Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft
File:                     O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft (raw, json)
Hash identifier:          9s4I/9/gXcENG9Wxj8AYoAzIvRGl7BOetvnCqPzsX9w=
Subject key identifier:   F0:6E:87:76:EA:62:B8:CD:C8:AC:BF:65:C4:89:B3:44:09:45:40:92
Authority key identifier: 3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56
Certificate issuer:       /CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
Certificate serial:       30
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft
Manifest number:          C7
Signing time:             Thu 30 May 2024 01:36:19 +0000
Manifest this update:     Thu 30 May 2024 01:36:19 +0000
Manifest next update:     Sun 09 Jun 2024 01:36:19 +0000
Files and hashes:         1: O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl (hash: 8zgC1WnFcRUAxY2wNbOixS63kBu3lQrM0RsiE/Cm3rk=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
        Validity
            Not Before: May 15 01:33:49 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=F06E8776EA62B8CDC8ACBF65C489B34409454092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:06:82:42:ba:96:33:b0:9b:38:82:fb:3b:e2:
                    7e:27:a4:65:5a:0a:63:af:f2:4b:54:e0:53:ac:20:
                    5c:af:a0:49:c7:41:fb:59:70:13:f3:9c:59:e6:f6:
                    fe:2a:1b:28:c6:2c:20:61:09:3b:9d:80:6b:f7:50:
                    91:83:55:0a:22:bc:54:49:13:c5:b3:ef:36:7b:5f:
                    57:6c:41:71:ad:6b:b3:92:a9:87:99:16:a7:a2:4e:
                    b7:42:64:5b:e5:9f:bb:94:f9:39:89:d4:df:b9:e1:
                    fd:eb:79:6f:e6:8d:86:f4:ad:d9:81:c7:9a:ef:e7:
                    45:6b:96:e3:ad:77:f7:59:3d:56:54:28:e0:72:b5:
                    9e:b2:4c:75:16:03:60:1b:99:24:81:e0:69:93:e8:
                    64:6a:3c:c7:96:fe:19:9c:e1:31:96:c6:62:2e:9d:
                    e7:f2:96:b5:f7:db:4e:c9:7c:43:3f:cc:2a:52:c2:
                    8c:01:17:a2:a4:b0:3d:f3:15:89:6e:71:3d:11:0c:
                    7e:7f:8b:5b:71:51:f4:03:55:31:1c:8c:4f:78:c9:
                    87:6c:3c:ab:8e:83:bf:55:46:56:c1:df:02:11:60:
                    df:c6:17:2d:9a:d1:01:59:7d:ab:e8:0a:2b:fb:bd:
                    54:ec:1a:3c:1b:30:0f:e3:13:11:a8:56:8c:d5:dd:
                    b7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6E:87:76:EA:62:B8:CD:C8:AC:BF:65:C4:89:B3:44:09:45:40:92
            X509v3 Authority Key Identifier:
                keyid:3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:9a:65:1b:10:f3:7b:45:54:57:fd:fe:0c:7b:ff:39:d9:99:
         8b:89:4e:9d:35:66:fb:35:8c:65:5e:e3:60:e8:61:93:63:dd:
         cb:cf:f6:4c:37:fe:18:68:00:3c:1e:b2:33:e6:9e:f3:bf:9e:
         61:17:0f:2a:d4:c8:d2:08:ec:45:e0:1f:57:1a:68:49:40:93:
         36:ec:da:02:2c:9f:72:67:d1:15:a2:30:d4:8f:7a:a4:12:bf:
         5d:88:12:e8:e0:ab:9d:0f:ce:4f:f0:a6:1d:37:9d:3b:87:8f:
         4d:88:6b:3a:6b:12:20:41:a8:eb:c5:7e:93:d4:5e:3b:85:f6:
         43:13:ea:ce:54:49:16:a3:6b:d4:f8:c3:c9:6e:93:a5:51:ac:
         5f:4d:5a:e8:be:2c:89:e1:66:3d:75:96:69:24:94:7c:3d:b6:
         49:09:4f:07:1e:62:1a:c2:7c:02:c8:83:39:55:55:6a:b5:05:
         fd:10:be:a9:66:9a:1c:90:0d:b2:09:cb:6f:38:43:73:9f:22:
         5b:28:b0:ce:c2:83:dd:c8:03:18:bf:35:9f:63:df:e3:dc:a0:
         ec:a6:7b:3b:99:11:eb:fb:ef:1e:e2:b3:d3:67:5a:23:93:be:
         4a:37:08:48:3d:87:3e:e5:73:61:65:d5:77:a9:3c:cb:47:3b:
         ad:1e:09:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:38 2024 by rpki-client on console-ams.rpki-client.org