Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30420/qBXXbVkmtkXxmTmx3-n2KtOcHhU.mft
File:                     qBXXbVkmtkXxmTmx3-n2KtOcHhU.mft (raw, json)
Hash identifier:          Vt8w21txdoZCTpOb2Y7f9I3cgNc9tvx3y52RLUfo1pE=
Subject key identifier:   54:29:8B:C4:6C:B2:41:EE:3E:53:BF:68:B1:A1:FE:79:8C:23:9D:5A
Authority key identifier: A8:15:D7:6D:59:26:B6:45:F1:99:39:B1:DF:E9:F6:2A:D3:9C:1E:15
Certificate issuer:       /CN=A815D76D5926B645F19939B1DFE9F62AD39C1E15
Certificate serial:       0E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qBXXbVkmtkXxmTmx3-n2KtOcHhU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30420/qBXXbVkmtkXxmTmx3-n2KtOcHhU.mft
Manifest number:          28
Signing time:             Thu 30 May 2024 01:42:59 +0000
Manifest this update:     Thu 30 May 2024 01:42:59 +0000
Manifest next update:     Sun 09 Jun 2024 01:42:59 +0000
Files and hashes:         1: qBXXbVkmtkXxmTmx3-n2KtOcHhU.crl (hash: iP9V8Z88MM+PVkU7a9R4HoqRIqkaE1bqd6FkYNGBQ0A=)
                          2: uITs0aBk9Wh7TUUcU3868AdNOSk.roa (hash: +ijvzeXZq2E3npvUS0D014+kcncGCw4rpzYJHjvjjMg=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30420/qBXXbVkmtkXxmTmx3-n2KtOcHhU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30420/qBXXbVkmtkXxmTmx3-n2KtOcHhU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qBXXbVkmtkXxmTmx3-n2KtOcHhU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A815D76D5926B645F19939B1DFE9F62AD39C1E15
        Validity
            Not Before: May 15 01:38:04 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=54298BC46CB241EE3E53BF68B1A1FE798C239D5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:86:86:2b:44:d9:56:5b:2b:b2:4f:3f:52:fb:
                    14:25:79:00:8d:e1:06:94:a7:18:01:c3:ad:16:a1:
                    99:ee:10:0b:e0:c5:96:73:06:fc:9e:f2:be:5f:d3:
                    00:00:ce:33:24:a9:f3:33:0d:57:58:19:76:cf:ed:
                    5f:ac:7c:8e:7d:c0:8f:37:4b:06:39:10:2f:13:67:
                    23:63:72:e1:69:b6:a4:55:a7:75:32:9d:12:e7:39:
                    c9:c4:74:30:37:7c:f8:0e:d6:79:9e:6e:0c:0f:0a:
                    75:29:f0:3e:c0:87:38:e5:a2:99:8c:6e:b6:bf:87:
                    ce:4e:e1:9a:c5:14:b1:47:66:4e:09:e4:00:e0:06:
                    db:1c:25:54:bc:c5:a7:c1:91:5b:5f:9f:31:e6:c3:
                    af:e5:ef:0a:e3:ab:a2:76:9c:cf:3e:02:fb:4d:9a:
                    e9:ef:0d:e1:0d:e0:99:77:42:6a:03:1b:34:1c:b0:
                    a7:95:6a:e4:24:dc:90:7b:53:b1:fc:59:cd:31:b2:
                    5a:6a:23:ee:4d:7f:e0:38:d9:08:46:91:fb:d0:90:
                    90:fb:9b:68:c3:ae:2e:bd:5f:8f:1f:32:fe:d3:0f:
                    54:9c:32:63:47:56:e1:2f:bd:36:5a:aa:19:61:6f:
                    c2:7d:7f:fd:a5:30:49:e7:fc:21:b3:9c:53:74:b3:
                    0c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:29:8B:C4:6C:B2:41:EE:3E:53:BF:68:B1:A1:FE:79:8C:23:9D:5A
            X509v3 Authority Key Identifier:
                keyid:A8:15:D7:6D:59:26:B6:45:F1:99:39:B1:DF:E9:F6:2A:D3:9C:1E:15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30420/qBXXbVkmtkXxmTmx3-n2KtOcHhU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qBXXbVkmtkXxmTmx3-n2KtOcHhU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30420/qBXXbVkmtkXxmTmx3-n2KtOcHhU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:c6:fc:f9:c3:22:40:2c:64:c5:d0:75:d0:d5:2e:2f:db:39:
         d8:38:15:21:e4:bf:6a:40:d5:e3:6e:1a:00:ca:5b:54:68:18:
         f2:32:84:b5:33:a4:1b:dd:79:09:da:a7:1d:56:13:23:02:60:
         9a:9f:14:6d:22:ae:71:15:f3:a7:c0:46:e2:8c:6b:fe:cd:03:
         29:fe:10:b3:18:ad:e9:e8:91:41:b3:e6:37:b7:34:85:54:0e:
         ec:73:41:3a:cc:c1:fa:0f:b6:60:8e:6c:b0:1b:bd:07:23:14:
         ff:0d:48:35:53:ee:97:75:8f:2b:1f:eb:50:ad:5a:5d:a3:65:
         10:a3:85:16:54:a5:6c:54:02:65:b9:7c:a4:7f:cb:e7:76:b7:
         3e:05:75:b9:4d:9f:24:b0:54:b9:c1:08:5d:b7:6a:b4:79:e8:
         93:e1:d2:6c:e5:05:79:d4:1c:5c:58:eb:a3:95:17:24:4d:7a:
         c2:1d:81:af:65:72:fd:22:19:7b:64:18:d9:b8:ea:73:a4:31:
         72:8a:ed:92:93:f0:86:c5:44:15:4d:08:75:5d:a4:89:0d:b4:
         6f:6d:68:f7:71:b5:07:7f:f0:8e:f8:2a:63:56:e5:d5:2b:4b:
         59:44:b5:2a:35:8a:7f:00:b1:62:45:e1:e3:2d:09:19:d2:fd:
         be:d5:0a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:45 2024 by rpki-client on console-ams.rpki-client.org