Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.mft
File:                     pgghQ7zvUucStKW9XW5cGVN52Ro.mft (raw, json)
Hash identifier:          eP91Q2Cs4EYVDNy6/1vOHiyPSmuKSSMDnl7KVWUM/Hk=
Subject key identifier:   58:04:F7:3C:F8:3C:64:2C:8F:63:9C:ED:72:68:29:D5:1D:80:3C:75
Authority key identifier: A6:08:21:43:BC:EF:52:E7:12:B4:A5:BD:5D:6E:5C:19:53:79:D9:1A
Certificate issuer:       /CN=A6082143BCEF52E712B4A5BD5D6E5C195379D91A
Certificate serial:       46
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pgghQ7zvUucStKW9XW5cGVN52Ro.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.mft
Manifest number:          035D
Signing time:             Sun 16 Feb 2025 17:53:04 +0000
Manifest this update:     Sun 16 Feb 2025 17:53:04 +0000
Manifest next update:     Mon 03 Mar 2025 17:53:04 +0000
Files and hashes:         1: -Oy3hbtoylygvfKGAtRnRkIYlOg.roa (hash: va4Ycs+zSzZOeMg52keuTyLLSIyqICpE2XPQLJvRRs8=)
                          2: pgghQ7zvUucStKW9XW5cGVN52Ro.crl (hash: eoRo8Q3cwxKSEpiNg7kgEAxim1Ug9m9ImknCLCqtbC4=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pgghQ7zvUucStKW9XW5cGVN52Ro.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6082143BCEF52E712B4A5BD5D6E5C195379D91A
        Validity
            Not Before: Feb 15 01:35:44 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=5804F73CF83C642C8F639CED726829D51D803C75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2a:bf:b6:f6:a6:14:59:a7:29:16:f3:81:63:
                    36:08:f7:33:09:a9:f0:18:37:23:37:b5:21:c5:a7:
                    0c:a4:de:36:04:57:73:76:45:57:71:11:3f:18:73:
                    75:23:df:ab:50:84:45:f2:0c:55:bc:98:39:1d:66:
                    a3:b8:2b:ae:c3:cf:8e:9f:58:5d:8e:39:15:ea:58:
                    24:da:2f:0e:cd:23:cc:3e:bc:87:c3:4a:10:b5:3b:
                    31:d5:25:8c:94:a1:1f:38:7a:6d:38:80:90:3c:27:
                    29:cb:ae:a4:35:06:25:27:76:21:09:be:8c:fe:6a:
                    a4:80:fd:1a:31:52:f2:a6:54:6b:fd:79:30:be:bd:
                    9e:5c:d4:73:27:21:f3:2e:fd:49:ab:ef:20:c4:8f:
                    a7:1d:78:51:4b:49:09:e8:32:1a:08:7c:cf:d8:70:
                    e1:a8:99:ed:ef:14:27:ce:cd:04:87:10:cb:fe:16:
                    a2:8e:4c:b5:82:4c:ca:36:ab:06:16:72:fa:0c:f1:
                    ad:88:56:0b:7b:c2:95:79:bd:7b:02:12:40:1a:b0:
                    18:ac:3e:5b:49:e2:97:07:fc:e8:6b:ee:be:54:32:
                    08:37:3c:5d:db:12:03:b6:9a:6e:57:c0:c6:f6:28:
                    ed:ac:e0:8d:a5:92:a8:db:27:43:44:6e:00:1e:0c:
                    10:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:04:F7:3C:F8:3C:64:2C:8F:63:9C:ED:72:68:29:D5:1D:80:3C:75
            X509v3 Authority Key Identifier:
                keyid:A6:08:21:43:BC:EF:52:E7:12:B4:A5:BD:5D:6E:5C:19:53:79:D9:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pgghQ7zvUucStKW9XW5cGVN52Ro.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:d5:68:4b:06:a5:17:23:9d:20:cb:96:24:60:f0:47:cb:9f:
         3e:2a:d4:47:be:73:6e:f2:2f:82:fa:ea:ee:bd:05:ee:0b:d6:
         c8:14:ba:75:96:36:0f:6f:cf:ec:0b:1b:e6:3a:1e:6b:82:1b:
         de:e5:b7:ae:53:8e:0b:e5:78:5c:04:d8:46:35:a8:42:d0:7d:
         44:2d:a5:11:f6:b2:75:fc:e0:38:77:54:13:05:1c:8e:f0:6b:
         d6:78:e0:97:b3:9c:89:5b:fe:84:3b:db:c8:d3:7b:fc:79:18:
         bd:e4:3c:9d:7f:47:1c:4c:d8:a3:3f:75:63:59:c5:b2:27:4b:
         1c:80:f0:5f:ea:4e:e4:1f:5c:25:8f:b9:0c:47:08:21:4e:db:
         14:c5:04:db:30:fe:df:67:68:8f:b9:fe:e6:3f:20:a3:72:fd:
         1a:8c:b5:07:11:a5:12:a7:5e:2f:0e:e1:97:8d:a0:60:9a:8b:
         d9:7d:85:bd:a6:09:9c:a6:f4:66:ed:c5:5e:51:87:84:5c:80:
         6e:63:49:92:8c:b8:43:20:c9:ac:4f:1f:1b:f2:b9:58:03:45:
         e1:74:74:7e:a4:31:ab:bd:3a:11:e1:47:61:3c:d4:51:b1:29:
         f5:1b:62:b6:a6:9f:4e:e2:48:bb:aa:8a:b4:1b:c7:1f:34:b0:
         02:af:df:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:59 2025 by rpki-client