Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30434/t_9hqjZ4v78X8OeMCZKE5xC9sec.mft
File:                     t_9hqjZ4v78X8OeMCZKE5xC9sec.mft (raw, json)
Hash identifier:          GG+oi+WpMkevyeOe6simED9vpx9ESC5IMot8C2IIyWE=
Subject key identifier:   09:EF:83:8B:43:3C:B4:C3:94:0E:1D:64:BF:EA:EC:69:48:E7:1D:2E
Authority key identifier: B7:FF:61:AA:36:78:BF:BF:17:F0:E7:8C:09:92:84:E7:10:BD:B1:E7
Certificate issuer:       /CN=B7FF61AA3678BFBF17F0E78C099284E710BDB1E7
Certificate serial:       03
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t_9hqjZ4v78X8OeMCZKE5xC9sec.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30434/t_9hqjZ4v78X8OeMCZKE5xC9sec.mft
Manifest number:          06
Signing time:             Thu 30 May 2024 01:34:40 +0000
Manifest this update:     Thu 30 May 2024 01:34:40 +0000
Manifest next update:     Sun 09 Jun 2024 01:34:40 +0000
Files and hashes:         1: t_9hqjZ4v78X8OeMCZKE5xC9sec.crl (hash: fFsWmTH6YeGaV5PYwpD2QDwf+XzIZNDfCA12RbnO9MU=)
                          2: wbKBzDqc7brXP4TVsVxOyB4Z7CU.roa (hash: jBpk4mHTjAvGqz3D4WGPh/Bqs4aYfOscUAiOTzZ8zZ8=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30434/t_9hqjZ4v78X8OeMCZKE5xC9sec.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30434/t_9hqjZ4v78X8OeMCZKE5xC9sec.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t_9hqjZ4v78X8OeMCZKE5xC9sec.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7FF61AA3678BFBF17F0E78C099284E710BDB1E7
        Validity
            Not Before: May 15 01:30:55 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=09EF838B433CB4C3940E1D64BFEAEC6948E71D2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:00:7c:6c:6e:45:67:12:1b:47:3f:42:c9:ba:
                    f4:88:b4:4e:c9:54:16:13:13:83:59:3f:39:f4:ec:
                    8d:e9:a6:02:6d:57:4e:43:b9:34:0e:30:36:52:75:
                    a7:d8:9b:13:cf:90:ae:58:af:a2:b9:61:23:c6:0b:
                    2b:9a:58:c7:7b:ca:84:fc:f0:b4:55:05:5f:2c:15:
                    a2:e1:e3:a2:9a:66:4f:23:76:ad:42:fe:ec:7c:17:
                    7d:bc:0a:1b:d1:37:af:9e:c9:e2:b0:4a:7e:ca:80:
                    44:5c:97:57:2a:f9:d6:3e:c8:db:da:7f:61:b7:6b:
                    d4:48:26:cc:6e:8d:59:c7:d8:1c:88:56:cd:87:01:
                    32:71:20:b9:b4:02:73:88:66:fe:7b:29:57:91:48:
                    94:c9:04:37:56:d5:a9:01:86:48:d4:aa:db:78:4e:
                    80:f9:a0:0b:82:c9:f7:c3:b5:74:62:97:a1:8f:12:
                    6b:97:ce:35:73:60:35:d1:8e:98:11:69:e1:cf:87:
                    ed:d6:57:db:4d:cf:31:4f:77:62:1f:24:60:cd:cd:
                    bd:c3:54:d0:55:36:68:80:fb:37:69:f8:26:0f:2b:
                    03:c2:e5:94:37:75:c0:40:01:c4:9c:2c:d7:dd:48:
                    5c:0f:90:b9:e6:8a:44:e9:25:d6:91:41:54:5e:a9:
                    44:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:EF:83:8B:43:3C:B4:C3:94:0E:1D:64:BF:EA:EC:69:48:E7:1D:2E
            X509v3 Authority Key Identifier:
                keyid:B7:FF:61:AA:36:78:BF:BF:17:F0:E7:8C:09:92:84:E7:10:BD:B1:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30434/t_9hqjZ4v78X8OeMCZKE5xC9sec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t_9hqjZ4v78X8OeMCZKE5xC9sec.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30434/t_9hqjZ4v78X8OeMCZKE5xC9sec.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:46:bd:b1:b8:2e:e6:a8:bb:7c:83:6f:10:10:61:ed:29:46:
         1c:79:7e:39:3e:86:d4:7e:8e:23:bd:cd:75:ed:71:21:e0:c7:
         a1:fe:b6:ba:b2:d9:36:2d:39:ec:e0:da:bb:3f:3a:9c:f5:3b:
         71:33:e5:f2:30:b4:ef:39:87:a7:d8:51:8a:35:98:13:9b:66:
         be:ea:29:c5:ff:44:6d:cd:b7:9f:d7:5e:c4:b5:f7:3f:be:01:
         53:34:50:60:4d:f5:ce:38:a0:06:9c:3e:b1:bc:f8:c2:bd:1f:
         af:a2:81:f1:cf:7a:19:23:60:9e:dc:46:05:47:80:f8:cf:08:
         6f:39:2f:45:0c:0a:62:2e:69:61:87:9d:c6:17:a6:f6:55:12:
         69:83:cc:82:fa:a7:98:ce:db:ad:58:03:93:c6:d6:38:4d:cf:
         4b:18:e6:79:da:23:15:b6:2b:44:fc:a7:be:41:ef:af:b8:76:
         d4:23:93:c6:32:9a:85:31:69:72:39:d6:31:b5:c3:34:e9:4b:
         8d:1f:67:d6:95:7a:34:cd:3b:d8:b8:7e:c6:19:b0:a6:1e:e7:
         00:fb:84:35:1a:a6:e0:45:a3:81:59:4e:26:d2:14:8b:51:2b:
         c5:56:7d:b7:8d:7d:57:c1:3c:31:74:e2:68:a0:3b:72:94:7d:
         f0:79:2c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:08:53 2024 by rpki-client on console-fra.rpki-client.org