Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5444/O3CeEsRyrtPcUkKKnItWyiHI_KE.mft
File:                     O3CeEsRyrtPcUkKKnItWyiHI_KE.mft (raw, json)
Hash identifier:          zC48Z48IO6EnLEKzRlqnEAqFaSUPNrx8JxirkZJZBew=
Subject key identifier:   CD:39:46:8F:E9:2D:0B:F9:07:D6:D9:D3:E6:83:D4:47:C2:F0:C2:57
Authority key identifier: 3B:70:9E:12:C4:72:AE:D3:DC:52:42:8A:9C:8B:56:CA:21:C8:FC:A1
Certificate issuer:       /CN=3B709E12C472AED3DC52428A9C8B56CA21C8FCA1
Certificate serial:       2E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O3CeEsRyrtPcUkKKnItWyiHI_KE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/O3CeEsRyrtPcUkKKnItWyiHI_KE.mft
Manifest number:          AE
Signing time:             Thu 30 May 2024 01:37:58 +0000
Manifest this update:     Thu 30 May 2024 01:37:58 +0000
Manifest next update:     Sun 09 Jun 2024 01:37:58 +0000
Files and hashes:         1: EVJWSMP6ImMKYtgvunuE5acU6Is.roa (hash: YYzDBoLZkuTaYuFs+/uesmqr7M/mwWZ6rbR4U9F4Xwo=)
                          2: O3CeEsRyrtPcUkKKnItWyiHI_KE.crl (hash: UY4uzftMsLRXrlLcp2Q0xOV5APlbQMLjpObCluzGFUY=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/O3CeEsRyrtPcUkKKnItWyiHI_KE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/O3CeEsRyrtPcUkKKnItWyiHI_KE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O3CeEsRyrtPcUkKKnItWyiHI_KE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B709E12C472AED3DC52428A9C8B56CA21C8FCA1
        Validity
            Not Before: May 15 01:34:12 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=CD39468FE92D0BF907D6D9D3E683D447C2F0C257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:54:de:e0:f8:af:d2:73:ce:c8:95:98:2b:a7:
                    e0:7b:5c:ec:4f:84:0f:db:94:7d:c1:30:b6:d4:7f:
                    cf:ef:e6:5e:66:d9:99:b2:95:bb:3b:cd:93:5a:9e:
                    b7:f4:c0:20:52:8d:ac:d0:82:a7:13:a0:31:82:dd:
                    53:42:23:2a:83:b3:b6:fe:65:5c:d0:da:8a:d6:9a:
                    9b:e2:aa:a0:aa:d9:02:aa:85:91:87:44:d0:d9:ac:
                    04:fe:81:17:5a:42:8b:7f:90:08:fe:a1:7a:7c:84:
                    9d:c0:6c:37:e5:ad:a9:a0:8c:45:61:4f:76:5e:70:
                    31:e0:0e:9f:78:df:26:84:0b:e4:6b:f2:22:ff:a5:
                    f6:23:7f:76:fc:7e:8d:84:a0:f3:02:cb:a0:59:32:
                    c7:e1:4d:5b:03:f0:55:66:6d:59:5a:f4:50:a5:6d:
                    92:ac:69:b8:46:cb:94:8c:03:c7:ed:98:7a:77:a2:
                    68:dc:99:5c:8e:0a:d1:6b:ca:66:96:91:03:6d:52:
                    5d:f1:14:91:3b:eb:43:2e:0b:e4:4e:3a:92:5a:7a:
                    85:38:4a:a8:41:b1:7c:92:b6:cf:94:4c:27:aa:d0:
                    b1:6b:ac:d0:5b:02:59:23:84:4b:8b:06:d9:64:97:
                    ef:86:f3:cf:23:ea:24:e7:8a:f8:60:16:60:60:d6:
                    1a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:39:46:8F:E9:2D:0B:F9:07:D6:D9:D3:E6:83:D4:47:C2:F0:C2:57
            X509v3 Authority Key Identifier:
                keyid:3B:70:9E:12:C4:72:AE:D3:DC:52:42:8A:9C:8B:56:CA:21:C8:FC:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/O3CeEsRyrtPcUkKKnItWyiHI_KE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O3CeEsRyrtPcUkKKnItWyiHI_KE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/O3CeEsRyrtPcUkKKnItWyiHI_KE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:85:61:57:fa:4b:86:16:f2:7b:91:80:df:60:93:48:24:1b:
         6b:8e:f9:8b:93:ec:d6:6c:06:d9:64:4b:eb:24:24:91:06:ae:
         35:16:79:4c:ac:76:2f:9e:cd:5f:a4:a0:a2:c1:c7:57:53:fa:
         80:ec:cc:02:97:c7:13:d3:f1:e8:05:4e:85:c2:9f:6b:54:d7:
         c1:b7:12:fb:60:34:9a:58:cc:69:65:93:33:7b:fd:47:42:fd:
         2d:1a:fb:4e:f3:3b:ff:32:c3:f9:0b:f0:7f:a9:7d:f8:11:50:
         f3:c3:e7:bf:56:73:31:91:20:3b:c8:d1:cf:95:53:63:19:8b:
         4a:62:f1:3a:c6:34:cc:08:f1:d5:3c:66:80:38:88:f3:c9:99:
         f7:d5:4e:dd:f0:ab:de:8f:fc:4e:07:34:6e:88:18:3d:d1:88:
         d6:36:7e:2e:a5:05:b6:53:a5:9a:45:70:43:50:86:bf:40:e4:
         62:d0:77:17:e4:a2:97:71:f4:ad:ca:ab:7f:e7:36:1a:66:42:
         9c:ba:df:28:b8:0a:5e:8f:0a:bf:5e:45:ab:f9:f5:55:94:72:
         3a:15:4c:f4:75:71:86:e1:f4:97:8a:b4:0f:53:21:44:75:a5:
         9e:60:65:73:69:b5:e1:62:3e:59:b6:b0:35:0b:21:0e:56:38:
         a5:4c:0b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:47 2024 by rpki-client on console-ams.rpki-client.org