Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft
File:                     uNB6WgKxtFmT5srvtH0dXnXaGTw.mft (raw, json)
Hash identifier:          dl7BXZvBzrv/pVq6S9rJr3LuWECzAyWL7VYjyJnE+Js=
Subject key identifier:   44:7B:BE:49:1F:C6:81:FB:F9:9E:7E:3F:AB:F3:D9:F9:E3:61:A7:C3
Authority key identifier: B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C
Certificate issuer:       /CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
Certificate serial:       2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft
Manifest number:          D0
Signing time:             Fri 22 Nov 2024 02:53:29 +0000
Manifest this update:     Fri 22 Nov 2024 02:53:29 +0000
Manifest next update:     Sat 07 Dec 2024 02:53:29 +0000
Files and hashes:         1: 93edHV41_PN13fqLleyP55gcsws.roa (hash: JZZKPed0ttvUGEiXmiSYQEXXZqDUZy6yhuQ07t0nZ64=)
                          2: ESI5gNYvLHKb8z7SnzISRN1oL_8.roa (hash: Og5gKlcJq+hjm6MuZ5jmXVawkaLD15jbUdfeYnwyZI8=)
                          3: I3v4h0IaQ-cxG2ZhlgwnxMmfy0s.roa (hash: 12WwUxpnWcx9StaWJSOgG2/yHw7jW9cCuv59qwbyRtg=)
                          4: IOboT_9NWoXH_EMdS995yLVf-9w.roa (hash: 2Jg/u7+6Nxwfa8GL6LUKoeeA1Q01UcZz8ulUWPHU/GI=)
                          5: VcvSFmqEE--LTsRH6AlUAu96uPk.roa (hash: dLYo8dVU18CsV0qiUnFTWgsAhPXhvnyVOWmV1bX2vRI=)
                          6: _Up6fTewJeGmPIbMoLtT9wUw3tc.roa (hash: zfprxkEFbds6T2EuFkrYwmRPpB4l3TDJja9UNsAAyGU=)
                          7: gqvhCX_JMSY71hVvf4CTrV30PJs.roa (hash: gaOVKksi0h6zEQcoxo6xEWyrn4ZZeYYXw4d/GWkhiiA=)
                          8: o7qsx79imzrAGvMc_tdfGqD_aYg.roa (hash: f1mfn7PjZPnOTqUJS2CcrweWBS1f97gEqFSZNNDFDIQ=)
                          9: oiwawvL7X3ScShAYfH-xkFiQRZQ.roa (hash: hKRb+bu3Q1UuzYCHymjXdRBhAO2Qtuiiox8/2pvD+tI=)
                          10: pK5ORJyQra70KPhT3ZuBPqDufgE.roa (hash: 629Jxos22A6ztCh9zYacrIGPj7clhy3DxBKjJUtH74o=)
                          11: sPqygdd4ZsiA_SQ4MNMRgXCe0jg.roa (hash: MGCzxrG4UeG7Q5fnp1EHjSfK22cPuGpbtEzP8m5kB8U=)
                          12: tG-yGGsSeYqBbc4y9K6XuwXKPdk.roa (hash: 8AvFst3NkJ1H2u7edcTp3prZi13T3acCAoHrcy29amo=)
                          13: uNB6WgKxtFmT5srvtH0dXnXaGTw.crl (hash: Gb2BsoA6hTOfq4qz55+WGxGx6pZAWF/QpDMBbEhw3ek=)
                          14: ucECDryohdRo2c7cDKe6z0M-4ao.roa (hash: jl5n5ap1Xe/3F3BrLCyuw5LShSOhlSt42Sc0SvJB4dk=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 05:23:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
        Validity
            Not Before: Nov 15 01:35:36 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=447BBE491FC681FBF99E7E3FABF3D9F9E361A7C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:06:d0:25:37:04:35:56:5a:8c:01:ff:7f:de:
                    58:c1:fc:37:b3:e8:c0:8d:e3:62:c7:14:f4:4e:c5:
                    e2:d1:15:da:d8:55:30:15:7e:4b:c4:7f:94:1e:f6:
                    a4:89:d7:ed:6b:94:dd:c1:2b:70:d4:3b:03:aa:de:
                    5d:c6:4a:5f:21:b9:ba:50:14:cf:10:84:b1:9a:a9:
                    17:f7:78:c3:3f:7d:2a:1e:b8:48:99:49:bd:ef:ec:
                    00:32:cd:7d:cd:41:1f:25:f7:f2:f3:b9:99:9c:86:
                    75:4b:80:af:72:4d:65:f8:2e:04:78:7f:69:a7:60:
                    0c:d6:c2:55:8d:fc:75:94:17:02:0c:36:dc:38:9a:
                    d6:e0:51:82:27:bf:c3:43:7c:53:4f:05:0a:ab:99:
                    e8:0b:4d:4b:b9:87:a7:5e:cc:a7:e4:d3:90:61:2e:
                    c9:f1:a9:33:a3:2b:1d:57:a4:0f:d5:14:f9:75:63:
                    ed:2e:d5:c2:12:4e:d6:33:96:fd:e9:ff:a9:b8:83:
                    7e:21:97:09:86:0e:0b:5c:68:45:5a:fa:27:27:08:
                    57:c7:75:e8:dd:5e:ba:65:51:6f:dd:9e:7c:71:9c:
                    cc:20:c8:ed:4d:26:b5:f6:8c:69:93:75:e0:fc:86:
                    de:e1:50:a4:9e:ab:39:26:4c:f7:3d:3e:0f:6f:52:
                    0f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7B:BE:49:1F:C6:81:FB:F9:9E:7E:3F:AB:F3:D9:F9:E3:61:A7:C3
            X509v3 Authority Key Identifier:
                keyid:B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:f8:8f:25:d0:ae:79:75:9f:03:c6:0c:d6:46:a0:0b:b6:1b:
         ea:40:06:a6:b4:4e:64:25:8a:86:01:3c:d1:ef:f5:33:7f:d3:
         10:53:60:f0:97:55:e7:b0:fd:9a:06:04:74:e9:a0:0f:76:15:
         36:e3:44:da:4a:84:98:df:5b:9a:0b:38:91:5b:62:40:b5:86:
         e5:af:08:46:76:63:19:ed:ce:fe:b5:ad:d4:59:bd:ae:4a:fd:
         75:a7:42:f9:c6:ae:5b:bc:23:4f:67:94:78:7c:e2:0f:70:53:
         71:71:f3:be:f0:7e:69:43:ea:c7:86:95:31:30:e7:ab:e3:89:
         67:e4:d6:de:84:fd:bd:e4:82:b3:f0:5a:f3:0f:ad:9b:fd:c8:
         7e:95:14:24:96:7a:07:1e:8c:2e:e5:47:c1:0a:b8:8c:22:f5:
         a0:30:d2:e0:fd:fa:11:e4:43:dd:d0:87:f5:56:66:78:9d:8c:
         1f:41:f0:7c:f9:0b:56:05:44:84:4a:26:3a:3c:a3:9c:81:5e:
         88:f8:72:28:5c:34:26:60:b8:35:b2:97:59:89:57:18:8c:9c:
         e8:d3:54:b1:b8:df:1e:94:2e:5d:f5:82:d1:f7:2a:89:22:bf:
         88:b3:cb:df:57:5c:a2:2f:38:41:a6:97:3c:7f:6d:e8:06:af:
         7a:31:2e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:25 2024 by rpki-client on console-ams.rpki-client.org