Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/524/4g5t9Do_AgrbZ1oh86kaxNjzWGc.mft
File:                     4g5t9Do_AgrbZ1oh86kaxNjzWGc.mft (raw, json)
Hash identifier:          2BKcyNXW9XjIdkc4JwaXUdWQxXNcRpdsZE+y2y4tMdg=
Subject key identifier:   09:E9:41:30:84:24:70:DF:B6:39:4A:EB:34:91:A1:AF:0F:53:50:50
Authority key identifier: E2:0E:6D:F4:3A:3F:02:0A:DB:67:5A:21:F3:A9:1A:C4:D8:F3:58:67
Certificate issuer:       /CN=E20E6DF43A3F020ADB675A21F3A91AC4D8F35867
Certificate serial:       19
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4g5t9Do_AgrbZ1oh86kaxNjzWGc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/4g5t9Do_AgrbZ1oh86kaxNjzWGc.mft
Manifest number:          BA
Signing time:             Fri 22 Nov 2024 14:30:32 +0000
Manifest this update:     Fri 22 Nov 2024 14:30:32 +0000
Manifest next update:     Sat 07 Dec 2024 14:30:32 +0000
Files and hashes:         1: 4g5t9Do_AgrbZ1oh86kaxNjzWGc.crl (hash: dqaTFnd8oUAYpGcv1KWZtyxhTUEXZpEYHyXrvPh8Pr0=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/4g5t9Do_AgrbZ1oh86kaxNjzWGc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/4g5t9Do_AgrbZ1oh86kaxNjzWGc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4g5t9Do_AgrbZ1oh86kaxNjzWGc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 02:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E20E6DF43A3F020ADB675A21F3A91AC4D8F35867
        Validity
            Not Before: Nov 15 01:31:50 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=09E94130842470DFB6394AEB3491A1AF0F535050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9e:ae:96:2e:76:bc:58:0b:09:98:88:6a:71:
                    34:66:ae:61:4f:74:5d:dd:53:49:46:7e:0d:c0:8c:
                    1b:b8:0d:92:05:11:c2:a9:e1:b6:81:80:81:c5:e7:
                    f2:26:83:43:95:72:44:d7:3b:95:61:c2:8c:6f:9a:
                    00:98:ce:0b:62:97:ee:b5:1c:f5:55:b0:cc:21:58:
                    1c:a8:5a:aa:67:3e:1b:d5:b2:78:92:52:2c:15:30:
                    14:fd:d1:b5:37:74:90:e4:d9:ce:ad:de:72:92:20:
                    ec:dc:90:6d:45:97:c4:2c:8d:c1:89:2b:e5:c2:8f:
                    73:5d:98:99:b0:48:5b:a8:2a:87:bb:22:0a:18:dd:
                    bb:41:7d:e0:b1:e4:9a:fb:0c:3a:d2:5d:ad:b3:cf:
                    73:1d:71:c1:5b:93:fb:3c:af:f4:b4:31:4e:44:b0:
                    2a:9b:27:9e:3f:f6:0f:02:a5:ea:52:46:a5:b7:af:
                    a4:3f:18:86:1b:62:c9:61:57:37:08:19:d4:25:42:
                    37:6d:4a:26:94:7b:f9:c1:10:f0:1e:7e:00:a5:a5:
                    7f:a9:15:c4:31:1a:54:a1:79:0f:76:4f:f6:7a:0f:
                    f2:19:a6:1b:28:72:f2:48:c2:ac:d6:52:46:e2:99:
                    fe:8c:78:47:54:be:2e:20:6c:c3:a6:b9:30:ac:54:
                    a6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E9:41:30:84:24:70:DF:B6:39:4A:EB:34:91:A1:AF:0F:53:50:50
            X509v3 Authority Key Identifier:
                keyid:E2:0E:6D:F4:3A:3F:02:0A:DB:67:5A:21:F3:A9:1A:C4:D8:F3:58:67

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/4g5t9Do_AgrbZ1oh86kaxNjzWGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4g5t9Do_AgrbZ1oh86kaxNjzWGc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/4g5t9Do_AgrbZ1oh86kaxNjzWGc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:53:75:0e:3b:5b:42:54:7d:09:ef:29:89:1f:80:7c:e2:9b:
         22:f3:49:4a:c3:56:43:c6:fc:cb:b9:e2:02:f3:ee:69:e3:a2:
         87:5d:60:3e:fb:75:cc:ef:c8:a7:f5:b7:ef:9d:db:5d:3a:0d:
         52:ae:0b:07:ff:c4:70:8a:40:02:cc:f3:a2:9a:61:5a:5b:ab:
         c6:cc:f1:58:6e:f0:25:32:5e:51:37:09:0a:5b:17:97:5b:b3:
         9d:6a:a8:3d:6b:42:79:d8:14:30:48:b6:93:10:ec:b4:ca:ae:
         4f:83:e1:e3:19:af:47:e6:77:cb:d8:fc:42:32:8b:53:11:c2:
         cd:e7:81:41:21:aa:94:1f:d6:4b:ff:24:cf:d2:d0:fc:ba:cf:
         73:0d:12:dc:f6:81:8e:65:da:2e:45:84:b3:6c:3c:35:94:bd:
         b8:fa:74:84:2d:d5:dd:05:65:e0:d1:f5:f5:1d:75:d4:a1:5f:
         b0:75:bd:5d:55:df:2a:cf:e1:43:93:ae:a0:1c:8b:59:2a:72:
         ae:ce:91:f1:03:1a:fd:23:cb:6a:9f:f6:b8:01:6a:7f:5d:6e:
         40:99:6b:10:52:6d:ff:4a:50:ef:9e:72:9f:97:76:ba:c1:2f:
         22:fb:09:4e:6a:27:ba:db:d1:1b:95:75:06:3a:61:ec:58:9f:
         4e:f5:e7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:04 2024 by rpki-client on console-fra.rpki-client.org