Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5513/mgPVwv6gP2gol_0jcVx_H9US0fE.mft
File:                     mgPVwv6gP2gol_0jcVx_H9US0fE.mft (raw, json)
Hash identifier:          gv7Q3YNWDYam2m9OEsSCHLi3cNGaRGu33sYI5d8/MSk=
Subject key identifier:   54:D6:5E:21:8D:9C:6F:01:6C:89:64:94:13:AC:8F:8C:99:93:7B:A7
Authority key identifier: 9A:03:D5:C2:FE:A0:3F:68:28:97:FD:23:71:5C:7F:1F:D5:12:D1:F1
Certificate issuer:       /CN=9A03D5C2FEA03F682897FD23715C7F1FD512D1F1
Certificate serial:       13
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mgPVwv6gP2gol_0jcVx_H9US0fE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5513/mgPVwv6gP2gol_0jcVx_H9US0fE.mft
Manifest number:          46
Signing time:             Wed 15 May 2024 01:36:59 +0000
Manifest this update:     Wed 15 May 2024 01:36:59 +0000
Manifest next update:     Sat 25 May 2024 01:36:59 +0000
Files and hashes:         1: FmUgMBls08zARHCVKAwY1eYNrOI.roa (hash: WEurnjEL47eZa1cCJNh8kK1hYYBzxmJGAygV5RMru6E=)
                          2: mgPVwv6gP2gol_0jcVx_H9US0fE.crl (hash: swD29J7NuAzg9GC6+g4gJHJKL0Tbi0dWlSU/auHn6TE=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5513/mgPVwv6gP2gol_0jcVx_H9US0fE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5513/mgPVwv6gP2gol_0jcVx_H9US0fE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mgPVwv6gP2gol_0jcVx_H9US0fE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 12:33:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A03D5C2FEA03F682897FD23715C7F1FD512D1F1
        Validity
            Not Before: May 15 01:36:59 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=54D65E218D9C6F016C89649413AC8F8C99937BA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1c:ca:ea:c2:54:60:81:8e:10:dc:2a:cb:2c:
                    3a:d8:94:35:99:ed:51:20:68:65:d7:95:d0:ea:c5:
                    e4:00:af:51:76:70:26:94:8d:c7:7e:fd:17:4e:d7:
                    e4:a3:cb:9d:10:b5:66:51:a2:bb:1d:5a:89:21:01:
                    57:97:de:25:05:2f:a8:8f:f8:ee:81:d9:18:8b:d6:
                    d5:77:8c:f3:12:2b:99:58:89:7e:15:06:80:f9:b3:
                    50:ed:8f:43:34:c1:f0:c3:73:14:0b:fd:67:6b:17:
                    fd:4c:a7:5e:07:a8:dd:f3:83:58:19:a4:96:60:c2:
                    1f:33:cd:4d:64:8c:37:86:50:3f:67:48:8e:de:f1:
                    f4:a9:f7:bc:43:e9:58:4f:a3:1e:69:9d:ac:45:c4:
                    8c:8d:ca:be:7e:e8:b3:1e:ef:fd:71:8b:bf:80:81:
                    43:fe:b0:e8:31:39:7b:4f:05:5f:73:e3:e5:02:26:
                    cf:fd:8a:2f:01:e9:56:54:ba:2d:50:f4:f5:9f:7d:
                    63:e9:e4:5d:52:1e:f5:7a:65:36:7d:c8:38:30:72:
                    74:14:81:fd:47:6d:e0:4c:c8:22:dd:04:3c:c9:3f:
                    d6:b9:9e:65:51:df:84:bb:66:b1:3a:52:e4:df:f6:
                    0e:6a:6f:d8:f7:4f:19:52:90:85:3e:23:f5:f2:cc:
                    ae:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D6:5E:21:8D:9C:6F:01:6C:89:64:94:13:AC:8F:8C:99:93:7B:A7
            X509v3 Authority Key Identifier:
                keyid:9A:03:D5:C2:FE:A0:3F:68:28:97:FD:23:71:5C:7F:1F:D5:12:D1:F1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5513/mgPVwv6gP2gol_0jcVx_H9US0fE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mgPVwv6gP2gol_0jcVx_H9US0fE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5513/mgPVwv6gP2gol_0jcVx_H9US0fE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:7b:e3:6d:11:de:70:8b:85:b8:ba:78:ad:47:a1:fe:bf:91:
         96:c4:9e:ef:53:b7:af:c0:09:26:88:69:9e:c2:a2:f1:24:93:
         ac:1d:0f:cf:91:d6:84:85:e4:aa:55:64:28:e7:17:fc:56:21:
         7d:9d:ba:87:b8:26:f0:ae:70:89:2b:f3:de:09:a1:f4:12:12:
         01:09:df:61:2d:c2:54:2e:76:f0:eb:10:5c:90:c9:67:95:e9:
         83:be:d4:81:8b:77:32:60:3e:8c:2e:58:35:52:7d:3c:0d:2a:
         98:e6:be:2e:a5:aa:7c:46:ce:be:10:2b:52:db:61:60:3f:93:
         ad:86:bb:53:7b:78:fe:0e:2b:c7:2b:37:19:6d:4b:7d:dc:c8:
         9e:de:95:83:5c:c6:11:01:e4:44:bd:b7:fb:90:3a:35:51:1f:
         f7:2f:ba:20:e1:28:66:a6:7c:ea:92:6c:fe:2d:34:1d:3c:c7:
         3b:b9:47:a4:69:16:ba:7d:c4:de:4d:d3:e0:3d:c1:6e:b0:bd:
         2a:62:47:92:e5:12:14:7d:3d:d3:2d:90:48:15:1a:46:5b:b8:
         a8:0a:a3:ab:a4:1d:b8:fa:44:13:8c:31:64:53:ca:15:02:4a:
         f2:8d:cc:f3:3d:6e:02:97:06:fb:a9:45:94:99:b5:f0:22:87:
         73:27:e2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 13:12:23 2024 by rpki-client on console-ams.rpki-client.org