Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
File:                     cfdvoHc19oWZH8iCyIXiHvuxYbw.mft (raw, json)
Hash identifier:          aukjXkYZy5eDmLyMOcRzuWdfUJO+OnBFNnERr9cIAk8=
Subject key identifier:   D2:C0:71:85:CA:36:70:70:54:E5:FE:98:F1:C1:21:B4:92:DC:D9:42
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Certificate issuer:       /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial:       36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
Manifest number:          5F
Signing time:             Wed 05 Jun 2024 07:28:41 +0000
Manifest this update:     Wed 05 Jun 2024 07:28:41 +0000
Manifest next update:     Sat 15 Jun 2024 07:28:41 +0000
Files and hashes:         1: EnaSYtPwEi2GcfTKgnfj1E6lpQY.roa (hash: YX/76JbVw2MJQqX8pA0Xz+nNZy1nNLzjwC8oNR+v8TQ=)
                          2: FSBMgdj9SdaRH7kVmyWmZI0U308.roa (hash: hvLPcVV3y7ZCCqvyrGkHhFFdH/jS2fXyfX0mfvbjJmg=)
                          3: H3omoW6mqU4H-fQDp9A4ZmcnZ94.roa (hash: 8WzUlapFSTaMSzTEWFMwZWeaCpuLuZYEBpvvxP25qUQ=)
                          4: H4zxlfl1hssLEp791vp1jyMZP2Q.roa (hash: +VE3W6ynugUHmk7TReHzn2D1OogN6jlsATKPDrjN3PE=)
                          5: IsN5ClA339gX7ZW_RHq_4RCv9jU.roa (hash: 0OtkUqMK8hP1XcPCxkp191ZNSeNWyF/rUtvITPuF8NI=)
                          6: MPbtY1rw9PwExXWi0eljzf8OZFA.roa (hash: tiiJ1aHsk/0YcG126nsaCh6Xj2ZfLQpLvCoHFgE5wfM=)
                          7: RM_hVPzmiuBF3dlGLNfeBurFCpc.roa (hash: eL3f/DlK/91NPJyA7Y/54qb7JpK7bHg99Lzg9demoaI=)
                          8: SGIvTcdZCP0eG2k_1Z4TUwKdswU.roa (hash: +qvD0u3Dl+R4Ollxhv5Mcqrp0TYZoGQxzcR2caygHDI=)
                          9: WowjrATZD2m3HvgcVx7D5s2T_qo.roa (hash: PRTb1wVPH6SYW5BBFOoTUlN1ZScABQe4pcY0d9pGUDA=)
                          10: _iTvhZsSbzHguuvvE55ntPtgMKM.roa (hash: A/FjtyuYH1d1g/VE7l2QAjmBf95zQUSwS+NlaWkzYDE=)
                          11: biRI7aMNhYg8BGqJALzIoR7Zilo.roa (hash: B+Gl5o2Zz/tF8IJgadX5qSiTv8Vx52FrbbqBfw6mAGA=)
                          12: cfdvoHc19oWZH8iCyIXiHvuxYbw.crl (hash: JYxbOvWaT/U1RlX7Verh7Y27NbDMpTrTApz22EAeDLo=)
                          13: fM6FfiD9-khEW2aIqAWjfItgPt8.roa (hash: Py8leBSvLYm0zwD7B7fWOXiSvDq6swnq4tWaliEhOoE=)
                          14: fNl3F_ckvOhuOC1-qWG9dt4LLes.roa (hash: +X2RfZFeW2sphvdHuMbzJD5tH/pKPmZTAzNHQKGsXsI=)
                          15: hJH-PZ1lMRamXHRBMszR-1BVp_8.roa (hash: dxzHzMcAX4bg6zhMJpDWryqR7j3GZOAHmQo8B2Ov3sg=)
                          16: oI0zkYTkRS-dYRvIgXDc6NLsAYc.roa (hash: 6XgBqAQkhd9S4S671lQlyOlmopjQKdjRR9UWAyeeftw=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
