Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RUIKE/U5BuLi7-dJHbGbHCCeoXjDmg2uU.mft
File:                     U5BuLi7-dJHbGbHCCeoXjDmg2uU.mft (raw, json)
Hash identifier:          /bmMAKzk+eI174En/HkIG59P9P3hnaVdEsCArJSvee4=
Subject key identifier:   8B:CF:9A:17:20:F5:F3:38:5D:2E:74:23:1D:E4:57:15:25:E4:C7:45
Authority key identifier: 53:90:6E:2E:2E:FE:74:91:DB:19:B1:C2:09:EA:17:8C:39:A0:DA:E5
Certificate issuer:       /CN=53906E2E2EFE7491DB19B1C209EA178C39A0DAE5
Certificate serial:       058F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/U5BuLi7-dJHbGbHCCeoXjDmg2uU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/U5BuLi7-dJHbGbHCCeoXjDmg2uU.mft
Manifest number:          058F
Signing time:             Thu 26 Mar 2026 18:28:42 +0000
Manifest this update:     Thu 26 Mar 2026 18:28:42 +0000
Manifest next update:     Fri 27 Mar 2026 00:28:42 +0000
Files and hashes:         1: U5BuLi7-dJHbGbHCCeoXjDmg2uU.crl (hash: 0dEYX7es4ahfWg3Xo4ND9zbq5eQkmPF4BBaANGQ8W3w=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1423 (0x58f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53906E2E2EFE7491DB19B1C209EA178C39A0DAE5
        Validity
            Not Before: Mar 26 18:28:42 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=8BCF9A1720F5F3385D2E74231DE4571525E4C745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1c:a5:3f:4b:26:51:f8:59:a2:01:cc:24:7a:
                    56:fe:69:eb:2d:0e:e9:54:ee:fc:bb:3a:c4:0a:9c:
                    5a:da:2c:8a:ac:6d:2b:48:9f:68:5f:9a:0b:9f:50:
                    7e:d5:a1:86:e2:a8:c1:d4:2d:4c:19:5d:09:04:bf:
                    4d:e8:bf:6d:0a:73:6b:68:52:e8:6f:16:de:39:35:
                    43:b1:10:97:de:d8:cb:b8:f0:83:d4:d0:20:42:37:
                    3b:3b:5d:dd:36:0e:73:6f:44:cf:36:22:a9:45:c2:
                    51:7d:d9:2a:74:a1:4a:b1:2c:05:0d:96:e1:0b:ae:
                    3c:58:6d:e9:35:80:99:53:1c:61:4c:92:84:53:84:
                    59:2c:36:bb:b6:32:6f:a6:cb:e7:40:e5:2c:4d:9b:
                    21:1d:e9:78:14:0b:bf:f8:b0:c4:07:a3:5e:7a:73:
                    60:84:d4:c2:bd:08:41:da:fe:ad:4e:44:59:9b:f5:
                    ec:b9:5b:21:01:e7:9b:9b:1b:d7:9d:22:3c:c9:1e:
                    87:a6:d0:02:3a:91:23:b4:94:4e:11:43:b0:5f:d3:
                    c3:a0:c2:e5:db:22:2e:60:bc:19:2e:08:94:25:94:
                    6b:ff:78:2f:2f:9b:2a:24:99:54:da:76:71:70:26:
                    8d:5c:07:3a:8b:fa:34:61:44:7e:8d:0f:92:c6:d3:
                    fd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CF:9A:17:20:F5:F3:38:5D:2E:74:23:1D:E4:57:15:25:E4:C7:45
            X509v3 Authority Key Identifier:
                keyid:53:90:6E:2E:2E:FE:74:91:DB:19:B1:C2:09:EA:17:8C:39:A0:DA:E5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/U5BuLi7-dJHbGbHCCeoXjDmg2uU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/U5BuLi7-dJHbGbHCCeoXjDmg2uU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/U5BuLi7-dJHbGbHCCeoXjDmg2uU.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:af:ad:46:48:b9:28:90:ce:df:db:1f:da:05:05:9d:e9:37:
         36:03:f0:6a:75:c0:5e:0e:4d:97:4c:2d:81:53:3b:a9:55:94:
         94:26:f8:d6:fc:9e:5e:b7:05:4f:d9:71:12:ac:c8:9f:73:2f:
         d5:46:61:d7:ed:5b:be:02:ed:dc:8b:da:f3:37:58:d5:a1:78:
         45:2a:0f:90:9b:74:b4:1b:9d:16:03:6f:c4:c5:af:53:7e:5c:
         c5:f1:bd:08:d5:c7:52:f0:c5:6b:c0:f6:fd:3f:08:6e:4e:87:
         aa:96:b8:76:c0:d8:f9:3e:e9:44:3b:06:24:1a:80:94:e7:17:
         93:73:76:48:4e:5e:4b:52:01:2e:de:98:0b:3d:fb:0e:f1:67:
         54:8f:04:91:09:d8:eb:38:6c:12:5e:ed:09:1f:50:07:ab:50:
         d1:b9:17:43:d2:81:d5:ec:02:82:13:93:c7:6c:00:cd:56:d0:
         33:09:f3:0d:18:2b:c1:92:ad:d0:ab:f2:9e:60:35:71:e2:35:
         79:59:6f:63:d0:f1:8c:db:b4:44:c9:de:54:46:15:19:ca:89:
         f3:79:80:7f:c8:55:1b:be:c6:1c:d5:0a:88:38:2f:d2:8b:73:
         3d:02:c9:61:e9:56:45:f9:40:7b:a1:bf:80:e9:eb:bb:64:17:
         43:80:e1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:42:57 2026 by rpki-client