Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
File:                     cfdvoHc19oWZH8iCyIXiHvuxYbw.mft (raw, json)
Hash identifier:          9RUQkEmHXhnJc0gvILO8biONrUcF3IhGRzIKZpMM37w=
Subject key identifier:   D2:C0:71:85:CA:36:70:70:54:E5:FE:98:F1:C1:21:B4:92:DC:D9:42
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Certificate issuer:       /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial:       54
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
Manifest number:          D7
Signing time:             Fri 22 Nov 2024 02:53:41 +0000
Manifest this update:     Fri 22 Nov 2024 02:53:41 +0000
Manifest next update:     Sat 07 Dec 2024 02:53:41 +0000
Files and hashes:         1: EnaSYtPwEi2GcfTKgnfj1E6lpQY.roa (hash: YX/76JbVw2MJQqX8pA0Xz+nNZy1nNLzjwC8oNR+v8TQ=)
                          2: FSBMgdj9SdaRH7kVmyWmZI0U308.roa (hash: hvLPcVV3y7ZCCqvyrGkHhFFdH/jS2fXyfX0mfvbjJmg=)
                          3: H3omoW6mqU4H-fQDp9A4ZmcnZ94.roa (hash: 8WzUlapFSTaMSzTEWFMwZWeaCpuLuZYEBpvvxP25qUQ=)
                          4: H4zxlfl1hssLEp791vp1jyMZP2Q.roa (hash: +VE3W6ynugUHmk7TReHzn2D1OogN6jlsATKPDrjN3PE=)
                          5: IsN5ClA339gX7ZW_RHq_4RCv9jU.roa (hash: 0OtkUqMK8hP1XcPCxkp191ZNSeNWyF/rUtvITPuF8NI=)
                          6: J5-2LLEr1YsMjzuhd-J45tGpCTE.roa (hash: GaTr9Hv5ZnJVUBVMnCM/n8wcBus0Q0OBL+EVLhDk4g4=)
                          7: MPbtY1rw9PwExXWi0eljzf8OZFA.roa (hash: tiiJ1aHsk/0YcG126nsaCh6Xj2ZfLQpLvCoHFgE5wfM=)
                          8: SGIvTcdZCP0eG2k_1Z4TUwKdswU.roa (hash: +qvD0u3Dl+R4Ollxhv5Mcqrp0TYZoGQxzcR2caygHDI=)
                          9: VEbwrZEQxaUqhcUF0Aep4WKtU_Q.roa (hash: AHSt/A72vR6nFtnM44Z2t5crLJr9Ih3fBFPZ/w9UCRE=)
                          10: WowjrATZD2m3HvgcVx7D5s2T_qo.roa (hash: PRTb1wVPH6SYW5BBFOoTUlN1ZScABQe4pcY0d9pGUDA=)
                          11: _iTvhZsSbzHguuvvE55ntPtgMKM.roa (hash: A/FjtyuYH1d1g/VE7l2QAjmBf95zQUSwS+NlaWkzYDE=)
                          12: biRI7aMNhYg8BGqJALzIoR7Zilo.roa (hash: B+Gl5o2Zz/tF8IJgadX5qSiTv8Vx52FrbbqBfw6mAGA=)
                          13: cfdvoHc19oWZH8iCyIXiHvuxYbw.crl (hash: t/Z+XdLQI5uddViVuxjao4ASoW8pfGA2bexpU7P66fI=)
                          14: fM6FfiD9-khEW2aIqAWjfItgPt8.roa (hash: Py8leBSvLYm0zwD7B7fWOXiSvDq6swnq4tWaliEhOoE=)
                          15: fNl3F_ckvOhuOC1-qWG9dt4LLes.roa (hash: +X2RfZFeW2sphvdHuMbzJD5tH/pKPmZTAzNHQKGsXsI=)
                          16: hJH-PZ1lMRamXHRBMszR-1BVp_8.roa (hash: dxzHzMcAX4bg6zhMJpDWryqR7j3GZOAHmQo8B2Ov3sg=)
                          17: k5zHYgMDqEcf-dHznxPWEiIpSOM.roa (hash: P3vmRIvK4sylOwqkqwcSqwQvGciIqmH5e7k1Aqc2JhE=)
