszeaFR5SMgJhIWLwWkcaWQiC0.roa (hash: CRAKrNRlzdyp9ZZ1PZgbTfaOasHd16wUiu2h8rbqp60=)
                          5: KBcVpY_CUF8y7WXpAnTF3_XTOpg.roa (hash: l/LJUxoIUGeR4r8qN5dNCGsj34MgOGO4vfg/pKbBC8g=)
                          6: KpI35hChIFDRcrRtrbnawdXhZuk.roa (hash: jROmzGsJXq5PVTd8UUNeIVPph1gQ7pzDH6fhQlxBp80=)
                          7: PifvDEUbHBaKozWwc5CIuRJtPyo.roa (hash: Wfbx6kL/tCi3y8gWDcIrSTW7qTK4bQRPGwJwMD7XJAo=)
                          8: b-TYav7zHey8PKOW7Wx8DsCX3Dg.roa (hash: /9tqoPWUNlxn3/P68aYLj0sPUsJb/Wf1BCpHZi5kQMI=)
                          9: coDMDfK2wkSBx9Lz_-bJBUatIW8.roa (hash: rpwp0w+PbFlC+mJq0ssK1nYey5/hWxQhqpbT5ajO+vw=)
                          10: geENs46qInOmCyoEh9lNvo4sR5Q.roa (hash: yXMpkghh/xsvlZgObeAwoSjJf9PqzTUnlTA1MySwJP8=)
                          11: l9O-eISc_dECMF9e43SWxmq4AEg.roa (hash: Y1pbsqjJNWxpuCH/R9FBJN0tRoSqkpUmOcFlxjK86zA=)
                          12: wEnm8C8tkWzSNKX5O-7tGclJmv8.roa (hash: 0kKhl72wEnLGGh5yoZFHQU3pE4ItlGp6bJYmpW5hKo4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3545 (0xdd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB
        Validity
            Not Before: May 15 23:21:54 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=3DB024D688AB7EFA16CA8DEA3DAC25061588D85D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ff:76:d6:47:42:dd:e8:22:cf:47:20:43:ba:
                    82:f8:58:df:fd:5c:cb:1f:0e:7f:99:14:c5:a4:75:
                    5a:c1:64:e3:80:89:5b:d0:0b:0e:be:39:cb:6f:48:
                    37:fe:99:b6:47:ef:50:b1:a6:d2:09:3b:29:c9:3e:
                    2d:da:ea:4c:0b:6c:22:14:2f:bc:11:66:6f:76:39:
                    f4:92:64:4b:cd:f4:96:82:2f:4a:76:c3:ba:c2:f9:
                    43:22:30:ce:87:ac:7f:54:e0:3d:63:11:65:d8:26:
                    6a:e9:da:d6:de:d4:2a:ec:55:1a:54:b9:fe:b1:61:
                    10:f2:23:b0:61:87:80:8e:21:06:64:23:78:32:87:
                    39:54:d2:f7:a9:a6:17:c4:8c:dd:27:30:1c:ba:f4:
                    cb:c2:55:f6:a5:96:1f:0d:a4:8b:1b:9c:c4:28:cc:
                    a1:78:71:d7:fe:57:46:7a:46:93:9c:10:6d:fa:ad:
                    69:9f:67:15:db:43:59:3e:23:52:b5:0e:a7:92:14:
                    ce:e8:13:d3:ef:94:2b:dc:51:4c:3c:10:39:f5:b2:
                    79:7b:fe:60:6d:99:70:95:e3:f5:02:83:28:d2:42:
                    16:f2:54:c5:9b:f8:ac:6d:ea:1e:76:6f:4b:61:c9:
                    de:de:04:5b:0c:bf:b0:f6:f7:2a:c3:36:cf:03:e1:
                    56:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B0:24:D6:88:AB:7E:FA:16:CA:8D:EA:3D:AC:25:06:15:88:D8:5D
            X509v3 Authority Key Identifier:
                keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:95:ab:ef:d2:d4:12:7e:ae:cf:0a:eb:93:92:9d:df:7f:16:
         37:b4:7f:97:44:18:5c:56:95:d9:dc:a9:51:64:78:ad:93:67:
         da:c9:32:2d:e9:05:a0:16:9a:a5:1b:f6:ef:48:f4:2a:00:87:
         5b:9a:2c:29:a6:9c:f1:51:a4:1f:55:4e:5b:97:8d:b4:6a:da:
         71:7e:d2:14:90:9b:5e:79:e6:6d:21:b7:13:bd:96:c1:8c:54:
         0c:7a:6c:21:a3:83:f3:bf:4b:87:2f:a5:8c:9e:04:2d:d2:9f:
         e2:12:d4:64:5d:1f:cd:91:d4:a7:4a:ac:17:c4:5e:77:e5:41:
         96:bc:c0:87:76:cd:58:cd:51:79:e6:f9:15:20:c7:2a:2f:ab:
         67:75:37:8c:2b:66:78:e7:89:6a:b1:29:f9:35:8a:1a:50:9f:
         ba:52:aa:9c:cd:3e:49:ba:08:1c:bd:31:82:18:d0:7f:de:ac:
         60:78:2e:24:d7:93:f6:24:64:3b:bf:85:0a:32:8f:4f:bb:3d:
         be:bd:6f:99:ce:64:0d:48:d1:85:f2:e6:d3:77:d8:b1:0a:9a:
         bd:28:5e:74:f9:a4:32:ca:31:d9:bc:30:f6:ea:28:17:46:80:
         1a:80:a3:34:84:46:03:71:7d:48:78:90:22:32:14:12:6f:65:
         61:53:f5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 17:02:26 2025 by rpki-client