Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.mft
File:                     JFBahrANzQW6NgvKZq3_YCvZWqg.mft (raw, json)
Hash identifier:          M+LaLqydhhKvGwnFj05K2oZvkco3G1W3BjZ7R+jGXho=
Subject key identifier:   37:54:72:5C:CF:50:D9:28:FB:7B:09:EA:73:AD:61:6E:C2:6B:18:2A
Authority key identifier: 24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8
Certificate issuer:       /CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
Certificate serial:       6F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.mft
Manifest number:          12FA
Signing time:             Mon 25 Nov 2024 21:56:26 +0000
Manifest this update:     Mon 25 Nov 2024 21:56:26 +0000
Manifest next update:     Tue 10 Dec 2024 21:56:26 +0000
Files and hashes:         1: D3VoYfO8IcRa8JFV6StpCvq1AS8.roa (hash: KmWoyH/+NF0iStPqvGXIHZZGRAgUEeG6cwMPCgbbE2I=)
                          2: JFBahrANzQW6NgvKZq3_YCvZWqg.crl (hash: StCOuF9+BmPgPrOMf7ngl8pPC8bILQrykED+W6lqYOQ=)
                          3: n6N9fDIIiC3YHZqG7mskVmqdK8w.roa (hash: aJiD/RQwLJORnkT1Xs32nehwNiBxq/kTpuO4crMKNLk=)
                          4: pLFJwHE-ENa1b5LMiISzZ6ycB70.roa (hash: bCr6i8eDBU4euAsbhoMXjw959CKdQxukA33YmKJvHmE=)
                          5: wFMwwjPkgeVp5bPks5hEhlE1OR4.roa (hash: RJ/Le3GD7m+lwU2PmIRlJO5wunK3ImqXwuIXGPAfEEI=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
        Validity
            Not Before: Nov 15 01:33:36 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=3754725CCF50D928FB7B09EA73AD616EC26B182A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:78:a7:b6:7f:99:b5:66:a9:91:70:29:1c:4f:
                    2b:39:f8:f8:29:34:1e:9c:dc:b1:a9:cc:ac:0d:58:
                    60:69:40:fd:75:c4:76:eb:52:3f:94:29:4b:c2:70:
                    12:1d:07:95:a4:8a:92:95:20:95:64:f0:6b:57:88:
                    f9:87:6d:95:d7:e9:9f:cc:a8:3c:d7:c4:11:81:5e:
                    d2:80:80:11:e2:38:7f:65:21:6f:80:44:6a:47:63:
                    3c:8a:91:62:42:c0:cd:70:ee:07:e4:ce:d5:80:e0:
                    0c:71:34:ed:e3:7b:e1:67:e1:55:21:6b:39:5b:58:
                    aa:5d:66:a4:2d:d0:ee:ae:6f:02:65:ee:6f:1a:c9:
                    e8:4d:2f:3f:6e:f9:12:21:aa:52:db:5e:ed:9c:75:
                    6d:ad:01:49:e2:bd:f1:2d:2e:12:99:4a:6f:1a:92:
                    b7:20:55:11:71:8c:6a:fb:ef:42:d8:c4:3a:17:8c:
                    67:5e:6d:42:3f:65:a3:b2:2f:5f:48:78:7f:18:f6:
                    65:0f:02:3e:5b:ac:3c:d4:d2:38:ed:45:6a:62:87:
                    a9:e3:b2:fe:83:30:b0:e1:ff:04:8c:ab:c6:11:aa:
                    c3:83:65:60:58:88:c7:94:e7:35:a4:67:57:99:f3:
                    1f:68:9b:7a:40:9b:51:70:94:ac:ef:cd:04:7d:97:
                    20:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:54:72:5C:CF:50:D9:28:FB:7B:09:EA:73:AD:61:6E:C2:6B:18:2A
            X509v3 Authority Key Identifier:
                keyid:24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:dc:06:e8:d0:bb:b9:2f:14:95:b1:7e:f8:c8:77:ff:56:79:
         7e:54:6c:b7:9c:38:55:59:de:7b:49:cb:c1:9b:94:ef:87:7a:
         23:1d:57:65:cc:91:b7:bb:6c:ac:93:0c:26:8c:04:bc:db:fd:
         38:91:86:6b:77:47:af:9a:8e:7d:fe:eb:56:e2:fd:c2:95:2d:
         b8:59:0e:db:bb:a3:d8:8d:20:ec:d0:cd:5b:ae:2f:a5:30:25:
         bf:8a:30:74:bd:aa:d1:68:d7:63:c6:b3:de:ae:54:9b:ec:60:
         a8:3d:70:8b:21:65:88:17:4d:0a:06:b4:87:69:c1:a3:e0:7a:
         b8:d6:04:a9:27:fb:f3:a6:fc:00:0c:4b:d6:75:b1:a1:f2:72:
         bd:dd:d3:e0:03:5f:4d:61:92:64:b8:11:79:b5:6f:69:60:6b:
         73:30:dc:3a:5f:a3:53:4b:17:96:ec:0d:1f:28:ae:42:f5:9b:
         2b:be:3d:6a:ae:09:53:b0:0c:c6:d7:c0:ab:fb:49:dd:7d:7a:
         fc:ba:67:67:c3:e0:bf:6f:6b:db:1f:b7:68:09:59:61:3e:df:
         de:42:76:30:07:65:0f:1a:dd:44:b4:e6:b0:75:f7:b7:8a:0e:
         d2:fc:ba:52:68:3f:13:9d:43:85:03:c8:1a:f7:8a:e3:b2:b8:
         8d:d8:94:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:27 2024 by rpki-client on console-ams.rpki-client.org