Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.mft
File:                     0KlSoA2yFUF1wgtMiH76L4CsbwU.mft (raw, json)
Hash identifier:          8tHAaC9xmsQOxk7Ngj+2YWYo5AWffYGTjFfb3Sq2p5s=
Subject key identifier:   2B:6B:D8:AF:3A:27:D8:49:62:04:0A:9B:31:6C:43:17:B2:EA:06:77
Authority key identifier: D0:A9:52:A0:0D:B2:15:41:75:C2:0B:4C:88:7E:FA:2F:80:AC:6F:05
Certificate issuer:       /CN=D0A952A00DB2154175C20B4C887EFA2F80AC6F05
Certificate serial:       34
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KlSoA2yFUF1wgtMiH76L4CsbwU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.mft
Manifest number:          F6
Signing time:             Thu 30 May 2024 01:36:04 +0000
Manifest this update:     Thu 30 May 2024 01:36:04 +0000
Manifest next update:     Sun 09 Jun 2024 01:36:04 +0000
Files and hashes:         1: 0KlSoA2yFUF1wgtMiH76L4CsbwU.crl (hash: 6RvviwkvSc54DY5+u66vhxVQL1ZcFAgsb9m7MWYzFDA=)
                          2: RA76_hlsQEgt0RkiwP7eunHXuoc.roa (hash: EdJW4LVVduG7gd908olaYLmne8VGhnuNqoo0jvC94wk=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KlSoA2yFUF1wgtMiH76L4CsbwU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0A952A00DB2154175C20B4C887EFA2F80AC6F05
        Validity
            Not Before: May 15 01:33:35 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=2B6BD8AF3A27D84962040A9B316C4317B2EA0677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2f:f7:e4:84:2a:c5:77:c9:09:3c:45:bc:d5:
                    29:14:ce:6f:99:04:b3:75:4c:e4:bc:b4:5b:10:bd:
                    2a:3b:a9:b3:17:ea:e1:f6:ad:f3:ff:11:60:a9:d3:
                    f9:7a:81:8b:2a:91:6f:42:fb:d1:b0:87:50:87:f3:
                    ec:b7:d6:e3:c5:ff:65:83:d2:e9:a0:bb:b5:4d:67:
                    99:6f:53:0d:3e:45:50:49:0d:9a:16:74:12:2d:30:
                    f4:9e:d8:64:c4:02:2c:ce:bb:30:07:cd:98:6e:df:
                    ac:31:9a:47:30:fb:b9:75:2f:b6:cd:79:e4:d6:1a:
                    4e:9b:04:65:5d:6d:66:66:c3:d6:72:9e:1a:6b:a6:
                    13:f0:3c:95:f3:d5:62:96:a6:9f:70:0d:4b:0a:0e:
                    c6:a2:be:96:9f:25:e9:18:4a:8d:2e:ee:f9:cd:70:
                    82:3f:62:5b:2d:64:0b:61:8e:05:6f:f6:63:28:f2:
                    6e:62:1d:71:f5:3a:40:02:59:34:60:ca:30:a4:b3:
                    99:27:ca:75:1a:a9:39:a9:16:e7:df:10:e9:23:4c:
                    94:e3:df:d1:fe:ac:84:38:24:74:26:d0:88:4b:c7:
                    a6:34:19:4a:5e:0f:51:a8:ea:97:21:cc:5d:88:cc:
                    d9:3a:55:71:81:9a:08:d6:9b:5c:db:d5:cb:85:e1:
                    20:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6B:D8:AF:3A:27:D8:49:62:04:0A:9B:31:6C:43:17:B2:EA:06:77
            X509v3 Authority Key Identifier:
                keyid:D0:A9:52:A0:0D:B2:15:41:75:C2:0B:4C:88:7E:FA:2F:80:AC:6F:05

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KlSoA2yFUF1wgtMiH76L4CsbwU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:54:74:1e:f8:ae:3a:4a:f7:8b:3e:1b:10:be:58:f8:ff:64:
         6c:d5:15:19:b5:ae:b7:7a:65:b9:ae:7c:0d:88:ee:cb:d9:20:
         63:f4:c0:39:66:30:2d:26:fc:ec:5e:1c:93:0a:43:39:26:57:
         eb:51:c5:3a:f8:93:11:cf:aa:87:6d:23:97:48:69:3c:ac:5d:
         de:94:6e:95:cd:64:32:21:e6:40:ec:f1:71:49:f2:eb:70:c2:
         3b:9b:4c:17:a8:0e:42:f8:2e:cc:42:9e:a5:42:94:d8:45:2d:
         4a:0f:17:ab:65:9b:92:b7:2a:cd:04:5d:de:ea:8f:e6:53:33:
         65:83:fe:4a:53:e5:33:f9:92:ff:af:d3:5b:bf:9c:ef:9a:c8:
         ca:22:59:51:64:e7:a5:47:58:ab:41:55:d6:c9:f1:f4:32:c7:
         55:b0:b6:9f:0f:93:51:33:a1:f1:20:4d:fe:9b:b1:fe:96:92:
         72:91:53:05:15:81:ed:63:7f:8a:7d:2d:cf:58:06:41:ff:43:
         fb:e1:4b:a3:d5:29:5c:7f:95:ff:71:a6:fc:19:f5:51:a2:b0:
         7f:cb:41:f7:ad:f4:9c:70:bb:0a:a5:dc:9f:6d:5a:fa:ca:61:
         5a:aa:62:c7:3c:d3:0d:45:89:d8:db:a7:7c:5d:3d:c6:e5:3a:
         45:26:63:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:44 2024 by rpki-client on console-ams.rpki-client.org