Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30420/qBXXbVkmtkXxmTmx3-n2KtOcHhU.mft
File:                     qBXXbVkmtkXxmTmx3-n2KtOcHhU.mft (raw, json)
Hash identifier:          6i/G3c+s3cQ11VZXUU1Yn9MOMCtzvoRJLComE/fIIM0=
Subject key identifier:   54:29:8B:C4:6C:B2:41:EE:3E:53:BF:68:B1:A1:FE:79:8C:23:9D:5A
Authority key identifier: A8:15:D7:6D:59:26:B6:45:F1:99:39:B1:DF:E9:F6:2A:D3:9C:1E:15
Certificate issuer:       /CN=A815D76D5926B645F19939B1DFE9F62AD39C1E15
Certificate serial:       17
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qBXXbVkmtkXxmTmx3-n2KtOcHhU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30420/qBXXbVkmtkXxmTmx3-n2KtOcHhU.mft
Manifest number:          B2
Signing time:             Mon 25 Nov 2024 23:18:10 +0000
Manifest this update:     Mon 25 Nov 2024 23:18:10 +0000
Manifest next update:     Tue 10 Dec 2024 23:18:10 +0000
Files and hashes:         1: qBXXbVkmtkXxmTmx3-n2KtOcHhU.crl (hash: tkAo+P/z6RVypp7J2hxLZCgdAz8dbE4xkH4s7X/jXKU=)
                          2: uITs0aBk9Wh7TUUcU3868AdNOSk.roa (hash: +ijvzeXZq2E3npvUS0D014+kcncGCw4rpzYJHjvjjMg=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30420/qBXXbVkmtkXxmTmx3-n2KtOcHhU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30420/qBXXbVkmtkXxmTmx3-n2KtOcHhU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qBXXbVkmtkXxmTmx3-n2KtOcHhU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A815D76D5926B645F19939B1DFE9F62AD39C1E15
        Validity
            Not Before: Nov 15 01:32:48 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=54298BC46CB241EE3E53BF68B1A1FE798C239D5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:86:86:2b:44:d9:56:5b:2b:b2:4f:3f:52:fb:
                    14:25:79:00:8d:e1:06:94:a7:18:01:c3:ad:16:a1:
                    99:ee:10:0b:e0:c5:96:73:06:fc:9e:f2:be:5f:d3:
                    00:00:ce:33:24:a9:f3:33:0d:57:58:19:76:cf:ed:
                    5f:ac:7c:8e:7d:c0:8f:37:4b:06:39:10:2f:13:67:
                    23:63:72:e1:69:b6:a4:55:a7:75:32:9d:12:e7:39:
                    c9:c4:74:30:37:7c:f8:0e:d6:79:9e:6e:0c:0f:0a:
                    75:29:f0:3e:c0:87:38:e5:a2:99:8c:6e:b6:bf:87:
                    ce:4e:e1:9a:c5:14:b1:47:66:4e:09:e4:00:e0:06:
                    db:1c:25:54:bc:c5:a7:c1:91:5b:5f:9f:31:e6:c3:
                    af:e5:ef:0a:e3:ab:a2:76:9c:cf:3e:02:fb:4d:9a:
                    e9:ef:0d:e1:0d:e0:99:77:42:6a:03:1b:34:1c:b0:
                    a7:95:6a:e4:24:dc:90:7b:53:b1:fc:59:cd:31:b2:
                    5a:6a:23:ee:4d:7f:e0:38:d9:08:46:91:fb:d0:90:
                    90:fb:9b:68:c3:ae:2e:bd:5f:8f:1f:32:fe:d3:0f:
                    54:9c:32:63:47:56:e1:2f:bd:36:5a:aa:19:61:6f:
                    c2:7d:7f:fd:a5:30:49:e7:fc:21:b3:9c:53:74:b3:
                    0c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:29:8B:C4:6C:B2:41:EE:3E:53:BF:68:B1:A1:FE:79:8C:23:9D:5A
            X509v3 Authority Key Identifier:
                keyid:A8:15:D7:6D:59:26:B6:45:F1:99:39:B1:DF:E9:F6:2A:D3:9C:1E:15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30420/qBXXbVkmtkXxmTmx3-n2KtOcHhU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qBXXbVkmtkXxmTmx3-n2KtOcHhU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30420/qBXXbVkmtkXxmTmx3-n2KtOcHhU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:55:e0:15:b1:68:bb:59:a3:95:f3:b8:1a:e6:c9:cc:15:6d:
         81:af:74:a0:d0:1d:94:64:ab:3b:2b:0a:9d:ca:5f:55:3d:f6:
         f7:73:a5:8a:36:f8:03:8d:f2:be:65:94:c4:d6:b9:40:da:e5:
         61:1f:a1:3d:ee:4f:ef:1c:37:23:b3:d1:75:69:3b:53:d4:d5:
         4a:20:8d:90:f7:05:38:3b:70:0e:c0:ef:53:80:c7:10:66:15:
         6c:50:b6:3c:41:2b:1a:56:63:8f:8e:6b:00:d8:b8:66:7e:d5:
         da:7c:be:ab:3d:c0:ab:14:dc:5e:cf:d6:77:1d:05:2b:90:ce:
         64:63:1c:3e:80:aa:ba:dd:91:73:17:c5:62:9f:c0:4c:71:29:
         8e:25:16:2d:54:77:a1:14:68:af:38:d9:1e:52:e1:1f:f6:d9:
         57:5a:17:fd:77:df:ad:81:26:cc:e1:26:05:01:91:68:9a:79:
         c9:5d:87:fb:41:d8:4f:c9:6f:a7:b3:4f:4d:8c:85:94:23:87:
         16:02:69:bd:e0:2c:85:5b:1f:e7:a1:dd:19:d5:21:b1:00:cf:
         79:fe:ab:0f:93:a6:2e:22:05:7d:89:6e:e4:7f:a4:c9:a2:58:
         cd:d0:67:8a:2c:2a:a3:17:4f:8e:5f:4a:31:b8:87:a7:00:ec:
         e6:e9:7d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:08 2024 by rpki-client on console-fra.rpki-client.org