Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.mft
File:                     0A4IOTaIsEc3h07NY92L545e8tA.mft (raw, json)
Hash identifier:          uFVfZDfEUS+3cYzRFwg+Pw9K66xV9ARvk+QbWuhNL4c=
Subject key identifier:   58:DF:50:79:4E:5E:F2:88:51:8A:8A:0B:BE:50:55:80:C5:C2:6A:64
Authority key identifier: D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0
Certificate issuer:       /CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
Certificate serial:       3F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.mft
Manifest number:          C4
Signing time:             Thu 30 May 2024 01:37:51 +0000
Manifest this update:     Thu 30 May 2024 01:37:51 +0000
Manifest next update:     Sun 09 Jun 2024 01:37:51 +0000
Files and hashes:         1: 0A4IOTaIsEc3h07NY92L545e8tA.crl (hash: GRitG6NYCIfd+6sKtXG8fOTPhQSGDuOmV+oN7s33KYY=)
                          2: DH_aurD4D5d82PLbhtL7stnbaIg.roa (hash: IqRbV1/1wHGx8/+QrsSKXxM4W4fSx8chPVEBo+Mskys=)
                          3: IVxRex1VddORY_tYEyTslEPsoto.roa (hash: H1yLvgzPPG25Ln99fTUZEzYoibbJr18g6Cxj5S6uypk=)
                          4: VjcggyTKwrlYHEORe_PjrIFj9iE.roa (hash: /oZQiX2K1A7itOSmeK8ByYh6V8wMp0QPbd1C2EFPZAw=)
                          5: jgIJmOt1vofBXDT3Eo3b0IDGo8k.roa (hash: 7y2OvLUqAUxGaBZW7VyH9/fN7bVOOxxcClAErcNfp7E=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
        Validity
            Not Before: May 15 01:34:00 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=58DF50794E5EF288518A8A0BBE505580C5C26A64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9c:36:28:8e:db:78:af:3b:4b:19:65:cd:b4:
                    7a:bd:8f:06:4c:d7:8f:dc:6a:32:67:79:f2:2e:3e:
                    a2:da:d0:84:bf:fe:c0:c9:58:c8:1a:8b:fe:0e:91:
                    85:8e:69:60:39:7e:27:6c:f6:7e:ad:a2:83:fd:81:
                    ab:d9:22:54:b6:44:0d:ff:be:12:53:a3:f2:e2:f3:
                    b5:bf:a8:30:c8:eb:e1:ea:19:74:aa:f3:6d:52:9e:
                    ed:b4:07:94:d5:91:19:86:b6:84:e9:2a:5e:41:23:
                    63:f5:82:40:70:1a:0d:f5:77:92:e9:4e:6a:0e:4c:
                    cf:8a:55:80:88:c8:83:7d:f0:a2:6f:80:25:de:f1:
                    7d:2e:b9:5e:4f:19:17:48:b3:d5:73:06:f0:95:82:
                    5d:3c:f5:b9:a2:f8:6d:c6:3f:4a:e5:ee:73:d9:6d:
                    a0:53:3f:c7:63:59:f8:df:53:54:9a:a8:f2:13:21:
                    03:da:2c:d2:b4:0a:44:38:b4:64:f2:21:74:ff:db:
                    b2:07:01:87:07:35:8b:3a:37:51:45:df:d1:d2:88:
                    21:35:81:c5:25:51:d0:b5:3e:5b:8b:ec:03:42:a6:
                    b9:92:e0:84:f7:b1:b9:fc:ba:70:63:69:89:95:9f:
                    73:b3:60:01:87:aa:a7:e6:72:6e:fa:18:ca:83:ff:
                    73:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DF:50:79:4E:5E:F2:88:51:8A:8A:0B:BE:50:55:80:C5:C2:6A:64
            X509v3 Authority Key Identifier:
                keyid:D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:e6:4d:37:75:c6:54:96:34:d6:10:9e:8e:d0:70:e6:bb:66:
         96:c2:55:df:06:f3:22:35:c5:0e:c7:0b:3d:3f:ac:90:fb:72:
         28:cb:03:c7:a3:49:e5:e3:5f:89:58:2c:a6:57:21:00:fd:64:
         07:98:1a:36:e7:5a:d1:2e:77:c7:e4:30:45:35:8a:4b:2a:23:
         eb:f4:e4:5e:70:a8:71:79:a8:c5:ae:3b:3c:e0:b3:da:28:43:
         20:0c:96:6e:a0:32:27:7e:9c:86:e6:b8:9f:00:b4:ad:fb:20:
         c7:e2:ce:b9:66:0e:49:22:42:fc:71:da:b9:3f:ed:d0:52:50:
         ca:ff:8d:6a:75:d3:ec:22:ae:f8:aa:aa:4a:18:77:3b:da:a8:
         eb:d6:18:c5:c7:2e:03:32:c2:d2:59:32:e9:6e:00:0d:5d:d1:
         6d:7f:68:bc:4a:ae:c2:d4:0c:fc:d6:78:8b:c4:c2:1f:f8:54:
         0d:3f:dd:bd:6d:e3:29:3b:29:26:d3:84:3c:be:cc:a7:59:7f:
         ff:77:21:a7:e6:80:3a:05:f6:4e:47:ac:46:db:37:19:9d:46:
         ae:1e:36:cf:9d:43:5d:bf:f6:b5:97:b3:05:8e:fd:ac:b0:65:
         85:1a:37:3d:50:43:98:02:66:8a:71:0c:2a:60:d7:a4:b8:02:
         bd:c8:b2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:08:56 2024 by rpki-client on console-fra.rpki-client.org