Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.mft
File:                     xcyVkpEJeSOm9C2PZXuQugMuX28.mft (raw, json)
Hash identifier:          9SNdhxOt/2sxsK961Y13bBrSEcf6m5x71XQ5p/lqiZs=
Subject key identifier:   70:F7:76:85:1E:8F:32:32:34:33:06:8C:61:55:79:49:63:FD:EA:70
Authority key identifier: C5:CC:95:92:91:09:79:23:A6:F4:2D:8F:65:7B:90:BA:03:2E:5F:6F
Certificate issuer:       /CN=C5CC959291097923A6F42D8F657B90BA032E5F6F
Certificate serial:       30
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.mft
Manifest number:          02F7
Signing time:             Sun 16 Feb 2025 17:39:25 +0000
Manifest this update:     Sun 16 Feb 2025 17:39:25 +0000
Manifest next update:     Mon 03 Mar 2025 17:39:25 +0000
Files and hashes:         1: 7tCGDj_HwkjxzoQxPdnK6diEFCU.roa (hash: bT1jetR3igdWmDJjkidT06s86Ch24IhqmIgSvAAkBJ0=)
                          2: xcyVkpEJeSOm9C2PZXuQugMuX28.crl (hash: 0Rv/2UyleVPiLLkWDdQTj4K5t5UC4faLGYebxA5yQO0=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5CC959291097923A6F42D8F657B90BA032E5F6F
        Validity
            Not Before: Feb 15 01:31:04 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=70F776851E8F32323433068C6155794963FDEA70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cc:9b:1d:ee:bb:69:c6:3b:dd:9c:ae:d4:eb:
                    7a:e2:eb:8d:70:03:58:c6:73:74:45:08:36:28:bf:
                    b7:4b:5e:de:21:b7:87:e6:e3:fc:78:6d:f0:d0:76:
                    06:1b:58:6e:22:ba:88:e3:d4:b3:ce:9c:17:ac:01:
                    8e:6c:5c:45:b5:a0:26:3f:d6:6d:d4:42:88:b1:59:
                    8d:82:c3:14:6b:62:16:19:47:b2:a9:4e:e6:84:72:
                    a0:ce:87:9f:13:91:28:4b:fb:a6:90:1c:d2:b2:80:
                    96:60:be:9d:19:1f:27:c1:cd:34:34:3d:e3:d0:be:
                    30:92:aa:9e:0c:d4:96:10:23:0d:ba:8c:54:d1:07:
                    c8:ec:60:06:41:11:3b:ab:3d:86:fe:f9:89:7a:c6:
                    9c:d2:af:c3:60:2b:32:6d:ef:e0:8a:2a:26:25:d2:
                    9b:57:ea:d9:08:e1:ee:a6:a8:c5:b9:46:cc:c7:24:
                    8d:91:63:3a:eb:a5:7d:f0:4d:c6:44:b8:86:8f:79:
                    4b:ce:8a:7f:61:db:7c:05:5f:2e:7c:77:2b:7c:eb:
                    1b:f3:c5:25:bd:a4:aa:5f:7b:34:b6:60:e9:a7:b7:
                    38:24:1b:31:51:22:80:84:3b:94:e7:5f:b0:b3:d5:
                    92:80:e6:88:2a:b8:fa:84:15:64:6e:6b:e3:24:b3:
                    f8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F7:76:85:1E:8F:32:32:34:33:06:8C:61:55:79:49:63:FD:EA:70
            X509v3 Authority Key Identifier:
                keyid:C5:CC:95:92:91:09:79:23:A6:F4:2D:8F:65:7B:90:BA:03:2E:5F:6F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:6a:36:01:15:f1:ef:36:85:18:fa:46:e9:1d:5c:e5:c4:d6:
         ae:56:3b:87:2b:c7:3c:cd:b8:e1:e9:78:27:f0:24:d8:84:b6:
         cf:2b:39:63:9d:5f:2e:1f:8d:1e:47:d9:19:21:78:eb:3e:7f:
         2d:13:13:88:38:cf:7c:b2:37:b2:1a:1c:93:27:a0:7f:62:85:
         5d:93:42:46:a7:f1:ed:78:85:3a:40:a4:40:e1:ec:a9:d5:da:
         bc:a8:6d:2b:9a:61:3f:ce:80:59:af:b6:98:90:af:92:ab:76:
         d6:37:9b:07:95:16:77:af:65:e8:86:04:0f:1c:cb:91:14:c6:
         77:9c:62:1b:f8:b0:19:0b:59:e2:18:f4:99:5d:c8:bc:31:19:
         ab:92:b4:47:72:68:53:f1:56:b5:a0:50:10:bc:a6:0b:bc:af:
         22:a7:c2:2a:9f:15:00:dd:b0:09:2b:9a:73:77:69:e7:89:83:
         45:f9:3d:d5:f6:b3:08:8f:83:9f:53:e5:88:23:30:72:28:90:
         2b:57:ad:f0:9e:78:f6:6d:13:a6:ee:dc:9e:c1:4c:2e:25:2d:
         12:67:0c:c8:12:70:a6:86:b5:8f:bf:80:e1:17:87:ed:43:a8:
         84:58:01:01:fb:b5:87:f7:1c:02:25:ba:c2:fd:2b:7e:bd:c0:
         de:e0:ae:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:44 2025 by rpki-client