Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
File:                     szOu2luBprL1T_cUZo-NY-h7haE.mft (raw, json)
Hash identifier:          1CZZ3o44ks8tNfpWIj6FvO/qXc2asM3TeafGCEb9nBs=
Subject key identifier:   F7:7D:A2:57:F5:11:41:0B:9C:5D:D2:AC:20:1E:60:DD:4A:66:52:5C
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Certificate issuer:       /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial:       31
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
Manifest number:          53
Signing time:             Mon 24 Jun 2024 10:53:25 +0000
Manifest this update:     Mon 24 Jun 2024 10:53:25 +0000
Manifest next update:     Thu 04 Jul 2024 10:53:25 +0000
Files and hashes:         1: 2W6juEi2vT3-FTFwxuenguwzu78.roa (hash: nXYUfCCOrY2CFEK/xMmnczlgOJrSTsamk9IzcBR4Dp8=)
                          2: 8ln8PDd27d6HQS5aQEhVcE3LKe4.roa (hash: rIiTlZgPk1Abmi0e6/DGzberkJvXuomiu8+Ny935r8c=)
                          3: AUVEc4j-rb3vysoJBzbvTqhReKU.roa (hash: EQpKQffHK4+YXWL7J1X+IyJSV965MnOuwhe1/hAZAcM=)
                          4: Cb6YjmP-DGn9OZY2QX7fVWULNRs.roa (hash: u5T/LbenPzHYsaVNK5ydBSr92csBg++h4aKT+u2MIqA=)
                          5: DrsXuBBd0Na04OCsLarVq6EFCzE.roa (hash: IzqbpCUCReDNqqG+rNUubGgEyqmPPv7vGdBDGPHOm5w=)
                          6: R7kLWO8KO-HOc-34VX_FMhfrxWw.roa (hash: 8Nt6fXOhTwPcat4zS/Ngo8lC+jjcqymyZaSyPug0u7w=)
                          7: S42XKFLFxOmCWZFMg5G19rGqxy8.roa (hash: 6EZ9/SqZX21Kchk205U6i6H+F6TBLEENjYmkUxMwxAQ=)
                          8: SKwTqvIZkuTEcBsRPrrA2zPYVQA.roa (hash: iOPweml4PPS91J3WsbGMuAGsI29WlgdX+t0Td9VvSsc=)
                          9: Z82fu0SMc5PLovRjz1ugEOgBbuI.roa (hash: 5PeVuVu0XR46tGpFltp5Qa46/v7I/ZA7tnpuJSpe7C0=)
                          10: daF6soBiLx_2XucSlFB1I0X7V7E.roa (hash: tIhHdE4uoGYNy4kjHy+a3FHXKNTk7I+s8yTrT+I9guM=)
                          11: iID3qatTo4RCMNP4kQPlqiUs9U8.roa (hash: MKZiqxJEJ9e/oZGk4afoe3vViXVoqR3AQEAceqoGw1Q=)
                          12: l1q_6qZD46S1NREOpcZYrmh4q14.roa (hash: Z/MgumaJfC2R6kIMImdk7KxI/3h8MIAQaZYf3p7u2hg=)
                          13: szOu2luBprL1T_cUZo-NY-h7haE.crl (hash: 4quVpJ3Ui2l/ICdLV4GRn7DheH9OMH+AI5XeUKwZbRM=)
                          14: tRcZ2EGp5wd47wwC2CGS94yLIuU.roa (hash: KWSXZxLbl3eeVtQ+LICNDqMBWAnYAICdNm+9N0iMCCY=)
                          15: vYwba0P5V4fOrr8lvKaSxFc_LXk.roa (hash: t9l9vpHFcQjC5fKQeRcsbAHe/+/u6xH67gwlqOGGJPM=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 30 Jun 2024 06:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
        Validity
            Not Before: Jun 24 10:53:25 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=F77DA257F511410B9C5DD2AC201E60DD4A66525C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:38:d1:43:3a:39:de:d0:f5:e2:76:ef:9b:61:
                    c6:6a:ec:f4:1b:76:93:35:a9:2d:6a:52:10:4f:ef:
                    77:34:ca:64:f8:ab:86:fc:d0:63:c6:94:e5:f5:a6:
                    34:0d:bc:e2:e0:f2:5f:bc:81:3d:36:aa:02:92:83:
                    db:0a:1d:7b:d0:c2:27:87:3d:99:7b:d2:56:02:fe:
                    ad:2e:af:33:44:37:55:05:06:e6:70:4d:90:26:18:
                    f0:68:fa:9f:9e:30:fc:8a:49:2b:fa:c0:3a:a6:67:
                    0d:f7:11:e2:fd:a0:81:ee:79:c8:fe:45:cb:85:ea:
                    3e:b4:64:e3:f7:63:a8:2c:dc:90:fa:8c:c4:c0:c4:
                    3d:b0:c0:01:94:47:57:18:27:a0:74:d5:71:ff:4e:
                    b1:c8:45:2a:c4:70:96:d8:6e:0f:a6:4d:fd:77:61:
                    64:8a:8d:28:cd:1b:68:6c:a0:aa:1d:e5:35:9d:40:
                    ed:18:85:af:d9:c6:ce:6b:48:7d:ce:61:3f:2f:df:
                    e8:48:9d:ba:ba:75:4f:bd:16:84:53:b6:e6:84:14:
                    72:8c:19:78:48:42:d9:5d:35:18:a5:11:ae:8b:d8:
                    98:1e:83:a4:bc:00:23:45:a3:b4:e0:08:f3:80:52:
                    a6:0f:bd:44:12:11:3d:cc:7a:96:e1:f5:5c:fc:3c:
                    67:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7D:A2:57:F5:11:41:0B:9C:5D:D2:AC:20:1E:60:DD:4A:66:52:5C
            X509v3 Authority Key Identifier:
                keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:23:a0:74:f8:52:44:b4:bc:55:b5:a3:39:9f:84:d8:4b:20:
         f0:d6:03:f5:e0:f4:c6:b2:14:e0:28:5e:08:cd:5f:5d:36:c6:
         dd:62:db:84:47:38:80:cf:f8:6f:c5:f3:5e:e4:1c:44:bf:33:
         50:2c:9a:68:b3:d9:04:02:7d:c9:59:9f:50:29:4d:9e:32:d0:
         da:6e:0e:b9:dc:b8:84:12:d0:b8:e6:14:01:6b:05:91:6d:58:
         7d:26:48:5b:98:17:b7:23:a1:79:76:96:10:c0:01:76:95:b4:
         1b:bd:8c:8e:2f:60:50:47:a8:21:ca:fb:4e:29:3c:91:7a:ae:
         13:dc:f3:c8:0d:b1:bb:f3:7b:de:8d:cb:61:64:de:5f:41:61:
         31:4a:82:03:b3:c5:b9:57:52:78:4a:ae:33:7d:34:4c:0f:d2:
         b7:7a:ca:26:3f:06:a0:57:a0:c5:17:38:8e:aa:aa:ec:64:f4:
         5d:68:2c:25:49:97:da:03:44:7a:28:cb:c1:c9:07:ba:97:8f:
         3d:29:87:75:d5:96:4b:59:8d:6e:82:96:51:69:cd:0d:88:8d:
         3f:09:bb:70:c5:e9:75:9a:e2:84:8a:4f:3f:c3:cc:24:80:66:
         d0:f0:25:44:4d:e3:40:4f:4d:1e:d9:fd:9e:fc:46:8f:18:a9:
         ca:06:4e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 00:52:58 2024 by rpki-client on console-ams.rpki-client.org