Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/M2NIM/zE7-l8nB6kjwGh-GXdYX67EzUaE.mft
File:                     zE7-l8nB6kjwGh-GXdYX67EzUaE.mft (raw, json)
Hash identifier:          oSdTfIgTOvYtyDEJNrTSCzucVT/beL4EGhIuSw754yc=
Subject key identifier:   DE:9B:9D:FE:64:6B:2A:3D:D1:17:88:D2:D7:3B:53:FA:4F:D0:AE:CD
Authority key identifier: CC:4E:FE:97:C9:C1:EA:48:F0:1A:1F:86:5D:D6:17:EB:B1:33:51:A1
Certificate issuer:       /CN=CC4EFE97C9C1EA48F01A1F865DD617EBB13351A1
Certificate serial:       019A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/zE7-l8nB6kjwGh-GXdYX67EzUaE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/M2NIM/zE7-l8nB6kjwGh-GXdYX67EzUaE.mft
Manifest number:          0194
Signing time:             Wed 14 May 2025 21:52:24 +0000
Manifest this update:     Wed 14 May 2025 21:52:24 +0000
Manifest next update:     Fri 16 May 2025 21:52:24 +0000
Files and hashes:         1: PgKGUxaR6ZSfBVKCAhAnLNqvHw4.roa (hash: BOXA8tcZi9TTus8lJdc7XshCAVbLUEHes8e6Rt8bP68=)
                          2: YQ1I0cbjjF0EH-gmOLlgPej25zM.roa (hash: cB39qlLWGee8R1GLo5GpvHQgWKB51f0INlFUTur639o=)
                          3: zE7-l8nB6kjwGh-GXdYX67EzUaE.crl (hash: WFJpjpEtydGXOWOQSUj4j+88W3Szhxf2B6VcnRYcMxU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410 (0x19a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC4EFE97C9C1EA48F01A1F865DD617EBB13351A1
        Validity
            Not Before: May 14 21:52:24 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=DE9B9DFE646B2A3DD11788D2D73B53FA4FD0AECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2b:cf:f5:2c:a2:87:7b:b6:c9:41:7c:04:49:
                    62:35:99:68:87:a4:10:8e:b5:7b:54:c1:71:4e:5d:
                    e8:b2:eb:7e:e0:e7:9e:81:ed:e0:bf:e6:3c:cd:c1:
                    2b:59:4f:66:da:60:4a:b9:30:21:f6:77:39:38:32:
                    68:2f:b5:ac:10:40:e0:a9:6c:c2:67:12:2f:41:42:
                    dc:df:71:75:60:6a:cd:77:81:00:cb:73:a3:12:1c:
                    fd:a6:c6:46:c7:46:30:57:15:65:0b:a9:b6:e2:a2:
                    4f:55:d1:e8:ab:23:e5:87:84:f2:38:19:82:13:a6:
                    7e:e4:81:c5:07:07:d1:5c:14:3d:e3:4d:ae:14:86:
                    ad:28:f3:35:7c:c8:c9:80:7f:bf:1e:f6:a5:42:85:
                    de:9c:47:0c:b1:37:b6:74:0c:78:e6:cc:b4:ee:19:
                    b7:4b:80:2c:8a:b8:6e:35:84:39:1f:f3:a6:2b:f6:
                    1e:17:13:74:20:47:a7:a1:0a:22:cb:ee:59:9c:ad:
                    9f:5a:83:a3:8b:87:c1:9c:5f:87:77:51:2d:74:16:
                    1a:2d:5b:2d:08:5b:02:3b:1c:33:ca:fb:57:e9:4d:
                    41:ea:80:14:b8:de:5b:89:cf:09:3f:b1:38:d6:31:
                    2a:8e:fd:76:e0:8b:51:52:96:25:d8:41:d5:cc:d1:
                    f8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9B:9D:FE:64:6B:2A:3D:D1:17:88:D2:D7:3B:53:FA:4F:D0:AE:CD
            X509v3 Authority Key Identifier:
                keyid:CC:4E:FE:97:C9:C1:EA:48:F0:1A:1F:86:5D:D6:17:EB:B1:33:51:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/M2NIM/zE7-l8nB6kjwGh-GXdYX67EzUaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zE7-l8nB6kjwGh-GXdYX67EzUaE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/M2NIM/zE7-l8nB6kjwGh-GXdYX67EzUaE.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:47:d5:38:1e:84:a9:94:9d:88:5c:f4:8e:c0:2e:2a:ea:8f:
         63:5d:3c:a1:cc:d6:01:fe:3f:5b:4e:7e:fe:da:0f:29:fe:e5:
         6c:bf:24:cc:30:4e:15:d4:35:df:ac:2d:59:35:dc:1b:cf:eb:
         30:a2:d0:b7:2b:06:67:b0:d5:1f:30:44:50:50:c5:0c:60:c1:
         a4:99:ea:84:c0:5a:b0:d3:2f:8b:eb:a0:91:82:3c:43:2d:f8:
         87:5a:da:22:4c:43:fe:b5:35:03:4f:ec:8d:d1:0b:22:b9:f6:
         3a:a5:74:44:94:ba:2e:a3:c7:eb:d7:38:32:3d:50:47:d6:96:
         27:b2:2e:69:31:bd:a2:7f:ad:f0:bc:21:36:e5:5e:42:39:15:
         a3:80:7f:2b:f9:7a:7a:d5:5c:21:14:5f:81:98:92:10:fb:cb:
         e9:e5:65:80:13:ae:5f:c9:b3:1c:3e:1b:7d:0f:99:a1:41:f5:
         cf:46:a0:c8:6d:94:a9:ab:21:43:d6:30:b7:4f:20:5a:5b:6f:
         84:1c:ca:75:96:b9:93:53:98:d5:59:be:bb:56:7c:55:59:7d:
         cf:4f:c5:65:f5:33:38:ce:54:d1:7e:88:b4:2f:69:96:04:c0:
         a1:f4:a8:fc:7b:19:99:f7:27:76:96:95:c9:67:27:0b:56:af:
         1f:a8:68:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 22:23:57 2025 by rpki-client