Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30142/n1vw4W-TT6r5woHtC-yaH1EgCsc.mft
File:                     n1vw4W-TT6r5woHtC-yaH1EgCsc.mft (raw, json)
Hash identifier:          s7lApB/I8PwEHh2EUHHcHBehGpIrAXAfsIDb26m317g=
Subject key identifier:   8E:D4:41:2E:98:21:F9:D7:24:28:F3:F4:3C:68:E7:10:17:3B:BF:1A
Authority key identifier: 9F:5B:F0:E1:6F:93:4F:AA:F9:C2:81:ED:0B:EC:9A:1F:51:20:0A:C7
Certificate issuer:       /CN=9F5BF0E16F934FAAF9C281ED0BEC9A1F51200AC7
Certificate serial:       3F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n1vw4W-TT6r5woHtC-yaH1EgCsc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30142/n1vw4W-TT6r5woHtC-yaH1EgCsc.mft
Manifest number:          0856
Signing time:             Thu 30 May 2024 01:35:41 +0000
Manifest this update:     Thu 30 May 2024 01:35:41 +0000
Manifest next update:     Sun 09 Jun 2024 01:35:41 +0000
Files and hashes:         1: DrDG5zXnEnrx6FYTupJwZUA9OVo.roa (hash: 3OhZ3jXsH5YctfBCVbRkGl/UbNVPOvoaunRBe9fYrH0=)
                          2: n1vw4W-TT6r5woHtC-yaH1EgCsc.crl (hash: Lg4qycPKLxn8C+LO+P7/Zwf0AJY+M5+/d9vq0GwYTYY=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30142/n1vw4W-TT6r5woHtC-yaH1EgCsc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30142/n1vw4W-TT6r5woHtC-yaH1EgCsc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n1vw4W-TT6r5woHtC-yaH1EgCsc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F5BF0E16F934FAAF9C281ED0BEC9A1F51200AC7
        Validity
            Not Before: May 15 01:32:45 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=8ED4412E9821F9D72428F3F43C68E710173BBF1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:08:02:2d:6b:e0:b2:d5:8c:2a:aa:5d:ca:81:
                    f8:c4:b5:61:4c:e9:c7:56:8e:de:96:90:0d:e0:68:
                    41:7c:02:cd:8c:0a:9f:c5:07:9b:57:d8:af:a8:e7:
                    cb:f8:c3:92:1f:b3:4d:e8:ac:e2:af:0e:00:7e:ec:
                    97:0f:b1:60:c7:25:6b:e1:cd:b8:68:a5:c6:69:0e:
                    e8:a0:22:24:0d:cf:91:b9:42:9c:ed:4e:c7:dc:97:
                    f9:53:a0:3d:4b:2e:58:fb:fa:5c:a3:31:d7:64:90:
                    e0:61:ed:87:c4:35:1e:61:a7:9a:79:61:f2:07:29:
                    7d:7c:ce:76:1e:3e:7b:d2:7b:9a:12:34:07:fd:8d:
                    3d:47:d2:d6:9d:2f:0c:35:57:2f:6f:33:87:ba:6e:
                    37:d1:4b:5f:cb:89:aa:8d:6d:5e:1a:48:f8:ee:70:
                    36:0c:59:96:70:e4:70:63:99:2f:9e:48:5e:a2:1f:
                    e4:b3:50:51:71:d5:eb:ab:28:3d:8c:ef:3a:ec:20:
                    2e:8f:c6:c3:ab:79:01:a1:3a:31:0f:ba:10:e8:cc:
                    df:ba:bb:e0:01:00:ff:43:48:a9:45:66:18:a9:12:
                    cc:26:62:b1:f4:3e:e7:da:99:44:3b:18:91:9a:f0:
                    b9:65:33:2b:24:1f:0e:05:75:2d:b4:95:40:ba:5b:
                    b9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D4:41:2E:98:21:F9:D7:24:28:F3:F4:3C:68:E7:10:17:3B:BF:1A
            X509v3 Authority Key Identifier:
                keyid:9F:5B:F0:E1:6F:93:4F:AA:F9:C2:81:ED:0B:EC:9A:1F:51:20:0A:C7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30142/n1vw4W-TT6r5woHtC-yaH1EgCsc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n1vw4W-TT6r5woHtC-yaH1EgCsc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30142/n1vw4W-TT6r5woHtC-yaH1EgCsc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:e9:06:ac:76:45:70:39:87:c7:a1:20:8f:37:62:6f:58:b0:
         19:03:cb:c9:b8:cf:ce:1f:19:bc:16:d2:3c:3a:34:52:a2:a3:
         de:50:38:25:b3:38:3d:c4:ec:bf:a5:15:eb:a2:c2:43:16:34:
         48:9b:82:6c:6e:c7:b7:11:27:13:03:90:6c:8c:e9:32:6a:a8:
         86:40:cb:26:7f:da:d0:d0:cb:fd:15:64:a4:31:b1:c3:fd:93:
         f4:cf:5c:f7:64:f7:48:c4:52:39:16:72:b3:87:5d:c0:61:8e:
         fb:7d:64:ab:d9:2a:75:3a:0d:ae:4b:07:7b:a7:21:20:9e:6a:
         cb:2d:f9:3c:42:5e:00:39:2b:cf:26:e3:fe:3c:e0:c2:91:ff:
         f0:d7:6b:50:d1:94:2a:75:ec:51:b0:3d:55:bd:c8:70:8a:7e:
         fc:b5:08:a3:7a:c6:0c:07:35:3a:1f:49:9b:76:fd:e2:04:e3:
         f9:4a:0f:35:e8:08:a7:ad:05:2d:98:98:ef:9b:d5:51:99:23:
         dc:6c:a3:aa:43:b0:81:9b:88:42:5d:92:ad:d9:57:ea:37:6f:
         68:d7:6a:3b:0f:10:58:08:49:ee:81:91:e1:12:4a:91:76:56:
         7b:d0:13:b4:e4:2a:39:ca:ab:ed:f7:5e:3b:8f:88:2b:79:37:
         14:6b:93:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:45 2024 by rpki-client on console-fra.rpki-client.org