Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/158/DDDSD1aGuuqd0oV4siuy4eiUGYk.mft
File:                     DDDSD1aGuuqd0oV4siuy4eiUGYk.mft (raw, json)
Hash identifier:          zsJqVY2VEF5GBJk1ASEBxOMNZLj6sJMgqBy4w4XiS6I=
Subject key identifier:   22:CA:B7:49:DE:4E:59:7F:1C:94:A0:05:14:9D:51:B3:23:9F:71:69
Authority key identifier: 0C:30:D2:0F:56:86:BA:EA:9D:D2:85:78:B2:2B:B2:E1:E8:94:19:89
Certificate issuer:       /CN=0C30D20F5686BAEA9DD28578B22BB2E1E8941989
Certificate serial:       03
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DDDSD1aGuuqd0oV4siuy4eiUGYk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/158/DDDSD1aGuuqd0oV4siuy4eiUGYk.mft
Manifest number:          09
Signing time:             Thu 30 May 2024 01:34:25 +0000
Manifest this update:     Thu 30 May 2024 01:34:25 +0000
Manifest next update:     Sun 09 Jun 2024 01:34:25 +0000
Files and hashes:         1: DDDSD1aGuuqd0oV4siuy4eiUGYk.crl (hash: dDiapfbpPWHfGfcux1uVMseoPzsa2VJxrkb96WZhZTA=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/158/DDDSD1aGuuqd0oV4siuy4eiUGYk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/158/DDDSD1aGuuqd0oV4siuy4eiUGYk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DDDSD1aGuuqd0oV4siuy4eiUGYk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 08:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C30D20F5686BAEA9DD28578B22BB2E1E8941989
        Validity
            Not Before: May 15 01:30:22 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=22CAB749DE4E597F1C94A005149D51B3239F7169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f7:60:09:3d:40:ca:45:e2:c9:9f:22:8c:28:
                    6e:f5:ae:e8:e4:b2:f7:32:7c:42:a9:01:77:56:0d:
                    80:d6:42:43:e4:d2:3f:6a:43:fd:cf:7d:e4:18:7a:
                    c6:8d:1e:c5:65:e2:e5:ea:e7:1d:47:f4:80:a1:76:
                    32:2c:2f:b7:19:1d:8d:24:0a:d7:e6:e7:44:fb:5b:
                    87:08:f0:73:70:e6:7a:64:08:95:b0:0e:16:df:b2:
                    6f:76:e5:57:e8:77:d2:fd:0c:30:db:02:20:b7:99:
                    b9:59:89:d3:59:d5:46:a7:c2:1e:19:e2:15:f1:04:
                    83:90:ae:ef:f0:b4:b5:73:b7:6a:00:21:6e:b3:4f:
                    26:85:a0:a1:66:9c:be:72:cc:d8:a0:b5:23:f3:62:
                    71:9b:db:2e:fb:9d:b0:d1:2e:87:d9:46:cf:3b:a2:
                    ac:bb:df:71:d8:a6:7f:bd:45:6a:f6:8f:91:a9:4e:
                    f5:f7:ab:ad:4b:1a:6c:e0:1f:49:9f:17:06:19:bb:
                    b4:b3:a4:68:aa:e3:ba:d1:21:84:bb:e7:0c:e1:49:
                    c0:cc:96:2c:b6:98:42:db:94:ad:57:a0:c8:ed:9d:
                    98:2f:e8:8a:76:36:1b:4d:12:8a:ae:14:18:be:de:
                    84:86:67:15:cf:27:b9:42:4a:c2:a4:0a:d3:c9:36:
                    89:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CA:B7:49:DE:4E:59:7F:1C:94:A0:05:14:9D:51:B3:23:9F:71:69
            X509v3 Authority Key Identifier:
