Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft
File:                     kaykQnXsBXK8aSFQKyQcFNRKmqE.mft (raw, json)
Hash identifier:          wT6DJ6khkZEuYuNn+3jel/uj7bLRyTQhHtATYwPy1kA=
Subject key identifier:   F3:DF:8B:FA:A8:1D:49:6D:D5:CE:EA:74:9F:35:4E:A6:BD:F4:E2:48
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       66
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft
Manifest number:          03F1
Signing time:             Thu 30 May 2024 01:35:37 +0000
Manifest this update:     Thu 30 May 2024 01:35:37 +0000
Manifest next update:     Sun 09 Jun 2024 01:35:37 +0000
Files and hashes:         1: 070bud2GIdNRBWRIvTQjhKF2c1g.roa (hash: sCoK/QuoEn7K2I2asjM0lgRSiyQu9EZtW+uv9VeOtWo=)
                          2: 1ORYZd7fDeqgy7dw0IULyHPF54Y.roa (hash: TbpExPQitSh1TN6naYL48FTxWxxciyOueL5YD2nmZM4=)
                          3: 3Jlktag51yZe_l55plnaQBjIrmw.roa (hash: X9jZmXh77vk3KN8A8S4SaMzZF/HJE7fETXoDOaEgyd8=)
                          4: 3xssDyJaNf8IYcJKTB4_5956Uh0.roa (hash: QBer/9MLQAgYUbdVEbGqJzT6tOLRed2tQ/IKIsaQMOA=)
                          5: 5-r5wPnbxe6SaaxWWuKUsC71a_o.roa (hash: y0wWA2H1N1yVzmD+BgGbGWvrcYESrQTgNBeuOgW65UI=)
                          6: NfczLsijjuuxdSviyIkqgVGkYU4.roa (hash: cm32la3xUOWiW1GhpWG4avGO3phX/MpL8e/MFFlJgl0=)
                          7: QUsfn4_YeH-fClsJDNHvwFd1rCA.roa (hash: 1jCBFrgqponNrnPwGEimQ5jJfXGrpPcB2haDj1PXitI=)
                          8: _c8rrPUO8T5B6rRTVYUMfGQkmWE.roa (hash: 2iK9TRcnbJ1Y+aQ2smRu/zm85yBiD4Jc2K/jpKpI8B8=)
                          9: dD59vpZ_FFBcpwG1QbHLo2wzhss.roa (hash: F1hUdB9C3Jufvkau2ont0RTPy+5UoEXj5JnS++rf4ZY=)
                          10: hwD7MvmmcBHHsQX5Oxxw-5R4vwE.roa (hash: y5ar1M5xwPlybuRoZSZ0VgmM25bJPfk1so8a1b69xT4=)
                          11: kaykQnXsBXK8aSFQKyQcFNRKmqE.crl (hash: meVUV84E93M7A/PoqMqkxij5EMLc/l7VCye9QRwlUVU=)
                          12: m9Du4wx6TR98wKS-xpBKBgr7MXI.roa (hash: HSwFrmopTReUkYCpTTYaATBGnGsXQyrjQWJ89p1LCQw=)
                          13: n8PCFC43er8ilGfZDmWH7e6CL1k.roa (hash: SupfH//YOtS5ArDv1LzL+sfw2oQxbirdbeXX4Wx+Uew=)
                          14: oAA8GVqC6o4EMQfKRf3IgUts1Cs.roa (hash: BxeMt8yY9wZIouoSUbnbe3jWRpIMsXYk+kTZIY0qLks=)
                          15: oRMFtiktmQd0zSPp5xkmwxrVFRM.roa (hash: 70G/gxFpHtpo0m7ndw+j9Fmp2V7SHviMccBRBaAZbvE=)
                          16: sRJB8WxmpMF6JgJrwGODBwsUqHo.roa (hash: 2vTUqNL918pR++pQeWpURlayaDdcwBzaian5KzFVrJ8=)
                          17: u35DPDuUp-xncGRpoyQ0dtjFrqI.roa (hash: QuPKOaLe3CYN6corXMWHKxMtLJ8WiTVob9hBKcX74p4=)
                          18: uCXL4sVyklyXrGwEOlwfAvHGc1Q.roa (hash: u9KUPhWlH7T96lUnlMG1cpCbrEWTNrjCFPtCMxoeky4=)