                          18: oI0zkYTkRS-dYRvIgXDc6NLsAYc.roa (hash: 6XgBqAQkhd9S4S671lQlyOlmopjQKdjRR9UWAyeeftw=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 05:23:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
        Validity
            Not Before: Nov 15 01:31:38 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=D2C07185CA36707054E5FE98F1C121B492DCD942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ed:47:f0:ce:db:3c:2f:4a:20:32:77:ef:26:
                    f7:c0:a1:04:09:e9:57:be:16:c3:51:d8:d6:bf:4a:
                    28:e5:f4:aa:1c:20:29:9f:62:bf:80:a6:5b:17:e1:
                    21:f4:ea:aa:64:5c:b0:c6:41:68:46:f7:f7:fa:4f:
                    1a:7e:c5:de:07:56:a7:07:3b:4f:82:12:45:71:09:
                    d7:7d:4a:db:15:0a:ba:f4:ff:6c:0c:7b:9a:ac:22:
                    f3:2e:bb:85:c1:3f:20:63:1d:85:85:d6:1b:f0:ea:
                    e6:39:74:2d:f7:26:4e:2c:d4:1c:4a:03:0d:96:de:
                    44:4f:45:14:af:2e:57:e9:c4:18:1d:09:58:4c:f5:
                    dd:0b:06:88:6e:ea:4b:dd:f5:99:9f:b6:6e:4a:a8:
                    e9:9a:df:7f:05:fd:44:59:6f:7f:58:90:14:a5:d0:
                    12:6e:d9:db:7e:d0:76:93:d9:b0:bc:80:cf:eb:f5:
                    77:c1:fb:a8:6c:36:1a:b2:69:61:eb:02:03:c3:2e:
                    b5:1f:c1:cd:b7:03:ca:38:b4:8b:05:1c:68:17:32:
                    14:51:b0:81:ba:25:6e:96:48:a0:41:12:fe:b6:be:
                    a0:08:6b:b9:dc:4d:11:8d:1d:a3:40:1c:93:8b:6e:
                    24:dc:aa:33:ed:6b:d6:dd:fb:a6:72:f8:b5:f4:67:
                    e7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C0:71:85:CA:36:70:70:54:E5:FE:98:F1:C1:21:B4:92:DC:D9:42
            X509v3 Authority Key Identifier:
                keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:8d:2c:ed:ff:d1:bb:ec:2c:a1:37:c2:14:b6:c2:62:5a:4e:
         9a:b2:70:cc:31:fc:bb:9f:db:20:22:9f:ca:9b:55:35:9a:66:
         72:9f:13:63:2f:0c:2d:73:40:9c:1b:86:14:71:dd:4e:5d:d3:
         99:89:63:09:0b:cc:6a:7f:3b:3b:28:5c:59:3f:58:a7:06:39:
         81:1c:85:b7:ae:d8:fb:83:ac:2b:22:71:b1:10:40:b3:c0:cf:
         81:eb:76:27:d8:57:00:4f:b0:ee:73:30:f2:79:af:1c:e2:a9:
         fc:0e:9b:e6:78:4e:46:49:75:05:a2:d4:bd:93:29:63:87:f6:
         43:f3:a1:4d:27:46:66:64:1a:33:7a:5d:a6:6d:f4:62:41:31:
         b0:45:ee:46:1d:ec:6c:fa:94:43:5f:8d:c9:31:78:57:a6:8c:
         85:68:75:a7:85:5b:a0:79:29:e5:9e:43:cd:0d:75:ec:be:21:
         33:89:a5:0b:c9:09:c2:4b:fa:7a:31:19:90:ca:64:33:2f:ff:
         08:f0:16:67:e9:19:93:a4:02:0b:09:b1:d0:e1:0c:1e:65:76:
         b2:ed:ff:dd:f8:7f:9b:87:4d:b1:2b:50:ae:c6:70:6c:fc:1a:
         c1:76:2d:8b:3d:46:c1:1a:c1:04:24:66:5f:76:f6:a4:08:30:
         75:5e:84:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:42 2024 by rpki-client on console-ams.rpki-client.org