Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
File:                     lhvBhRJyKq-akNiYreqa93k8JUM.mft (raw, json)
Hash identifier:          z6G/9/tcKUCS+jpcYgvLG7iWY92TFSMJQOAsO67M66Q=
Subject key identifier:   52:47:14:7E:C7:B1:05:0F:D9:16:07:CB:93:43:04:89:B9:7E:6D:96
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       72
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
Manifest number:          0128
Signing time:             Fri 22 Nov 2024 06:47:31 +0000
Manifest this update:     Fri 22 Nov 2024 06:47:31 +0000
Manifest next update:     Sat 07 Dec 2024 06:47:31 +0000
Files and hashes:         1: 0HDsxTg9uw-4bpXQtNZpcPH9QKE.roa (hash: /25Sio1zQjKyGBFtkSn3MF/D7PTjWg4a6L8dZxbpweE=)
                          2: 0YpUfFsotJRFQf6Y_aahHrOFiCo.roa (hash: L9zpaP8GD/7W4KzRuW8jopJVxo+Utwf+fRDEFcxl9Hc=)
                          3: 13WECxCjEjm6dK6r2ycp0UaKNIg.roa (hash: PDyrbLmaFc5oxCNa6UKAdp/ADojVgIvUiMvvFKXrWB0=)
                          4: 1eQHe1k_lSJOrp-jdsX0kjOpA9s.roa (hash: IOBX4sTFVqFU9HAB8f86+uBBcjY8MaoobinyfaepK2s=)
                          5: 2WM5ApN90CowNCG9y_fCO9RuN2Q.roa (hash: YFX4k3tsW5y0sNX/WfQsP3bn18sezQKxWwB5XXxKQY4=)
                          6: 8m951bbMI-0C4gJ2UTIF8aXEQOg.roa (hash: 1ijezDV1NYr8x/9VBM+3esV9jrMgLV1fUIrzpS0aZgY=)
                          7: GF03KqJ4zh4H3IJoKpQY-KSVRBg.roa (hash: gO9wobeeOH1xl+HYFZP/XLUkdcB2cAjiBOoAyG/U4WU=)
                          8: HoJkcaz6JnbskcgUOiAjCPKLwMc.roa (hash: ZKjN0axxNfaPCg7p81buu5vfAoW9FEf4sxhGwAt7orc=)
                          9: LNQBIIq6PCih3K3b6u3897clrRE.roa (hash: H/YO7NtaxYf1tg2bOU9ta7RFd95OzaXNsW0haB1+aAw=)
                          10: MDKIOzMZv1uqOb-z-hDwyTkTe_Y.roa (hash: FmyL8oEDt+u0biA6H3KoF7MrMbbR9ldLOT9Yw759l84=)
                          11: ScnjeEQnfq9Q5px15RXeFmTbqgk.roa (hash: Y5nZKAgtB4vJY3DIgqaa61GDcSoyxFE7x15tj5h2Vn4=)
                          12: U79X3hT82B-5EXIkuXs3rltIA7c.roa (hash: ed3RHmZjZWk9Hud/CRAGORm1rF0e+EIALZfaYjPzXR4=)
                          13: aphWmhNQGHSr9e4Qe0F1l33b5p4.roa (hash: sD/5/L1Tpm3WEBl1qfJmd9fwbWFPVvlQYfca+q02How=)
                          14: iUqFvNWrJj4-XE-vsKXctwGNjUw.roa (hash: zqoM1N8eqx13d8e0XeDaXPAUabM5Mv8dorflf/KBCcU=)
                          15: ieItbJioQc_x9MaY5G9w_sfBlws.roa (hash: PXSxSWRo4XiKRxKrVJwJiMQQcydu8yIEFpXEwecd7UI=)
                          16: lhvBhRJyKq-akNiYreqa93k8JUM.crl (hash: A6Kyrj6ZzkvTi0nu1eS65fcSCJo5Kl96VryrAA5Kq1E=)
                          17: m1RX3Hln2pANBmbDh-xSOImgfvg.roa (hash: hZ/CJ+/S82ZUAW3Uh2LIv6gI4KMMW1hxzrPZiH4Mk1A=)
                          18: mzxqsrRIo7P8qd7-WyZzDzbTH24.roa (hash: RuznOLrlANLmCE+rN+bAcTOn4gucmTZs07lEq3qow/w=)
                          19: pFGl_ZX1fLyIAZMO42tb0tX4lTw.roa (hash: lF4Gef7SdjhhcXbNYDRtZXSPWKKd3Qhv57xjxLVla2A=)
