Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
File:                     dkKgfZrJ0ifqQveebRMcsakg7c4.mft (raw, json)
Hash identifier:          9wyUeLN3CFu84TiUZx0Usyo9CVHKNO0TsvXlmC637q0=
Subject key identifier:   7B:C3:13:07:1A:C5:BD:36:48:40:2A:22:4A:B2:CE:09:0A:43:B0:20
Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
Certificate issuer:       /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
Certificate serial:       20
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
Manifest number:          57
Signing time:             Thu 30 May 2024 01:41:00 +0000
Manifest this update:     Thu 30 May 2024 01:41:00 +0000
Manifest next update:     Sun 09 Jun 2024 01:41:00 +0000
Files and hashes:         1: 0XBeuLS7fhqxzsoC1266WZxvNHg.roa (hash: 2ARCfSvLJ/D5KX/IjxP3lMhmi/LYstyQvfoAR+NaKQU=)
                          2: 1E2xqk2DllGv88xEUlROUnCIUPc.roa (hash: J3n1c7lQOtCWGpQVE5Wc6WM+hisXlQitKBss2XzxmFo=)
                          3: 3nOfjAOTu7mH_rjFfwtnZ70LaV8.roa (hash: XppGZZJ1k/JWPm2KRs8zYtaR/XmzPupl7pBxPR4B1Uk=)
                          4: 5BJakx0Sc-JyuIlWQ6UYnCvLS6Y.roa (hash: pTLdhZxsAvK7+ywgqlEQqldRFEfbUUxfZRpWlVWU2GU=)
                          5: DY9zYn6oWnr--sQgc7ekDJ0NGbE.roa (hash: yJ+9PmOO2sAG6bwOsfy6AejBh6s1JilkRXk7e/He7sc=)
                          6: FNpsUrQDcNgtO5kMehke8XY9MXs.roa (hash: gmWldibIG7YA1eGsfJT4nmp5VTnqusbRXJaCm5jnOIc=)
                          7: Ldb6KBI_BPhT0bSWNd79koVC2KY.roa (hash: ZmX/YQNFqCfC8Ytv0rS47BnFFcx90r9dipvRjEf/6g0=)
                          8: aE7B-0MiHzJQ_iyhFqCMgiQyq2M.roa (hash: nZJrrCP0fM/bEcejjIFCEx25fp+K7PUrlCGl3eqVHBE=)
                          9: dkKgfZrJ0ifqQveebRMcsakg7c4.crl (hash: goFfMYX4FPQMnH3zt1YXPWlxFhyEd0H+oSFZy4/jdjU=)
                          10: mjUypesTP-DAtYz8QbWsIb2E-Pc.roa (hash: sdJbzTyY//mUZSrw26gao34qRicCZNhj+LQwZA9Cf8I=)
                          11: or6de6J7lmrdwkTyUF0dQ07ueD4.roa (hash: PYQ3o/aQaE1XIb88b5SsnWqKuWipeT0pfjx+wUVxuko=)
                          12: srUaVgSaQi_4zDQuHbKD_FpRrc4.roa (hash: tDaNrD8ABgjYqLaYL5KPfKTE14DEEblllvTimDJeyx4=)
                          13: z3ZtrV3v5LYvJ6UzYK3-LTVj88w.roa (hash: imMFVsH3ym87F9XJNtQlrvmeL1GyKz4a73JIYz+jick=)
                          14: z4AojZW-2dwWMqmvjFFg33DoFwU.roa (hash: UUElWRF3UknCbMlV8A1KX2UIN7y83J0Q/fxzJF0mkLU=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
        Validity
            Not Before: May 15 01:36:15 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=7BC313071AC5BD3648402A224AB2CE090A43B020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:67:70:28:2c:62:28:d9:7e:49:7d:82:25:65:
                    6f:2e:ed:ba:cc:77:8f:a8:f1:62:a0:1a:d5:19:36:
                    0d:6b:d2:2d:8c:4f:35:7c:3f:32:bf:0a:15:bd:77:
                    8e:d2:9e:2d:17:6d:4d:80:b8:4f:57:33:6e:8e:45:
                    a8:92:f7:af:ca:8e:20:4e:c6:90:51:13:d4:07:05:
                    44:43:74:bd:5a:c9:a0:51:20:3d:77:33:dc:32:55:
                    bc:85:10:03:4e:0f:57:54:74:44:23:d6:27:86:8c:
                    e0:c0:9c:81:9d:b5:a8:56:2c:30:07:96:5a:81:86:
                    9f:d3:84:ee:1d:1f:c7:23:d9:a4:f2:09:f9:e9:f5:
                    1a:77:dd:a1:c0:f2:40:65:87:62:99:7d:87:6b:08:
                    53:b6:95:6b:c8:e7:59:e3:32:1e:62:90:aa:41:a6:
                    30:79:56:fe:43:da:33:ec:c3:e5:c2:84:5d:4f:fe:
                    05:5d:58:fa:db:1a:7a:d0:33:8b:7e:cc:f4:10:66:
                    1a:35:6a:d3:f6:d7:35:b1:68:df:cc:af:ac:26:87:
                    10:e2:c8:c2:f9:1e:84:eb:f0:a7:4f:37:a8:7e:5d:
                    15:38:cd:bd:93:c1:82:55:56:ab:94:11:5f:2c:92:
                    5c:d4:d7:00:15:0b:86:02:54:76:91:05:0a:a7:01:
                    ec:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C3:13:07:1A:C5:BD:36:48:40:2A:22:4A:B2:CE:09:0A:43:B0:20
            X509v3 Authority Key Identifier:
                keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:57:d1:97:84:93:61:40:f3:85:36:47:37:2a:d8:86:e2:b2:
         62:46:1e:20:06:a0:dc:c7:16:e7:a9:b3:47:bd:d5:a0:ee:ec:
         0e:81:b7:2b:3f:e3:03:57:a1:7f:30:62:bf:3b:2d:c7:9d:fb:
         ed:e8:b8:9e:09:c0:c3:b8:f8:a5:80:c5:dc:c3:6b:94:8d:73:
         f8:c0:43:5f:c4:e1:0f:e7:d0:08:72:ac:81:88:e9:a7:e6:a8:
         29:fa:e0:5a:21:27:4a:27:21:e8:15:1a:03:47:50:b4:27:08:
         8e:d4:76:e7:f9:b0:b1:cb:b7:00:37:f8:65:ad:b1:d3:c8:cc:
         6a:c2:71:13:8b:04:9d:42:36:12:7a:b1:6b:90:62:5e:e5:d7:
         5d:93:1b:6a:95:0d:05:3c:4b:b1:88:82:15:45:55:25:58:9e:
         91:d8:fe:05:1a:54:8e:94:77:33:f7:e5:f3:3e:2a:d2:c0:63:
         12:de:9a:84:a8:59:ba:93:a3:74:9f:1f:6a:bd:e3:84:f1:20:
         83:0b:41:36:e6:33:00:dc:88:9d:da:f6:2e:d2:8c:d7:ec:7a:
         cc:cc:7a:a1:0e:7b:70:79:7b:fc:ff:3b:f6:80:dc:2f:df:c3:
         7c:69:08:3d:86:0a:84:34:5b:a0:c1:93:71:90:67:72:92:1c:
         92:71:56:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:43 2024 by rpki-client on console-fra.rpki-client.org