Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.mft
File:                     cvirukq09lCyxpuoxspe0i3-NU8.mft (raw, json)
Hash identifier:          /neLCf9JryPoqUcH9WsTrM9cLfqJzP8Ucu0UI7dID5A=
Subject key identifier:   75:22:0B:FA:11:C6:B1:97:42:12:88:D8:64:19:CE:6C:07:A7:D1:50
Authority key identifier: 72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F
Certificate issuer:       /CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
Certificate serial:       63
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.mft
Manifest number:          043A
Signing time:             Sat 29 Mar 2025 08:02:33 +0000
Manifest this update:     Sat 29 Mar 2025 08:02:33 +0000
Manifest next update:     Sun 13 Apr 2025 08:02:33 +0000
Files and hashes:         1: 3krgxq865Ozatn316bmxY9mN6oA.roa (hash: clKtkDSAosZ/sGUlxRNdueXpXUqQf1MKe/upblcHmcU=)
                          2: B0BZsNE30lclPPe9u3J0BA8PDC4.roa (hash: BSOOd4JenGKv+jUKAHrWTC8KCgtYWyRGSTJ3VBPSgrg=)
                          3: ItkZcH8JcuZCz1k1g4dvr4prYjM.roa (hash: CsNPv1Pj/aBT5VazDeNrB4hICXHo47Y6aoaw97nQSP4=)
                          4: PDqCubrcmaCzoq1bgnEL3i7rKXc.roa (hash: SFUGHgJlmm7WVE7Ydavl7Rgk3AwfqArWwyQWD0nxu5o=)
                          5: cvirukq09lCyxpuoxspe0i3-NU8.crl (hash: OMvFIynin8yc5te7PAPprzect0V9aMAPS0Zf0HV0Zbw=)
                          6: twpSe7aW8MAAUmu1LZG2DLdTFcI.roa (hash: WO6U9WILtZBgT9BMOh9ZxOvRX1wRTDfgt0DS6kBNHNY=)
                          7: vk5iziXywdT1PLo9V8Npzz-uFZw.roa (hash: Xx2AmmIkKMFMtYhCEaICkKKomGcwc+A2BRgQao4XnBo=)
                          8: wAcNaC0Qxub-yOWnZSCP-qPlrcg.roa (hash: QaUXtdh6d5qVD9sW86qLrLHe0fdwjtZSJ0y5OVhuzjs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
        Validity
            Not Before: Mar 15 01:35:15 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=75220BFA11C6B197421288D86419CE6C07A7D150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4d:4d:db:b6:b7:b7:33:a6:a7:f5:d6:3c:b5:
                    53:3b:37:7c:80:82:25:ff:36:49:e1:4d:71:d9:41:
                    5b:da:40:dd:d4:0e:c7:04:5e:f5:2c:b6:14:4a:fc:
                    71:60:2b:9e:91:1e:19:24:df:ee:cb:1d:36:fa:9b:
                    75:66:83:5e:44:f3:69:b2:01:3c:55:71:77:3e:95:
                    ea:b5:09:ec:98:38:b7:55:39:b6:b4:60:46:bc:f0:
                    b9:8b:d1:97:45:25:29:ba:f5:f7:c8:50:cc:a5:5e:
                    33:68:6a:54:f5:55:79:5d:20:e4:74:92:66:fe:b0:
                    63:e9:76:e8:4b:19:34:59:59:58:3f:71:7d:84:65:
                    57:c0:03:06:08:38:7c:df:a9:33:e5:62:b1:4e:2b:
                    f3:38:d4:f2:13:f9:51:bd:de:0a:58:97:86:c3:c4:
                    91:cd:d4:72:9a:5a:6b:88:05:d5:2b:ce:ea:cf:c6:
                    d9:33:6b:9a:db:ad:51:4c:a4:24:91:08:d2:35:9c:
                    97:ad:b6:b4:91:d0:f5:ac:ca:f8:29:74:ea:99:cb:
                    5d:c6:9f:b1:1c:7c:e9:84:3b:ff:79:2c:fa:d3:7d:
                    dd:11:d3:8e:30:23:92:e8:cb:d8:85:1c:d0:56:df:
                    33:84:9e:dc:35:40:61:54:94:6a:70:31:0c:c3:5a:
                    9b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:22:0B:FA:11:C6:B1:97:42:12:88:D8:64:19:CE:6C:07:A7:D1:50
            X509v3 Authority Key Identifier:
                keyid:72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:e3:9b:6d:a4:2b:36:0d:07:62:c3:ae:83:37:4f:cc:51:3b:
         7e:b6:37:56:23:33:3e:a9:0a:41:08:3b:85:9e:8b:9c:bd:29:
         1c:66:11:8b:32:83:9b:ff:32:17:59:7e:1c:94:04:d4:fb:6b:
         a9:9d:4c:9e:7f:21:4c:a1:18:a3:33:65:bb:8c:7a:2d:a7:a3:
         0f:0a:04:9e:3b:60:30:06:61:ec:b8:0a:58:fd:e5:24:05:56:
         41:da:ee:62:e8:84:50:94:77:60:a0:d4:52:68:96:be:80:f3:
         e2:40:7f:ac:42:2a:b9:96:70:cd:83:ee:f8:ab:cb:8e:48:ab:
         3b:0b:5b:cc:bf:d8:35:3f:17:26:66:c4:59:10:55:59:a8:cd:
         58:c8:f3:66:3e:e7:f7:b3:f9:da:a3:23:7e:20:a5:98:e8:80:
         fe:ab:ec:ec:bf:49:a6:28:46:28:4d:0b:c3:7e:d2:b8:c8:c6:
         49:95:eb:1a:89:0d:fa:6b:a2:86:22:5c:53:3a:04:da:06:2b:
         55:65:9e:23:96:a3:38:8e:43:db:9f:6b:bf:1a:53:c7:4d:87:
         cd:bc:a5:24:48:4f:a4:88:7e:53:16:de:cc:04:d4:76:91:fb:
         51:62:38:7c:d3:9e:33:c1:ea:c7:9b:60:6e:1c:77:53:37:46:
         23:1f:5d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:20:05 2025 by rpki-client