        Validity
            Not Before: May 28 01:09:05 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=D2C07185CA36707054E5FE98F1C121B492DCD942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ed:47:f0:ce:db:3c:2f:4a:20:32:77:ef:26:
                    f7:c0:a1:04:09:e9:57:be:16:c3:51:d8:d6:bf:4a:
                    28:e5:f4:aa:1c:20:29:9f:62:bf:80:a6:5b:17:e1:
                    21:f4:ea:aa:64:5c:b0:c6:41:68:46:f7:f7:fa:4f:
                    1a:7e:c5:de:07:56:a7:07:3b:4f:82:12:45:71:09:
                    d7:7d:4a:db:15:0a:ba:f4:ff:6c:0c:7b:9a:ac:22:
                    f3:2e:bb:85:c1:3f:20:63:1d:85:85:d6:1b:f0:ea:
                    e6:39:74:2d:f7:26:4e:2c:d4:1c:4a:03:0d:96:de:
                    44:4f:45:14:af:2e:57:e9:c4:18:1d:09:58:4c:f5:
                    dd:0b:06:88:6e:ea:4b:dd:f5:99:9f:b6:6e:4a:a8:
                    e9:9a:df:7f:05:fd:44:59:6f:7f:58:90:14:a5:d0:
                    12:6e:d9:db:7e:d0:76:93:d9:b0:bc:80:cf:eb:f5:
                    77:c1:fb:a8:6c:36:1a:b2:69:61:eb:02:03:c3:2e:
                    b5:1f:c1:cd:b7:03:ca:38:b4:8b:05:1c:68:17:32:
                    14:51:b0:81:ba:25:6e:96:48:a0:41:12:fe:b6:be:
                    a0:08:6b:b9:dc:4d:11:8d:1d:a3:40:1c:93:8b:6e:
                    24:dc:aa:33:ed:6b:d6:dd:fb:a6:72:f8:b5:f4:67:
                    e7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C0:71:85:CA:36:70:70:54:E5:FE:98:F1:C1:21:B4:92:DC:D9:42
            X509v3 Authority Key Identifier:
                keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:c1:bf:3d:96:74:ca:01:cb:40:b3:ec:b3:2c:fe:c4:5f:2c:
         ba:ca:25:02:56:8b:71:ec:d8:3c:03:80:ae:2a:e3:aa:7b:a6:
         7f:54:8d:38:83:9d:81:89:0b:84:d7:33:af:5e:7f:a1:d4:56:
         09:5f:06:78:e2:40:b5:03:b2:63:0c:19:ca:47:c1:08:28:11:
         f4:e9:f6:ce:7a:e7:c8:ea:05:46:ef:c3:d2:1c:c5:9a:01:4b:
         d6:69:3a:9f:b3:34:b7:f1:0d:33:d8:2c:71:7a:29:4c:d0:22:
         48:80:a4:9b:59:4a:84:5f:5c:1f:86:25:33:8c:36:e3:80:85:
         58:1b:62:01:75:99:3f:f3:a7:dd:3d:1b:be:5c:cc:c6:0e:e9:
         f4:1c:a0:01:96:e7:82:30:c5:7d:a7:83:de:36:ec:2e:11:82:
         24:b8:3b:40:17:87:49:0a:00:5d:b8:b2:85:bd:db:04:ab:23:
         08:b9:e6:8d:6a:34:56:54:e9:e3:ee:19:ba:9e:db:bf:d1:b1:
         92:ed:18:da:eb:b6:ed:7f:d3:30:82:64:69:0d:b4:68:5c:f9:
         6a:33:f6:3d:b1:5c:41:a5:27:5a:04:f4:f4:0f:97:d6:99:66:
         57:d0:cf:8d:e3:9d:a7:af:11:f7:22:21:59:db:b8:5f:c1:bb:
         ff:bd:42:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:23 2024 by rpki-client on console-fra.rpki-client.org