                          20: xOc4qTUc-bCmHRo0pGD720zKryE.roa (hash: vDNDi+FaOGcPTvjpnZsgiccQggh9v3pOqoR+zNL5FNw=)
                          21: yPjiCb4Zc_IFcG7DbLQSSu3TI3Y.roa (hash: NzowJgGFgw/OELDZ+CF5E3OgjVe0GPD8cRAI6hlWqBM=)
                          22: yxm6ICSrKm8jxt9dhhCn7smYOV0.roa (hash: 7mTbRoSrIOhe9TR0lkYkEe+2TQBmTOex5YbNf5HcZfU=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Nov 15 01:36:05 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=5247147EC7B1050FD91607CB93430489B97E6D96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2a:a3:1d:c3:50:c0:ff:9a:79:81:73:d9:0e:
                    60:32:22:86:ee:3f:e2:a8:00:bb:40:12:28:ec:91:
                    51:93:54:c2:35:67:e4:55:e8:a7:2f:eb:ab:5a:4a:
                    72:5f:01:b9:ee:d3:0f:90:3b:fd:12:89:77:44:4e:
                    27:88:b2:04:58:5c:6d:0c:c3:cd:45:4b:e7:36:e8:
                    bb:32:48:8d:fe:b7:22:76:ee:4c:9d:24:d3:a6:ca:
                    46:31:82:7b:25:86:66:67:04:f6:e0:b1:8a:8e:0d:
                    b9:c0:24:ec:9a:82:da:42:ee:12:2b:4e:b6:6a:54:
                    e9:e6:b7:f4:6f:52:d3:f8:8e:97:8d:07:cd:1e:76:
                    9e:3e:59:c1:ab:24:50:e1:fe:aa:e6:34:fa:94:1b:
                    55:aa:1e:2c:a0:7a:15:28:14:ff:c9:b4:9a:6e:86:
                    84:94:f6:16:fa:c3:be:e9:2d:1b:b1:26:d7:a8:1a:
                    a6:79:93:d6:aa:59:1d:89:30:fd:ce:3a:0d:27:34:
                    63:f8:e3:6c:c4:06:80:83:95:1c:b6:90:5e:db:2a:
                    26:eb:59:ac:03:45:ab:7d:ed:e1:06:e5:dc:a1:58:
                    9f:5b:37:36:ba:c3:2b:49:73:04:98:b6:46:91:59:
                    32:f0:24:ab:ec:53:86:31:87:97:89:e7:04:82:80:
                    42:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:47:14:7E:C7:B1:05:0F:D9:16:07:CB:93:43:04:89:B9:7E:6D:96
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:31:d7:4b:53:7f:9b:68:86:14:2d:9c:04:e6:82:7e:61:0b:
         65:a0:34:98:a0:41:40:30:4a:35:e7:6a:ee:a4:05:25:92:f9:
         d1:e0:55:8e:c8:46:99:15:4a:0c:40:74:5c:5d:a9:5d:d4:b2:
         43:75:ce:0a:e8:2d:f6:04:d4:51:af:8a:fc:fb:ec:9d:f9:09:
         19:25:f0:e2:aa:0a:ec:a5:e1:47:71:45:b6:16:42:2f:8b:4c:
         5f:42:76:d7:a8:31:41:73:74:26:cc:8e:c8:2b:20:c6:4d:2f:
         1a:76:68:56:1b:72:fa:4e:1f:c6:8c:69:af:6c:79:74:a0:ba:
         7c:ed:c1:f2:65:24:f5:63:6a:57:af:ad:8d:2f:fe:f9:12:07:
         a0:ed:bf:5e:16:17:2a:3b:65:d0:d0:03:42:5c:63:7a:0d:04:
         81:96:7c:7d:3a:81:4b:eb:a8:80:27:cc:25:55:1c:c8:70:d4:
         9a:19:43:d3:73:1c:ea:52:31:b7:1b:80:1b:4a:62:fa:5f:af:
         95:13:6d:52:86:59:b6:85:4d:5d:d0:a7:06:7b:42:6b:f2:f3:
         5b:14:30:74:4b:ab:f1:ff:45:f7:42:b9:57:9e:7a:bd:3b:19:
         5f:d5:89:1b:f0:f0:26:71:1d:c7:17:16:41:ff:d4:67:d5:87:
         49:cc:ef:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:01:31 2024 by rpki-client on console-ams.rpki-client.org