Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RUIKE/U5BuLi7-dJHbGbHCCeoXjDmg2uU.mft
File:                     U5BuLi7-dJHbGbHCCeoXjDmg2uU.mft (raw, json)
Hash identifier:          bNJLx+rHbZbBRsiAINh+YZAtIiUJawgFvk7FnJ2jxjU=
Subject key identifier:   8B:CF:9A:17:20:F5:F3:38:5D:2E:74:23:1D:E4:57:15:25:E4:C7:45
Authority key identifier: 53:90:6E:2E:2E:FE:74:91:DB:19:B1:C2:09:EA:17:8C:39:A0:DA:E5
Certificate issuer:       /CN=53906E2E2EFE7491DB19B1C209EA178C39A0DAE5
Certificate serial:       050D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/U5BuLi7-dJHbGbHCCeoXjDmg2uU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/U5BuLi7-dJHbGbHCCeoXjDmg2uU.mft
Manifest number:          050D
Signing time:             Mon 02 Mar 2026 08:23:00 +0000
Manifest this update:     Mon 02 Mar 2026 08:23:00 +0000
Manifest next update:     Mon 02 Mar 2026 14:23:00 +0000
Files and hashes:         1: U5BuLi7-dJHbGbHCCeoXjDmg2uU.crl (hash: F4cHtcgDGsTI8d11NYFRGs5QC3DL95F5yraGzC+VyCk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1293 (0x50d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53906E2E2EFE7491DB19B1C209EA178C39A0DAE5
        Validity
            Not Before: Mar  2 08:23:00 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=8BCF9A1720F5F3385D2E74231DE4571525E4C745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1c:a5:3f:4b:26:51:f8:59:a2:01:cc:24:7a:
                    56:fe:69:eb:2d:0e:e9:54:ee:fc:bb:3a:c4:0a:9c:
                    5a:da:2c:8a:ac:6d:2b:48:9f:68:5f:9a:0b:9f:50:
                    7e:d5:a1:86:e2:a8:c1:d4:2d:4c:19:5d:09:04:bf:
                    4d:e8:bf:6d:0a:73:6b:68:52:e8:6f:16:de:39:35:
                    43:b1:10:97:de:d8:cb:b8:f0:83:d4:d0:20:42:37:
                    3b:3b:5d:dd:36:0e:73:6f:44:cf:36:22:a9:45:c2:
                    51:7d:d9:2a:74:a1:4a:b1:2c:05:0d:96:e1:0b:ae:
                    3c:58:6d:e9:35:80:99:53:1c:61:4c:92:84:53:84:
                    59:2c:36:bb:b6:32:6f:a6:cb:e7:40:e5:2c:4d:9b:
                    21:1d:e9:78:14:0b:bf:f8:b0:c4:07:a3:5e:7a:73:
                    60:84:d4:c2:bd:08:41:da:fe:ad:4e:44:59:9b:f5:
                    ec:b9:5b:21:01:e7:9b:9b:1b:d7:9d:22:3c:c9:1e:
                    87:a6:d0:02:3a:91:23:b4:94:4e:11:43:b0:5f:d3:
                    c3:a0:c2:e5:db:22:2e:60:bc:19:2e:08:94:25:94:
                    6b:ff:78:2f:2f:9b:2a:24:99:54:da:76:71:70:26:
                    8d:5c:07:3a:8b:fa:34:61:44:7e:8d:0f:92:c6:d3:
                    fd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CF:9A:17:20:F5:F3:38:5D:2E:74:23:1D:E4:57:15:25:E4:C7:45
            X509v3 Authority Key Identifier:
                keyid:53:90:6E:2E:2E:FE:74:91:DB:19:B1:C2:09:EA:17:8C:39:A0:DA:E5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/U5BuLi7-dJHbGbHCCeoXjDmg2uU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/U5BuLi7-dJHbGbHCCeoXjDmg2uU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/U5BuLi7-dJHbGbHCCeoXjDmg2uU.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:0b:fa:08:d5:91:a8:24:1e:61:3c:69:ff:95:65:70:f4:47:
         79:67:50:c9:8f:c4:2a:47:29:37:c9:ae:d6:5e:64:9e:14:92:
         b8:b9:3b:c6:93:4f:82:e8:58:bb:13:a2:f3:5e:aa:b1:c9:73:
         64:e3:4a:a5:ed:39:43:d4:90:ea:ba:81:65:52:0f:79:ef:5f:
         db:54:f5:24:cb:8a:73:85:1b:a3:cc:43:75:3d:29:f5:e3:fa:
         e2:c1:14:4b:2b:62:3f:df:3d:5e:85:57:e7:7b:8b:75:c2:98:
         9d:a1:c9:10:0c:38:dc:61:87:2d:c1:03:7a:64:16:8b:39:fe:
         8d:8c:e6:cc:c4:0d:43:1b:42:a1:fa:95:8a:e6:4b:67:95:b3:
         27:26:7a:6c:48:6f:5c:a1:4e:3f:49:be:5f:3a:b3:cb:83:15:
         ff:92:80:af:66:aa:44:5e:f5:21:3a:25:2c:32:dd:82:92:c4:
         53:24:5f:43:2b:b4:be:4b:49:3a:94:1b:c5:6d:f1:d7:e4:16:
         45:29:4f:a8:de:cc:40:32:f6:41:d2:f3:db:c5:ce:ea:f1:5f:
         2d:70:c8:31:f3:61:a4:30:55:15:e8:4a:fc:08:73:8b:a7:07:
         0d:ad:ca:ad:2e:45:eb:6d:82:83:08:0c:d6:92:a0:ec:b5:47:
         27:40:d4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:35:24 2026 by rpki-client