Manifest

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/simple/2/BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808.mft
File:                     BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808.mft (raw, json)
Hash identifier:          arBYLt7tTylfWDQFWnJZuWH0PHwjXfTnmXDQKwnhQbs=
Subject key identifier:   CA:A5:4C:AD:B3:38:4D:9D:A7:D1:B4:F0:85:00:39:D2:06:2A:A7:45
Authority key identifier: BF:62:B3:9E:CA:ED:B0:C4:EF:1B:AB:32:7D:1A:9A:54:51:FB:88:08
Certificate issuer:       /CN=A91E8DF50000/serialNumber=BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808
Certificate serial:       4CFC7F4BF89BDB38431DEA7AB9F94FB7FBEB14E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2KznsrtsMTvG6syfRqaVFH7iAg.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/simple/2/BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808.mft
Manifest number:          2B
Signing time:             Thu 26 Dec 2024 19:09:57 +0000
Manifest this update:     Thu 26 Dec 2024 19:04:57 +0000
Manifest next update:     Fri 27 Dec 2024 21:15:57 +0000
Files and hashes:         1: 3130332e3232342e39322e302f32342d3234203d3e20313531313838.roa (hash: oI/iyPCKE7Dhiyna6BSlrjwcht0MioCVz33JmPEPdpg=)
                          2: 3130332e3232342e39322e302f32342d3234203d3e203332353935.roa (hash: hL2WxXdpEmlHDA0wQO/yYnmtaJfEdPaQRBSGQikxaZE=)
                          3: 3130332e3232342e39322e302f32342d3234203d3e20323135333634.roa (hash: 5mYj+UyXn59cm9WHj/jKSJrx8deUPU1w0xYp65xLx4g=)
                          4: 323030313a6466323a343563303a3a2f34372d3438203d3e203332353935.roa (hash: dpiE0Kb9EoEweztdhsPBmvX3mySrHEvg2zyPRUgRUGE=)
                          5: 3130332e3234342e3136332e302f32342d3234203d3e20313531313838.roa (hash: iAKsMSJgYc/F+LavCcjlyxEXsCUkLL4CKK+ghLCCS/k=)
                          6: 3130332e3234342e3136332e302f32342d3332203d3e20313432303436.roa (hash: d5phvaZPd2/L9thePGOSTNwlasQgkQLPsuxhjsVMdaI=)
                          7: 3130332e3234342e3136332e302f32342d3234203d3e203230343733.roa (hash: wZ0LAMToyajnk8K1wcrcFMPbvkkgy3krVL/403IsyPQ=)
                          8: BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808.crl (hash: iuxWHCYfCe/+Dr3hpix1QBNDfNHqhUWVmwoCVt7sABI=)

Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/simple/2/BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808.crl
                          rsync://oto.wakuwaku.ne.jp/pki/simple/2/BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2KznsrtsMTvG6syfRqaVFH7iAg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Dec 2024 21:15:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:fc:7f:4b:f8:9b:db:38:43:1d:ea:7a:b9:f9:4f:b7:fb:eb:14:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8DF50000/serialNumber=BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808
        Validity
            Not Before: Dec 26 19:04:57 2024 GMT
            Not After : Dec 27 21:15:57 2024 GMT
        Subject: CN=CAA54CADB3384D9DA7D1B4F0850039D2062AA745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e9:8f:f9:b9:22:97:9e:96:6e:6e:b1:5c:4c:
                    5f:7b:49:da:e8:a6:c3:f3:73:db:75:60:f1:c7:9b:
                    96:5a:1d:ca:00:63:06:cf:a0:bf:fa:bb:fc:8b:15:
                    3b:29:0e:25:3d:ba:96:4b:a8:5f:1b:db:de:ba:a9:
                    77:72:58:58:67:9d:10:29:32:cd:9b:d1:f6:38:ac:
                    99:54:a1:0d:cf:cf:3f:56:65:bc:01:e1:a1:25:54:
                    26:08:ae:78:56:f5:61:9a:06:12:ec:ac:ab:48:61:
                    b8:40:9c:38:23:32:71:c5:55:6a:64:d5:3a:7b:95:
                    57:ed:82:2b:31:7c:1f:f1:82:50:79:42:8e:16:3d:
                    24:01:da:95:95:c6:c0:73:e8:f8:26:92:d0:25:20:
                    cf:76:6d:31:a3:d8:e6:e8:38:c4:3f:9a:66:cf:15:
                    77:8b:12:cc:89:16:d3:75:04:75:d0:0b:45:81:d5:
                    f0:78:38:07:d1:fa:e4:c2:04:20:b8:cc:bd:77:c1:
                    10:13:2a:85:b2:83:29:fa:d6:12:99:c7:12:82:49:
                    de:e2:96:6e:7c:d1:c6:c2:57:75:ec:6a:e3:19:a9:
                    de:33:d5:ca:aa:04:01:cd:17:29:62:39:f1:95:78:
                    88:90:c2:0a:2e:0c:0e:50:d7:75:a2:6e:1d:f1:9b:
                    32:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A5:4C:AD:B3:38:4D:9D:A7:D1:B4:F0:85:00:39:D2:06:2A:A7:45
            X509v3 Authority Key Identifier:
                keyid:BF:62:B3:9E:CA:ED:B0:C4:EF:1B:AB:32:7D:1A:9A:54:51:FB:88:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/simple/2/BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2KznsrtsMTvG6syfRqaVFH7iAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/simple/2/BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:38:45:c9:a6:fc:27:c1:f9:f1:25:f5:7c:2f:8f:8e:10:d3:
         9e:da:bd:3c:a6:04:ac:a1:6c:69:f0:64:5a:6c:af:e5:29:57:
         f0:c9:dd:15:cf:b7:9b:65:d3:09:34:e5:c4:fa:da:ab:45:9b:
         2f:10:16:c1:7f:50:db:92:59:ed:18:4d:88:c8:ab:9f:fb:22:
         3a:45:7d:ea:55:e2:78:63:22:17:a2:51:f6:5a:90:00:f6:e3:
         88:f4:aa:6a:d5:74:7a:56:53:37:9c:d9:c3:09:f8:66:e6:a0:
         dd:04:fd:30:48:64:17:d5:2a:16:50:6e:db:52:15:b1:f3:cf:
         cf:a3:8a:75:d1:9b:39:b0:fe:4d:68:4f:7b:76:3d:e1:2f:90:
         b7:f8:8f:dc:a4:67:27:b2:e3:7f:58:ca:fa:d9:6d:12:11:aa:
         71:d9:f6:07:ce:f3:c1:6c:ee:97:cc:42:e2:8d:d5:67:8a:72:
         a4:96:01:64:76:2d:f3:50:3d:2e:05:c4:b0:0b:49:bb:17:32:
         d3:88:b2:5c:23:43:68:c7:a2:02:13:08:39:c0:25:39:d4:51:
         d3:d1:12:50:eb:e3:2e:e9:55:88:81:96:42:59:3d:94:03:94:
         01:b7:4c:77:e7:e6:f5:25:8c:9f:24:32:e2:8e:d1:6f:18:87:
         62:c6:92:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 22:24:35 2024 by rpki-client on console-fra.rpki-client.org