Manifest

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/202400/2/93315FBBDD477E024849BB6F66D8FB94395F6350.mft
File:                     93315FBBDD477E024849BB6F66D8FB94395F6350.mft (raw, json)
Hash identifier:          J0rfl0aWSnjEKPJTkInuYIeQ+pBBhhYv+MM6oKujVs8=
Subject key identifier:   C4:06:BE:38:E5:1B:85:EA:E8:86:1A:5F:E8:DF:6F:82:60:A4:D7:A0
Authority key identifier: 93:31:5F:BB:DD:47:7E:02:48:49:BB:6F:66:D8:FB:94:39:5F:63:50
Certificate issuer:       /CN=93315fbbdd477e024849bb6f66d8fb94395f6350
Certificate serial:       1277A0533AE1A1F1D56C7193ABFC19F976FA221C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kzFfu91HfgJISbtvZtj7lDlfY1A.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/202400/2/93315FBBDD477E024849BB6F66D8FB94395F6350.mft
Manifest number:          5D
Signing time:             Sat 01 Feb 2025 13:29:23 +0000
Manifest this update:     Sat 01 Feb 2025 13:24:23 +0000
Manifest next update:     Sun 02 Feb 2025 14:00:23 +0000
Files and hashes:         1: 93315FBBDD477E024849BB6F66D8FB94395F6350.crl (hash: UZq6mkunE249iwka/EiUJDjs9ozpIFPNKbfNYQD/Fy0=)
Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/202400/2/93315FBBDD477E024849BB6F66D8FB94395F6350.crl
                          rsync://oto.wakuwaku.ne.jp/pki/202400/2/93315FBBDD477E024849BB6F66D8FB94395F6350.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kzFfu91HfgJISbtvZtj7lDlfY1A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 14:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:77:a0:53:3a:e1:a1:f1:d5:6c:71:93:ab:fc:19:f9:76:fa:22:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93315fbbdd477e024849bb6f66d8fb94395f6350
        Validity
            Not Before: Feb  1 13:24:23 2025 GMT
            Not After : Feb  2 14:00:23 2025 GMT
        Subject: CN=C406BE38E51B85EAE8861A5FE8DF6F8260A4D7A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2f:e0:7f:ad:38:c1:7b:51:f6:0d:d1:ed:f2:
                    bb:35:68:49:34:54:c4:78:53:1f:81:47:74:8d:4d:
                    c6:81:79:57:e7:43:32:49:11:fe:61:4c:23:0e:f6:
                    ea:54:04:77:ce:18:63:e7:7f:b9:f6:04:80:6f:2e:
                    66:07:62:66:c2:3b:79:e1:6f:df:3f:47:0c:a7:93:
                    4a:d8:4c:1d:7f:2f:68:9c:9b:c3:53:de:fb:b5:92:
                    46:fd:96:1c:ad:e1:5f:e0:bb:f2:37:4a:15:e1:8b:
                    a6:e1:31:1e:4a:38:cb:fd:4b:cd:d7:29:3e:81:79:
                    c8:79:16:5a:c7:77:11:95:3b:3a:d8:b0:f4:34:dd:
                    8f:0c:c1:41:c7:92:0c:e0:43:30:89:e6:85:14:15:
                    44:8d:28:34:6f:51:c2:fa:e3:f5:10:d8:95:bc:bd:
                    ea:da:93:19:4c:3b:3f:0f:fd:b7:b3:02:00:fb:04:
                    13:9a:b8:e9:09:38:2e:66:eb:be:55:35:eb:9e:7d:
                    6d:fa:f5:79:8b:f5:c7:88:1c:90:a7:50:6f:a9:1e:
                    dc:cd:ec:e6:42:49:0c:95:69:9c:a2:d2:02:2c:ed:
                    12:83:36:b7:93:b8:ad:3e:a6:38:45:26:28:7a:a8:
                    11:65:94:b7:58:fb:c7:f1:19:4d:db:38:30:46:aa:
                    d0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:06:BE:38:E5:1B:85:EA:E8:86:1A:5F:E8:DF:6F:82:60:A4:D7:A0
            X509v3 Authority Key Identifier:
                keyid:93:31:5F:BB:DD:47:7E:02:48:49:BB:6F:66:D8:FB:94:39:5F:63:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/202400/2/93315FBBDD477E024849BB6F66D8FB94395F6350.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzFfu91HfgJISbtvZtj7lDlfY1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/202400/2/93315FBBDD477E024849BB6F66D8FB94395F6350.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:09:43:6c:b7:26:e2:9a:36:f2:ed:81:8c:a1:9d:26:a6:42:
         7f:cb:13:c2:37:66:5b:da:9a:de:7d:19:62:81:8d:c8:54:d1:
         68:d0:7a:b6:98:de:32:4a:e4:44:cf:44:52:1f:88:39:96:4d:
         18:ab:a3:12:fe:86:6a:1e:6a:e6:8c:29:75:72:1e:58:5f:83:
         62:41:bb:23:7d:ea:5e:b5:46:16:ff:34:3f:49:71:ac:47:72:
         83:83:d8:f4:53:e5:ae:20:b1:8f:7c:e7:d6:0b:f7:8d:e9:ab:
         81:e9:62:02:45:00:99:ba:f5:58:a7:26:5a:8b:22:48:b6:de:
         1f:98:3e:bc:b1:b0:76:d7:b6:ce:d3:e2:b0:2f:25:88:c5:aa:
         7a:58:e6:e4:a0:f0:a9:f8:e7:6b:27:33:ca:81:b4:e7:a6:2d:
         7f:93:60:25:a6:ba:9c:d3:46:6d:17:4d:65:5a:ca:1f:00:c4:
         5c:bc:f6:81:aa:da:00:24:cd:79:d7:a1:71:d7:81:de:ce:e7:
         b2:31:19:f8:4a:6a:5f:84:0c:99:65:d2:28:03:26:f3:c5:46:
         89:56:80:fe:ab:21:e4:be:d6:06:04:79:51:3b:a9:db:78:ff:
         f6:ce:c6:49:36:51:7a:f6:db:28:98:35:20:a8:2a:46:98:85:
         e0:8b:a0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:03:42 2025 by rpki-client