Manifest

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/202400/3/A76F868D806E980494C6D05A2395D10CA7EDC1A9.mft
File:                     A76F868D806E980494C6D05A2395D10CA7EDC1A9.mft (raw, json)
Hash identifier:          Ms5riByVwvTqYTjDx2T/aw1jQPiPvgj3SGt9oRUWB0o=
Subject key identifier:   E9:FC:CD:FE:24:86:7F:68:76:DF:36:F7:05:EE:1C:A4:C1:52:6A:FB
Authority key identifier: A7:6F:86:8D:80:6E:98:04:94:C6:D0:5A:23:95:D1:0C:A7:ED:C1:A9
Certificate issuer:       /CN=a76f868d806e980494c6d05a2395d10ca7edc1a9
Certificate serial:       0BA91E0F535125BF74C4265DF00C7F609975062A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p2-GjYBumASUxtBaI5XRDKftwak.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/202400/3/A76F868D806E980494C6D05A2395D10CA7EDC1A9.mft
Manifest number:          5D
Signing time:             Sun 02 Feb 2025 04:44:30 +0000
Manifest this update:     Sun 02 Feb 2025 04:39:30 +0000
Manifest next update:     Mon 03 Feb 2025 06:55:30 +0000
Files and hashes:         1: A76F868D806E980494C6D05A2395D10CA7EDC1A9.crl (hash: nzEBkwCbwovgkQ5fmQspZWrO+Jk53FyvuOal8+CtbrU=)
Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/202400/3/A76F868D806E980494C6D05A2395D10CA7EDC1A9.crl
                          rsync://oto.wakuwaku.ne.jp/pki/202400/3/A76F868D806E980494C6D05A2395D10CA7EDC1A9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p2-GjYBumASUxtBaI5XRDKftwak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a9:1e:0f:53:51:25:bf:74:c4:26:5d:f0:0c:7f:60:99:75:06:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a76f868d806e980494c6d05a2395d10ca7edc1a9
        Validity
            Not Before: Feb  2 04:39:30 2025 GMT
            Not After : Feb  3 06:55:30 2025 GMT
        Subject: CN=E9FCCDFE24867F6876DF36F705EE1CA4C1526AFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:60:7a:b6:1b:03:47:74:27:73:49:31:1a:77:
                    b9:72:ff:2f:83:f8:86:79:0c:9a:1a:2b:b8:44:49:
                    c1:81:16:f1:dc:e6:35:a1:f3:4e:60:f6:45:ef:cd:
                    c3:a8:7b:37:57:f9:c4:a2:d6:76:cd:24:c1:82:e2:
                    9d:17:63:bc:29:9b:9e:a2:0d:ec:6d:fe:fa:dc:a3:
                    34:99:34:77:96:28:2e:f6:8f:3c:4f:97:14:08:5d:
                    8f:5d:e2:55:3d:b6:17:24:af:34:a9:af:bf:0e:fd:
                    bd:12:df:84:93:55:d8:54:54:34:92:98:5f:a6:ea:
                    db:bc:66:63:ac:1e:34:c1:73:9a:3f:cb:16:54:83:
                    2f:45:c3:6f:d6:c3:79:d9:a6:75:91:8c:1c:b0:23:
                    05:6f:84:02:2f:f8:b3:37:91:e0:8a:36:79:ff:64:
                    f0:52:7f:88:3b:f6:73:32:7a:48:24:fb:a2:e3:3c:
                    7d:0d:78:70:56:66:f0:15:b7:d5:ed:57:51:c8:72:
                    91:98:ae:7e:bd:1d:fd:78:e4:e0:ff:b8:51:b7:0d:
                    6b:1e:05:ad:30:12:cf:ca:76:6d:19:e6:75:77:78:
                    f2:a9:0a:93:31:ec:c6:94:d7:cf:b0:f4:2a:2a:63:
                    72:01:39:95:fc:e3:cc:45:e9:fa:6e:9c:7f:0a:d6:
                    bd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FC:CD:FE:24:86:7F:68:76:DF:36:F7:05:EE:1C:A4:C1:52:6A:FB
