Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft
File:                     cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft (raw, json)
Hash identifier:          NhoAKp2Z7/ngY8GRsr/aEs4WMAg+7uwibdZ57io60X8=
Subject key identifier:   B1:72:A9:09:F7:D4:0F:11:B7:C5:1F:4D:66:4C:B8:BD:18:64:D3:94
Authority key identifier: 71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D
Certificate issuer:       /CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
Certificate serial:       21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft
Manifest number:          20
Signing time:             Thu 30 May 2024 01:43:10 +0000
Manifest this update:     Thu 30 May 2024 01:43:10 +0000
Manifest next update:     Sun 09 Jun 2024 01:43:10 +0000
Files and hashes:         1: -xXmtYApqV8m8hsC5gl6d1KitQc.roa (hash: 5mOvnm8JqLDagbUQch8sRRn3wdw7IQYyfV1EhwD/GYA=)
                          2: 3BUh1mO7d57A-Qe9WNkd_i1nDHM.roa (hash: kSjSrsONCOpA+MfCtHtVEIp0l0aDQSZR/MTFUMV3BPw=)
                          3: 40Max3jiOiX6QsJ6-O4KXtVOVNU.roa (hash: KxrlBZI16YxtCzDC2bi53BNRihljKkQdzyDALZnJfZw=)
                          4: 4LydeYCBgAZoBVNnagZSY16-EgE.roa (hash: haOi1pqbZ+ZndT4iXFClbT06wA4v2ArQgOC99YH+HOE=)
                          5: 4i3MA9lZ0MEWgYRqw5NvxQDqjmw.roa (hash: sVEtzYdZ/8JbnyU3FbtN+lWupj5DdB3xAgRsUoRIR6A=)
                          6: 5p36mJ9S-oq0nKGGrWOMjimP6K4.roa (hash: jkf6HWaO5vM1xKjd+4FP6OieQGVPXNMPlWuG03VBP0k=)
                          7: 95HLXvutg_Z5xYHnST9rVY-F5H0.roa (hash: 7b9NVzzJVfDXLwFBMTboWMbjfiT/9UbGfiO+5W+wr0U=)
                          8: 9bim5_-SzZ9I_yj1G3XK1hDJ9ns.roa (hash: y25Qdj4sl/Gox56KVZkNwAJrjWOoOoYIUpmLJRqymwo=)
                          9: Cth57aJ-ao3eqpexY84iiTflo5k.roa (hash: KxriiSthGfn9Ab5HSccAL4Nyrne6mTDHIOzLRnQ5EJE=)
                          10: E6CA94o10MDDaO6vuTeRp1lcmes.roa (hash: ajJEH4p7wIbrGRW5PzrwmUORbRw6D4g1va/N5nL8PFQ=)
                          11: F1ahglejCO1RL7K5eTu5ka1JtiM.roa (hash: H3WwlWqfcuwkKeCLfLMKM3+O7e3/fZ5pe8hOnRb2hvg=)
                          12: FaIjcf0QgPSg2EOsuQITBfCSwag.roa (hash: ZEY7uGRunbyFftXjaDXAAZ+brNf33NlvsDj/I6/qyKs=)
                          13: KPv8qSoE9cO0RpKrydjdJwmy5sM.roa (hash: O/7Fu3qg5ILNNDsXai+64yz9nfMFq8Rl6kK+ugcCYjY=)
                          14: WEnvdegJNEdBuEbxsoteP4StB8o.roa (hash: pH8da7lMArJRdi/MQxBnE5SlFVt1hX6rm3P7+89Re3o=)
                          15: _M9la8aekMf-2FNMdkZzMfUqXyE.roa (hash: a9qViqV7ogg4Clmq174eGicq1yNeHZOw7HjJAOsooUY=)
                          16: bmxObCEzUEnvhKso7wc9PicPpEk.roa (hash: T+hoowe2S21WZjYzWDSuS4fc4yqShYL3Km6bPlHyA9A=)
                          17: brfd-XD_WRsfJj26bdliHMCmfcA.roa (hash: EUFSJx51uKzd/DTA4ltAWunc7W2chNZup2iSxQ4BtJk=)
                          18: byCtsXlubYvk0goFUjA12A_VnIo.roa (hash: ba/49wiBp7n+iERzXh/eTZLO0qU0yK7WUY84kSow1b0=)
                          19: cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl (hash: BZa7f9c7COjV6kN9Rs1jxGu21wxC9rSWJ4RQ16Njl4Q=)
                          20: dJ-LXKrW9pncgJQBGYL0r21Ss9g.roa (hash: UUUwBRh+h3A0efSiSR8CSWyUQbkLnw0iJ+vS3+QzKZA=)
                          21: fk4deyeHEqDE9jGiiJ8gu7hIjTA.roa (hash: qIUDiHE9IXbbdVnokIkg2JKazFbwq7IJawHoHRq8MTA=)
                          22: hSAgiB8ts9-sIrOJSnNLjyH396c.roa (hash: noEyZecLv2w1M1ChhKPFRT9Vls1V0WGvsNceoA3eLZI=)
