Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft
File:                     5iM43jMsb0ueJZbuXcN5ol7-WM8.mft (raw, json)
Hash identifier:          QDr40tUS6jY97fVdtWAkQFnQBr8nQ8hQ101VB90ZUJ0=
Subject key identifier:   C7:94:7D:E7:84:E1:33:76:E0:EC:72:0E:D4:01:51:70:58:14:5F:44
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       67
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft
Manifest number:          0107
Signing time:             Fri 22 Nov 2024 14:41:58 +0000
Manifest this update:     Fri 22 Nov 2024 14:41:58 +0000
Manifest next update:     Sat 07 Dec 2024 14:41:58 +0000
Files and hashes:         1: -wElUAYmIkUxLxiR6OsfiWpq718.roa (hash: 1BlQ9TUKxbaBtV8Mq28lSAjq5yUaRT/ELMkzcNjjUO4=)
                          2: 5At5Y5NO3M7zS3A21oiz4YX-seM.roa (hash: zaSmItH9PoEbY9CEWsY04eQ/FTjnTRcSzU+PxybxK4M=)
                          3: 5iM43jMsb0ueJZbuXcN5ol7-WM8.crl (hash: yKdvc1VbTqjl0dbKVF/7GRXsiX0uPJTRgB0G3UWTBio=)
                          4: 61HA5pikkN9HY4cBsf5nFtabXfo.roa (hash: SbQg6F9O7n+K3LpLyoFyWTc1R/0BRHpld+nPTDrrd48=)
                          5: BmDPnQizlZm6ef_Wsm98rVzqi-o.roa (hash: pFiN4x2YBWVCKv7ceNlVrflgdPck4Up+SRpjYlmk2EE=)
                          6: BrqYPUYtSI4oXY9wvfIBQ1DF7w8.roa (hash: Yt1Q+W1Lhe7DunTXqbqv6iZKhXHV8wQYK0qwHCAMeOA=)
                          7: CyN83iT6jLfU5n7an9kqqR-j580.roa (hash: ug5dszR70PO9S2QhMkjyz8vPDKOTTenn50AZxbVdwkk=)
                          8: E7gL0LG-1Q16CG6Md6kAjVaUZHY.roa (hash: r2GdIAmGcEQEtNGZqzwtG/OnT3HJQJZtMOwwfdrEfNg=)
                          9: IDNNB1RC2gpdXiatdBbgRFD59uo.roa (hash: oFsRZmCsbhHOBL4u9jp05QxTKZoj5azDKUTOC3IFXz4=)
                          10: K99j82cmDC10LHWXZjMuNoNnEfM.roa (hash: uDfr7GDolUvHNGKw4sjk81H5aMoNGjVdGyxPVHD1+qk=)
                          11: KdNJET6BUoK5ebZ655kes3MHbno.roa (hash: ish0lInHFyfL0E71Me49I8tKvL52PqAAP3hlJ12sdd0=)
                          12: MFvbuLo0Yhvj8_OgrmCbkWRNIto.roa (hash: jkvVLpnY7vSlLlRoBDE3RoOp8PFGSAw84AC/abMUbC8=)
                          13: NI_2xJ7qy8E_bJPEOLUGJsR5oYw.roa (hash: UQJi3KgvGvIknVZxGx1QZ1Qe+ve31uib9sMSEWqqwT4=)
                          14: XcrkASALmvjPGO_8uGh2Jlj9y9c.roa (hash: imMX5WsATNjpIso364ZJOBORmqOc95adXnfLAAGOt5c=)
                          15: Yq9NgUpNuzQB0O8G-EHDiR-vd-0.roa (hash: yET1s8xxrUSxxD8myzvIvbGZC1vifXzzwgE7W7E7Nrc=)
                          16: eUI85V0HYBEu2PjxkrWp3_ArzP8.roa (hash: t7obuxkc/NnfSlY/KNB7gXF3RkiwEXN4KPMU8UpDG+E=)
                          17: jEx4j8AeTBwVQVQWZfYxkGpAUVA.roa (hash: UX3o6lIZqi8kpFIcYOajHC7ZRWYmzfl5BnnvMyHjcLE=)
                          18: o-JihmQ6i4aTgQi0hOJChf9qZ4A.roa (hash: k8jt0/NvSmtlY4j5V46ncsDvbds5YumERa2WG+gDVhI=)
                          19: pq4i2VXmstyL8pi9Jk4vU3753uU.roa (hash: hfzbCR7oxs3dBtjZW5zI9DP+bUlbuiAPQrcz8QyR7E4=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Nov 15 01:36:32 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=C7947DE784E13376E0EC720ED401517058145F44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7d:ed:71:5f:0f:bf:d9:a5:73:dd:ba:6e:91:
                    09:61:8e:43:41:3f:1d:e0:7f:ed:af:f2:c5:fe:f5:
                    32:09:2f:21:76:04:00:1e:36:8a:41:bb:21:84:02:
                    52:3e:ad:77:6d:d9:17:28:90:58:ad:1a:ae:de:e0:
                    4d:03:c0:bb:fc:11:9f:61:cf:35:d9:70:8a:27:9f:
                    5b:9b:da:65:a0:98:55:83:9b:71:e2:a5:1d:98:b9:
                    cd:31:3a:23:cf:dc:aa:7f:1d:bc:c7:1f:a6:a9:f5:
                    92:0a:ff:cb:14:bf:60:68:0a:9e:c8:69:03:68:df:
                    d0:02:5d:07:9e:30:03:0e:4c:96:8c:90:e6:56:b1:
                    7e:54:22:0d:62:a7:f4:4b:ad:aa:96:43:94:e5:26:
                    64:ad:13:a5:95:8e:4d:46:06:b0:39:bf:02:26:65:
                    33:0f:43:0c:c3:77:70:8a:48:89:3d:c6:b6:3a:78:
                    a6:5e:e1:3d:d9:24:36:a0:a2:66:75:1c:7f:e4:71:
                    74:dc:1c:3c:b1:7a:e1:a4:93:14:75:f2:90:e8:13:
                    17:63:66:ae:8c:d5:a6:b7:f5:3a:bf:63:9d:d9:b6:
                    d0:a5:23:99:e7:1e:b1:a3:e1:24:23:e8:0a:cf:67:
                    ed:32:a4:39:01:ec:dd:f8:e3:37:f2:a2:83:cb:ef:
                    47:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:94:7D:E7:84:E1:33:76:E0:EC:72:0E:D4:01:51:70:58:14:5F:44
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:44:67:dc:b8:28:37:58:5b:30:a4:84:63:52:fc:08:cb:63:
         ba:24:bd:bc:25:d7:e1:d2:40:4a:37:60:39:c8:1c:0a:02:40:
         b4:5c:9d:6d:eb:64:32:55:2c:82:ad:38:9d:e4:df:1a:3c:f4:
         eb:c9:46:38:db:bc:41:9d:d0:60:2e:19:01:a3:66:e5:85:e3:
         79:8b:1b:b7:85:c6:2d:c5:35:3a:a1:98:c3:b6:73:81:80:50:
         e0:79:7e:b0:ef:f1:af:07:ec:ae:03:db:af:15:f5:0b:7b:90:
         a7:6b:5a:04:1c:08:7f:20:db:61:72:14:01:46:68:4d:0a:d4:
         91:9c:dd:14:1c:6e:87:81:d0:78:a2:b2:89:32:50:85:b3:bb:
         57:c9:dc:40:e4:ad:f7:d2:f3:76:b4:7b:c1:15:f5:54:57:f2:
         fc:57:69:88:4c:32:99:f6:9f:ec:a7:cc:8c:5e:2f:65:c2:c5:
         2d:f3:ed:8c:25:53:59:47:65:6a:9a:2d:b3:36:9e:13:00:5a:
         a6:7e:c4:0e:87:b1:22:0d:e3:0e:13:5d:56:e8:ed:24:8a:22:
         47:31:65:9d:88:5d:26:93:ba:db:c7:90:4d:f4:28:2c:f1:1f:
         eb:6a:36:04:97:1b:96:70:88:b7:cd:cd:5e:5e:b2:a1:05:a0:
         4f:8a:5d:56
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIBZzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNjIz
MzhERTMzMkM2RjRCOUUyNTk2RUU1REMzNzlBMjVFRkU1OENGMB4XDTI0MTExNTAx
MzYzMloXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoQzc5NDdERTc4NEUxMzM3
NkUwRUM3MjBFRDQwMTUxNzA1ODE0NUY0NDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKl97XFfD7/ZpXPdum6RCWGOQ0E/HeB/7a/yxf71MgkvIXYEAB42
ikG7IYQCUj6td23ZFyiQWK0art7gTQPAu/wRn2HPNdlwiiefW5vaZaCYVYObceKl
HZi5zTE6I8/cqn8dvMcfpqn1kgr/yxS/YGgKnshpA2jf0AJdB54wAw5MloyQ5lax
flQiDWKn9EutqpZDlOUmZK0TpZWOTUYGsDm/AiZlMw9DDMN3cIpIiT3Gtjp4pl7h
PdkkNqCiZnUcf+RxdNwcPLF64aSTFHXykOgTF2NmrozVprf1Or9jndm20KUjmece
saPhJCPoCs9n7TKkOQHs3fjjN/Kig8vvR2kCAwEAAaOCAj0wggI5MB0GA1UdDgQW
BBTHlH3nhOEzduDscg7UAVFwWBRfRDAfBgNVHSMEGDAWgBTmIzjeMyxvS54llu5d
w3miXv5YzzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDQwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3LVdNOC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3
LVdNOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NDAvNWlNNDNqTXNiMHVlSlpidVhjTjVvbDctV004Lm1mdDBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBANpEZ9y4KDdYWzCkhGNS/AjLY7okvbwl1+HSQEo3YDnIHAoCQLRcnW3rZDJV
LIKtOJ3k3xo89OvJRjjbvEGd0GAuGQGjZuWF43mLG7eFxi3FNTqhmMO2c4GAUOB5
frDv8a8H7K4D268V9Qt7kKdrWgQcCH8g22FyFAFGaE0K1JGc3RQcboeB0Hiisoky
UIWzu1fJ3EDkrffS83a0e8EV9VRX8vxXaYhMMpn2n+ynzIxeL2XCxS3z7YwlU1lH
ZWqaLbM2nhMAWqZ+xA6HsSIN4w4TXVbo7SSKIkcxZZ2IXSaTutvHkE30KCzxH+tq
NgSXG5ZwiLfNzV5esqEFoE+KXVY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:04 2024 by rpki-client on console-fra.rpki-client.org