            X509v3 Authority Key Identifier:
                keyid:A7:6F:86:8D:80:6E:98:04:94:C6:D0:5A:23:95:D1:0C:A7:ED:C1:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/202400/3/A76F868D806E980494C6D05A2395D10CA7EDC1A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2-GjYBumASUxtBaI5XRDKftwak.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/202400/3/A76F868D806E980494C6D05A2395D10CA7EDC1A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:85:bd:8e:2f:e4:89:9a:4f:73:74:46:4c:64:48:67:be:a5:
         5b:c4:c8:6a:45:8d:ef:1f:92:42:31:75:bb:c7:42:70:1e:cf:
         0f:7b:8c:be:11:4e:99:24:19:1a:05:a3:cc:d4:c7:57:e3:ea:
         19:ed:5f:04:5e:a6:a1:c4:5d:13:9c:19:22:5c:64:25:5f:45:
         a5:df:a0:3a:0e:73:56:5d:6d:ee:28:a5:44:b3:af:b5:7d:66:
         87:58:64:ef:29:f2:12:f0:73:fe:f9:8d:f1:61:02:66:b8:c2:
         e0:af:68:62:db:32:6e:3f:d7:48:52:a5:85:e5:20:d5:4e:85:
         d6:ae:e4:51:55:3c:17:f4:c4:22:95:29:c8:72:15:60:ca:48:
         18:46:58:a5:60:b9:80:eb:67:f4:22:26:cd:7d:22:ab:6e:e2:
         01:59:fc:45:6c:8a:0f:d0:0b:ba:39:58:ea:83:58:6c:1b:70:
         84:00:78:4e:03:31:a1:cf:7e:e2:63:80:0e:7e:b4:dd:b5:d2:
         75:3a:28:0e:93:e8:19:59:95:d4:75:db:89:a5:43:40:2f:2f:
         cf:54:72:94:0b:b1:cf:ef:61:46:5b:b0:0f:2f:58:9a:b6:23:
         f1:98:59:d3:03:9c:0a:17:3a:ee:06:cd:84:4b:3f:b7:be:c8:
         b9:48:a2:48
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUC6keD1NRJb90xCZd8Ax/YJl1BiowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTc2Zjg2OGQ4MDZlOTgwNDk0YzZkMDVhMjM5NWQxMGNh
N2VkYzFhOTAeFw0yNTAyMDIwNDM5MzBaFw0yNTAyMDMwNjU1MzBaMDMxMTAvBgNV
BAMTKEU5RkNDREZFMjQ4NjdGNjg3NkRGMzZGNzA1RUUxQ0E0QzE1MjZBRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVYHq2GwNHdCdzSTEad7ly/y+D
+IZ5DJoaK7hEScGBFvHc5jWh805g9kXvzcOoezdX+cSi1nbNJMGC4p0XY7wpm56i
Dext/vrcozSZNHeWKC72jzxPlxQIXY9d4lU9thckrzSpr78O/b0S34STVdhUVDSS
mF+m6tu8ZmOsHjTBc5o/yxZUgy9Fw2/Ww3nZpnWRjBywIwVvhAIv+LM3keCKNnn/
ZPBSf4g79nMyekgk+6LjPH0NeHBWZvAVt9XtV1HIcpGYrn69Hf145OD/uFG3DWse
Ba0wEs/Kdm0Z5nV3ePKpCpMx7MaU18+w9CoqY3IBOZX848xF6fpunH8K1r0LAgMB
AAGjggHnMIIB4zAdBgNVHQ4EFgQU6fzN/iSGf2h23zb3Be4cpMFSavswHwYDVR0j
BBgwFoAUp2+GjYBumASUxtBaI5XRDKftwakwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vb3RvLndha3V3YWt1Lm5lLmpwL3BraS8yMDI0
MDAvMy9BNzZGODY4RDgwNkU5ODA0OTRDNkQwNUEyMzk1RDEwQ0E3RURDMUE5LmNy
bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcDItR2pZQnVtQVNVeHRCYUk1WFJES2Z0
d2FrLmNlcjBwBggrBgEFBQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vb3Rv
Lndha3V3YWt1Lm5lLmpwL3BraS8yMDI0MDAvMy9BNzZGODY4RDgwNkU5ODA0OTRD
NkQwNUEyMzk1RDEwQ0E3RURDMUE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIW9ji/kiZpPc3RGTGRI
Z76lW8TIakWN7x+SQjF1u8dCcB7PD3uMvhFOmSQZGgWjzNTHV+PqGe1fBF6mocRd
E5wZIlxkJV9Fpd+gOg5zVl1t7iilRLOvtX1mh1hk7ynyEvBz/vmN8WECZrjC4K9o
Ytsybj/XSFKlheUg1U6F1q7kUVU8F/TEIpUpyHIVYMpIGEZYpWC5gOtn9CImzX0i
q27iAVn8RWyKD9ALujlY6oNYbBtwhAB4TgMxoc9+4mOADn603bXSdTooDpPoGVmV
1HXbiaVDQC8vz1RylAuxz+9hRluwDy9YmrYj8ZhZ0wOcChc67gbNhEs/t77IuUii
SA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:59:34 2025 by rpki-client