Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.mft
File:                     HLYLQKmK6uBUyu5MCct9murePp0.mft (raw, json)
Hash identifier:          MvsMCvGp0211aXur6e4ONHxD3f/Rh1ECRR3CoBD+BqU=
Subject key identifier:   F1:54:AA:E4:79:00:D4:E8:D8:99:B4:0C:52:54:DB:C4:1E:C5:D5:97
Authority key identifier: 1C:B6:0B:40:A9:8A:EA:E0:54:CA:EE:4C:09:CB:7D:9A:EA:DE:3E:9D
Certificate issuer:       /CN=1CB60B40A98AEAE054CAEE4C09CB7D9AEADE3E9D
Certificate serial:       1C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.mft
Manifest number:          AF
Signing time:             Fri 22 Nov 2024 14:43:45 +0000
Manifest this update:     Fri 22 Nov 2024 14:43:45 +0000
Manifest next update:     Sat 07 Dec 2024 14:43:45 +0000
Files and hashes:         1: C6E29iHs1uMwMC6pdLsCCKwI8RI.roa (hash: 0KcEIuzE4Ed2TtJkTu+Y2lVdDV8+CM2spycW7+pKT6I=)
                          2: HLYLQKmK6uBUyu5MCct9murePp0.crl (hash: cEzFa1Ei+2s56PXoIu5Vb/vsQKJ6jXv07wS/bfOj2OM=)
                          3: aFu9THmqF0HtDCLolzlfZ5kJTXE.roa (hash: TVaImSRbhxp2LutoDzAV0kN7EPqviTVjPXRFETJbYks=)
                          4: rnPbuexy18dKAU1HlJbtLjOOwds.roa (hash: cvo3OBLyimHwFRLfidLhggBCYWljixIxtfuafJkqXf4=)
                          5: tdSD73GMgfnN9J6xRdufqi9JxLE.roa (hash: QVQ2fZHEAA+duhO8Wa0reTg551uB41u8BrkpqYEmNW8=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB60B40A98AEAE054CAEE4C09CB7D9AEADE3E9D
        Validity
            Not Before: Nov 15 01:32:02 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=F154AAE47900D4E8D899B40C5254DBC41EC5D597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8a:53:94:51:04:9a:58:11:5b:0f:c0:6b:65:
                    fd:8d:99:d7:37:08:89:14:c7:02:a3:9c:db:e2:f9:
                    7c:37:37:d0:7f:1d:d1:d8:f8:b6:20:0c:c5:02:ec:
                    f6:33:5e:4d:51:eb:f5:60:f2:ca:9e:11:3a:5b:d0:
                    48:a0:86:c5:4a:56:d0:55:df:78:44:a3:7a:0e:d8:
                    a5:99:08:39:a9:bb:77:fc:54:10:79:09:66:e0:f4:
                    1f:9c:bf:77:e6:99:91:cd:06:e7:61:6b:bc:6b:de:
                    f9:17:f1:5c:7f:ed:3a:9a:8d:41:f0:a6:83:16:18:
                    48:a8:84:39:94:ed:60:9e:a6:01:a8:b7:6f:d8:94:
                    d7:28:a9:41:b4:f1:99:dc:38:b2:5e:0a:0a:96:7c:
                    51:f5:bf:ab:03:8d:fa:3f:2a:b6:b9:2b:81:2e:90:
                    ad:44:eb:03:41:af:e6:9a:65:eb:44:12:8d:e4:c7:
                    0f:b1:68:1a:10:73:7f:97:b1:95:6f:a2:9a:fe:0f:
                    50:5f:49:c6:03:13:9f:7c:e0:90:b6:88:fc:84:35:
                    2c:aa:fa:00:59:da:d6:98:f1:a2:a4:90:8d:45:65:
                    2a:10:03:69:82:97:d4:1a:0c:be:8e:f7:35:c9:b9:
                    0b:16:9f:8a:7a:71:ef:f9:e7:1a:f6:6f:3a:f2:41:
                    34:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:54:AA:E4:79:00:D4:E8:D8:99:B4:0C:52:54:DB:C4:1E:C5:D5:97
            X509v3 Authority Key Identifier:
                keyid:1C:B6:0B:40:A9:8A:EA:E0:54:CA:EE:4C:09:CB:7D:9A:EA:DE:3E:9D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:5d:c9:22:1f:3d:64:52:ea:4e:be:4f:e4:39:c3:d8:e2:d5:
         64:6f:29:88:de:5a:7e:d8:b8:69:45:1b:07:51:ae:87:d1:d5:
         97:78:04:67:6d:7e:26:7b:94:a9:28:b0:52:f4:11:fe:48:58:
         fe:e8:03:27:9d:05:1b:cd:0a:6e:e7:97:41:88:02:66:be:8f:
         d0:39:6a:25:7e:22:8d:f6:c6:ba:ea:bb:c3:aa:72:df:fb:db:
         0a:89:b9:26:68:dd:61:81:e4:6e:64:cb:90:8b:1c:3c:cd:c9:
         c9:4b:c0:1e:ec:6d:b5:df:46:2f:98:17:b6:da:c2:76:f7:5d:
         0e:b3:b8:87:2f:dd:6e:f1:5f:f0:78:47:48:f3:71:db:2d:ea:
         90:93:1c:c7:6e:82:5b:e4:24:b9:ca:89:f0:18:88:c7:39:53:
         76:fd:b4:58:e9:1c:8a:52:ab:c0:67:24:cc:8c:e2:cc:98:fc:
         b3:b0:f9:0a:1f:af:fe:25:72:ef:da:52:23:0f:09:c8:e9:cb:
         f8:fb:1a:70:c8:fb:3e:5d:82:92:24:3f:0e:30:aa:61:9c:c7:
         74:ab:ee:25:6a:4c:23:cf:32:34:ca:e9:87:81:7e:66:5f:73:
         3a:f9:1f:9b:87:ef:20:50:34:be:cc:d2:ba:9c:0d:cb:e7:07:
         90:f3:03:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:32 2024 by rpki-client on console-ams.rpki-client.org