Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
File:                     WQqCKI0uI9v6h2OPPri5leGJfpU.mft (raw, json)
Hash identifier:          tyDCB7RWa8WE+240KEI7jkgQfnyw8ROGeTA55iVE5Mo=
Subject key identifier:   99:C1:9B:C4:1F:7D:05:2D:7F:14:93:10:8F:FD:76:83:01:EF:D6:EC
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       59
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
Manifest number:          A7
Signing time:             Thu 30 May 2024 01:40:03 +0000
Manifest this update:     Thu 30 May 2024 01:40:03 +0000
Manifest next update:     Sun 09 Jun 2024 01:40:03 +0000
Files and hashes:         1: 1v8AiabhT58YE883oU5_vTDerE4.roa (hash: UszIPX3OIoOzpwxetxfLyl/Y0e7YRaF8TExRtZe8ySw=)
                          2: 2OFhl-I7JoY9zWj6Mk-l-nSTuuE.roa (hash: i8m+/JICuiu4sQoGK7ufLXh+zmSrfAg/v7FLeWgsWyk=)
                          3: 5WPbWceAjzKFNWVU3oThBE7vfmQ.roa (hash: TMsDfzK017Qjf1MFLSy3Hv+DEd1bkpeX8/xiJXjGCsY=)
                          4: 5q7hPE3WfJOrnKHwbMXriGHQqjs.roa (hash: dqia9daPu4Misqd/ZNGTMxOSLt1xGJHCBe1xWo0kHZw=)
                          5: 71BSBvwEO_TpkW94YiRInLHHgXM.roa (hash: xdMo3pE9z5Mh27GMt32vmqP6X/feIp30qlSoszl2L7Q=)
                          6: 8xA5YSRXug2e_l5zQF7xI-OI8tg.roa (hash: 5mUKdC/3eBCaIGgs0ME/NKYiKu6Hsj3o6b2yu0vNosQ=)
                          7: CX-tgj9DwuaYJQle-Zx9eV4Wc_A.roa (hash: 26ShL7y255NOGQ2btAymvI2yrPqeza/8+3Y4FxUm+lY=)
                          8: Chz-7_Z3lKDiVPYjAZrNVpy9occ.roa (hash: 48tNuZTamCKbxmi/zgdBIyfpkaSph/y36e8GJAZ0rMs=)
                          9: F633qZOZ3R9tGXThopRZK6IfF44.roa (hash: B7LkeMvFDSQdj9jQ5iObKsISAn9KM6z1bFxzFfUmtG8=)
                          10: GRDoMXLIS3qmX1Wlc-hyBNp9FoM.roa (hash: U8yVPYS1JrpTlGp0lKwjtnrBGqfRSRvJ4qZoh6xallw=)
                          11: HF1QDG9lT2sDq7ONtJ7E7MfhqL4.roa (hash: veCeRtKySDA4m5W73fAf0qFrIFewIZWr21/o9ti25rw=)
                          12: WQqCKI0uI9v6h2OPPri5leGJfpU.crl (hash: Sv4gbkLqwv+XXF5UZvyy+7DxAYo8mAjLVfiC284rmvg=)
                          13: a-tgiuPQ4_jqwd-1Udq4R3yvR60.roa (hash: 8OB9QW54ElhP+dLi9eIDLU37uxxM5zhO/3VJp3GaEhs=)
                          14: ee22KQ_aqwA5LZKGrylwmT1NWJU.roa (hash: oOtd0s/qljdIQGY56uRRPuzsjwKspEOW874FONyOBkM=)
                          15: nenaMVFv9tjI1XTKrhyDTR_PJUo.roa (hash: hPGosjwYXfOD9XE0LDwLshv3Dz3pMl+dbOSM8d4Xg78=)
                          16: puopXBzdORKOm1OUiBG9GRNOpVM.roa (hash: foyVy/Ywa5OIhKH8GjFcClfQQf8JTO3Rbzsh7/eyxDM=)
                          17: q1fLqpxg1j6-yxlOqrtWsC0VG70.roa (hash: Q6dxoJIelFPG9IYe53KvFnbcvApbYkkD4ev0XfegB+w=)
                          18: qvpHhUZM3kUxRHAXI4DLnTfxVu8.roa (hash: xSmxxv8rJoPghtjQ7HNuGOMwkstEC/hHYmcqNCakkPo=)
                          19: uHRnr4uGsLtGOcYce2LrovaakCY.roa (hash: tTGucAXpDOqSGFCveYBScwXVh4Uu5+vTha8IyqEyxBI=)
