Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2217/YhmaSPGnHtGAkyDEcCjwJ5wdnuM.mft
File:                     YhmaSPGnHtGAkyDEcCjwJ5wdnuM.mft (raw, json)
Hash identifier:          +pTzQnEy29ssdB5IFR2zTYQqTyDZvOlOnofySzb4q6k=
Subject key identifier:   DA:99:A9:D5:21:29:E4:40:37:AA:D7:43:63:01:EC:E5:E8:25:01:6A
Authority key identifier: 62:19:9A:48:F1:A7:1E:D1:80:93:20:C4:70:28:F0:27:9C:1D:9E:E3
Certificate issuer:       /CN=62199A48F1A71ED1809320C47028F0279C1D9EE3
Certificate serial:       1F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YhmaSPGnHtGAkyDEcCjwJ5wdnuM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2217/YhmaSPGnHtGAkyDEcCjwJ5wdnuM.mft
Manifest number:          D7
Signing time:             Fri 22 Nov 2024 14:18:12 +0000
Manifest this update:     Fri 22 Nov 2024 14:18:12 +0000
Manifest next update:     Sat 07 Dec 2024 14:18:12 +0000
Files and hashes:         1: YhmaSPGnHtGAkyDEcCjwJ5wdnuM.crl (hash: QLSZHWTRek0QD4rjaab9SS51eA63T9TiyP+4pWHXz2E=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2217/YhmaSPGnHtGAkyDEcCjwJ5wdnuM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2217/YhmaSPGnHtGAkyDEcCjwJ5wdnuM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YhmaSPGnHtGAkyDEcCjwJ5wdnuM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62199A48F1A71ED1809320C47028F0279C1D9EE3
        Validity
            Not Before: Nov 15 01:31:05 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=DA99A9D52129E44037AAD7436301ECE5E825016A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:52:87:04:af:a6:a7:1a:3f:59:28:0d:10:71:
                    81:9e:16:1d:ee:bc:cc:4a:6c:01:dd:4e:69:07:f7:
                    5e:1a:08:58:bb:c3:93:06:65:7c:6b:9f:b3:5d:7c:
                    46:57:4d:07:ed:55:97:10:32:e1:3b:34:76:39:be:
                    f8:74:a9:73:5f:2b:f1:f0:62:76:95:c6:fb:27:b6:
                    b6:a4:dc:d0:35:db:07:54:7d:c6:d8:0a:b7:ae:8a:
                    30:bb:a1:d0:f4:a7:22:3e:3b:dc:8a:e9:76:aa:f6:
                    0b:08:c5:c3:0b:75:c2:ee:27:96:f3:c7:1f:6b:b2:
                    dc:72:10:be:f6:d6:80:af:80:0d:4e:cf:e6:74:39:
                    a2:81:0a:05:8e:95:f1:62:5d:cf:3e:e4:9e:bc:97:
                    cf:e3:be:aa:8c:af:f7:03:b6:03:54:1d:da:d7:d8:
                    53:4d:48:2d:f0:4e:c5:e4:9b:16:06:79:5f:d8:f3:
                    ae:fb:ad:a6:f8:21:97:4f:11:25:e6:85:27:e2:1d:
                    2a:9d:25:ba:c1:ac:62:17:6c:4d:8b:b0:eb:12:d0:
                    aa:95:bf:f0:9a:70:80:bb:41:4c:ea:cd:6e:bf:8c:
                    55:d3:a7:ec:52:16:65:5f:e2:5c:70:03:5e:26:07:
                    a1:2e:7f:5f:6f:03:99:0a:36:e9:8f:2f:26:aa:01:
                    d7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:99:A9:D5:21:29:E4:40:37:AA:D7:43:63:01:EC:E5:E8:25:01:6A
            X509v3 Authority Key Identifier:
