Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1326/IDGu-ghglvkKwRY7Um329B-HfKw.mft
File:                     IDGu-ghglvkKwRY7Um329B-HfKw.mft (raw, json)
Hash identifier:          MFqx30G96lGZnuUqqP7j1zytLrl2gEHJn1pnDJ1BRCk=
Subject key identifier:   95:92:81:A1:A8:8E:24:18:15:5D:0B:0C:2E:13:02:1D:ED:7C:C8:B8
Authority key identifier: 20:31:AE:FA:08:60:96:F9:0A:C1:16:3B:52:6D:F6:F4:1F:87:7C:AC
Certificate issuer:       /CN=2031AEFA086096F90AC1163B526DF6F41F877CAC
Certificate serial:       05
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDGu-ghglvkKwRY7Um329B-HfKw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1326/IDGu-ghglvkKwRY7Um329B-HfKw.mft
Manifest number:          12
Signing time:             Thu 30 May 2024 01:43:17 +0000
Manifest this update:     Thu 30 May 2024 01:43:17 +0000
Manifest next update:     Sun 09 Jun 2024 01:43:17 +0000
Files and hashes:         1: IDGu-ghglvkKwRY7Um329B-HfKw.crl (hash: 3QinPPa7GG+5uOCRNS5RfMiOpI39Uf8g8Af4MiitJCQ=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1326/IDGu-ghglvkKwRY7Um329B-HfKw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1326/IDGu-ghglvkKwRY7Um329B-HfKw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDGu-ghglvkKwRY7Um329B-HfKw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2031AEFA086096F90AC1163B526DF6F41F877CAC
        Validity
            Not Before: May 15 01:38:33 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=959281A1A88E2418155D0B0C2E13021DED7CC8B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d3:fa:53:3c:d3:22:d1:32:8f:b0:37:23:98:
                    4a:e9:b9:7b:c8:38:b0:92:58:a2:38:c6:f1:fc:85:
                    b3:52:ee:e8:41:2e:20:c9:93:e1:a0:6c:05:d1:69:
                    10:ea:d4:6b:ce:84:c2:59:48:9c:73:d5:b9:3b:bf:
                    ba:50:7d:66:b2:31:f3:a1:be:95:6c:65:4a:dd:3f:
                    c9:a0:dc:a7:51:32:91:43:18:33:02:d8:e2:6a:7e:
                    e9:b8:08:e7:3f:4f:dd:e1:1e:c1:1a:8f:83:20:89:
                    1e:fa:ad:7b:62:51:4e:54:f8:7f:db:7d:4b:96:da:
                    41:aa:e7:1d:3f:3c:91:e8:2b:37:8e:a6:e1:79:97:
                    dd:78:ae:d5:4d:7b:15:b8:6b:a6:93:2e:76:9a:91:
                    4a:99:3b:8a:ce:1b:f0:5a:bf:35:db:7d:c4:a9:23:
                    00:ed:44:01:15:8f:06:a5:77:55:62:bb:3c:b1:02:
                    c2:12:fb:cb:9f:3c:c2:f1:09:26:d1:7d:0a:26:21:
                    0e:44:e6:aa:88:73:4c:b4:02:f2:0a:17:cb:de:3d:
                    47:48:ad:b6:cf:10:b1:38:ad:e4:1c:30:1f:64:42:
                    86:9c:84:2a:df:c5:d0:b5:60:2f:8c:09:11:30:ed:
                    16:72:9d:6a:bc:fb:04:1a:8e:ed:03:ef:8c:ff:12:
                    5a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:92:81:A1:A8:8E:24:18:15:5D:0B:0C:2E:13:02:1D:ED:7C:C8:B8
            X509v3 Authority Key Identifier:
                keyid:20:31:AE:FA:08:60:96:F9:0A:C1:16:3B:52:6D:F6:F4:1F:87:7C:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1326/IDGu-ghglvkKwRY7Um329B-HfKw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDGu-ghglvkKwRY7Um329B-HfKw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1326/IDGu-ghglvkKwRY7Um329B-HfKw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:90:b3:8f:58:07:a9:2b:a4:c5:bf:79:d1:4e:f2:17:57:1f:
         5f:8d:91:d7:29:61:39:9b:73:e7:db:2b:3d:2c:0f:52:46:27:
         0a:6d:2d:f5:80:53:92:ef:1a:c1:62:52:c4:6c:22:17:cf:13:
         f7:1e:26:ca:b0:4a:2b:6b:65:81:cc:e8:af:41:78:51:88:2d:
         b2:a6:bf:02:63:45:dd:d2:0f:2a:fc:40:5b:3c:73:ec:06:ac:
         4e:6a:09:0e:f1:34:d0:57:05:e5:e2:e8:7c:c3:7b:62:e8:2b:
         4d:1b:1f:60:38:c0:ae:c1:88:96:97:ba:89:4a:36:dd:da:92:
         4d:30:47:a7:ab:87:fb:16:d7:de:da:93:1f:77:6a:fa:ac:46:
         bb:83:ee:4d:4e:e9:c6:05:9c:dc:24:51:f8:98:57:04:1d:ff:
         c5:93:1e:ba:c5:07:53:06:e0:1f:de:37:99:52:09:6e:99:97:
         e4:82:f1:ce:06:85:0c:82:0d:b5:04:78:8c:fc:4f:1f:80:72:
         41:8e:9e:b4:27:3d:45:33:01:f2:03:78:c3:9d:f8:7b:8c:4e:
         bd:f3:58:9b:0a:5f:42:cc:78:46:fc:9a:5b:a4:90:a4:30:52:
         d8:72:76:07:39:7d:bc:cf:da:55:99:c4:36:5e:f4:8a:a3:cd:
         59:f4:bd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:08:50 2024 by rpki-client on console-fra.rpki-client.org