                          23: kw2Q3wiolY2OzL9VNAit0pILbVc.roa (hash: o8ezU2mFyQvgYrn6bFqTankCpvdtLW8GsbWSMVjV3mU=)
                          24: pn7WgPuzmLSboQIa6tLWYGM0UKQ.roa (hash: qA+dyERMewN9K1SHUrNO+mDZ1TazjRT7GCIaHwWUGSA=)
                          25: qAv9-QM9WGeEynch7EVOxZ2X3Vo.roa (hash: Oa3wEaSonWwZHKyYOqLFg33tGK63/ynDSpgy7B00wcs=)
                          26: tOoWg2qOK4dJyfov-CT8QX1zlUU.roa (hash: W6u/08yBuvZDhsI0TVHVWbOrNKy9VxtrJT7Kmhs0C54=)
                          27: tnL-Z5ow6EqeMrcIz2FCpvj0qzs.roa (hash: 84h1Cu+aRsxVJrgqLoCPBSxkvXRHhzHEix1Q7VnL6JY=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
        Validity
            Not Before: May 15 01:38:23 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=B172A909F7D40F11B7C51F4D664CB8BD1864D394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a8:e3:98:cd:63:26:9f:84:fb:0e:e5:94:09:
                    fe:4f:f8:ce:20:98:6f:e2:fe:23:ff:d0:f8:71:d6:
                    1e:36:fd:50:1f:37:47:9e:c9:2d:f4:6a:a6:49:fe:
                    f2:cb:cd:8c:6d:dc:7a:6f:d8:e4:dc:cf:bc:f0:18:
                    30:81:1b:3d:79:a4:3e:38:a6:ef:07:c1:f6:d6:12:
                    2e:4f:3b:e9:a2:e2:96:26:26:4a:b8:ae:73:59:89:
                    9d:3c:83:0a:2d:69:bd:18:c8:ca:6e:5e:16:92:30:
                    32:2d:f6:99:2c:b1:4a:13:7f:dc:5c:28:4c:62:4c:
                    ba:9d:87:f2:2e:03:b2:d0:db:f1:e4:75:46:fc:85:
                    3a:58:dd:dc:24:00:93:0c:89:0c:83:9d:f3:2f:a3:
                    0e:08:14:28:d0:3c:4e:b4:d3:dc:36:c0:fc:d3:a0:
                    a7:a7:b5:0e:59:7e:19:86:9c:5c:13:78:85:5d:f2:
                    bf:48:94:33:cf:ba:97:0e:81:ec:49:b3:bd:ae:78:
                    b5:3d:fa:33:01:3a:c4:57:fe:b1:b0:97:3e:69:d2:
                    35:f1:49:5e:0e:c8:70:c6:9a:5e:66:57:cc:79:d2:
                    7d:42:ac:a9:38:50:c5:37:3d:dd:c4:c7:6f:64:5a:
                    f5:94:0b:c0:c0:4a:e5:eb:0c:cc:9a:ce:9e:c8:c0:
                    48:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:72:A9:09:F7:D4:0F:11:B7:C5:1F:4D:66:4C:B8:BD:18:64:D3:94
            X509v3 Authority Key Identifier:
                keyid:71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:2e:9a:f3:73:e7:cb:95:c6:a2:b2:c5:df:2c:a9:55:ae:04:
         34:32:a7:1a:75:a4:e7:1d:33:ae:e1:44:47:c9:c7:79:80:e3:
         42:ff:12:77:c9:23:b2:ca:cd:0a:9b:ec:30:30:78:49:07:94:
         2d:42:12:17:f1:31:5f:c4:2e:25:87:30:0c:3a:95:3e:fd:4f:
         f2:75:a1:c2:53:30:fa:9a:2d:e6:5f:e6:da:21:6b:36:70:bd:
         70:f9:4a:8d:e2:96:7b:f6:ac:eb:1a:eb:ca:6b:3d:3d:81:b5:
         30:19:55:fa:86:87:bc:91:c8:97:53:c4:95:60:69:d0:4f:f7:
         23:ca:c0:4d:36:d3:b3:4f:76:52:84:02:b4:2a:37:2c:41:04:
         c2:88:04:d0:42:f9:c7:40:10:5f:af:20:a1:a5:74:64:30:4f:
         c2:1d:99:6a:3c:88:b8:46:51:15:80:e7:5c:b9:af:85:3d:45:
         e2:cb:25:61:38:87:bd:ec:71:0a:cd:bb:6a:1f:cb:80:2d:c9:
         d3:77:7a:01:d2:e9:7a:94:c2:d1:04:e5:f8:2f:0d:c5:31:dd:
         dc:a3:48:a1:87:a1:f0:71:14:67:30:b0:50:78:b9:31:b5:65:
         1a:33:d9:df:65:04:d2:d8:94:1c:63:ad:9d:40:5b:47:e0:df:
         b4:58:47:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:38 2024 by rpki-client on console-ams.rpki-client.org