Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20080/6TJrat8po5TofAkNxhdE2NhsM4M.mft
File:                     6TJrat8po5TofAkNxhdE2NhsM4M.mft (raw, json)
Hash identifier:          xFjx4WfbJbbhDGWkKGjW7FBVX8ztNF9CYL1pyvAaxyo=
Subject key identifier:   E4:4D:A3:F9:F6:62:55:78:FA:27:06:92:72:C4:50:C9:DA:2E:80:39
Authority key identifier: E9:32:6B:6A:DF:29:A3:94:E8:7C:09:0D:C6:17:44:D8:D8:6C:33:83
Certificate issuer:       /CN=E9326B6ADF29A394E87C090DC61744D8D86C3383
Certificate serial:       3D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6TJrat8po5TofAkNxhdE2NhsM4M.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/6TJrat8po5TofAkNxhdE2NhsM4M.mft
Manifest number:          DF
Signing time:             Thu 30 May 2024 01:39:52 +0000
Manifest this update:     Thu 30 May 2024 01:39:52 +0000
Manifest next update:     Sun 09 Jun 2024 01:39:52 +0000
Files and hashes:         1: 6TJrat8po5TofAkNxhdE2NhsM4M.crl (hash: VxiQ9wL2EnpMRDbyT6/Sk4BGxb67sepgZG4H3HmsY+U=)
                          2: MF3kDzMAQAFQLawbsmZwWqJfUUE.roa (hash: +La+s4eJryi6Bdx+DXJsTlhrOeZpRVIVkiNRejlmONw=)
                          3: U-Ea3FwO4mR_R7-3n7iICzdQE84.roa (hash: tKkDSaPNrX2cyLlfflPi6slv6h4fLoXidZGSKHBRCW4=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/6TJrat8po5TofAkNxhdE2NhsM4M.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/6TJrat8po5TofAkNxhdE2NhsM4M.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6TJrat8po5TofAkNxhdE2NhsM4M.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9326B6ADF29A394E87C090DC61744D8D86C3383
        Validity
            Not Before: May 15 01:36:38 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=E44DA3F9F6625578FA27069272C450C9DA2E8039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ff:5b:d1:a7:c5:ec:98:25:75:bc:d1:7d:dc:a1:
                    7f:48:0a:e2:87:ee:fa:05:5e:fa:d4:3c:5c:c9:0f:
                    ce:40:dc:15:d3:b5:49:96:15:11:4f:0e:75:99:96:
                    67:41:c3:74:74:43:b3:40:0f:67:5f:08:9d:95:06:
                    14:51:d2:34:3f:32:70:b3:e6:8a:65:f6:82:d5:87:
                    69:06:80:0f:c8:9e:a2:8a:f5:b5:fb:54:77:40:a9:
                    77:b3:33:83:ae:bf:28:bc:ac:09:dd:55:81:a5:a5:
                    96:6c:c9:34:43:eb:e0:e7:82:9c:5c:2b:a5:99:82:
                    ef:e8:b8:c7:c2:64:0e:4e:f1:95:d7:2f:0d:64:d2:
                    9f:7f:58:cd:97:87:e4:fb:64:33:80:e5:d5:e4:18:
                    37:09:64:2c:eb:e9:77:80:a9:63:51:a6:45:83:52:
                    41:f5:f7:85:5f:9c:30:1f:d4:70:ee:c5:c5:cd:e9:
                    2d:ae:f2:cb:df:17:b3:d1:24:7e:51:5a:db:96:4b:
                    07:ab:81:68:6c:ac:e9:f4:96:d9:19:3f:1e:ce:7b:
                    ea:90:28:77:af:bc:9e:a8:35:e0:18:73:75:87:c4:
                    51:d4:67:c4:52:b8:29:f9:4b:3e:9a:71:58:a2:56:
                    4b:44:96:3a:b3:95:43:28:ac:e5:0f:e9:e0:a3:90:
                    d0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4D:A3:F9:F6:62:55:78:FA:27:06:92:72:C4:50:C9:DA:2E:80:39
            X509v3 Authority Key Identifier:
                keyid:E9:32:6B:6A:DF:29:A3:94:E8:7C:09:0D:C6:17:44:D8:D8:6C:33:83

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/6TJrat8po5TofAkNxhdE2NhsM4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6TJrat8po5TofAkNxhdE2NhsM4M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/6TJrat8po5TofAkNxhdE2NhsM4M.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:3a:11:0a:81:15:72:40:b8:f4:87:c1:92:c9:82:c1:d4:3e:
         53:df:8e:28:f4:64:a3:a8:ee:c4:30:29:b7:f3:b9:13:92:86:
         0a:ba:4c:7f:fe:09:8c:4c:ce:15:57:be:47:74:b0:6b:c0:c7:
         f6:92:93:66:b7:f5:d2:4d:a3:4f:36:d5:2e:5b:3a:00:36:6f:
         35:58:83:8d:46:44:bb:dc:4a:9d:8e:54:ac:ce:5d:06:6a:22:
         1b:08:b7:3c:22:64:d9:ee:38:1e:0a:b7:df:b3:c7:aa:ae:79:
         fc:d9:d4:3e:6d:e6:3a:e9:8d:38:8c:00:3b:e8:dc:94:e0:57:
         e2:ad:8c:63:db:2f:a9:75:a4:ba:67:ad:00:7a:75:11:26:5f:
         2e:a5:e0:ab:f3:2a:8e:7d:66:e5:01:70:9f:17:75:d7:8b:a9:
         a1:9c:d8:36:95:52:da:f9:55:da:74:31:ae:c7:30:ef:78:c3:
         c7:7b:cb:57:15:83:b0:5f:ef:af:58:52:b7:3c:f2:55:2a:66:
         ce:08:27:51:86:c7:55:42:ae:f6:d9:83:a0:ad:f8:31:65:e4:
         8f:1f:dc:e1:6f:a6:80:4f:c4:33:41:17:40:66:5b:58:da:d7:
         40:3c:99:c1:ed:c6:ce:46:8b:fb:52:ab:d1:61:a9:d9:f9:18:
         f3:9b:58:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:08:52 2024 by rpki-client on console-fra.rpki-client.org