Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.mft
File:                     Mttw_7inIon1ZFB2hkRljFSqZOk.mft (raw, json)
Hash identifier:          4eGu1BHK+4xp3V4O4PO5c0ZEliMibWm5yb+oHrv+ttI=
Subject key identifier:   B5:12:7E:39:D8:BC:35:CF:36:B0:C0:BD:17:DB:A7:77:A5:00:BA:CF
Authority key identifier: 32:DB:70:FF:B8:A7:22:89:F5:64:50:76:86:44:65:8C:54:AA:64:E9
Certificate issuer:       /CN=32DB70FFB8A72289F56450768644658C54AA64E9
Certificate serial:       38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Mttw_7inIon1ZFB2hkRljFSqZOk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.mft
Manifest number:          032D
Signing time:             Sun 16 Feb 2025 17:55:25 +0000
Manifest this update:     Sun 16 Feb 2025 17:55:25 +0000
Manifest next update:     Mon 03 Mar 2025 17:55:25 +0000
Files and hashes:         1: Mttw_7inIon1ZFB2hkRljFSqZOk.crl (hash: /k3L2+QaUt2nEcudeZtoDZrfT5q66Oo58QqExQ3YpQc=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Mttw_7inIon1ZFB2hkRljFSqZOk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32DB70FFB8A72289F56450768644658C54AA64E9
        Validity
            Not Before: Feb 15 01:36:22 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=B5127E39D8BC35CF36B0C0BD17DBA777A500BACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:99:c6:dd:ec:7a:b7:13:6c:cc:98:20:eb:98:
                    df:e7:89:2a:d3:5d:75:06:16:02:b9:65:63:56:7c:
                    4b:36:a8:84:86:23:5e:a8:d0:08:96:3c:96:22:59:
                    d8:ff:25:57:ec:b0:8e:df:6f:04:b7:cd:e0:84:8f:
                    4f:0d:f1:3a:50:4f:dd:f0:ed:8d:15:0c:a3:71:e7:
                    88:ad:26:6d:8b:cb:10:5d:03:47:61:10:9e:bf:58:
                    ca:ab:24:9f:a0:ca:67:33:54:9e:34:d2:92:e6:63:
                    bf:7e:04:f1:d1:85:03:e8:b2:69:04:ba:06:d8:54:
                    9b:95:c8:43:05:b3:cd:1b:9a:0f:6e:fe:d8:03:9c:
                    8b:cc:c6:9f:39:a3:d2:7c:64:e9:1e:b3:36:fa:12:
                    9c:13:ed:73:2d:58:ac:3a:99:aa:5a:a6:c6:0e:ff:
                    03:d5:3f:eb:99:8c:c4:86:04:c8:00:c1:56:b6:e7:
                    e4:51:83:37:a6:bf:a0:8d:17:bd:54:60:ed:17:16:
                    6f:12:69:d3:62:98:09:a2:3f:1e:f9:1b:1a:51:f0:
                    af:fb:b9:19:22:2f:46:40:88:20:39:ee:25:ce:cd:
                    a9:2c:9f:00:7c:5b:72:06:50:30:c2:e2:90:29:fb:
                    7c:98:3a:bb:7e:7f:d2:24:53:c6:ec:7b:9b:d9:1a:
                    ae:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:12:7E:39:D8:BC:35:CF:36:B0:C0:BD:17:DB:A7:77:A5:00:BA:CF
            X509v3 Authority Key Identifier:
                keyid:32:DB:70:FF:B8:A7:22:89:F5:64:50:76:86:44:65:8C:54:AA:64:E9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Mttw_7inIon1ZFB2hkRljFSqZOk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:f1:8d:23:16:aa:b6:e0:44:9a:f8:6e:1c:95:d5:59:e7:0b:
         11:60:ef:18:e8:a1:5a:1d:4a:00:6e:66:59:7a:a7:6e:ac:2f:
         b1:69:0b:b7:8e:9f:fd:c5:60:86:25:46:ea:06:f9:c4:46:aa:
         71:f6:e3:3d:76:dc:08:11:3b:61:ed:c3:6a:9a:4d:3a:97:9d:
         fe:24:e1:2d:5b:6f:59:eb:f5:87:ee:ec:bd:67:57:8c:85:01:
         e0:e2:7f:8f:09:56:94:dd:66:3b:8d:72:b5:fb:cf:ee:d3:0f:
         4d:10:ec:c3:44:7f:52:4d:f0:23:f7:df:70:79:cb:5d:71:76:
         2c:f2:38:53:2d:58:ed:cc:fd:b4:b3:55:17:1d:e0:13:de:a7:
         6b:f3:3b:04:10:db:24:77:f8:1f:05:b0:e4:4c:eb:e1:84:75:
         44:2d:42:67:c0:f4:34:2e:7e:c3:54:fd:db:48:e6:13:8c:75:
         f0:3a:df:38:76:d3:54:bb:26:2b:5a:c2:df:ba:d4:29:fb:25:
         7d:9c:4a:3e:ee:5b:9b:a5:31:44:b4:80:51:b5:89:f2:b7:80:
         05:5a:78:76:0c:73:a5:dc:40:0e:fc:aa:05:c6:92:eb:28:50:
         20:df:cc:34:2a:a1:1e:c0:3d:5b:59:2c:1b:4f:a8:99:92:2c:
         e4:07:54:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:18 2025 by rpki-client