Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.mft
File:                     OBzr1XGBOUGOK6UEN01SgWI06es.mft (raw, json)
Hash identifier:          /1CDPoXlM23NxLS2UwmgnN6u7nvj83arKiNFh+0k+xo=
Subject key identifier:   9E:4B:78:B5:26:57:AB:6A:6A:93:07:3C:E9:87:4C:34:56:3D:78:C7
Authority key identifier: 38:1C:EB:D5:71:81:39:41:8E:2B:A5:04:37:4D:52:81:62:34:E9:EB
Certificate issuer:       /CN=381CEBD5718139418E2BA504374D52816234E9EB
Certificate serial:       07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.mft
Manifest number:          0A
Signing time:             Thu 30 May 2024 14:10:44 +0000
Manifest this update:     Thu 30 May 2024 14:10:44 +0000
Manifest next update:     Sun 09 Jun 2024 14:10:44 +0000
Files and hashes:         1: OBzr1XGBOUGOK6UEN01SgWI06es.crl (hash: XXpw/zVMmT30cAlU28FZVax2Cc63VxG71FxVTnyqbzo=)
                          2: Z0CYoZunawnB4JNcq4vnMSTIiVA.roa (hash: nRn/O6NQbu93PtejuR6ZfyoKtFMuXdaY5fHNkpSQjF8=)
                          3: eOVJFDRBhQmzPfgyTOCQsX_bYqc.roa (hash: s5O3KfP3IIcJHYyaYEIzmNDqYDjgBRd0EUCj6jUQXAQ=)
                          4: yf6cE3qy1w9QCDovH_S-hfeEvlg.roa (hash: uVmwIcLI/+WG1M/hbj7Qegorvul2m14jeU/2xpysSZY=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=381CEBD5718139418E2BA504374D52816234E9EB
        Validity
            Not Before: May 23 02:09:47 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=9E4B78B52657AB6A6A93073CE9874C34563D78C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:17:cc:4e:ea:6a:1e:20:d8:aa:19:c8:98:a2:
                    c6:4e:28:e0:7b:4d:d7:50:fe:aa:24:5a:18:1a:ee:
                    92:1f:65:a3:95:7c:a2:d1:95:02:21:80:9b:67:b1:
                    24:18:45:d5:ff:a1:7e:a6:14:2b:f8:c1:d6:47:18:
                    45:e9:0c:2d:5d:75:47:c5:1a:de:bd:81:d0:76:38:
                    d5:8d:46:77:22:1c:0e:29:62:30:a5:44:63:8e:f1:
                    ef:7d:30:70:21:39:ed:09:a6:e8:24:ef:1f:12:f1:
                    c7:0b:7f:7a:97:0e:f7:88:39:63:11:f1:f3:10:7c:
                    ce:c1:52:66:da:dd:26:40:ee:ab:cc:d8:ec:73:27:
                    f8:e0:a7:c1:ac:82:0f:4d:dd:83:b9:d4:d2:0b:89:
                    c7:2a:c6:45:6f:22:57:50:8b:b5:bc:51:c2:24:3d:
                    c5:1d:9c:a0:46:89:a9:e4:4a:75:a5:c0:27:4d:7e:
                    c2:4d:91:a9:49:dc:2f:ec:ae:a8:7a:f6:4d:3f:b3:
                    59:11:0a:a2:12:36:dc:1d:24:df:4a:1e:b4:d1:ee:
                    ec:dc:54:ba:28:2a:66:1a:44:3e:67:38:36:bb:34:
                    6d:b2:20:39:9d:54:21:4f:28:57:c5:72:10:db:21:
                    c9:e9:b2:a4:56:01:8f:2e:95:10:a3:d7:bb:49:f9:
                    8b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4B:78:B5:26:57:AB:6A:6A:93:07:3C:E9:87:4C:34:56:3D:78:C7
            X509v3 Authority Key Identifier:
                keyid:38:1C:EB:D5:71:81:39:41:8E:2B:A5:04:37:4D:52:81:62:34:E9:EB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:29:92:0e:78:a1:d5:82:66:47:e2:b9:d9:8c:11:4f:c7:fb:
         9a:3d:a3:c9:f7:64:49:e1:09:c5:b6:65:c8:74:7f:fd:08:91:
         b8:e1:59:88:59:d8:45:e1:5f:84:c7:01:dd:70:97:e9:8e:43:
         0b:0c:1a:79:ef:41:c2:73:9d:f7:a6:1a:84:54:d2:0a:26:fa:
         82:38:53:a7:bb:bb:71:08:2f:1b:b8:67:7c:d6:00:ef:d9:38:
         77:7c:37:99:19:b6:88:12:e3:ef:9b:ab:50:e7:2c:6d:e6:d7:
         0f:9b:91:7a:03:39:f0:82:16:8a:99:d8:51:d4:48:0c:72:4a:
         5a:f1:c9:4e:55:7e:c4:2b:0e:91:25:88:71:dd:5c:f7:f2:f5:
         cd:34:a1:10:54:87:bd:8f:79:b8:2c:fd:e6:fa:b0:e8:91:8d:
         2d:d0:37:8e:0b:e5:dd:e2:70:cb:b6:68:62:7a:03:a3:d7:eb:
         b5:cd:e1:b7:16:cd:61:37:df:1f:7d:06:99:b5:dd:6f:44:69:
         c0:af:f7:33:57:55:6b:5b:2c:5f:45:0b:d9:0f:6c:81:33:b9:
         e0:7b:8b:97:fd:c8:d3:72:60:4f:39:75:ff:92:50:dd:11:6b:
         77:db:d1:12:60:8b:58:6a:6a:22:f9:39:28:ac:5b:f8:66:ef:
         8f:ad:f8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:43 2024 by rpki-client on console-fra.rpki-client.org