Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30293/TtDo6n2ynqrPuqPy7oCkrptfV84.mft
File:                     TtDo6n2ynqrPuqPy7oCkrptfV84.mft (raw, json)
Hash identifier:          E0x6E5kTT4uoeIOQBjVia4/mHUFg5ZfKLkDUxMwJ18Y=
Subject key identifier:   D3:F7:33:7D:E2:66:F8:AE:BA:D2:18:CD:8E:08:7C:EC:69:F9:60:7C
Authority key identifier: 4E:D0:E8:EA:7D:B2:9E:AA:CF:BA:A3:F2:EE:80:A4:AE:9B:5F:57:CE
Certificate issuer:       /CN=4ED0E8EA7DB29EAACFBAA3F2EE80A4AE9B5F57CE
Certificate serial:       40
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TtDo6n2ynqrPuqPy7oCkrptfV84.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30293/TtDo6n2ynqrPuqPy7oCkrptfV84.mft
Manifest number:          0E15
Signing time:             Thu 30 May 2024 01:35:34 +0000
Manifest this update:     Thu 30 May 2024 01:35:34 +0000
Manifest next update:     Sun 09 Jun 2024 01:35:34 +0000
Files and hashes:         1: TtDo6n2ynqrPuqPy7oCkrptfV84.crl (hash: yEziJMDXf6+P4snSAa8WciUfcMNGESfOyd02lbTOCCI=)
                          2: cM6D35DIlQ_hervUnxnIGAETDQ4.roa (hash: 5E308BPqJmhvGkq+2Hlp8jMs9CHNb3iu5OqklS5q+Mc=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30293/TtDo6n2ynqrPuqPy7oCkrptfV84.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30293/TtDo6n2ynqrPuqPy7oCkrptfV84.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TtDo6n2ynqrPuqPy7oCkrptfV84.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ED0E8EA7DB29EAACFBAA3F2EE80A4AE9B5F57CE
        Validity
            Not Before: May 15 01:32:33 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=D3F7337DE266F8AEBAD218CD8E087CEC69F9607C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c4:aa:80:62:df:f3:67:cf:e2:e6:b2:b3:19:
                    6b:f4:4e:23:58:6f:0f:38:d5:09:ec:48:82:2e:67:
                    c5:db:fa:6b:cc:bd:37:f3:18:a5:90:c5:97:90:8c:
                    30:31:27:86:41:db:7b:8c:ae:ce:12:4a:2d:1f:b2:
                    25:d8:19:c2:ed:0b:f3:c6:e4:7b:11:83:9d:51:2c:
                    d6:d0:25:de:cf:56:ef:f1:a6:4b:f5:66:a8:da:1f:
                    05:fd:83:06:98:63:b9:c9:88:c2:aa:3e:76:26:f9:
                    13:47:98:bf:37:f9:e3:3f:9a:d0:3f:e7:1f:87:af:
                    fe:dc:df:c5:1b:27:24:3a:6a:33:a7:c5:d2:9d:e8:
                    ad:f3:bc:f5:ac:e5:bf:84:e1:2a:cc:2c:b8:68:6a:
                    91:2a:9f:b4:fe:48:6b:c7:b0:6b:45:3e:8a:24:fe:
                    bc:3e:5a:d7:65:06:7a:8e:f8:2c:68:44:d2:fe:e7:
                    6a:85:d2:3f:ed:b4:0c:af:80:e7:70:56:d8:c7:11:
                    94:12:c9:39:92:48:0c:31:a7:87:bf:ee:bf:1d:c4:
                    d6:8b:23:01:4a:b4:38:65:c3:23:b0:f7:02:63:08:
                    1d:f6:04:15:a5:2c:93:94:cc:8c:8d:e9:c3:a5:56:
                    c6:c2:19:0c:a6:ec:b4:6f:55:e0:e6:9f:1c:56:16:
                    ee:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F7:33:7D:E2:66:F8:AE:BA:D2:18:CD:8E:08:7C:EC:69:F9:60:7C
            X509v3 Authority Key Identifier:
                keyid:4E:D0:E8:EA:7D:B2:9E:AA:CF:BA:A3:F2:EE:80:A4:AE:9B:5F:57:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30293/TtDo6n2ynqrPuqPy7oCkrptfV84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TtDo6n2ynqrPuqPy7oCkrptfV84.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30293/TtDo6n2ynqrPuqPy7oCkrptfV84.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:52:fe:dd:79:ea:61:99:32:11:47:c3:71:d2:4e:e1:88:af:
         cf:58:b3:73:80:d1:6f:fd:7b:61:4d:0d:b5:25:d7:55:dc:78:
         8a:73:c0:d9:af:cf:20:05:bf:40:4d:88:3c:06:00:70:36:2f:
         5f:ac:8b:55:ee:7e:b6:17:8e:c8:8d:49:a2:47:1e:35:33:3d:
         4d:8b:56:ab:89:2d:9a:30:37:67:af:14:7e:21:da:fd:be:a8:
         6a:0e:84:3a:16:fe:f6:b5:f7:52:82:ca:30:45:e9:50:99:35:
         25:1a:70:d8:9f:53:aa:00:76:a5:02:59:48:b3:39:d3:c8:0d:
         cd:93:e4:da:c5:61:f0:c2:5b:ff:a2:3d:8b:75:71:37:87:fd:
         1a:b9:6f:af:d9:da:82:15:41:4b:8c:63:8b:d5:dc:3e:71:cd:
         75:3c:47:c9:bf:34:65:f7:ed:8e:d8:27:92:3b:62:6a:4d:05:
         a8:ce:30:60:a4:9f:8b:db:be:1d:a2:b4:bc:dd:06:c6:81:6c:
         0a:3a:2b:61:88:b8:0f:e3:f7:05:b4:54:53:a8:17:ef:ac:49:
         e5:4d:fb:03:92:f2:00:b3:c9:5c:02:ec:f6:c6:ad:11:05:26:
         66:0a:5b:a4:12:6a:38:49:75:df:99:ba:75:a9:9c:65:75:2d:
         46:8b:17:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:08:53 2024 by rpki-client on console-fra.rpki-client.org