Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.mft
File:                     0Q2IZYK930iwQYUcOMC2MhFfXCE.mft (raw, json)
Hash identifier:          RnYLMlbfQDdWKas3Kif4jxETGanZj3ZXDIye2tLlqcs=
Subject key identifier:   BD:87:74:10:B4:06:61:01:93:94:A4:6B:F6:E8:F3:A8:95:7C:1A:31
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Certificate issuer:       /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial:       77
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.mft
Manifest number:          12EA
Signing time:             Fri 22 Nov 2024 13:50:57 +0000
Manifest this update:     Fri 22 Nov 2024 13:50:57 +0000
Manifest next update:     Sat 07 Dec 2024 13:50:57 +0000
Files and hashes:         1: 0Q2IZYK930iwQYUcOMC2MhFfXCE.crl (hash: qAq5zMsvwwiseuMs1kqAJe6zExyBH+nt5OGwbJaJYNc=)
                          2: 3c0aaQ_D72rIkLvKNouKYLSRLec.roa (hash: erwu5mIVkvMR4u0KIdaJX4Y9Y9iu/DRWy4+smywNAR8=)
                          3: 5Reqefqtj2_GE_rYgWCUsk8E2hE.roa (hash: dTJ4XMkwRgV5mCtMzTwNZNsB00EceSUjW1W2gyTSChc=)
                          4: C1PppvalMKsZMJ7-QTMcURieyAk.roa (hash: /ElMW9DGwLDG3KXIHtqnJfuqNsmg7ocWYKp8yyMDQlo=)
                          5: HsMLSlnqPCytmXjUEoKW2oiMNaE.roa (hash: hGPDlx+BrpZaabCTOwLo5JUNYReTGwTh57TGLM7LbCQ=)
                          6: I1DC8SSTPHccbLSBaEnyadDNJyw.roa (hash: tFMPfWuCO6FS4SQpK5PeapByU+ja1IFZ2AnhT4yQRC4=)
                          7: VEg0X0S7CsbqXdf_JWWPgyYGbVI.roa (hash: 5HOqs1GLLvt1Il8aQf6O8dDbCIUoud5C9WvpMKokzlA=)
                          8: mNgtEQNTfHEJkPAavkuI7W1NgG0.roa (hash: B5vm3WbBGLMbgPac0Kh5jwYGahB1nV48nGqj//UX2s4=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
        Validity
            Not Before: Nov 15 01:33:46 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=BD877410B40661019394A46BF6E8F3A8957C1A31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a6:0a:a2:f2:7d:9e:d1:76:bd:5f:2c:8e:3f:
                    20:4b:56:10:4c:34:4b:ef:bf:23:e9:0e:ac:4b:fc:
                    f0:6c:f2:37:c4:e1:6e:86:ad:f8:12:5d:36:16:c3:
                    50:31:0c:fa:8e:fa:3c:f8:9b:bd:a1:73:ba:fe:2e:
                    90:8d:c8:c6:9b:bf:e4:87:6a:b3:53:58:78:62:ac:
                    a3:21:1c:1b:1f:8a:21:45:f9:34:b5:7a:04:e6:95:
                    95:2e:1e:b2:0f:b6:e9:07:8c:a8:df:c2:db:b9:ed:
                    d8:3d:86:fc:4f:7e:f6:90:3c:71:58:0a:88:11:d7:
                    57:1d:96:d9:db:9a:0b:43:e5:32:96:f4:59:25:35:
                    e7:89:1f:60:37:b4:86:5a:56:79:ee:96:73:22:f8:
                    79:82:67:69:13:45:5e:ea:75:2b:f0:d2:5e:62:e8:
                    eb:23:29:0a:c4:5b:bb:fb:e9:71:54:ee:b8:56:b2:
                    7c:cb:2e:f0:95:10:38:ca:58:60:9b:ec:a0:a8:bd:
                    6f:6a:59:9f:19:e5:10:e2:2c:31:15:84:2f:a3:4c:
                    e9:c6:b6:1a:63:ab:99:9b:53:22:90:69:c7:a1:d5:
                    2f:4a:c5:f4:09:eb:96:09:8c:b1:51:91:b1:02:b7:
                    af:ab:ad:4a:a7:d4:ee:62:26:bf:78:64:e0:1d:40:
                    3d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:87:74:10:B4:06:61:01:93:94:A4:6B:F6:E8:F3:A8:95:7C:1A:31
            X509v3 Authority Key Identifier:
                keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:92:66:b6:4c:ef:a8:91:20:36:34:1f:8b:d1:1a:a6:ba:71:
         59:40:c5:50:82:cd:d6:70:ae:66:9c:21:58:16:bf:8f:78:6a:
         4b:50:52:d8:20:28:2d:db:86:80:18:02:c1:6c:bc:84:db:dc:
         1d:e8:c7:a7:31:1f:92:ea:17:70:16:b8:7a:4d:8c:7f:70:99:
         5d:20:f3:0b:87:8c:b9:ce:4c:d5:cb:15:e3:2f:3a:31:07:ae:
         01:b0:8d:e4:04:27:99:5f:98:02:25:d4:cb:b3:ea:b9:cb:42:
         3d:e7:57:35:71:87:71:3e:cf:7b:89:ac:aa:7b:fa:49:31:8b:
         4f:44:a3:dd:99:ce:1f:54:9e:54:39:d8:7a:f7:d3:1b:80:92:
         07:40:d5:52:40:9a:12:17:0f:0e:ad:95:d6:c6:8c:c6:0f:aa:
         09:ce:93:15:22:76:85:74:11:15:f1:e8:cc:b8:b8:44:f1:35:
         e2:a5:12:f2:5b:83:92:1d:d7:6f:ed:c1:f0:0a:61:92:3c:09:
         1a:ae:89:50:88:12:7f:5d:df:73:55:bc:4b:71:7f:b7:7d:7b:
         ea:e1:fd:a0:ff:18:34:5f:91:29:72:9e:d5:16:6a:aa:23:3f:
         93:10:2f:cf:f3:21:7c:f8:46:99:c4:71:c6:ec:6f:aa:89:0b:
         4a:f4:66:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:57 2024 by rpki-client on console-fra.rpki-client.org