Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
File:                     rUdB8DSfvBWnCOKKLOMHkGysXeA.mft (raw, json)
Hash identifier:          cNuYW3XdoV8DlHsFUGwq+gCmz2ZQWJa20C03OahlzDA=
Subject key identifier:   34:B5:FD:0C:2C:7B:E8:12:B6:9D:0B:55:F7:10:81:FA:7D:C4:4D:F7
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       55
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
Manifest number:          EE
Signing time:             Mon 25 Nov 2024 23:09:37 +0000
Manifest this update:     Mon 25 Nov 2024 23:09:37 +0000
Manifest next update:     Tue 10 Dec 2024 23:09:37 +0000
Files and hashes:         1: -gS5n_OqadenVUc6YCKezO9bN0o.roa (hash: hGRwID3PJTVVc2MBpqtF8s940/B8Na0OBaNmX+P4oIA=)
                          2: 3jMwD1jqyYhHKtAFpuDkfJcIRc4.roa (hash: OD4NIu2qFuWo5/wAK8bQt6g6neTaeBhVR03Z9TGkDLk=)
                          3: 40k9HGu3ZZ2mvxUlKFC29Tc-4Dg.roa (hash: hBgWQSeBqaJ5uCYGcKo10Dn6zJBVh4prqHzT4GawwX4=)
                          4: 4mgLOFRQtsSkzDeyVVuZJlJBfGs.roa (hash: mXCVGD2lWW7KNZhNlxQtPmzsxHCx1wouCs/3w1liIJs=)
                          5: 9HhNndi5jTQ0bAO1t02O8-GvQSo.roa (hash: stTzslRfemgBc1ouLDtz1OnBysVbMBIL9kA5JkyXjvQ=)
                          6: FhdONHqlz1Ga0s8Uo9sk9cuaWz4.roa (hash: KYeCitQuMej+hUPsWxoFltZgh8s4lnJpALL6xQPb4IU=)
                          7: Frs4lTeC6J63_l2cjfGzZ0QpmS8.roa (hash: BCM0nQY2wDWVu8RU+LODuFNiunxPNbphZtRsD39RUxA=)
                          8: Gfl0t7N2mDuYfjbcq-_IlbyQ4dk.roa (hash: rXx9oM+nLfArS7FJ0YCHxlQJ65o+phLftz1ecvVY+y0=)
                          9: MY4iqpnsu_TefNaSg9FsT0Uxo8c.roa (hash: tVa5uYi6nYgaB4w//dWUNKqzEslhrxoP3rl97OFJMD8=)
                          10: P1SpxiPNPqlHpRguVcRg8ThY5us.roa (hash: eSqzJ47Ani2vJOfsqNRrvr0Y+pi83jNEedcG9xbIX2Y=)
                          11: RkYm9eFzLcWDwWxqV-pL1dO9SUw.roa (hash: pco1nvWOLf/3pHvQGeX4/fx7RMaUQki0Qc0G1xQ+HtI=)
                          12: SE_DBdPFV18Fyxe7YImPIVi35vM.roa (hash: 2thRFJOPOy2Y2OuZU47Q5IHnRzwQLQ8yi6VyLW1/a1s=)
                          13: Taj8sDzxitgd41gzD6WJbLJe-4g.roa (hash: QFNiJQRFDBuKwWzq8iwehudekQXUb77F8CmsX5+0n8g=)
                          14: cC1ejUlEz8P9EpecqlGIkyU-P50.roa (hash: qTLY5QXZjbjxwVqYsKZu5I685L6w99FaBv1U7z5lYWM=)
                          15: qrhMn8YcSE7STVvLw-m4R9HD4Ac.roa (hash: 31FyKHYQ2nwtZRVBGgmoB9VCZ+D1+5OakjQorDLhXEc=)
                          16: rUdB8DSfvBWnCOKKLOMHkGysXeA.crl (hash: ryzBtqQb1SgZNOQFrfKAMQ+FSorux+3ci0O+p4xg/8o=)
                          17: tLoxAoOTFYRqaHnfyHN8EGS_vxg.roa (hash: M67O/C/6UZb+ymeIzcBHufu+/OHq0XoXPuvXtBWKWDE=)
                          18: tca1mxR8IIfo00O3xbX8viCLyo0.roa (hash: bDVIXFn+no/InyNrJGb+/MA6/cUUq9KEhdnMJn+IqUY=)
