Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.mft
File:                     YYky9kHWUNyGDXQRrIrrbDXInQQ.mft (raw, json)
Hash identifier:          pFVT3f4HtSHmqtJZWrqkUo81pzjA8GniBK0nCMLIPTA=
Subject key identifier:   1B:A9:38:8E:36:54:C7:35:F2:70:8E:C6:9C:42:54:BC:5B:00:D0:C8
Authority key identifier: 61:89:32:F6:41:D6:50:DC:86:0D:74:11:AC:8A:EB:6C:35:C8:9D:04
Certificate issuer:       /CN=618932F641D650DC860D7411AC8AEB6C35C89D04
Certificate serial:       05
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YYky9kHWUNyGDXQRrIrrbDXInQQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.mft
Manifest number:          0C
Signing time:             Thu 06 Jun 2024 13:37:50 +0000
Manifest this update:     Thu 06 Jun 2024 13:37:50 +0000
Manifest next update:     Sun 16 Jun 2024 13:37:50 +0000
Files and hashes:         1: YYky9kHWUNyGDXQRrIrrbDXInQQ.crl (hash: 0cM3BxSbazkTCN3svjZMbAe8EqEJ5Ak4Ba7bgTGXFVM=)
                          2: zrA_fzWTKrm51h9vXEA3EvmP_cg.roa (hash: t4FetL69/qvzOlxlhvvr5mhOxleM4gIhWekW+/jxnIA=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YYky9kHWUNyGDXQRrIrrbDXInQQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618932F641D650DC860D7411AC8AEB6C35C89D04
        Validity
            Not Before: May 15 01:30:25 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=1BA9388E3654C735F2708EC69C4254BC5B00D0C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c4:be:32:d8:29:13:8a:10:dd:a1:9e:38:dc:
                    d3:7d:4e:c9:2a:30:a2:c0:ea:49:9f:71:85:ee:bd:
                    d2:f0:aa:27:8c:83:79:b1:0d:9a:cd:7d:a2:ba:5f:
                    31:b9:e9:12:e4:8c:6f:14:b0:cd:76:91:a5:f9:fc:
                    7e:bc:da:85:46:44:ae:e3:80:be:c6:a6:66:29:19:
                    98:41:ae:49:52:6d:2c:60:08:3d:5a:0c:38:a3:96:
                    03:9c:1d:6d:2f:f8:68:6b:99:ee:a1:3f:ed:bc:f3:
                    5a:5c:fd:1a:75:b3:7e:9b:ee:f5:fb:db:5f:97:70:
                    1a:96:fc:7d:b7:ad:d2:9b:e1:0b:82:10:cf:1e:b8:
                    96:28:6c:fc:ce:93:75:fa:ba:b6:d2:9b:b4:dc:c5:
                    0e:4c:db:fb:2e:49:19:c3:82:87:01:ae:4d:0b:58:
                    27:55:bb:26:9a:55:2c:fc:9f:68:28:22:97:36:c3:
                    1d:b2:12:37:f5:59:24:28:d7:a2:3d:54:58:cd:16:
                    58:df:85:83:13:52:0a:9e:c1:be:20:51:f1:50:6a:
                    bf:88:42:4f:c4:be:b3:94:40:96:6b:a0:64:e4:e5:
                    91:cf:ad:67:5c:3e:5c:37:4c:98:61:1e:fe:22:6d:
                    a8:b2:fc:14:36:b2:3e:d2:38:c6:8a:be:be:92:13:
                    b7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A9:38:8E:36:54:C7:35:F2:70:8E:C6:9C:42:54:BC:5B:00:D0:C8
            X509v3 Authority Key Identifier:
                keyid:61:89:32:F6:41:D6:50:DC:86:0D:74:11:AC:8A:EB:6C:35:C8:9D:04

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YYky9kHWUNyGDXQRrIrrbDXInQQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:73:c3:74:6b:f4:03:cd:82:3b:e1:73:0f:b5:32:bf:54:3a:
         da:0d:6b:09:7e:3f:7d:0b:75:98:27:7f:d6:ed:dc:fa:03:3a:
         84:ca:59:39:74:8b:d0:f5:3c:43:26:73:e1:61:87:fa:04:3f:
         a5:b8:f0:72:47:a6:78:46:df:d9:ac:7f:b1:69:07:fa:7d:a6:
         a4:76:d3:f2:73:ab:20:0b:93:7b:8a:da:45:64:77:ea:7d:16:
         7a:0d:c1:bd:ba:42:4b:82:7e:9b:96:b5:cb:03:16:bb:7d:fb:
         ac:a6:fb:e2:bc:5c:b1:69:b5:84:38:84:92:64:b4:87:47:03:
         19:47:34:81:24:93:60:51:c9:29:ce:ed:4d:b7:94:65:07:cb:
         86:a5:07:a0:25:1f:19:6a:47:19:f6:d7:d9:00:0b:83:64:8f:
         9c:8e:9f:2e:68:5c:3b:f4:f1:54:a5:1b:77:f5:b6:fd:ca:e4:
         95:63:ab:d7:04:1f:26:30:91:10:f1:59:cb:a4:d2:7d:24:be:
         7e:49:17:14:e0:39:25:ac:8d:33:02:e6:18:27:6c:3a:ce:ee:
         e6:61:e2:70:15:2e:18:d0:b0:95:f4:a4:73:3e:23:f3:36:32:
         8f:f2:36:ab:5b:28:2d:a3:1c:87:ef:20:d8:65:19:5a:e1:bd:
         5e:56:28:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:34 2024 by rpki-client on console-ams.rpki-client.org