Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.mft
File:                     NkR8af6TQwpO9eshfECeu1tna7k.mft (raw, json)
Hash identifier:          MjyBDbd+Pj0W9XFPFQnZhZdoLDdiLCGVVsBv16G+R10=
Subject key identifier:   65:0B:E1:24:41:62:0D:F9:7B:EF:DF:B7:F0:5D:61:EB:BD:B3:DC:76
Authority key identifier: 36:44:7C:69:FE:93:43:0A:4E:F5:EB:21:7C:40:9E:BB:5B:67:6B:B9
Certificate issuer:       /CN=36447C69FE93430A4EF5EB217C409EBB5B676BB9
Certificate serial:       20
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NkR8af6TQwpO9eshfECeu1tna7k.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.mft
Manifest number:          D0
Signing time:             Fri 22 Nov 2024 14:42:34 +0000
Manifest this update:     Fri 22 Nov 2024 14:42:34 +0000
Manifest next update:     Sat 07 Dec 2024 14:42:34 +0000
Files and hashes:         1: NkR8af6TQwpO9eshfECeu1tna7k.crl (hash: yNCZOfDHiv2okAidaNYP4mBwkIe1ictk4Jn/SWsDIOQ=)
                          2: ZbP_Zfa2mwHq82S6XSeyWX_NCCE.roa (hash: ThE65gZNrtvB6ORxoBbpvsXbWhOf17z9TZN9IB4gOGU=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NkR8af6TQwpO9eshfECeu1tna7k.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36447C69FE93430A4EF5EB217C409EBB5B676BB9
        Validity
            Not Before: Nov 15 01:31:27 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=650BE12441620DF97BEFDFB7F05D61EBBDB3DC76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5e:73:57:a6:3f:73:ca:54:d2:5f:23:96:dc:
                    b9:19:13:03:b1:1f:9c:e3:ce:83:2b:05:a6:e2:b9:
                    d8:49:6c:f1:62:ee:e6:a6:ea:8a:20:d1:09:ee:70:
                    98:4d:2f:bf:96:5f:fc:33:ca:df:4a:57:3d:59:4c:
                    89:6f:d2:bc:2d:7d:87:d5:b6:e3:48:bc:98:18:81:
                    45:df:28:82:23:d7:ff:9d:36:d6:f9:c8:64:84:fe:
                    5c:62:7d:c3:ff:f7:e1:10:40:f1:34:51:cc:cf:89:
                    74:d1:a5:98:26:62:15:15:7b:30:f8:e6:46:bc:87:
                    0d:11:a0:c2:d4:87:fa:f1:cb:ed:c3:14:15:87:bd:
                    eb:68:ce:89:d0:b7:92:95:1c:10:af:6d:ad:b4:18:
                    31:40:db:56:37:48:9e:3c:3a:cd:35:e0:3e:44:2a:
                    1e:df:50:4f:d1:8b:3b:bb:bd:7e:3c:8c:f1:ee:b1:
                    d6:e8:55:f0:f2:b1:43:a8:cb:eb:cb:18:20:67:6c:
                    bd:e4:d3:82:9f:ed:49:74:8d:ed:df:4c:55:88:2f:
                    27:44:4b:04:64:7c:40:f8:59:1b:a1:a3:54:1e:f6:
                    26:92:25:61:56:33:6b:8a:2d:3b:83:4e:4b:98:7c:
                    62:02:dc:4d:16:6a:eb:71:2f:33:b9:05:b2:26:0f:
                    50:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0B:E1:24:41:62:0D:F9:7B:EF:DF:B7:F0:5D:61:EB:BD:B3:DC:76
            X509v3 Authority Key Identifier:
                keyid:36:44:7C:69:FE:93:43:0A:4E:F5:EB:21:7C:40:9E:BB:5B:67:6B:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NkR8af6TQwpO9eshfECeu1tna7k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:70:7f:d9:df:6d:76:52:b0:c2:23:10:26:12:06:e5:9d:da:
         ef:f5:ac:a2:07:79:4b:f0:1e:12:38:6d:32:56:21:9a:fa:51:
         71:c1:15:21:91:f0:6d:74:0f:db:7a:80:c8:51:68:40:09:db:
         9d:b7:eb:f0:29:f6:1c:ee:30:49:f6:6e:42:b4:bc:c7:07:28:
         a1:52:86:96:fb:89:52:fb:44:29:9c:02:6d:f9:bb:f0:38:51:
         62:20:7e:62:32:b9:c0:e1:20:1c:4a:15:ad:96:85:0f:1f:b9:
         49:97:49:dd:e8:9a:d9:9e:25:e7:48:51:c5:4a:46:0d:7e:fb:
         85:2d:52:9b:7c:54:1d:f6:e5:37:d9:d6:a3:09:11:bc:b5:5a:
         de:21:41:c5:11:60:62:02:8c:ff:15:1a:44:aa:f6:25:00:33:
         3b:a8:f0:42:63:ef:fd:b6:3c:e9:92:ad:ac:01:21:be:bf:cb:
         94:8e:98:4b:f7:ff:18:1f:58:cc:bb:7f:69:93:82:ea:fe:1d:
         a6:34:7f:5d:91:ea:0c:3c:07:27:1b:45:01:86:03:6d:0a:3a:
         72:05:ee:bf:c5:3f:34:9c:a0:1e:1a:1e:c5:a8:f6:35:92:df:
         33:07:d8:42:57:cb:ab:b4:2a:62:f5:d9:a9:2b:90:c2:fb:20:
         29:f4:40:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:31 2024 by rpki-client on console-ams.rpki-client.org