Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/Tyo2voWriDOIVMWlaMzUThnmVPE.mft
File:                     Tyo2voWriDOIVMWlaMzUThnmVPE.mft (raw, json)
Hash identifier:          2+x8SgjAremEGmpjateddhMsyA7PSmX31D6P9z8geeQ=
Subject key identifier:   C0:50:E8:3C:A2:38:70:C4:F2:CD:F3:7B:DF:A4:06:2D:AE:E4:B3:17
Authority key identifier: 4F:2A:36:BE:85:AB:88:33:88:54:C5:A5:68:CC:D4:4E:19:E6:54:F1
Certificate issuer:       /CN=4F2A36BE85AB88338854C5A568CCD44E19E654F1
Certificate serial:       11
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tyo2voWriDOIVMWlaMzUThnmVPE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/Tyo2voWriDOIVMWlaMzUThnmVPE.mft
Manifest number:          48
Signing time:             Fri 14 Jun 2024 01:47:23 +0000
Manifest this update:     Fri 14 Jun 2024 01:47:23 +0000
Manifest next update:     Mon 24 Jun 2024 01:47:23 +0000
Files and hashes:         1: 7yRtVkSxfkPURJQ2f1TO_PsNaFU.roa (hash: nG4BsxanNpY5EYZKSqnNyhEeG31jqsfcFpXF85af+6I=)
                          2: Tyo2voWriDOIVMWlaMzUThnmVPE.crl (hash: SSLgFVSCCFxz9Th8htR+6jKdTH8k1r09MnLtz66OOtM=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/Tyo2voWriDOIVMWlaMzUThnmVPE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/Tyo2voWriDOIVMWlaMzUThnmVPE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tyo2voWriDOIVMWlaMzUThnmVPE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 15:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F2A36BE85AB88338854C5A568CCD44E19E654F1
        Validity
            Not Before: May 15 01:37:05 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=C050E83CA23870C4F2CDF37BDFA4062DAEE4B317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:84:db:93:86:8b:2c:a4:2e:d8:6f:1f:87:9a:
                    24:b2:62:3f:00:8b:c5:af:3f:b1:ee:05:29:9e:5e:
                    52:00:d9:13:2a:3d:b6:a3:8e:2d:1a:c0:a7:04:7f:
                    68:70:1c:a5:65:f1:aa:1a:5a:54:b8:fd:2c:e2:e4:
                    eb:92:a5:32:a0:a2:ec:83:a3:64:b5:72:3b:1d:ae:
                    f7:c9:80:dc:f4:85:37:8c:06:d6:1c:df:2d:38:9a:
                    6b:4f:cf:1e:6a:1e:d0:96:04:b7:e3:a5:04:86:91:
                    d2:2f:9b:3f:50:5a:6c:cc:66:c6:60:a6:75:b9:8c:
                    a6:74:a1:a4:de:37:7a:0e:d7:e5:b2:b1:3e:cc:e2:
                    c3:1b:7c:cc:8d:0a:8c:5e:a0:49:8b:22:ab:69:f7:
                    04:56:c9:37:17:09:7f:d0:57:18:b7:45:b5:e6:f0:
                    80:82:e8:89:c0:f7:c0:64:eb:65:61:eb:a5:73:50:
                    6d:72:af:a4:f1:40:83:81:bb:06:41:01:b5:ef:ea:
                    71:68:f0:e6:9d:a7:5c:5f:3d:ba:72:9a:12:33:3a:
                    d7:e7:66:88:4c:78:a1:1e:f4:76:8b:c9:1d:d5:16:
                    95:ff:0b:f5:51:23:d4:89:e1:bb:c3:78:08:01:38:
                    dd:42:f1:2a:95:c9:c5:7d:ca:b7:1f:2b:7a:11:43:
                    14:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:50:E8:3C:A2:38:70:C4:F2:CD:F3:7B:DF:A4:06:2D:AE:E4:B3:17
            X509v3 Authority Key Identifier:
                keyid:4F:2A:36:BE:85:AB:88:33:88:54:C5:A5:68:CC:D4:4E:19:E6:54:F1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/Tyo2voWriDOIVMWlaMzUThnmVPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tyo2voWriDOIVMWlaMzUThnmVPE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/Tyo2voWriDOIVMWlaMzUThnmVPE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:93:25:b1:04:da:67:d7:d9:da:32:90:0d:23:d3:41:ff:11:
         33:31:cb:36:c4:a4:04:e1:0b:95:86:d5:ec:21:25:65:cf:26:
         1c:fe:c7:f2:92:49:a2:51:3f:c2:1e:d7:57:4b:19:17:7a:db:
         c4:fc:a3:00:87:bf:23:cc:b4:54:32:22:ae:9b:24:4b:a3:6a:
         ce:7a:89:5b:0c:18:7b:36:49:ed:a2:9f:aa:a7:3f:15:bb:db:
         6d:71:cf:4a:0d:0e:40:2f:f0:ad:f2:0b:a5:15:eb:e2:c8:39:
         f1:cf:ef:a4:74:71:36:fc:57:1a:d3:60:52:48:e7:69:0e:c2:
         dc:e1:a6:12:26:52:03:26:d8:5b:d4:46:bd:64:85:2c:f2:83:
         a1:6c:9a:8e:50:b5:21:f1:5c:64:48:16:80:b2:b8:a2:f9:3c:
         d4:57:61:4a:7e:e6:10:38:94:44:d2:c8:8b:e5:0a:60:50:85:
         24:b5:2c:bc:4a:27:e1:ce:1d:c6:90:81:fe:20:4a:a0:c0:db:
         05:41:7e:a0:6b:a3:f1:0e:d6:5e:06:e0:5e:57:7e:a1:33:99:
         5d:2b:10:32:91:37:ed:c5:27:68:64:13:22:cf:51:7b:21:e4:
         81:19:e0:40:81:68:77:4c:67:f1:da:ee:bb:45:83:83:9b:bd:
         f5:5f:03:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 16:48:04 2024 by rpki-client on console-fra.rpki-client.org