Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.mft
File:                     pgghQ7zvUucStKW9XW5cGVN52Ro.mft (raw, json)
Hash identifier:          i6u9pQPks+4eW4YzJXL6PD3bhe7fMF5EliggI11rd/s=
Subject key identifier:   58:04:F7:3C:F8:3C:64:2C:8F:63:9C:ED:72:68:29:D5:1D:80:3C:75
Authority key identifier: A6:08:21:43:BC:EF:52:E7:12:B4:A5:BD:5D:6E:5C:19:53:79:D9:1A
Certificate issuer:       /CN=A6082143BCEF52E712B4A5BD5D6E5C195379D91A
Certificate serial:       38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pgghQ7zvUucStKW9XW5cGVN52Ro.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.mft
Manifest number:          E4
Signing time:             Fri 14 Jun 2024 01:42:38 +0000
Manifest this update:     Fri 14 Jun 2024 01:42:38 +0000
Manifest next update:     Mon 24 Jun 2024 01:42:38 +0000
Files and hashes:         1: fUh9JS_ExcynBjkCrQByU1wlxlY.roa (hash: r4VOBjyJ3dPOaCtvyahQs/PjGtofHYqLQYSDEovUUxw=)
                          2: pgghQ7zvUucStKW9XW5cGVN52Ro.crl (hash: eP4u8bxSDJ9yjE6pNmsaRS5pmGZYQ/C5vIZowsoxUJE=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pgghQ7zvUucStKW9XW5cGVN52Ro.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 15:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6082143BCEF52E712B4A5BD5D6E5C195379D91A
        Validity
            Not Before: May 15 01:36:36 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=5804F73CF83C642C8F639CED726829D51D803C75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2a:bf:b6:f6:a6:14:59:a7:29:16:f3:81:63:
                    36:08:f7:33:09:a9:f0:18:37:23:37:b5:21:c5:a7:
                    0c:a4:de:36:04:57:73:76:45:57:71:11:3f:18:73:
                    75:23:df:ab:50:84:45:f2:0c:55:bc:98:39:1d:66:
                    a3:b8:2b:ae:c3:cf:8e:9f:58:5d:8e:39:15:ea:58:
                    24:da:2f:0e:cd:23:cc:3e:bc:87:c3:4a:10:b5:3b:
                    31:d5:25:8c:94:a1:1f:38:7a:6d:38:80:90:3c:27:
                    29:cb:ae:a4:35:06:25:27:76:21:09:be:8c:fe:6a:
                    a4:80:fd:1a:31:52:f2:a6:54:6b:fd:79:30:be:bd:
                    9e:5c:d4:73:27:21:f3:2e:fd:49:ab:ef:20:c4:8f:
                    a7:1d:78:51:4b:49:09:e8:32:1a:08:7c:cf:d8:70:
                    e1:a8:99:ed:ef:14:27:ce:cd:04:87:10:cb:fe:16:
                    a2:8e:4c:b5:82:4c:ca:36:ab:06:16:72:fa:0c:f1:
                    ad:88:56:0b:7b:c2:95:79:bd:7b:02:12:40:1a:b0:
                    18:ac:3e:5b:49:e2:97:07:fc:e8:6b:ee:be:54:32:
                    08:37:3c:5d:db:12:03:b6:9a:6e:57:c0:c6:f6:28:
                    ed:ac:e0:8d:a5:92:a8:db:27:43:44:6e:00:1e:0c:
                    10:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:04:F7:3C:F8:3C:64:2C:8F:63:9C:ED:72:68:29:D5:1D:80:3C:75
            X509v3 Authority Key Identifier:
                keyid:A6:08:21:43:BC:EF:52:E7:12:B4:A5:BD:5D:6E:5C:19:53:79:D9:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pgghQ7zvUucStKW9XW5cGVN52Ro.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:fc:1e:4e:47:37:a0:a3:8c:4d:b9:a9:4d:d2:47:1c:76:5f:
         be:3c:89:a1:76:ac:db:ea:68:44:21:4a:0e:7b:ae:b2:55:0d:
         bf:a5:09:fc:e0:e6:dd:10:fe:01:95:b1:61:6a:7d:e6:00:de:
         4d:c0:1f:46:dd:c3:19:62:65:2c:ab:ac:cf:5f:35:1b:8e:5f:
         0f:d2:ab:9d:4b:3c:e5:e7:90:d8:a6:46:cd:a3:d0:be:ed:13:
         1c:ef:ab:9b:c6:43:e5:a8:a6:fe:93:5f:fa:90:4b:2d:3d:16:
         b9:d6:35:36:5e:57:1a:f9:da:33:c0:1d:d9:b0:89:dc:a3:a3:
         10:66:a5:88:18:33:ff:46:11:dc:a5:34:e4:ae:aa:a1:5b:4b:
         3d:2f:94:a6:7e:1a:7f:a2:44:2c:9d:8b:3b:bb:cf:69:33:1b:
         18:4b:bc:51:98:5b:2b:62:b3:e5:7b:85:48:44:84:a5:f8:cb:
         fd:e4:81:2f:6c:9a:1e:d1:82:f4:e5:57:fd:13:c5:d6:2e:9e:
         ff:e0:0a:d5:54:02:e8:6e:76:ca:c0:b9:43:cb:19:f0:70:e1:
         bb:58:89:98:aa:61:82:73:47:a4:70:71:a8:0e:89:ce:e6:28:
         0f:fb:b8:fa:4d:5b:22:74:69:fb:a9:c5:7b:1a:61:bd:07:7b:
         f2:bc:b5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 16:47:56 2024 by rpki-client on console-fra.rpki-client.org