Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft
File:                     Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft (raw, json)
Hash identifier:          c38ZAVvM0MFKJJrcG91ZT2UMf98V1JesTY7PV0R9ilY=
Subject key identifier:   BD:F5:E7:4C:32:5D:4E:53:72:05:6C:A0:EA:73:23:8E:F4:74:1D:1A
Authority key identifier: 67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9
Certificate issuer:       /CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9
Certificate serial:       1058
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft
Manifest number:          104F
Signing time:             Sat 17 May 2025 21:22:55 +0000
Manifest this update:     Sat 17 May 2025 21:22:55 +0000
Manifest next update:     Mon 19 May 2025 21:22:55 +0000
Files and hashes:         1: Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl (hash: IQPDOtW7SpR95VwBcJZnDo8ydo6p6CxU/s679VA5BeY=)
                          2: jFOAcEZVumM_2ehoJfHlpaXcShA.roa (hash: oxuZmH4tmCWLw8FxgYK0anKKOf7pIls25q1O8EEoeqI=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 04:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4184 (0x1058)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9
        Validity
            Not Before: May 17 21:22:55 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=BDF5E74C325D4E5372056CA0EA73238EF4741D1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:24:3a:12:a8:72:83:3a:41:63:15:11:52:87:
                    39:78:c6:cd:5e:b8:a2:53:b3:15:c7:7b:cc:69:ec:
                    c8:68:60:6a:22:9f:ab:a3:1b:66:e5:2d:d3:5d:4b:
                    ca:11:9e:51:0d:e7:7b:cf:09:27:9f:7a:5d:d6:4f:
                    fd:95:3b:74:2f:cc:78:3d:86:36:1d:9f:8e:67:92:
                    13:d4:46:03:56:00:53:2a:51:59:01:a7:e5:c9:74:
                    15:cc:39:3f:ea:be:28:ff:e2:a2:c3:b6:c8:04:a1:
                    9b:ec:1f:01:71:99:23:2b:69:af:81:ad:b5:a1:55:
                    ac:fb:2b:e0:e4:fd:c2:31:80:6e:1c:04:1b:7a:7a:
                    92:81:ba:b9:d8:63:bd:5f:1a:1a:1f:81:74:0c:68:
                    82:48:36:45:a5:c7:80:46:8e:7c:6c:08:61:9c:c0:
                    99:b8:ed:c2:c1:22:2c:f6:3b:1f:64:c8:30:d5:6e:
                    39:da:b5:65:f2:ad:9f:fa:29:ef:bd:6f:5c:51:f3:
                    c5:e6:20:06:f4:12:26:47:f8:f9:88:6f:a5:66:bf:
                    02:8f:f5:2c:70:e4:a9:4a:cf:5d:70:0e:92:cd:29:
                    08:90:35:4a:00:21:81:0b:89:d8:53:6b:ab:25:7f:
                    80:97:c5:57:2f:ec:b8:86:2c:94:17:ef:0a:84:6e:
                    10:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F5:E7:4C:32:5D:4E:53:72:05:6C:A0:EA:73:23:8E:F4:74:1D:1A
            X509v3 Authority Key Identifier:
                keyid:67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:3e:3b:01:e9:fb:06:75:65:6f:61:ac:e6:78:63:16:24:65:
         fc:88:ba:1f:e1:79:ba:7b:89:cb:c2:46:63:5e:7f:67:bc:07:
         21:0b:24:ae:76:3d:7f:ab:a6:9f:ec:d7:66:27:54:38:53:4c:
         ea:e3:0f:36:ac:12:8f:09:93:bf:a9:eb:4c:68:89:7a:0e:33:
         41:2a:5b:26:8e:2d:15:cc:46:db:b4:4a:45:2f:68:52:e4:7b:
         46:cf:27:51:e1:2b:44:09:8c:3a:51:0f:83:84:2b:66:34:15:
         c3:c7:0f:e4:e7:ed:cb:cd:12:d3:0a:f4:21:33:86:96:99:e8:
         af:96:04:b1:96:88:9d:76:16:17:bb:e1:4b:4d:ac:a5:2f:6c:
         a9:a9:08:26:30:d3:3e:3a:07:90:15:65:bf:7c:e2:27:44:a5:
         ad:55:96:1a:c0:96:de:20:f4:4f:0b:fd:bc:ca:2b:b4:db:3f:
         37:a3:ac:1d:98:8d:67:9a:c5:1e:c3:49:45:27:ed:5b:0a:c4:
         cf:f7:2f:5f:48:10:5d:98:72:5b:c3:fd:76:ec:6e:71:2e:f7:
         31:6e:d0:62:70:9a:80:a3:06:53:b7:d1:b7:84:79:e6:93:98:
         31:e0:08:75:35:74:25:1f:83:f4:13:c1:b5:55:92:ca:e5:80:
         bb:49:29:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 01:53:54 2025 by rpki-client