Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1949/h80v1ZxgQ8yDCWlYE4HXooB-8sc.mft
File:                     h80v1ZxgQ8yDCWlYE4HXooB-8sc.mft (raw, json)
Hash identifier:          3J+hWruPBtuUxS4ltULEXq3PiO0Vvihke02U5TYQE6g=
Subject key identifier:   25:85:63:D0:47:CC:AD:76:E3:E3:60:BE:80:9C:CE:B7:17:39:0E:21
Authority key identifier: 87:CD:2F:D5:9C:60:43:CC:83:09:69:58:13:81:D7:A2:80:7E:F2:C7
Certificate issuer:       /CN=87CD2FD59C6043CC830969581381D7A2807EF2C7
Certificate serial:       21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h80v1ZxgQ8yDCWlYE4HXooB-8sc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/h80v1ZxgQ8yDCWlYE4HXooB-8sc.mft
Manifest number:          02D4
Signing time:             Sun 16 Feb 2025 17:52:52 +0000
Manifest this update:     Sun 16 Feb 2025 17:52:52 +0000
Manifest next update:     Mon 03 Mar 2025 17:52:52 +0000
Files and hashes:         1: h80v1ZxgQ8yDCWlYE4HXooB-8sc.crl (hash: 0+Qkw7FAogThJUr9hYqiEcr7MUoFbgmWfmVqVc14rfg=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/h80v1ZxgQ8yDCWlYE4HXooB-8sc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/h80v1ZxgQ8yDCWlYE4HXooB-8sc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h80v1ZxgQ8yDCWlYE4HXooB-8sc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87CD2FD59C6043CC830969581381D7A2807EF2C7
        Validity
            Not Before: Feb 15 01:35:18 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=258563D047CCAD76E3E360BE809CCEB717390E21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9e:32:e7:f9:a5:8e:66:9e:2d:08:5a:78:62:
                    db:cf:38:87:82:b1:f4:d5:9d:1e:ee:79:e7:3b:49:
                    e0:ea:a5:46:7e:66:72:95:ab:0d:04:5d:bb:b4:7e:
                    62:05:a9:77:9e:83:fc:56:a8:0d:3e:ea:3c:2a:fc:
                    92:f3:b3:c9:22:84:88:5f:c0:c2:b5:f4:7c:01:fd:
                    9e:09:1d:2c:17:09:5f:45:a1:04:30:9d:09:b8:1a:
                    4b:3f:c3:0c:4f:ba:52:5d:2f:40:4c:21:69:fa:c6:
                    56:87:d5:10:ad:5c:d6:58:bf:60:e9:52:db:68:a9:
                    73:10:ef:17:b0:e7:a8:ad:ec:9b:d8:00:93:4a:f2:
                    69:87:a2:ce:9c:04:9f:7a:fe:af:7f:07:1e:8e:57:
                    84:ba:7c:c7:d1:94:ec:af:74:78:3a:b0:bc:9c:85:
                    77:62:ba:a8:eb:da:1d:7f:c2:e6:21:40:af:6a:18:
                    2c:0f:4f:be:ac:9e:82:c9:fe:6f:87:bc:72:01:29:
                    f6:c8:77:a1:4b:02:31:50:9e:f9:16:b0:8e:1c:6a:
                    1e:38:17:4a:20:86:75:ec:7a:20:9c:16:5a:a0:e5:
                    cf:c8:6f:d7:07:1f:e3:f8:bf:64:30:19:80:53:21:
                    8f:5c:5d:d4:ed:bb:e5:b6:54:f3:f0:d1:27:4f:8d:
                    09:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:85:63:D0:47:CC:AD:76:E3:E3:60:BE:80:9C:CE:B7:17:39:0E:21
            X509v3 Authority Key Identifier:
                keyid:87:CD:2F:D5:9C:60:43:CC:83:09:69:58:13:81:D7:A2:80:7E:F2:C7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/h80v1ZxgQ8yDCWlYE4HXooB-8sc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h80v1ZxgQ8yDCWlYE4HXooB-8sc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/h80v1ZxgQ8yDCWlYE4HXooB-8sc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:3c:20:9d:8a:22:71:8d:b7:65:68:50:8d:1e:14:e3:8d:5d:
         2a:c1:b9:91:ae:63:fd:35:99:f7:08:01:ba:a7:d6:4d:e5:a2:
         26:cc:c9:48:68:bc:bb:a3:c2:0d:58:a5:5b:2b:4a:e2:b4:80:
         b0:21:5c:75:54:37:0f:cf:9e:f0:05:8e:f7:9c:2f:4c:d6:a3:
         2a:6b:91:d2:d2:66:9c:92:ea:37:b3:a0:c8:4b:ff:8d:43:3a:
         d1:a7:5a:12:0a:81:3b:67:a1:a7:09:78:c0:be:b3:50:ef:e0:
         77:ab:5a:dd:db:18:86:0f:8b:9a:e0:95:46:83:f5:47:4a:eb:
         88:15:cc:7e:8a:35:51:a8:e8:5c:72:fd:ba:73:dc:ba:c2:58:
         4f:1f:20:cc:90:3c:bd:8f:8e:76:79:86:85:35:93:5b:c3:2e:
         d5:d9:ee:16:3e:ad:8b:0e:90:96:c1:40:86:fa:91:1b:9b:ac:
         76:58:b5:70:d3:cd:f2:46:f4:ec:4f:e3:c2:f9:9c:49:f2:94:
         44:7e:c8:78:f1:48:13:00:65:ec:bf:c9:e4:4d:86:7f:fc:d3:
         ba:0a:89:15:b6:5e:8b:4c:09:e4:77:2d:e4:6c:92:c8:c0:d1:
         67:f8:d6:dd:eb:8a:9c:10:3e:b1:cb:d2:de:1c:93:5f:a7:1f:
         f8:57:bc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:26 2025 by rpki-client