Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.mft
File:                     jVezuNsxhZi2b03WYYyxmghWX_0.mft (raw, json)
Hash identifier:          fjdfr7dx+80e87T8bJK2RO5XKzXgBxfvHhQ0JlywJn0=
Subject key identifier:   AD:6E:AD:F1:48:C8:85:1D:6A:71:D7:3A:70:FB:20:13:03:77:72:E6
Authority key identifier: 8D:57:B3:B8:DB:31:85:98:B6:6F:4D:D6:61:8C:B1:9A:08:56:5F:FD
Certificate issuer:       /CN=8D57B3B8DB318598B66F4DD6618CB19A08565FFD
Certificate serial:       26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.mft
Manifest number:          CE
Signing time:             Fri 22 Nov 2024 14:42:38 +0000
Manifest this update:     Fri 22 Nov 2024 14:42:38 +0000
Manifest next update:     Sat 07 Dec 2024 14:42:38 +0000
Files and hashes:         1: 88wm_fXvDEGDbLZ2xzsGjOMbcVY.roa (hash: AA1pHkHqG4OO72ztGjwmnuyn3WozPuAl8XSadGfkbkc=)
                          2: FTyrK1_gC-4iM8qYFgkiKp4ul7g.roa (hash: /VSE0E6osQ2Wq0U3hXz4tOH70j0VM6PhfLg5Mas6yP8=)
                          3: jVezuNsxhZi2b03WYYyxmghWX_0.crl (hash: xDlDWd1TWjRPrB4SRkRDyr3SNQ5gM5UR/xe7sWJFnvQ=)
                          4: xDFIkUZ1q9qDEFw0FJwxKPIkCQI.roa (hash: +nXWBFOxQ+IJfgHpFz5w8aHCVwCVl7BEE3AhKW/DRfw=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D57B3B8DB318598B66F4DD6618CB19A08565FFD
        Validity
            Not Before: Nov 15 01:31:33 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=AD6EADF148C8851D6A71D73A70FB2013037772E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2d:1c:e7:d1:ed:95:c2:02:0e:18:6d:c9:c0:
                    b6:07:f7:70:c5:22:fc:5c:b8:aa:b2:f7:92:a2:aa:
                    b9:d9:5a:86:c7:09:fd:3a:c0:0f:0e:d6:50:8e:2d:
                    13:6a:42:68:35:5b:95:75:0f:77:60:df:d6:95:cf:
                    1e:2c:6c:56:a9:2a:74:d6:b2:92:61:5d:c2:1c:87:
                    4b:45:4d:b6:95:60:46:da:fc:1b:96:ce:2a:4b:69:
                    f0:42:de:ea:1b:4f:f3:f3:af:88:3c:2f:f8:97:1d:
                    79:f3:1a:02:c6:40:ed:39:37:2b:97:85:83:fb:15:
                    64:bd:14:01:ec:19:a7:04:7b:62:fb:fb:2a:71:68:
                    8a:7d:08:06:fa:ac:41:71:a3:12:de:44:ab:1f:17:
                    d0:02:57:2f:af:31:d6:33:6f:d7:de:9b:97:7e:06:
                    29:01:7c:01:43:63:8d:66:ca:70:39:cc:68:6c:72:
                    07:3c:77:ba:74:c4:e4:4a:79:2e:6e:6d:87:6c:8f:
                    2b:4f:38:45:d1:df:c8:5f:ca:88:47:d0:0b:b9:ad:
                    be:98:2c:31:1e:79:74:a0:15:eb:51:e0:f1:c0:4b:
                    98:04:d7:b7:a0:4a:9d:fc:6a:17:ae:22:ef:f8:12:
                    48:44:2e:3f:c2:26:c9:a0:b5:50:aa:92:5e:1b:7e:
                    51:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6E:AD:F1:48:C8:85:1D:6A:71:D7:3A:70:FB:20:13:03:77:72:E6
            X509v3 Authority Key Identifier:
                keyid:8D:57:B3:B8:DB:31:85:98:B6:6F:4D:D6:61:8C:B1:9A:08:56:5F:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:7d:76:d8:49:c9:d9:1b:f2:c4:08:54:08:9b:f0:ce:b6:a3:
         91:3e:60:f9:14:15:31:9f:e8:44:9b:2a:fd:bc:2b:67:e9:74:
         3f:9a:64:91:89:be:9d:39:5a:bb:96:ac:0a:7a:b8:25:0f:73:
         32:b5:7a:ae:4d:b8:af:ce:54:56:08:45:0d:38:0b:f9:e3:23:
         e9:ff:f3:87:b3:2a:0f:6c:12:b8:1a:8a:77:f0:e1:67:1d:f6:
         23:fe:90:10:cb:e5:c6:f4:70:4c:27:c6:1b:70:1b:a3:98:49:
         c0:7c:d1:8d:ff:69:ba:3f:f0:c6:c5:a4:63:79:3a:e4:ad:bb:
         25:11:ea:d7:63:f2:96:63:0d:c1:e4:ca:2c:ac:d4:c7:7a:3e:
         44:ab:1c:45:0f:2b:bd:8a:2b:16:02:2f:f9:b2:03:4c:28:5e:
         ec:53:c2:bc:20:73:7d:95:f3:d2:58:03:3d:68:48:3c:1d:02:
         cd:43:da:57:05:a9:fb:af:87:cc:c8:b2:7f:99:ef:bb:f2:9e:
         e7:31:29:63:f1:80:ce:c2:98:4b:f5:55:a8:6e:68:0f:14:eb:
         8b:d0:b6:4a:0d:77:b0:18:54:5c:e3:4e:b3:cc:ed:26:c7:6c:
         74:64:76:da:5f:47:26:18:f0:59:b4:ba:a3:6d:be:a8:62:6d:
         ed:1b:46:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:56 2024 by rpki-client on console-fra.rpki-client.org