                keyid:62:19:9A:48:F1:A7:1E:D1:80:93:20:C4:70:28:F0:27:9C:1D:9E:E3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2217/YhmaSPGnHtGAkyDEcCjwJ5wdnuM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YhmaSPGnHtGAkyDEcCjwJ5wdnuM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2217/YhmaSPGnHtGAkyDEcCjwJ5wdnuM.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:67:4d:68:34:6c:bc:42:c9:22:32:be:55:43:76:9f:f8:50:
         d8:df:a1:e1:86:6a:de:c5:66:c4:73:ce:62:9a:c0:82:23:52:
         64:30:eb:dc:4e:03:9c:21:d4:6f:80:b2:b0:da:8d:cd:9e:b3:
         73:4f:25:71:46:d7:43:2d:0c:2d:ce:fa:56:19:10:65:43:5f:
         67:7b:26:8e:cf:6a:f8:d6:b8:d8:c9:e8:e6:de:a1:05:0f:88:
         c0:8c:db:53:b2:6e:6e:6b:f5:92:91:b7:f2:c3:8d:08:30:c0:
         d5:04:88:74:f9:ba:24:2f:70:34:88:36:f2:83:c8:0d:4a:be:
         fb:fb:01:bb:b3:67:42:a0:7e:fa:e0:2b:30:35:df:6b:4e:58:
         98:f9:c4:3b:6a:dc:d0:49:c2:2b:0f:a1:1f:b4:2a:ee:0d:4e:
         33:6d:83:e2:9a:81:24:c0:4a:0a:f8:c2:bf:65:85:79:e2:50:
         b3:25:45:49:6c:16:d6:79:ad:e4:b1:66:ea:9a:1c:b1:1d:88:
         80:ae:04:86:8b:50:31:ab:fa:d4:aa:75:0a:b3:d3:89:f3:8c:
         fe:70:c4:3b:de:34:2e:bc:e0:a0:f0:84:13:b5:1a:1e:7e:25:
         14:19:86:a5:62:21:63:e1:c8:f3:91:f3:bf:3e:31:e6:53:c1:
         62:21:66:c7
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIBHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2MjE5
OUE0OEYxQTcxRUQxODA5MzIwQzQ3MDI4RjAyNzlDMUQ5RUUzMB4XDTI0MTExNTAx
MzEwNVoXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoREE5OUE5RDUyMTI5RTQ0
MDM3QUFENzQzNjMwMUVDRTVFODI1MDE2QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANNShwSvpqcaP1koDRBxgZ4WHe68zEpsAd1OaQf3XhoIWLvDkwZl
fGufs118RldNB+1VlxAy4Ts0djm++HSpc18r8fBidpXG+ye2tqTc0DXbB1R9xtgK
t66KMLuh0PSnIj473Irpdqr2CwjFwwt1wu4nlvPHH2uy3HIQvvbWgK+ADU7P5nQ5
ooEKBY6V8WJdzz7knryXz+O+qoyv9wO2A1Qd2tfYU01ILfBOxeSbFgZ5X9jzrvut
pvghl08RJeaFJ+IdKp0lusGsYhdsTYuw6xLQqpW/8JpwgLtBTOrNbr+MVdOn7FIW
ZV/iXHADXiYHoS5/X28DmQo26Y8vJqoB19ECAwEAAaOCAj8wggI7MB0GA1UdDgQW
BBTamanVISnkQDeq10NjAezl6CUBajAfBgNVHSMEGDAWgBRiGZpI8ace0YCTIMRw
KPAnnB2e4zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjIxNy9ZaG1hU1BHbkh0R0FreURFY0Nqd0o1d2RudU0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9ZaG1hU1BHbkh0R0FreURFY0Nqd0o1
d2RudU0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjIxNy9ZaG1hU1BHbkh0R0FreURFY0Nqd0o1d2RudU0ubWZ0
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF
AAOCAQEACWdNaDRsvELJIjK+VUN2n/hQ2N+h4YZq3sVmxHPOYprAgiNSZDDr3E4D
nCHUb4CysNqNzZ6zc08lcUbXQy0MLc76VhkQZUNfZ3smjs9q+Na42Mno5t6hBQ+I
wIzbU7Jubmv1kpG38sONCDDA1QSIdPm6JC9wNIg28oPIDUq++/sBu7NnQqB++uAr
MDXfa05YmPnEO2rc0EnCKw+hH7Qq7g1OM22D4pqBJMBKCvjCv2WFeeJQsyVFSWwW
1nmt5LFm6pocsR2IgK4EhotQMav61Kp1CrPTifOM/nDEO940LrzgoPCEE7UaHn4l
FBmGpWIhY+HI85Hzvz4x5lPBYiFmxw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:28 2024 by rpki-client on console-ams.rpki-client.org