                          20: vus28DXj3t4QrSPYQXuQlcCmfdQ.roa (hash: f+WUdD2qOYuI/OTyWTo0ZcZSBkEjc9zsguOd92dUpBU=)
                          21: wcuU3nW2zQRaXzhzdZazrnpRzDk.roa (hash: ivP0EDZMSkpO1i2XYtRU1YNUq0WgnP9xTy8l+gUPz9Y=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: May 15 01:34:22 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=99C19BC41F7D052D7F1493108FFD768301EFD6EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:52:c2:8d:44:e9:c9:f7:95:31:53:3b:ec:91:
                    a7:40:41:c7:40:6f:08:68:e1:6a:8d:46:88:3e:86:
                    45:5d:95:5a:63:4b:98:73:bd:a0:8d:97:c3:1b:b0:
                    a3:7f:05:1d:7f:91:48:5a:54:6e:0b:33:7e:a5:ff:
                    22:27:85:3d:ca:5c:e1:3e:33:78:16:a8:b4:1c:cc:
                    16:8c:f7:42:04:03:75:04:e4:8d:df:bb:03:78:ca:
                    b5:57:2b:1b:85:bb:4d:6e:eb:17:88:6d:eb:25:d2:
                    19:66:30:6a:50:3b:ae:9c:b1:03:36:a9:7a:11:da:
                    53:3a:de:b3:f1:1a:30:c3:14:7a:42:79:71:2c:55:
                    2b:b9:9c:b2:c8:69:99:05:d0:58:37:69:f7:7b:eb:
                    b4:2f:99:d6:75:4b:67:ea:a5:2b:ce:04:0a:89:cb:
                    9b:f2:77:db:8e:50:b1:7c:57:19:00:b3:59:ec:9f:
                    36:a3:6b:b8:63:1e:d3:8f:b4:34:59:74:a4:38:41:
                    47:8f:4e:07:95:a9:09:e4:86:16:3d:06:34:ed:f3:
                    58:76:1d:e7:fb:12:0b:c1:a2:06:86:0a:87:e0:91:
                    ac:0f:64:43:10:3b:f8:96:8d:7b:f0:30:2c:76:93:
                    85:cb:30:7a:e4:36:e6:91:2f:60:bd:5c:37:88:bb:
                    07:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C1:9B:C4:1F:7D:05:2D:7F:14:93:10:8F:FD:76:83:01:EF:D6:EC
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:df:74:5c:b9:5e:83:b2:76:d4:d1:16:c3:e2:bc:2a:fa:90:
         6c:b6:ea:dd:6b:02:64:a7:ff:23:b7:dc:7d:c6:cf:5e:52:32:
         91:0d:11:46:eb:a9:e7:70:f1:81:f9:1f:4e:c4:56:db:48:65:
         d6:e9:5b:62:7d:76:b8:3e:ed:ea:7c:bf:40:6d:f0:4a:89:ea:
         76:7d:4a:0c:98:47:0c:39:a4:84:eb:e3:72:81:21:d3:20:07:
         db:2f:8f:44:7a:3a:fb:60:1d:0a:b5:04:41:fc:92:73:7f:86:
         1a:8c:4f:38:d3:d4:ae:cc:97:d6:09:1d:f2:b7:9e:82:43:dd:
         b6:1d:59:0f:18:41:19:1c:0e:bb:15:5d:f2:f7:e9:bd:ef:3c:
         ff:d9:cd:5a:eb:f5:73:f2:36:8f:10:e4:41:6c:ee:9c:95:77:
         67:12:fd:04:92:45:15:d3:3c:9a:16:18:40:33:46:f6:e6:62:
         5b:7a:51:91:46:b4:b9:03:28:57:4b:c8:32:4d:7f:0d:65:4a:
         50:c8:c6:3f:60:40:37:53:bd:ce:ee:8a:21:d4:05:51:8f:e1:
         2d:fd:73:37:c4:e2:72:03:3e:2e:bd:39:35:bd:99:6e:95:af:
         3a:cb:1e:5e:84:ec:ab:15:69:47:3b:6c:1a:0d:8e:61:6a:19:
         a9:be:3b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----