Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.mft
File:                     X0aLMdsnWl3a56VJrAWNwg1_jJw.mft (raw, json)
Hash identifier:          r4e6zgqSPWaJKlEGTDkEHcxXtQRykYaOLizgTRWvjQo=
Subject key identifier:   52:D4:50:26:FC:A1:CE:95:7E:A5:1E:EB:5D:B3:1C:E2:A8:C9:7B:D7
Authority key identifier: 5F:46:8B:31:DB:27:5A:5D:DA:E7:A5:49:AC:05:8D:C2:0D:7F:8C:9C
Certificate issuer:       /CN=5F468B31DB275A5DDAE7A549AC058DC20D7F8C9C
Certificate serial:       2B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.mft
Manifest number:          02D8
Signing time:             Sun 16 Feb 2025 17:45:32 +0000
Manifest this update:     Sun 16 Feb 2025 17:45:32 +0000
Manifest next update:     Mon 03 Mar 2025 17:45:32 +0000
Files and hashes:         1: 9yA2Vn-TBDMh2qhXSxvcCJYBgKY.roa (hash: 8/OxL24jwBfstGx7w1Hc8AvmqhRvfjDYyUEyaTeAGaA=)
                          2: X0aLMdsnWl3a56VJrAWNwg1_jJw.crl (hash: PsZL4M5JU3QusnNGjQUXP8cplv3ydxEt25wRNAQFXNE=)
                          3: dQDr7sroiVQbS3q4R9VYismX-YU.roa (hash: ezqm9bxwjCcHiohAnrsyZq22uaY1Ohljztadbcpw5PY=)
                          4: k79FLBJh_uZi6YxkONidK5wjVmg.roa (hash: p1hD58DH/VY5lKfEqjS+75bshR9BH5FSs2j8AbgUVRU=)
                          5: kOEHCTyqGxRWvef9b3eyEhtGTqg.roa (hash: /IaYrofIsnKNWyXyPxi9kbubFuz0mMR2avApMnV37Ak=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F468B31DB275A5DDAE7A549AC058DC20D7F8C9C
        Validity
            Not Before: Feb 15 01:32:07 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=52D45026FCA1CE957EA51EEB5DB31CE2A8C97BD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e7:11:81:7a:07:eb:64:eb:63:5f:6e:cb:23:
                    62:20:83:cf:82:92:d6:87:48:c4:1e:31:d5:93:f3:
                    81:53:db:12:89:82:f6:29:de:0e:6d:a8:9c:16:9c:
                    ca:91:1f:75:98:5d:7f:82:ee:e5:46:43:18:4a:70:
                    f4:de:12:f2:df:7f:be:9c:f3:3a:11:27:74:ba:8e:
                    c9:8c:41:dc:e5:f9:48:c5:53:a5:eb:0e:e6:f5:5e:
                    38:7c:9b:3e:d0:5c:0a:4c:d2:7c:d7:6f:8e:47:5d:
                    83:00:7c:95:26:7e:76:f6:f3:d9:c7:3f:ba:93:a9:
                    81:52:7b:46:e0:a7:89:04:43:db:bc:a2:14:da:94:
                    8f:7c:ea:6d:ce:99:ea:0a:ad:46:4f:83:f1:fd:ee:
                    ab:d0:76:81:64:d2:f6:0e:57:66:35:ec:c3:1e:dc:
                    c6:04:2f:23:61:de:65:0e:46:7d:3b:42:e9:3e:0f:
                    b0:65:c8:67:2b:85:12:8b:20:11:58:49:49:ba:f3:
                    9c:12:f2:6c:66:04:34:97:a5:c8:5a:71:77:13:ae:
                    45:27:f8:48:e3:b2:73:42:98:9b:80:ab:65:71:fa:
                    02:3f:b4:ea:15:f4:b4:47:7c:0b:58:b4:04:e9:2d:
                    49:e4:5b:d9:47:0a:b3:ce:11:fe:9c:8a:87:2f:08:
                    ea:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D4:50:26:FC:A1:CE:95:7E:A5:1E:EB:5D:B3:1C:E2:A8:C9:7B:D7
            X509v3 Authority Key Identifier:
                keyid:5F:46:8B:31:DB:27:5A:5D:DA:E7:A5:49:AC:05:8D:C2:0D:7F:8C:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:c6:aa:dc:77:f4:8b:d4:7b:cd:06:60:6e:03:4d:b1:bc:d1:
         09:20:23:35:39:94:98:4c:86:02:9e:4e:1e:c0:32:1c:91:38:
         d4:8e:8a:d0:9a:7b:05:00:6d:9a:77:0a:ec:dd:1a:37:52:ee:
         8b:93:8f:15:3f:46:b8:e2:db:46:e3:17:f6:6e:64:54:d7:f7:
         1a:f9:75:53:b9:4d:86:97:1d:0c:36:20:62:a1:a9:dd:eb:fa:
         ab:6b:40:9b:e7:14:53:c1:e2:8a:50:18:af:94:eb:af:f5:ce:
         f1:67:20:df:db:38:55:b7:ae:f1:bc:f3:91:4b:51:96:9c:cb:
         b2:d7:b4:ce:ba:4d:71:75:67:6a:19:33:82:ed:bf:73:1f:34:
         b5:e6:05:b5:1c:bc:1c:46:f7:41:5a:65:4c:bf:32:0e:90:c7:
         c9:a6:e4:e1:84:b9:e1:5d:03:91:5d:6d:67:6f:41:73:b0:4e:
         73:da:3e:88:71:82:53:1e:37:59:24:28:9c:97:a1:9b:eb:ef:
         88:a9:d0:9c:78:1d:cc:07:dd:ea:fd:db:ee:3d:40:b2:03:df:
         d7:ae:b8:28:37:7a:3b:7d:e5:29:29:c1:61:86:03:ed:84:65:
         20:1c:5e:31:15:a7:f6:e6:5d:4e:ac:c7:3d:05:5a:85:a4:0e:
         4c:71:53:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:39 2025 by rpki-client