                keyid:0C:30:D2:0F:56:86:BA:EA:9D:D2:85:78:B2:2B:B2:E1:E8:94:19:89

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/158/DDDSD1aGuuqd0oV4siuy4eiUGYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DDDSD1aGuuqd0oV4siuy4eiUGYk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/158/DDDSD1aGuuqd0oV4siuy4eiUGYk.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:00:ec:f8:18:39:cf:78:5c:f2:f4:56:35:b5:a0:8e:73:e2:
         6b:a9:80:45:5b:f6:68:e3:72:fc:54:30:05:a1:f1:cb:40:86:
         25:be:02:31:64:66:aa:d6:c3:1b:c6:cd:a5:90:34:4b:4a:39:
         c9:ce:5a:1c:2a:19:5f:88:1a:8e:89:93:49:41:09:ea:d9:90:
         42:e3:f2:38:f6:47:5c:91:bb:46:f8:f9:e7:69:ce:8f:fd:e8:
         43:03:4d:f0:f2:a7:9a:9b:f7:53:11:78:02:51:ac:51:fc:d3:
         c5:46:8f:db:bb:26:fb:3f:6a:36:2c:fa:90:95:6c:c3:58:16:
         f8:1c:e3:33:3f:b1:8f:f7:e2:9b:74:8a:50:05:25:6e:ab:3b:
         b5:b6:1b:ca:4a:06:8f:c1:2a:ea:ce:bb:98:21:98:fb:b3:d8:
         44:f5:ce:e8:f6:66:91:14:40:a0:9c:0c:6f:88:e5:de:d0:f6:
         e1:92:46:d8:fd:4b:fb:6a:dd:18:33:03:c2:57:17:90:1e:e1:
         73:cd:6a:fa:b3:ec:45:54:8d:2f:33:84:a3:0b:e6:9f:29:9d:
         b4:c5:50:07:50:bb:f9:ca:2c:a7:1c:46:d5:eb:8a:47:02:43:
         08:6b:9e:27:f7:cd:3e:0e:16:4b:8b:9c:b1:97:2f:c2:62:23:
         cb:0e:c4:7f
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwQzMw
RDIwRjU2ODZCQUVBOUREMjg1NzhCMjJCQjJFMUU4OTQxOTg5MB4XDTI0MDUxNTAx
MzAyMloXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoMjJDQUI3NDlERTRFNTk3
RjFDOTRBMDA1MTQ5RDUxQjMyMzlGNzE2OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALr3YAk9QMpF4smfIowobvWu6OSy9zJ8QqkBd1YNgNZCQ+TSP2pD
/c995Bh6xo0exWXi5ernHUf0gKF2MiwvtxkdjSQK1+bnRPtbhwjwc3DmemQIlbAO
Ft+yb3blV+h30v0MMNsCILeZuVmJ01nVRqfCHhniFfEEg5Cu7/C0tXO3agAhbrNP
JoWgoWacvnLM2KC1I/NicZvbLvudsNEuh9lGzzuirLvfcdimf71FavaPkalO9fer
rUsabOAfSZ8XBhm7tLOkaKrjutEhhLvnDOFJwMyWLLaYQtuUrVegyO2dmC/oinY2
G00Siq4UGL7ehIZnFc8nuUJKwqQK08k2iR0CAwEAAaOCAj0wggI5MB0GA1UdDgQW
BBQiyrdJ3k5ZfxyUoAUUnVGzI59xaTAfBgNVHSMEGDAWgBQMMNIPVoa66p3ShXiy
K7Lh6JQZiTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTU4L0RERFNEMWFHdXVxZDBvVjRzaXV5NGVpVUdZay5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0RERFNEMWFHdXVxZDBvVjRzaXV5NGVp
VUdZay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xNTgvREREU0QxYUd1dXFkMG9WNHNpdXk0ZWlVR1lrLm1mdDBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBACAA7PgYOc94XPL0VjW1oI5z4mupgEVb9mjjcvxUMAWh8ctAhiW+AjFkZqrW
wxvGzaWQNEtKOcnOWhwqGV+IGo6Jk0lBCerZkELj8jj2R1yRu0b4+edpzo/96EMD
TfDyp5qb91MReAJRrFH808VGj9u7Jvs/ajYs+pCVbMNYFvgc4zM/sY/34pt0ilAF
JW6rO7W2G8pKBo/BKurOu5ghmPuz2ET1zuj2ZpEUQKCcDG+I5d7Q9uGSRtj9S/tq
3RgzA8JXF5Ae4XPNavqz7EVUjS8zhKML5p8pnbTFUAdQu/nKLKccRtXrikcCQwhr
nif3zT4OFkuLnLGXL8JiI8sOxH8=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:42 2024 by rpki-client on console-fra.rpki-client.org