Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.mft
File:                     4q-M_ZUnD89cLKZdh3d_b7er_TI.mft (raw, json)
Hash identifier:          SoQSs3d2fHZZuf189zvU8C7Sj5RINNLAKBLSkPn+X0s=
Subject key identifier:   5C:6A:C1:CE:6B:B5:0E:99:09:73:8E:73:61:A1:2C:AC:5C:60:03:7B
Authority key identifier: E2:AF:8C:FD:95:27:0F:CF:5C:2C:A6:5D:87:77:7F:6F:B7:AB:FD:32
Certificate issuer:       /CN=E2AF8CFD95270FCF5C2CA65D87777F6FB7ABFD32
Certificate serial:       04F2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4q-M_ZUnD89cLKZdh3d_b7er_TI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.mft
Manifest number:          04E0
Signing time:             Thu 26 Mar 2026 12:59:44 +0000
Manifest this update:     Thu 26 Mar 2026 12:59:44 +0000
Manifest next update:     Sat 28 Mar 2026 12:59:44 +0000
Files and hashes:         1: 4q-M_ZUnD89cLKZdh3d_b7er_TI.crl (hash: wuIzaecPoN7ZIwEzFoJSwaCdPMl6JYTfI3LPnO6u06Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1266 (0x4f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2AF8CFD95270FCF5C2CA65D87777F6FB7ABFD32
        Validity
            Not Before: Mar 26 12:59:44 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=5C6AC1CE6BB50E9909738E7361A12CAC5C60037B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1d:6f:cd:62:e4:c0:c0:d6:cf:8a:15:46:04:
                    26:8b:1d:25:3c:5f:32:a7:13:2c:60:b9:c3:dd:55:
                    08:0d:0c:2e:73:fb:9c:e5:f8:eb:c0:11:6c:4d:e0:
                    aa:fc:51:88:83:7c:0f:e1:75:f4:05:5c:9a:bc:0b:
                    bc:53:a1:14:04:0f:be:68:6b:fc:d1:ba:f2:16:f3:
                    10:d1:0f:47:20:72:f8:e2:fb:5f:e9:66:dc:35:a3:
                    b7:94:c3:fa:b3:4c:1d:ee:fb:aa:a2:3d:84:af:cd:
                    ee:df:7b:c0:95:d4:26:e7:f2:a3:1f:3d:16:4e:17:
                    7c:01:b1:45:b7:b7:6a:e4:a3:08:97:77:a0:f8:46:
                    49:09:91:10:f3:3c:f7:f9:ab:57:f5:43:fa:41:ba:
                    00:22:e4:11:d9:ac:eb:e2:67:52:f1:ce:f7:9d:32:
                    3b:a9:73:b4:17:ad:23:04:96:92:09:b5:ff:b1:b9:
                    ed:16:29:e2:6f:d7:34:e2:f7:0d:b9:55:52:06:92:
                    dc:35:0f:68:9b:90:03:e4:10:bf:ec:14:6e:2a:a9:
                    97:dc:5e:f6:66:8a:a5:21:ff:6d:b8:b6:f4:ac:3a:
                    da:9d:d8:d8:82:3e:dc:96:8b:4b:22:94:5e:72:2d:
                    d7:8f:1f:f0:0d:20:e4:98:dd:bb:79:b0:69:12:51:
                    b0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:6A:C1:CE:6B:B5:0E:99:09:73:8E:73:61:A1:2C:AC:5C:60:03:7B
            X509v3 Authority Key Identifier:
                keyid:E2:AF:8C:FD:95:27:0F:CF:5C:2C:A6:5D:87:77:7F:6F:B7:AB:FD:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4q-M_ZUnD89cLKZdh3d_b7er_TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:4a:ad:20:0d:07:f7:76:e8:df:e6:34:0b:17:7b:6b:f8:d5:
         1c:6d:1f:96:50:a6:97:24:01:f4:cb:86:2d:37:86:b6:c0:ee:
         bb:61:8e:f1:a7:7f:ee:30:32:6e:a5:7b:e4:a8:4b:3d:36:65:
         a0:70:d4:6a:67:29:e4:1b:2c:df:44:84:e2:eb:32:1b:e5:6f:
         8c:10:88:78:fa:c1:9a:68:b3:91:48:b9:d6:b8:ce:e1:53:b0:
         ee:c1:86:44:7c:11:41:87:bc:bc:a2:75:02:b8:53:ca:4a:f2:
         af:26:fb:43:e8:08:41:97:a0:78:98:10:39:f2:1d:f9:17:e5:
         9d:22:cf:a4:83:93:b2:ff:ae:23:09:64:59:0b:97:a0:c0:17:
         54:bb:d7:fe:24:84:64:2a:de:63:02:f6:10:c9:5f:cf:e8:80:
         70:44:5c:b9:45:6c:b8:42:fc:f9:8c:c4:f5:68:55:22:96:e0:
         f1:95:ef:c1:20:f9:06:a5:35:36:8f:7c:68:d9:52:f8:16:19:
         a1:be:53:34:14:51:69:21:f6:c9:23:9a:b0:3b:63:e3:e5:1b:
         db:ce:6d:dc:24:09:9a:d5:89:0b:52:e8:a1:df:76:1d:f8:35:
         45:04:3d:2d:5c:44:cc:df:8b:0e:a2:06:c7:91:40:71:07:70:
         bd:b4:40:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:32:33 2026 by rpki-client