Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft
File:                     ygLFxDwA8U6FtbB1me3SZ8WitNI.mft (raw, json)
Hash identifier:          IZ72wuj4ehgzjuzga8hAqOOgxSSgEkhELwcpZDWRCpg=
Subject key identifier:   B6:3C:75:AF:A6:5E:0C:2E:DC:0E:04:CD:20:98:53:55:E1:EE:34:9D
Authority key identifier: CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
Certificate issuer:       /CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Certificate serial:       6C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft
Manifest number:          0821
Signing time:             Sat 29 Mar 2025 07:52:23 +0000
Manifest this update:     Sat 29 Mar 2025 07:52:23 +0000
Manifest next update:     Sun 13 Apr 2025 07:52:23 +0000
Files and hashes:         1: -FBCZU4jMyJlpFLTJmwIdrpwkCI.roa (hash: ve+ZgocBtp33QML0oEqSj/wnluK9I6cgc/oFyG8eNXs=)
                          2: AWMfoI_1ZMlQELV0bjiiN7bjqHY.roa (hash: 0d337jeiSwaBmV8W4L4t7A5BXcMFK7sYi/HJIABg1co=)
                          3: D9yusi-jfjSa0I2SDoKZG3xJxcc.roa (hash: H/ykZLjgrpoOz9p9vzug67FDUdGVoi3nwRPBS6vSsLU=)
                          4: tmWCknOkvqWyRp5cS88mQkBs5uo.roa (hash: 9UaWN8UV4cYimlcOamNF/tPZNK0ej5KrV2//4GMi1jA=)
                          5: tta9Xis0-x9F_ILFwznn8wQj3Zo.roa (hash: Rn7HDadXsYF/FNGSCOwRt9yrh+qqIYi7ofd8pQpZNnw=)
                          6: ygLFxDwA8U6FtbB1me3SZ8WitNI.crl (hash: a0PPaLzEl8SMmEX89NDWO+zCNy/vj1QZ/Pd1lyJiCuM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
        Validity
            Not Before: Mar 15 01:34:21 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=B63C75AFA65E0C2EDC0E04CD20985355E1EE349D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cf:98:f2:00:37:59:b2:b2:f3:89:59:0b:91:
                    dc:70:f2:57:71:f1:f1:f0:6f:88:01:5e:91:90:43:
                    c8:91:42:cf:6a:c8:6b:9a:cc:a1:68:0a:1e:93:10:
                    71:bb:50:f6:35:3c:fb:1c:00:6f:c5:ea:cf:cd:65:
                    14:8e:d6:61:da:78:19:cf:17:65:e2:83:ed:15:78:
                    28:1c:0f:cc:52:9d:40:5d:00:15:ed:a1:35:d0:ac:
                    c2:f7:bf:82:c3:88:3d:ed:ae:42:76:f7:3a:7a:3f:
                    91:a7:02:2c:6f:d3:c8:09:a9:18:0e:b8:71:b8:44:
                    4e:6b:15:43:05:3e:41:04:18:ae:aa:e4:2a:25:6e:
                    90:e2:8e:3e:44:20:96:7a:b2:7a:5e:d8:88:c6:88:
                    62:c4:bd:cb:4d:c9:97:06:5d:f8:d3:ff:62:44:3c:
                    b8:63:56:0d:ae:3e:90:2a:44:7a:8a:83:c5:0c:f1:
                    ae:d2:e7:b7:78:f5:a5:56:a5:b9:02:30:47:bb:15:
                    fc:f9:25:3b:7d:bd:23:e4:6e:23:e6:e3:36:a2:4e:
                    1f:f4:04:3a:24:5b:ae:ee:1c:79:bf:0b:52:a7:84:
                    40:60:b2:cb:80:5e:9f:98:a3:12:57:de:cc:fe:84:
                    b6:5e:f3:40:f7:b9:9c:1d:84:48:cc:cf:68:a5:6d:
                    84:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3C:75:AF:A6:5E:0C:2E:DC:0E:04:CD:20:98:53:55:E1:EE:34:9D
            X509v3 Authority Key Identifier:
                keyid:CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:fb:51:71:2f:4e:15:b4:95:e2:6e:0f:65:5c:b8:a7:cc:0c:
         31:bc:f5:53:0f:94:ac:dd:3b:9f:e4:50:2e:b2:91:48:1c:09:
         d4:23:b1:23:cb:b5:3e:a4:94:02:fd:13:7a:f6:51:22:60:1b:
         33:17:c4:50:be:fa:a2:2e:b1:99:4d:1a:d1:ed:3c:cc:c1:21:
         df:a0:94:d3:3a:58:a3:90:34:be:27:90:6f:7c:a4:a5:ec:a0:
         0c:6b:78:95:f9:dd:a2:2b:a2:29:9f:b2:08:cd:3f:db:65:40:
         b0:d2:ac:20:ae:42:c0:b9:8f:7b:43:fe:1a:39:0c:e9:f0:1d:
         5d:ef:1a:bb:c1:0e:9b:0f:0f:ff:c9:ae:12:ab:c5:9b:97:fa:
         24:bf:9c:db:e2:8e:7f:71:a4:d4:a7:65:d1:69:e0:37:ce:b2:
         cd:d8:7f:f1:22:4e:18:af:e4:bb:98:a4:f8:ff:af:9b:6b:02:
         0d:97:43:c8:a4:88:82:ce:c2:26:33:71:ad:65:16:5a:c5:81:
         09:62:bf:e7:3c:03:9e:e0:0c:da:72:eb:d6:9b:8b:d9:9f:73:
         34:c8:b9:cb:58:4e:d6:1f:30:cb:54:26:a2:68:6c:0f:e4:19:
         ab:eb:12:2d:06:25:f8:b5:cb:b1:6b:45:1b:60:16:00:cb:b4:
         48:27:53:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:53 2025 by rpki-client