                          19: y0iToY8prQxBoXc-qAf_zs0zP0E.roa (hash: EP/Nrrh1peEm+g4nIvgBH842W0WWTyBL/n0NwTLEC7U=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: May 15 01:32:37 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=F3DF8BFAA81D496DD5CEEA749F354EA6BDF4E248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d3:2d:a0:6a:cd:db:74:87:e6:8b:d4:46:7c:
                    5f:dd:2e:8a:62:c8:bb:db:3c:31:e8:14:e4:38:3f:
                    a2:63:da:f9:a2:f7:90:56:03:c2:2b:73:cd:d2:14:
                    58:6a:e5:0c:4a:4a:53:be:a8:a7:39:3b:1c:9e:c8:
                    ab:da:eb:c1:42:93:76:8e:0a:11:2e:80:f4:03:7f:
                    e5:91:ca:9f:0b:23:d6:a9:f4:9a:cc:b7:a6:bc:49:
                    87:3e:ce:32:fb:16:41:ed:01:21:40:39:b4:28:59:
                    8d:00:f0:f6:09:4e:39:26:86:03:48:d1:2d:39:f0:
                    15:69:a4:38:33:21:dd:ef:1b:39:8e:33:dd:df:7e:
                    05:08:2f:05:24:8c:12:df:39:b3:68:b1:f1:38:e5:
                    60:7e:7e:fc:c3:55:e7:d2:a1:4e:a2:f4:f4:86:9e:
                    1d:74:02:2c:bb:89:bd:73:5e:a0:1b:79:cf:07:e9:
                    62:a1:c4:52:0b:18:b8:b2:42:94:68:cd:44:ed:d3:
                    13:67:a2:58:f8:b0:2f:fd:ae:c3:c4:a2:1d:23:12:
                    b4:15:24:c1:e0:1a:5c:80:75:16:c9:ca:9f:4d:e6:
                    89:8f:ee:d2:1d:b5:83:68:ba:b6:4a:77:a4:f8:d7:
                    9f:de:d2:7b:9b:f8:7b:40:f6:30:74:88:be:39:6b:
                    80:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DF:8B:FA:A8:1D:49:6D:D5:CE:EA:74:9F:35:4E:A6:BD:F4:E2:48
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e8:39:b3:11:ef:3c:eb:e1:45:ec:c3:4e:1b:3c:1e:fe:59:
         8d:d3:38:07:54:be:74:81:1c:52:eb:99:8b:fc:a8:6f:c2:39:
         86:43:98:33:4d:28:76:f1:c3:98:b7:26:78:1d:2c:21:cf:91:
         7a:e0:d3:56:3a:6f:06:ff:58:ff:f1:26:71:e8:f5:d2:69:b8:
         52:f9:28:a4:5e:a9:6d:da:a0:91:85:93:ca:3e:7d:cf:d4:70:
         f6:8f:2b:05:e1:83:a9:a3:2f:3c:e7:23:00:e4:98:44:45:73:
         52:8e:1f:4c:70:be:3a:c9:5d:c2:a5:c7:ab:60:38:98:93:d8:
         51:7c:dd:06:5e:33:8c:8d:d3:4e:21:33:41:7a:6c:13:c5:6c:
         f2:1d:8b:ef:79:49:2a:9b:3e:c4:6c:a4:9b:bc:a3:cc:36:53:
         c7:38:b9:41:0b:d6:ba:1b:ea:2b:99:e1:dd:77:51:55:30:3a:
         22:08:52:3a:ec:da:a3:54:cb:b5:bb:23:e3:9a:db:ad:e9:0e:
         8c:08:f2:13:39:78:e6:1a:d2:02:7c:9a:ba:9e:da:24:e9:80:
         22:7a:05:d6:cc:f8:b5:13:06:96:73:31:6c:df:13:8c:79:65:
         33:c3:5e:07:a1:d8:6d:c8:d4:f9:e9:c6:15:b7:6d:c4:86:9f:
         65:4d:ce:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:08:56 2024 by rpki-client on console-fra.rpki-client.org