Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1031/UfG7gTOs0Y_n9d9sNQxEOm2VeXU.mft
File:                     UfG7gTOs0Y_n9d9sNQxEOm2VeXU.mft (raw, json)
Hash identifier:          INwQuGlIn59X9PlRbZZ0vyrI4btnZ46OS2EmA/I4Q/g=
Subject key identifier:   BF:B2:E6:18:86:11:A0:48:90:51:5F:05:EF:6D:BF:00:EE:4E:80:E7
Authority key identifier: 51:F1:BB:81:33:AC:D1:8F:E7:F5:DF:6C:35:0C:44:3A:6D:95:79:75
Certificate issuer:       /CN=51F1BB8133ACD18FE7F5DF6C350C443A6D957975
Certificate serial:       08
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UfG7gTOs0Y_n9d9sNQxEOm2VeXU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1031/UfG7gTOs0Y_n9d9sNQxEOm2VeXU.mft
Manifest number:          71
Signing time:             Fri 22 Nov 2024 14:54:46 +0000
Manifest this update:     Fri 22 Nov 2024 14:54:46 +0000
Manifest next update:     Sat 07 Dec 2024 14:54:46 +0000
Files and hashes:         1: UfG7gTOs0Y_n9d9sNQxEOm2VeXU.crl (hash: b3y6Z6moK53qyWuEFdE1yM7Bb+IDy1l7QEgFfqsCvds=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1031/UfG7gTOs0Y_n9d9sNQxEOm2VeXU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1031/UfG7gTOs0Y_n9d9sNQxEOm2VeXU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UfG7gTOs0Y_n9d9sNQxEOm2VeXU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51F1BB8133ACD18FE7F5DF6C350C443A6D957975
        Validity
            Not Before: Nov 15 01:38:20 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=BFB2E6188611A04890515F05EF6DBF00EE4E80E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a7:9f:86:1c:09:3f:8d:32:e0:f5:32:3b:69:
                    f6:57:17:aa:9b:8f:85:af:2f:89:2b:76:be:a5:94:
                    43:80:57:d3:99:73:05:d6:db:f1:82:5d:ae:76:e0:
                    9a:be:e9:56:c2:88:d3:fa:10:54:e3:c8:81:22:57:
                    20:30:7a:6b:44:04:5b:23:a2:08:2f:f7:dc:6d:7f:
                    d9:24:02:93:d3:2d:ea:4d:e2:02:b6:81:a1:91:bc:
                    8a:6e:e1:7b:ba:81:99:1b:89:21:e4:00:ee:47:f6:
                    87:66:a6:73:0c:28:37:84:5c:ea:71:5c:c0:54:df:
                    5d:b8:38:7f:19:02:8e:b2:2a:2a:c1:f1:0a:d3:d1:
                    c5:cd:22:8a:89:66:29:18:4d:4b:30:c6:86:92:36:
                    aa:ef:23:f4:c0:6c:ac:76:5c:5f:a8:8f:fc:87:14:
                    e4:5e:2a:26:aa:a3:f8:7a:7b:da:a0:3b:49:64:4e:
                    52:49:59:28:8a:76:b2:d5:95:f4:82:d8:dd:58:bc:
                    2f:f4:4f:29:98:59:07:01:0e:f3:17:5a:43:4f:93:
                    8b:46:80:f1:d5:21:27:92:35:82:7d:a7:83:75:71:
                    50:44:ac:76:b5:e6:f3:88:ce:92:59:86:cc:d3:d5:
                    1a:d8:7f:7c:21:ee:e8:85:3d:05:96:72:b7:49:98:
                    fa:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B2:E6:18:86:11:A0:48:90:51:5F:05:EF:6D:BF:00:EE:4E:80:E7
            X509v3 Authority Key Identifier:
                keyid:51:F1:BB:81:33:AC:D1:8F:E7:F5:DF:6C:35:0C:44:3A:6D:95:79:75

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1031/UfG7gTOs0Y_n9d9sNQxEOm2VeXU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UfG7gTOs0Y_n9d9sNQxEOm2VeXU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1031/UfG7gTOs0Y_n9d9sNQxEOm2VeXU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:4b:91:5f:38:d4:6b:94:f1:77:1e:a3:db:09:ff:a7:18:13:
         e8:4b:00:bc:e7:75:2e:f8:12:cf:5e:ef:71:c5:6a:68:f9:e1:
         ec:72:b9:8d:c2:90:f6:75:a7:87:fc:c0:78:8b:c4:f3:47:f4:
         97:5c:ba:51:3a:a3:1c:df:1d:fb:49:19:29:67:84:fc:7d:ba:
         51:0e:33:83:2c:86:b3:8c:81:86:9c:b6:99:76:7d:d8:6f:42:
         f7:55:36:4f:ba:3e:6f:0d:36:0b:0f:0f:2e:ce:a4:e2:a2:a1:
         15:ad:cb:4f:29:07:4a:33:0f:60:99:96:3e:04:a6:e8:4a:26:
         8a:90:26:ba:79:fd:2c:a8:8d:26:d6:86:86:35:52:05:f6:3d:
         77:b0:cb:b0:e1:6d:3b:31:56:89:8a:03:67:1a:77:79:ea:36:
         29:3c:8f:06:0c:87:bd:3f:80:5b:76:fc:4e:06:06:9f:49:8d:
         99:c5:45:e5:fb:7f:5a:22:84:d5:01:bb:65:b9:72:0b:6f:f1:
         b5:89:3c:11:f7:b1:f5:be:7b:24:48:bf:1b:29:ad:5e:56:28:
         1a:ff:03:0d:a4:27:16:d0:8b:46:d8:b4:f0:15:33:c4:f8:71:
         ef:eb:0b:2b:ed:fa:c8:ba:68:d3:d1:bb:39:f3:da:f5:84:b7:
         9b:75:31:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:25 2024 by rpki-client on console-ams.rpki-client.org