Manifest

$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File:                     5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier:          Z8hKuiyNqzUHGGhVulC3UWVqTsIHQBkianPlGTpH2ws=
Subject key identifier:   F2:65:B4:E9:6D:86:27:70:AD:0E:1A:E8:1F:55:B6:4F:C2:23:EB:A2
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer:       /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial:       5DF76586A4196B9B84A4A674CA908B5A23B646D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access:      rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number:          0875
Signing time:             Thu 02 May 2024 10:02:00 +0000
Manifest this update:     Thu 02 May 2024 09:57:00 +0000
Manifest next update:     Fri 03 May 2024 10:02:00 +0000
Files and hashes:         1: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: r0XHzV8Dk3lA7stXbRdaC/+iAdXFViUWZaWc94eWAZM=)
                          2: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: TAa+iI5aaA1mG90GKniRUGs17gtEKhsIQgxuVuzzGxo=)
                          3: 47717A8A2E301D872DAC129F2CBAC587F01A0813.cer (hash: dvYdMAoepFWyruPdMOF0MCEzIXKByC5Xj2vGke0hyRY=)
                          4: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: ItRiMrje0JiDcKec3h1w6pzk25xLDucbgK3Fz8QBivE=)

Validation:               OK
Signature path:           rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 10:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:f7:65:86:a4:19:6b:9b:84:a4:a6:74:ca:90:8b:5a:23:b6:46:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
        Validity
            Not Before: May  2 09:57:00 2024 GMT
            Not After : May  9 10:02:00 2024 GMT
        Subject: CN=3082010A0282010100C758C2BD87BD744E1AFCBD28A96B6D433604B8CA2451F5B5A257889119F9D4D40353BB74945514AB9CE61CB218BDB685EA89B2E6A8F6C9CA8AA5E78AE19678276D79583B1C5F1AD9F51A447AB41F29FAE3577DB6F03A721B0C856E7434BA4E50B0C63AC8F4F94E6E169B463D64A6B8B43023DD8B8262B5650CF27D7485E01E0EA52D112BCCD67CA134BA644EC1C1373A390E8AC695CCFEA4DA74DBD98FB321689C2BA8E8D2224C63AEBCC459C733DBC720C781F7FD4F23A054F6581C35FC84EA6E897DF83909F09266C626CEBD743C9671F1C5F8A871E20A99045529590AA6A504979E59E76D4391EC75A95D5AA2D305FA62CF633A058600592F01CE3A7E1E4B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:58:c2:bd:87:bd:74:4e:1a:fc:bd:28:a9:6b:
                    6d:43:36:04:b8:ca:24:51:f5:b5:a2:57:88:91:19:
                    f9:d4:d4:03:53:bb:74:94:55:14:ab:9c:e6:1c:b2:
                    18:bd:b6:85:ea:89:b2:e6:a8:f6:c9:ca:8a:a5:e7:
                    8a:e1:96:78:27:6d:79:58:3b:1c:5f:1a:d9:f5:1a:
                    44:7a:b4:1f:29:fa:e3:57:7d:b6:f0:3a:72:1b:0c:
                    85:6e:74:34:ba:4e:50:b0:c6:3a:c8:f4:f9:4e:6e:
                    16:9b:46:3d:64:a6:b8:b4:30:23:dd:8b:82:62:b5:
                    65:0c:f2:7d:74:85:e0:1e:0e:a5:2d:11:2b:cc:d6:
                    7c:a1:34:ba:64:4e:c1:c1:37:3a:39:0e:8a:c6:95:
                    cc:fe:a4:da:74:db:d9:8f:b3:21:68:9c:2b:a8:e8:
                    d2:22:4c:63:ae:bc:c4:59:c7:33:db:c7:20:c7:81:
                    f7:fd:4f:23:a0:54:f6:58:1c:35:fc:84:ea:6e:89:
                    7d:f8:39:09:f0:92:66:c6:26:ce:bd:74:3c:96:71:
                    f1:c5:f8:a8:71:e2:0a:99:04:55:29:59:0a:a6:a5:
                    04:97:9e:59:e7:6d:43:91:ec:75:a9:5d:5a:a2:d3:
                    05:fa:62:cf:63:3a:05:86:00:59:2f:01:ce:3a:7e:
                    1e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:65:B4:E9:6D:86:27:70:AD:0E:1A:E8:1F:55:B6:4F:C2:23:EB:A2
            X509v3 Authority Key Identifier:
                keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:6f:59:17:82:f9:dc:eb:06:b7:cd:c1:34:52:23:63:86:0d:
         6a:a5:7e:89:35:46:f7:e3:8c:a9:f6:5a:79:f7:a0:99:f1:7f:
         cf:7e:e1:18:63:19:f7:28:24:9b:9b:69:a0:f7:fa:dd:c3:bf:
         24:98:20:ae:a5:31:98:2b:51:35:56:93:49:12:5e:a4:3e:2e:
         75:8c:4b:2a:22:97:10:e4:40:2b:40:12:61:97:55:f3:44:cd:
         2c:cb:fc:30:02:dc:93:0d:0c:de:b4:32:0d:86:f7:c2:04:19:
         4d:f5:d2:d5:cb:aa:aa:8c:f5:47:1d:02:ad:9b:79:8b:88:5e:
         6b:d2:b9:9d:a3:3a:d1:66:0b:d2:41:f7:6f:a1:32:79:4c:fd:
         86:c4:f9:e2:a8:43:46:ef:5e:5c:de:93:61:c6:03:8e:ef:9d:
         94:c2:b7:4a:d8:32:ee:66:a2:c2:2d:e5:f3:22:00:7b:31:df:
         e0:3b:28:4d:e8:8c:7b:d3:1c:c1:a4:af:eb:3d:73:ce:d3:ca:
         28:90:f4:fa:34:4e:17:f7:37:81:02:1a:96:3a:3a:b9:5c:50:
         34:07:eb:05:df:b2:45:0e:55:df:11:38:19:ee:37:ed:13:ab:
         b4:69:b7:9d:0c:c6:de:f3:b2:82:d2:67:a4:f3:a6:ac:87:41:
         ee:07:54:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 13:51:14 2024 by rpki-client on console-fra.rpki-client.org