Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/4688/IKcN2Pan97KkZ1Mu0bYKphCilzk.mft
File:                     IKcN2Pan97KkZ1Mu0bYKphCilzk.mft (raw, json)
Hash identifier:          wuisLO+aK3BCRSc6JcT75VqNMOvZksAl+g1XGwWQADU=
Subject key identifier:   DF:5C:C2:43:89:0F:8A:03:39:B1:2B:22:C3:8A:AE:57:02:F1:17:36
Authority key identifier: 20:A7:0D:D8:F6:A7:F7:B2:A4:67:53:2E:D1:B6:0A:A6:10:A2:97:39
Certificate issuer:       /CN=20A70DD8F6A7F7B2A467532ED1B60AA610A29739
Certificate serial:       43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IKcN2Pan97KkZ1Mu0bYKphCilzk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4688/IKcN2Pan97KkZ1Mu0bYKphCilzk.mft
Manifest number:          075A
Signing time:             Sat 29 Mar 2025 10:13:52 +0000
Manifest this update:     Sat 29 Mar 2025 10:13:52 +0000
Manifest next update:     Sun 13 Apr 2025 10:13:52 +0000
Files and hashes:         1: IKcN2Pan97KkZ1Mu0bYKphCilzk.crl (hash: hZCgAknThR56aTZ6o1jCCMQ+woqldLtqMFCk/MfaJ+o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20A70DD8F6A7F7B2A467532ED1B60AA610A29739
        Validity
            Not Before: Mar 15 01:33:31 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=DF5CC243890F8A0339B12B22C38AAE5702F11736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:24:22:dc:05:1a:2d:9c:ec:8f:5c:54:b8:73:
                    ce:d0:73:6c:52:f9:6c:3d:5e:66:2f:54:56:83:02:
                    d6:98:8d:54:ba:1c:e5:32:2d:2a:a4:10:fc:5f:c5:
                    27:66:27:73:c7:f7:ac:f3:30:79:14:1e:70:03:de:
                    86:55:3f:09:86:20:bf:e3:4d:f7:56:69:94:d1:44:
                    e0:a5:20:ac:5d:e9:d9:0e:19:48:a3:be:60:09:3a:
                    f0:ed:51:aa:68:e2:23:85:3b:7d:d1:d1:91:47:f3:
                    b0:a3:7e:7d:ca:7c:94:43:13:5d:31:9c:c5:6f:d8:
                    ff:ee:5f:be:fe:b7:00:db:eb:1a:24:34:4b:8e:ec:
                    1b:d7:f9:67:1d:65:31:04:5b:6a:4f:56:5e:27:6d:
                    4e:5d:08:a1:89:99:52:86:de:28:b5:86:b7:c0:3d:
                    5d:eb:91:23:5e:e5:93:69:03:9d:e1:2f:99:f7:e6:
                    d4:c5:e3:5a:8e:d6:ba:e3:d6:f9:72:67:f1:a3:96:
                    e8:d2:dc:90:78:8a:88:52:0f:01:d8:48:1a:d4:17:
                    1d:7d:da:86:a0:41:76:54:4e:11:96:5f:0d:2c:e7:
                    eb:c8:82:e8:40:05:14:90:cf:5b:00:9e:fe:fc:2f:
                    0c:2f:33:45:0d:a4:27:8b:6c:96:1e:b8:98:6a:c2:
                    a8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5C:C2:43:89:0F:8A:03:39:B1:2B:22:C3:8A:AE:57:02:F1:17:36
            X509v3 Authority Key Identifier:
                keyid:20:A7:0D:D8:F6:A7:F7:B2:A4:67:53:2E:D1:B6:0A:A6:10:A2:97:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4688/IKcN2Pan97KkZ1Mu0bYKphCilzk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IKcN2Pan97KkZ1Mu0bYKphCilzk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4688/IKcN2Pan97KkZ1Mu0bYKphCilzk.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:9d:90:55:23:63:cb:76:cd:3a:1d:e3:0b:0d:89:4c:4d:f3:
         12:36:55:fd:d0:75:e5:88:5e:78:3e:54:04:ec:d9:44:bd:9e:
         28:e5:00:84:f8:fa:17:18:10:b0:bd:a6:6d:7c:ec:98:32:7c:
         9f:6b:da:a0:6a:aa:51:17:70:b6:83:7c:22:54:31:5f:ae:f2:
         4c:2a:88:3f:34:82:95:d2:47:77:02:a0:44:af:c0:3a:e7:64:
         6b:77:6e:1f:56:85:d2:4c:b3:06:f2:83:57:3e:69:8f:90:52:
         e8:01:c5:18:13:8b:63:9a:d0:38:c7:e4:7c:dc:f4:b5:6c:7e:
         bc:31:cf:5c:76:71:f3:6e:54:98:b9:d9:6a:7e:6b:02:e7:88:
         22:7f:96:6e:08:70:24:3e:d4:f6:14:c6:80:4f:d6:ed:39:8a:
         01:80:16:b4:94:a3:b3:12:64:8f:e4:52:4b:92:a3:5f:87:cf:
         52:f4:48:92:ee:03:31:43:59:c7:0b:78:0c:90:5c:9d:c6:4e:
         d0:62:ef:9c:81:8d:13:f8:37:a7:37:61:b7:07:7e:b0:7a:bc:
         39:34:c2:16:c7:9d:3f:35:27:30:52:06:f0:4f:b3:d7:70:02:
         f3:d4:a1:1e:c3:3b:5e:8a:c6:f4:52:68:c7:4b:96:fd:7c:f4:
         78:a7:03:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:55 2025 by rpki-client