Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft
File:                     KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft (raw, json)
Hash identifier:          kL5kqRqmxpQf1pAKCAqzSV8hxFdhRL3xxIJIh/RE5NM=
Subject key identifier:   F9:AC:90:D3:EE:BB:83:9F:20:C6:52:E4:82:F6:A1:B5:B1:1D:92:96
Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
Certificate issuer:       /CN=296966DD720C30575F62D8FD4149458A90AACAA4
Certificate serial:       73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft
Manifest number:          0909
Signing time:             Fri 22 Nov 2024 14:01:16 +0000
Manifest this update:     Fri 22 Nov 2024 14:01:16 +0000
Manifest next update:     Sat 07 Dec 2024 14:01:16 +0000
Files and hashes:         1: 3moMyhCahE15S_emTxx-wwaSJck.roa (hash: M4eHSELEHmTKA3seXnxy5zV0MuhZC/tR4sBY2YqRxQg=)
                          2: AOFhkipnxKTAp6Y0XGszOGLsf6E.roa (hash: x9h3xZpgrJWQRStm5lG5TxdPd5yqULuAs1H6X4b6nGs=)
                          3: BTEnNYsk8_F46nKQ0yGU1KdzAoQ.roa (hash: Gu9Euv8qQPFKbirJ2sdIn0U9waJ9P8x0vSmO5/F4VSI=)
                          4: KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl (hash: ApPBbk6apW4gY3Ix9S7dqBJISh/dSwZnZgXlo0w7hy8=)
                          5: Z_AGdZv2-omGDoDuQZUwbdUTqIM.roa (hash: YETggOHUQiXlzsvPVdNDSv34DSUlbq9PKzuZt2AKyks=)
                          6: bIXoMTpvdXQOj9-okiT9I-xpoP8.roa (hash: EhZRk5GEmwRtI1iE4kDgGCw34Zy1QEf+6bQUuPIgLOM=)
                          7: q61pgXX-eUFqofO5ODK4ZSpgl1w.roa (hash: 8Zas3ZpE6/LGWrJPfo9jcS4S4UtoghFIXKcQjgQk10U=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:32:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4
        Validity
            Not Before: Nov 15 01:34:36 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=F9AC90D3EEBB839F20C652E482F6A1B5B11D9296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:71:9c:e1:19:64:37:4c:1f:f0:7f:ef:10:dc:
                    0b:54:fb:cf:76:2c:da:5b:9f:2e:22:1b:24:09:4c:
                    fa:cc:f4:1e:78:d2:76:43:b1:a8:cc:a7:58:f6:86:
                    22:48:39:e2:48:2d:fb:7f:cd:7d:a9:45:31:7b:b3:
                    e2:17:d6:63:c6:59:04:ec:33:df:e3:7d:d2:4f:3e:
                    e7:df:15:67:e1:df:1c:95:2f:a7:09:19:15:6c:68:
                    72:6e:22:a6:c2:95:74:eb:af:f8:c0:b5:86:58:95:
                    bc:4d:47:9e:36:bd:e7:15:59:f4:9a:b6:71:05:33:
                    f6:42:82:2c:3a:83:c4:d2:de:79:46:ef:4e:f0:cf:
                    73:40:fc:57:4c:fd:42:74:33:1a:a9:12:cb:1e:62:
                    22:19:bc:38:ff:a0:d7:1b:f8:fd:bf:70:52:f4:33:
                    06:79:52:e1:91:0a:fa:33:6b:a9:8a:78:af:bc:f4:
                    c1:31:81:79:5b:32:7d:ae:b8:ec:84:5b:e8:8c:20:
                    99:cf:4c:04:f1:d6:0d:e3:f3:9d:54:9f:41:f4:51:
                    13:2a:0f:77:f3:07:f4:ad:7c:55:48:04:91:39:46:
                    79:37:d8:d2:52:8a:d0:01:58:b5:89:54:03:12:5d:
                    5b:d4:77:89:d4:9f:46:82:91:99:f2:db:5c:c1:6b:
                    8a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AC:90:D3:EE:BB:83:9F:20:C6:52:E4:82:F6:A1:B5:B1:1D:92:96
            X509v3 Authority Key Identifier:
                keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f9:04:44:e8:ff:fb:d9:31:4e:d7:24:37:22:31:ac:ac:49:
         54:9b:41:32:d8:6a:a7:cd:d3:a3:d4:99:18:ea:62:73:63:ca:
         f2:10:86:a4:31:79:f4:64:0a:10:fd:52:73:2f:ae:e4:5f:9e:
         ec:97:97:b1:4e:5c:2f:f9:6d:4a:de:7f:ec:19:1d:e3:a6:31:
         23:fa:93:69:8f:c2:cd:ba:87:18:71:22:3d:1b:b4:6a:ca:89:
         bd:05:9e:c4:5c:a5:69:12:25:3b:ca:13:73:94:1e:14:43:cb:
         5a:8d:e1:b2:ca:45:f9:bd:31:51:f4:d5:69:0d:70:3b:3a:86:
         82:30:18:5a:a1:74:2a:d2:4f:35:7f:4e:b0:4d:d8:5d:4b:cb:
         c7:be:85:48:a1:44:df:22:06:38:a0:46:0c:02:fa:45:b5:e0:
         f3:17:f7:37:cd:4b:78:8c:66:d7:43:91:79:b1:3c:97:5a:9d:
         90:d1:1f:2e:05:f0:42:37:60:6d:81:51:87:03:0a:ee:a7:12:
         5f:82:64:15:dd:de:c0:48:3c:6e:19:35:cf:c2:1d:64:1c:a8:
         24:3e:15:dc:80:ac:d6:f6:3d:6f:16:b2:b2:56:2d:1e:b2:52:
         b9:7f:6e:b8:76:36:a8:3b:85:21:32:eb:de:e6:31:1b:87:d2:
         0a:f2:5e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:05 2024 by rpki-client on console-fra.rpki-client.org