Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.mft
File:                     w_wRajzLEFq1DaQXZ5sfnHCkvZc.mft (raw, json)
Hash identifier:          BxKHyif1pYaFaA5jK+RkOY73qv5uhhCNc7d3ZAvhk9c=
Subject key identifier:   09:6E:85:54:61:D6:52:C2:BA:96:40:E7:DD:FB:8C:63:90:A3:36:5F
Authority key identifier: C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97
Certificate issuer:       /CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
Certificate serial:       0454
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.mft
Manifest number:          042F
Signing time:             Sun 11 May 2025 21:53:46 +0000
Manifest this update:     Sun 11 May 2025 21:53:46 +0000
Manifest next update:     Tue 13 May 2025 21:53:46 +0000
Files and hashes:         1: d9qKp45X7kRDVuV4nNFYSIt-Yh0.roa (hash: bFGP/HT+DX0mM+gNWGpKWVFh6IgkSTpNfivTyf5M2sI=)
                          2: g3CLjpTuUXDneVlvbodMyJodOsM.roa (hash: UPmSe1oV70hhw7SQTKfBzjDwZB5STUF8qQaLJJU97yE=)
                          3: w_wRajzLEFq1DaQXZ5sfnHCkvZc.crl (hash: YDyfRUYXft4pwEss05NA4WbWqArWhwb31ZP4QV/O7SQ=)
                          4: yQLgjITh7Zfs6hql7Et6yfpihK0.roa (hash: a0GOH7u+mK4KLBOVsqfZ8ks+/KzIssc9FJgoSRG2VcY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 May 2025 05:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1108 (0x454)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
        Validity
            Not Before: May 11 21:53:46 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=096E855461D652C2BA9640E7DDFB8C6390A3365F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:73:08:df:9a:82:6a:c0:81:5b:c4:7f:13:a2:
                    22:13:74:2b:1e:e3:df:8e:76:45:7d:b5:0c:7b:83:
                    46:52:2b:34:d8:87:c9:ea:52:67:89:d8:e3:99:f2:
                    9b:b7:58:5f:60:ad:ef:75:d4:eb:dd:ab:90:43:e4:
                    8b:0f:3d:de:77:b9:02:79:75:3d:34:19:65:6b:9d:
                    e4:3e:c8:f0:06:30:59:af:f1:1c:25:5e:3c:14:85:
                    b7:4c:ae:12:bb:88:b3:b9:56:a5:74:0d:4f:06:df:
                    23:62:09:8e:b9:57:ea:27:24:fd:fd:59:bc:86:5a:
                    c4:92:fb:0c:b9:1d:72:21:91:36:ca:66:d6:7d:ea:
                    6d:88:17:36:73:9a:78:6d:ee:43:33:18:6b:7b:8b:
                    26:cc:44:dc:6d:03:e1:d8:90:62:5f:42:a1:b2:46:
                    23:a8:c1:ee:85:1f:fa:1a:10:1e:a2:f3:1c:2a:54:
                    c3:7e:87:2e:2c:3e:40:f4:31:b8:4a:af:7a:c2:d7:
                    87:21:3c:60:df:c8:7a:22:a7:da:50:45:ef:31:de:
                    2f:34:77:c5:71:a9:7d:fc:63:da:f7:84:de:4f:bd:
                    e1:f1:d0:fe:6d:72:cc:61:1a:a6:f5:94:c8:12:84:
                    5f:67:3d:8e:99:a3:38:1e:18:5e:ef:61:67:25:50:
                    1a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6E:85:54:61:D6:52:C2:BA:96:40:E7:DD:FB:8C:63:90:A3:36:5F
            X509v3 Authority Key Identifier:
                keyid:C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:4d:30:4d:9b:a5:66:87:6c:c1:de:43:69:d9:fb:a8:03:5b:
         8a:25:0e:ea:26:5b:38:cc:f4:57:38:66:5d:52:6e:ae:02:5e:
         bf:b8:c8:7b:e4:0a:ca:0e:ea:d4:bb:cf:d0:89:2b:ca:30:e1:
         99:53:36:92:76:66:2e:4b:48:20:eb:4a:e8:fc:42:6d:0b:89:
         66:ca:82:1b:df:e8:79:c0:55:9a:e2:9f:d6:e8:11:7a:28:fb:
         da:ed:19:fc:be:b0:36:82:22:ce:dc:f0:d3:f8:0e:db:7d:90:
         a9:1a:27:d4:ea:08:6a:b9:c7:fa:02:f2:93:7c:51:10:ad:a7:
         d2:2f:cd:9a:79:25:db:0a:9f:07:10:54:87:05:f2:01:e5:03:
         80:92:af:88:c4:a8:34:70:eb:88:24:7e:ef:9c:1f:e2:a4:47:
         f7:9a:2c:48:e9:d3:a4:90:e4:9b:ae:d5:c5:91:26:52:06:7a:
         02:66:5e:56:ac:8a:21:05:83:4f:0c:ef:ea:8a:12:7f:b0:18:
         ec:1d:10:82:b2:d3:c8:4b:59:ff:0c:ee:30:87:1a:c2:1d:a6:
         09:cb:3b:af:6f:d1:8c:62:fb:33:20:08:d8:bc:e3:49:6e:c7:
         db:03:4a:d8:06:3a:fa:d3:23:72:91:2a:5a:d6:62:b4:53:6c:
         86:8a:7b:94
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgICBFQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzNG
QzExNkEzQ0NCMTA1QUI1MERBNDE3Njc5QjFGOUM3MEE0QkQ5NzAeFw0yNTA1MTEy
MTUzNDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA5NkU4NTU0NjFENjUy
QzJCQTk2NDBFN0RERkI4QzYzOTBBMzM2NUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVcwjfmoJqwIFbxH8ToiITdCse49+OdkV9tQx7g0ZSKzTYh8nq
UmeJ2OOZ8pu3WF9gre911Ovdq5BD5IsPPd53uQJ5dT00GWVrneQ+yPAGMFmv8Rwl
XjwUhbdMrhK7iLO5VqV0DU8G3yNiCY65V+onJP39WbyGWsSS+wy5HXIhkTbKZtZ9
6m2IFzZzmnht7kMzGGt7iybMRNxtA+HYkGJfQqGyRiOowe6FH/oaEB6i8xwqVMN+
hy4sPkD0MbhKr3rC14chPGDfyHoip9pQRe8x3i80d8VxqX38Y9r3hN5PveHx0P5t
csxhGqb1lMgShF9nPY6ZozgeGF7vYWclUBovAgMBAAGjggIJMIICBTAdBgNVHQ4E
FgQUCW6FVGHWUsK6lkDn3fuMY5CjNl8wHwYDVR0jBBgwFoAUw/wRajzLEFq1DaQX
Z5sfnHCkvZcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV09MRk5F
VC93X3dSYWp6TEVGcTFEYVFYWjVzZm5IQ2t2WmMuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL3dfd1JhanpMRUZxMURhUVhaNXNmbkhDa3ZaYy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1dPTEZORVQvd193UmFqekxFRnExRGFR
WFo1c2ZuSENrdlpjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG
AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB
AB1NME2bpWaHbMHeQ2nZ+6gDW4olDuomWzjM9Fc4Zl1Sbq4CXr+4yHvkCsoO6tS7
z9CJK8ow4ZlTNpJ2Zi5LSCDrSuj8Qm0LiWbKghvf6HnAVZrin9boEXoo+9rtGfy+
sDaCIs7c8NP4Dtt9kKkaJ9TqCGq5x/oC8pN8URCtp9IvzZp5JdsKnwcQVIcF8gHl
A4CSr4jEqDRw64gkfu+cH+KkR/eaLEjp06SQ5Juu1cWRJlIGegJmXlasiiEFg08M
7+qKEn+wGOwdEIKy08hLWf8M7jCHGsIdpgnLO69v0Yxi+zMgCNi840lux9sDStgG
OvrTI3KRKlrWYrRTbIaKe5Q=
-----END CERTIFICATE-----
Generated at Tue May 13 03:26:40 2025 by rpki-client