                          19: x7SKEDy4ffQpG0dclfFmkZF0fXQ.roa (hash: SNxyx6TbEPm/Ewurp7FK6R0wWXFbckfjy9iPh2NCXk0=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Nov 15 01:31:19 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=34B5FD0C2C7BE812B69D0B55F71081FA7DC44DF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b5:8f:f3:8c:63:be:ff:53:17:98:39:6c:37:
                    c8:0b:65:f7:b3:52:21:ef:d1:45:fa:0e:70:d3:33:
                    42:cd:bd:2c:9a:e6:02:54:82:4f:3c:f2:ec:0b:c3:
                    79:b0:a1:89:e4:6d:97:00:85:20:65:d6:bf:01:f5:
                    69:ef:9f:f0:e6:b7:7c:b8:ea:e1:ee:01:f2:87:0c:
                    66:f7:af:f1:6c:fd:f3:54:0f:68:47:35:fa:8f:65:
                    5f:31:69:1a:e7:53:6e:80:a5:68:d7:78:3f:ef:4f:
                    08:47:b7:94:37:d1:48:88:ef:14:b8:c3:b6:f2:39:
                    b0:b5:5d:a7:43:7e:8a:84:83:32:20:ba:02:58:1f:
                    22:0b:48:a1:d5:26:d5:a7:73:9a:53:98:5d:f7:50:
                    20:ac:4a:de:bd:48:66:ce:37:42:3b:2f:80:bf:44:
                    a6:af:9c:6a:2d:97:0c:6a:6e:84:e7:70:1b:55:57:
                    bf:eb:76:a7:06:fa:ac:54:e5:42:0b:4a:1e:81:0b:
                    f6:32:99:be:f4:38:be:07:61:11:1e:1c:6d:8e:61:
                    47:c3:f6:e1:f5:16:9b:ff:a3:3c:e1:47:18:68:93:
                    a6:fd:d2:11:84:24:c3:bb:6c:b7:71:63:dc:c5:34:
                    be:31:90:24:99:85:26:cd:87:d6:f3:fb:a6:18:e7:
                    a6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B5:FD:0C:2C:7B:E8:12:B6:9D:0B:55:F7:10:81:FA:7D:C4:4D:F7
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:ae:e1:04:09:47:5a:e8:42:e2:a7:cf:47:52:02:50:23:8a:
         80:08:70:2d:bd:a4:aa:52:42:06:1d:3e:0c:fe:a6:f6:5c:5a:
         e0:1a:a9:e8:e0:dd:91:93:8f:c7:f0:21:4f:e0:91:44:f6:61:
         33:63:5b:62:73:ec:e1:23:7a:8f:31:9e:97:f0:3c:dc:4e:e7:
         af:78:ec:ee:23:29:1e:cd:70:fa:8c:30:90:a5:8d:09:85:66:
         fa:58:2e:e2:4e:11:a2:19:1d:13:92:42:01:d5:72:0b:6a:57:
         55:96:b0:9a:08:bf:4b:03:46:d6:04:b1:93:96:b6:c3:75:b7:
         64:de:8d:5c:2a:d8:35:13:df:37:e8:f5:fc:58:16:89:40:b7:
         f1:dd:ac:45:15:51:dc:58:f9:a8:ee:f6:97:d6:e9:1c:fc:60:
         1b:cb:4e:b8:d6:e7:de:d9:a3:05:b9:0a:cd:26:54:ab:15:24:
         89:62:96:1f:ac:99:1c:cc:3e:d9:5a:b0:a3:58:ad:c7:13:83:
         fe:0c:77:20:4d:89:41:d2:b7:3e:53:cd:ff:95:f8:18:4f:c7:
         fb:8f:b7:69:74:4b:64:a7:af:64:17:28:24:6b:67:b3:5c:fb:
         03:76:3f:e7:23:6c:76:b7:95:8d:b5:c8:59:48:52:64:ae:f0:
         1a:e0:b6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:14 2024 by rpki-client on console-fra.rpki-client.org