Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/632/NpZu7Bk79ap-O4kiglX9RfOnwqo.mft
File:                     NpZu7Bk79ap-O4kiglX9RfOnwqo.mft (raw, json)
Hash identifier:          vUh99qdnGQW+/e73psMgoQ4kRqI1FYxiemIwRELbM/k=
Subject key identifier:   38:29:EF:3C:82:11:D1:EB:DD:08:C9:A3:3E:10:9D:C8:DE:03:11:90
Authority key identifier: 36:96:6E:EC:19:3B:F5:AA:7E:3B:89:22:82:55:FD:45:F3:A7:C2:AA
Certificate issuer:       /CN=36966EEC193BF5AA7E3B89228255FD45F3A7C2AA
Certificate serial:       33
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NpZu7Bk79ap-O4kiglX9RfOnwqo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/632/NpZu7Bk79ap-O4kiglX9RfOnwqo.mft
Manifest number:          EA
Signing time:             Thu 30 May 2024 01:36:08 +0000
Manifest this update:     Thu 30 May 2024 01:36:08 +0000
Manifest next update:     Sun 09 Jun 2024 01:36:08 +0000
Files and hashes:         1: NpZu7Bk79ap-O4kiglX9RfOnwqo.crl (hash: m9SV1S9cue1Qa3t7N0iojtcHZ487jyESG+kIXaNCLmA=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/632/NpZu7Bk79ap-O4kiglX9RfOnwqo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/632/NpZu7Bk79ap-O4kiglX9RfOnwqo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NpZu7Bk79ap-O4kiglX9RfOnwqo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36966EEC193BF5AA7E3B89228255FD45F3A7C2AA
        Validity
            Not Before: May 15 01:33:41 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=3829EF3C8211D1EBDD08C9A33E109DC8DE031190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:df:5a:6b:90:90:62:3e:71:ca:be:7d:bf:8d:
                    d0:2b:0c:56:50:94:b9:b4:bb:62:fd:d9:56:76:68:
                    2d:75:47:40:1b:01:c7:66:3b:81:3e:c7:eb:a6:be:
                    c4:2b:bd:8c:b3:4d:9f:bc:a0:48:d6:c9:02:41:9e:
                    69:ee:26:d8:5c:ba:26:00:4f:75:c7:59:4e:c8:cd:
                    fd:24:92:fc:3b:a0:b7:ec:3b:a7:5c:5a:14:90:30:
                    26:17:35:64:00:a8:d0:74:3e:c4:fb:53:73:b3:53:
                    8c:9b:b1:81:de:57:fd:57:60:d4:a2:83:50:06:e0:
                    3e:a9:48:b3:df:5d:34:fd:9a:4e:9d:a7:a7:f5:1c:
                    8f:fb:66:50:6c:a7:54:3b:e6:92:09:67:1c:54:63:
                    14:2d:bf:c1:36:01:d6:f7:9f:4e:6e:a8:0e:22:c4:
                    f9:da:44:d5:2f:7a:79:35:d5:10:49:57:ae:0c:20:
                    2a:e5:3a:f5:9f:9b:c2:0d:e3:aa:b4:36:52:1b:48:
                    56:03:b4:10:83:f6:12:7e:8a:e8:b8:42:6b:24:10:
                    ce:fd:53:9b:7f:8b:9f:21:24:03:da:07:dc:63:54:
                    a3:00:ee:04:5d:40:fd:54:a4:69:f0:55:49:27:70:
                    07:7e:54:7d:70:0e:23:10:ed:56:74:f5:b3:29:40:
                    12:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:29:EF:3C:82:11:D1:EB:DD:08:C9:A3:3E:10:9D:C8:DE:03:11:90
            X509v3 Authority Key Identifier:
                keyid:36:96:6E:EC:19:3B:F5:AA:7E:3B:89:22:82:55:FD:45:F3:A7:C2:AA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/632/NpZu7Bk79ap-O4kiglX9RfOnwqo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NpZu7Bk79ap-O4kiglX9RfOnwqo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/632/NpZu7Bk79ap-O4kiglX9RfOnwqo.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:a9:30:5e:47:c2:ec:95:c3:d1:94:3f:8a:10:81:db:3b:b3:
         d6:ce:24:2f:56:ab:c5:da:4d:7c:24:94:7e:7f:05:a6:58:b7:
         bf:05:6a:27:9e:ef:cf:75:e2:46:61:bf:c7:6a:6d:9e:dd:76:
         38:55:7d:4a:be:33:92:ca:2b:3f:8b:19:9c:de:c0:93:4e:2e:
         b2:f6:a3:af:f0:61:09:3e:26:e1:72:da:3f:3d:f4:aa:5a:df:
         fb:86:9f:10:35:74:4c:06:db:9f:42:b5:f2:50:ca:88:79:a5:
         96:9f:da:76:1c:8b:9f:ba:fd:c6:de:b5:aa:32:cf:c5:34:e4:
         82:a9:10:25:c8:29:fa:89:f5:80:4c:84:6f:ff:04:4e:7a:64:
         e9:85:60:f8:91:98:df:97:6d:2e:11:52:53:05:d9:46:08:a3:
         6f:e8:2a:cf:e0:3a:e8:34:70:98:ff:c2:62:b6:df:24:ae:c5:
         80:5e:53:98:6d:f2:ee:b9:b1:2e:a4:ce:8e:e4:b4:13:a4:18:
         81:7d:a7:cc:bd:cb:cb:74:d1:54:d2:53:2f:a5:0e:e6:2f:de:
         30:0c:24:ff:02:15:a3:ac:bd:6e:8e:1a:cf:1b:f0:8c:84:ae:
         14:1d:6f:de:ae:e6:b9:bf:c4:47:6e:2a:ef:d8:85:80:27:f0:
         bb:b2:52:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:52 2024 by rpki-client on console-fra.rpki-client.org