Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30143/lVb98JOQ5G3GSGdWcYs_xu48_uo.mft
File:                     lVb98JOQ5G3GSGdWcYs_xu48_uo.mft (raw, json)
Hash identifier:          LLYPds12iFpAcQFK4jLB0nDmdCJHpzc4eSsoULTyTKU=
Subject key identifier:   1E:3D:96:82:E6:17:F6:DC:65:71:02:DF:D5:57:83:26:57:64:AA:1C
Authority key identifier: 95:56:FD:F0:93:90:E4:6D:C6:48:67:56:71:8B:3F:C6:EE:3C:FE:EA
Certificate issuer:       /CN=9556FDF09390E46DC6486756718B3FC6EE3CFEEA
Certificate serial:       21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lVb98JOQ5G3GSGdWcYs_xu48_uo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30143/lVb98JOQ5G3GSGdWcYs_xu48_uo.mft
Manifest number:          02D2
Signing time:             Sun 16 Feb 2025 17:45:36 +0000
Manifest this update:     Sun 16 Feb 2025 17:45:36 +0000
Manifest next update:     Mon 03 Mar 2025 17:45:36 +0000
Files and hashes:         1: lVb98JOQ5G3GSGdWcYs_xu48_uo.crl (hash: oa57M1FPH0ZNWPtRZ1NVK1A7BKjFFGzeVLlcPjEg6n8=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30143/lVb98JOQ5G3GSGdWcYs_xu48_uo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30143/lVb98JOQ5G3GSGdWcYs_xu48_uo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lVb98JOQ5G3GSGdWcYs_xu48_uo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9556FDF09390E46DC6486756718B3FC6EE3CFEEA
        Validity
            Not Before: Feb 15 01:32:13 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=1E3D9682E617F6DC657102DFD55783265764AA1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fd:06:60:5a:dc:2f:86:c1:ba:ff:5d:9f:eb:
                    71:17:6a:4e:50:e2:4e:5a:bf:b9:53:2d:b7:f6:27:
                    fa:d2:c5:d8:ed:5c:57:e6:e3:75:22:58:64:81:2d:
                    b1:dd:01:f9:bd:98:41:c5:27:95:87:88:c8:9b:b4:
                    2b:48:8f:02:49:15:04:08:8e:0d:9c:e3:e7:30:bd:
                    87:e0:bc:71:ca:ab:0e:05:df:cc:cf:e2:ca:36:55:
                    be:92:18:1b:51:20:76:fd:e7:63:1f:71:47:c0:c4:
                    87:c8:e7:bf:e1:d4:e9:1f:e8:62:92:06:90:f3:ef:
                    f9:5b:7a:cb:23:d4:87:54:a9:b4:cc:6b:82:93:64:
                    ec:b5:f2:50:9d:5a:e1:c4:09:62:49:22:7a:50:e3:
                    db:cb:71:ed:75:e4:1d:09:10:83:ba:de:27:3f:29:
                    a9:02:0c:be:7f:2a:22:fd:08:24:7d:49:a5:a1:36:
                    f4:28:fa:3e:7c:ad:65:61:91:aa:62:30:7a:d2:ec:
                    4e:0a:8d:89:b9:81:a2:54:bd:fc:04:ff:30:a2:df:
                    a3:94:12:1b:bc:b2:88:97:b5:26:30:cd:36:b4:c9:
                    4e:96:7b:f1:aa:d1:41:1c:ef:40:0d:fd:23:3b:3a:
                    5f:e2:ad:cb:4a:a4:9a:00:6e:0d:12:b7:bd:81:bd:
                    84:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3D:96:82:E6:17:F6:DC:65:71:02:DF:D5:57:83:26:57:64:AA:1C
            X509v3 Authority Key Identifier:
                keyid:95:56:FD:F0:93:90:E4:6D:C6:48:67:56:71:8B:3F:C6:EE:3C:FE:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30143/lVb98JOQ5G3GSGdWcYs_xu48_uo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lVb98JOQ5G3GSGdWcYs_xu48_uo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30143/lVb98JOQ5G3GSGdWcYs_xu48_uo.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:f3:47:29:04:d9:95:a6:70:ac:ae:73:cd:cf:c0:12:6c:91:
         24:31:94:0f:11:e8:cc:25:14:11:1a:c8:5c:75:74:2e:9e:37:
         f0:ea:8f:e3:71:9f:f8:2f:1d:da:2e:07:2e:0c:99:cf:79:82:
         b4:fe:12:96:3a:0e:d9:9a:d8:96:ba:fa:49:19:f9:ba:ca:a9:
         49:40:35:9d:63:0e:eb:9e:0f:4d:dc:97:7c:d1:72:d4:01:f0:
         9d:61:3d:b4:e8:ca:e6:13:9c:b2:65:7a:d7:6f:96:af:6e:ee:
         ce:f4:d8:89:fa:12:31:9b:c4:63:4e:58:f5:e5:4b:20:03:41:
         c0:7c:57:6b:ae:c5:a4:cf:d7:27:96:9b:da:0f:45:85:79:7e:
         25:58:ca:06:56:9a:bb:11:f8:0d:b1:8a:e8:4c:cb:dd:17:ad:
         05:d0:61:e0:87:c1:d1:90:35:b2:4c:e6:53:ec:58:96:46:cf:
         04:aa:9e:41:9c:22:f8:ba:4c:d6:89:15:3a:59:b3:43:08:c5:
         0b:75:ca:c1:df:f5:c4:cf:a8:72:0a:dc:4f:07:67:57:15:4e:
         83:a5:1c:27:43:e1:ed:c3:6c:6f:52:41:42:67:89:14:06:7e:
         bd:1b:3c:fc:54:97:ba:0a:0e:b8:d6:b8:6c:97:cb:96:14:4c:
         6b:da:be:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:45 2025 by rpki-client