Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30320/BBtmBwjGjZdwQYqBch_wdx8KShk.mft
File:                     BBtmBwjGjZdwQYqBch_wdx8KShk.mft (raw, json)
Hash identifier:          T9BaFvybKpeCojnle7TqukQGPa22UHxf4PMJFXdSJnc=
Subject key identifier:   5E:BE:4B:D0:EB:A6:4B:75:DA:A1:62:A6:DC:40:EE:D8:37:5B:40:7D
Authority key identifier: 04:1B:66:07:08:C6:8D:97:70:41:8A:81:72:1F:F0:77:1F:0A:4A:19
Certificate issuer:       /CN=041B660708C68D9770418A81721FF0771F0A4A19
Certificate serial:       23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BBtmBwjGjZdwQYqBch_wdx8KShk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30320/BBtmBwjGjZdwQYqBch_wdx8KShk.mft
Manifest number:          81
Signing time:             Thu 06 Jun 2024 13:43:33 +0000
Manifest this update:     Thu 06 Jun 2024 13:43:33 +0000
Manifest next update:     Sun 16 Jun 2024 13:43:33 +0000
Files and hashes:         1: 1yNpGU2nuaPMA7_O7H8BlqY2MFM.roa (hash: VLk+J8exH2P5VQyhyBVUyv/GQwtqV90JquWWlx2pvwM=)
                          2: BBtmBwjGjZdwQYqBch_wdx8KShk.crl (hash: FRKa2KTvqv+AJUhGJ+sObdFY56iqUPnMSs2GFT/143Y=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30320/BBtmBwjGjZdwQYqBch_wdx8KShk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30320/BBtmBwjGjZdwQYqBch_wdx8KShk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BBtmBwjGjZdwQYqBch_wdx8KShk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041B660708C68D9770418A81721FF0771F0A4A19
        Validity
            Not Before: May 15 01:34:48 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=5EBE4BD0EBA64B75DAA162A6DC40EED8375B407D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2d:7c:cf:29:3b:00:3f:2f:4f:88:44:28:3d:
                    7b:6a:d1:51:56:04:58:87:e5:f0:3d:1b:e5:3d:c1:
                    83:1e:bc:4d:c3:e4:48:ca:f3:d8:3d:95:6e:9c:cf:
                    31:84:19:90:2e:a1:60:90:b7:ee:f5:18:f5:f1:fa:
                    ae:db:a3:bb:a3:92:92:5b:94:dc:84:09:1a:aa:a1:
                    d9:c6:c8:a1:1b:43:0e:09:80:9f:ca:13:ff:fb:72:
                    da:ee:f6:5b:b2:f2:6c:b9:e9:a0:67:38:76:30:84:
                    be:38:04:c5:3a:46:86:52:98:7c:1b:8d:41:73:e4:
                    7c:c9:c6:df:dc:ec:03:0b:9c:62:70:54:56:9b:8b:
                    c0:39:d8:9d:ac:33:64:7f:93:f7:06:44:22:19:29:
                    31:f4:2f:4a:3a:2c:a5:5c:20:bb:6c:9c:c8:74:a4:
                    76:59:42:d8:65:ff:45:b6:e3:bf:16:2b:79:95:f9:
                    1d:cb:35:44:50:b5:fb:6e:17:68:7b:65:44:1f:f7:
                    46:02:69:24:c5:e9:0f:09:c4:e2:a1:d4:f9:a0:29:
                    c1:5a:53:6e:40:bc:93:3c:3c:32:14:96:9d:90:cc:
                    b4:ac:d4:96:0f:30:5a:95:70:7f:13:6a:f2:79:3e:
                    d3:b6:8c:09:da:22:dc:45:ea:d3:52:7f:6a:76:94:
                    54:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:BE:4B:D0:EB:A6:4B:75:DA:A1:62:A6:DC:40:EE:D8:37:5B:40:7D
            X509v3 Authority Key Identifier:
                keyid:04:1B:66:07:08:C6:8D:97:70:41:8A:81:72:1F:F0:77:1F:0A:4A:19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30320/BBtmBwjGjZdwQYqBch_wdx8KShk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BBtmBwjGjZdwQYqBch_wdx8KShk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30320/BBtmBwjGjZdwQYqBch_wdx8KShk.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:a3:53:22:ad:49:15:18:06:b5:88:57:bf:bc:28:58:78:73:
         1c:cd:07:4a:87:35:7f:c6:4a:7e:cb:ed:ba:99:bf:e8:d4:75:
         fd:43:84:36:0d:9d:ed:dd:f8:9f:59:26:20:02:f4:e6:07:28:
         d3:62:d4:65:7d:52:a9:cc:d6:3f:a7:6d:05:bf:1a:b9:1f:42:
         83:ca:2b:60:fb:b1:b8:9f:5f:04:d1:7f:2a:c7:9e:71:77:a7:
         bf:1c:e6:73:34:b6:38:3c:a7:e7:15:36:e8:a9:8f:63:e5:b1:
         58:cd:fe:1d:af:65:7f:16:08:bb:72:14:33:05:ef:dd:89:1b:
         f4:e9:bb:ee:d0:91:b9:d6:6a:a7:84:57:86:05:d2:63:8a:ae:
         4f:3b:42:25:8e:42:cc:1f:2f:ad:fe:ff:5a:76:39:4f:0b:d0:
         c4:f2:51:57:8a:9c:67:49:00:f5:d1:f0:0d:95:64:8d:6f:d0:
         dc:40:f1:bd:2b:14:d8:93:7b:24:32:3f:5f:1e:dc:01:6f:06:
         b6:5d:f5:f8:de:3d:07:1f:37:f2:3b:82:70:d2:22:6c:8c:a4:
         d8:60:b6:ea:df:4f:59:ec:95:d2:4b:5b:b1:f6:ff:8f:41:77:
         f8:06:0b:2c:df:0e:14:eb:2c:45:3e:7a:72:88:c6:78:1d:c1:
         a9:81:a4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:16 2024 by rpki-client on console-fra.rpki-client.org