Manifest

$ rpki-client -vvf rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft
File:                     9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft (raw, json)
Hash identifier:          2JuIJUC20Y2tZi2PDW5av0eKz78JTSkEOwMEoiTJzVM=
Subject key identifier:   39:40:D0:6A:B2:5C:53:EC:2D:72:62:9B:87:E7:FD:44:CD:03:D7:CB
Authority key identifier: 9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91
Certificate issuer:       /CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91
Certificate serial:       4EFDDE4BE31E829B8C9809E6B79307371526FBC6
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer
Subject info access:      rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft
Manifest number:          01CB
Signing time:             Wed 15 May 2024 15:34:54 +0000
Manifest this update:     Wed 15 May 2024 15:29:54 +0000
Manifest next update:     Thu 16 May 2024 18:53:54 +0000
Files and hashes:         1: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl (hash: OEpy4b6DRTM40H4BZMAJUowAVtqWk8GfSr199sY1yCA=)
                          2: 323430363a343434303a653030303a3a2f34302d3438203d3e20313430393338.roa (hash: 3htjqrkOETtvCBkOdiBEFlIBWqUdmw7gxdOiciCi4Ik=)

Validation:               OK
Signature path:           rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl
                          rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft
                          rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 16 May 2024 15:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:fd:de:4b:e3:1e:82:9b:8c:98:09:e6:b7:93:07:37:15:26:fb:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91
        Validity
            Not Before: May 15 15:29:54 2024 GMT
            Not After : May 16 18:53:54 2024 GMT
        Subject: CN=3940D06AB25C53EC2D72629B87E7FD44CD03D7CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:21:49:8e:8d:31:36:0a:ec:f2:f9:19:90:4d:
                    1d:e1:c1:32:35:1a:ec:13:b4:41:93:5b:95:64:d6:
                    02:2f:31:73:2f:54:72:cd:c6:70:65:41:cb:aa:3f:
                    d7:6a:92:4d:51:aa:b3:93:6f:62:9c:9c:32:26:31:
                    b7:c3:36:f6:b0:c3:1c:2e:23:b9:4b:c7:2d:3a:1f:
                    dc:00:6b:2e:1f:01:92:89:bf:c3:0d:bb:20:34:d7:
                    f2:26:34:ee:b2:7b:df:bf:2d:a6:89:d4:cc:19:63:
                    51:fe:fe:17:61:2f:60:e4:3b:da:44:d2:56:d9:0e:
                    ee:2f:e5:20:94:84:56:97:75:a2:4d:e2:36:07:88:
                    e0:1b:d1:0a:e0:87:0f:1e:e0:b8:15:ba:e6:3b:b9:
                    4d:54:73:2c:b0:a0:cb:34:09:94:43:90:0e:8e:80:
                    eb:11:b7:e8:28:01:3b:1e:49:1b:58:30:f9:1e:37:
                    50:7e:ab:a9:d5:76:9b:ed:87:92:a8:64:3e:b5:7a:
                    11:db:f3:02:3b:d0:43:cb:d3:bf:ff:15:b3:3c:d3:
                    54:d6:60:6b:3b:52:55:51:e1:cd:fe:1e:0c:cc:71:
                    5f:78:4d:91:57:48:9a:13:5c:dd:c8:62:8c:54:30:
                    ba:a5:33:4c:8a:4a:2d:02:f1:ff:9b:73:0c:d2:93:
                    6e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:40:D0:6A:B2:5C:53:EC:2D:72:62:9B:87:E7:FD:44:CD:03:D7:CB
            X509v3 Authority Key Identifier:
                keyid:9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:5a:35:0f:b7:f2:c7:50:38:2a:e4:7e:16:21:9d:5f:7c:4f:
         ae:23:ea:64:32:e8:3e:a6:99:1c:d6:0a:a3:09:ce:48:e7:2f:
         c5:5b:3d:92:4a:b7:b0:91:3d:21:7f:2e:7e:4b:ef:66:cb:b4:
         18:96:93:62:64:78:fc:29:3e:f9:72:c5:1c:83:fb:99:7e:fb:
         19:64:cb:9e:1b:fb:4d:d2:5a:6c:4f:b0:89:3a:da:db:8f:e7:
         62:1d:a8:15:d1:89:7d:77:7c:b5:3a:84:3f:b9:e8:9c:0d:d4:
         d3:7c:f5:f5:6c:80:f9:62:8e:6d:fd:ef:7f:86:2f:9d:7f:61:
         be:f2:6a:60:ac:1a:81:2e:39:d3:cc:d3:82:00:c2:04:e0:e2:
         7c:59:ec:fc:42:a4:a1:15:0a:43:39:7c:66:ba:30:27:a9:ed:
         dd:c0:50:41:c7:81:3f:14:40:3a:bc:73:49:45:b0:07:0f:fa:
         ae:25:cf:d8:c5:9b:df:ff:be:ff:12:f6:d1:32:9a:a9:8a:0a:
         f4:c2:29:b3:ca:f6:07:10:56:19:3f:0d:f9:2f:06:fc:d7:db:
         b4:fd:c1:2c:5d:dd:99:02:56:f7:cc:46:eb:bd:48:4f:16:0d:
         3f:5a:23:b6:0c:cd:86:2b:35:ab:31:68:c6:b5:20:c3:b7:c3:
         c3:68:cb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 18:19:12 2024 by rpki-client on console-ams.rpki-client.org