Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/ffVKoQDp9LZlNekg64ni4UvKzbA.mft
File:                     ffVKoQDp9LZlNekg64ni4UvKzbA.mft (raw, json)
Hash identifier:          huHkzRdhXGoRT9u8T6SNSSKNLZDb8VYVGXSSm4POchs=
Subject key identifier:   30:EB:93:9C:A0:29:55:12:3F:3E:F4:93:B0:40:E4:B5:47:99:7A:B1
Authority key identifier: 7D:F5:4A:A1:00:E9:F4:B6:65:35:E9:20:EB:89:E2:E1:4B:CA:CD:B0
Certificate issuer:       /CN=7DF54AA100E9F4B66535E920EB89E2E14BCACDB0
Certificate serial:       41
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ffVKoQDp9LZlNekg64ni4UvKzbA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/ffVKoQDp9LZlNekg64ni4UvKzbA.mft
Manifest number:          0E19
Signing time:             Thu 30 May 2024 01:35:34 +0000
Manifest this update:     Thu 30 May 2024 01:35:34 +0000
Manifest next update:     Sun 09 Jun 2024 01:35:34 +0000
Files and hashes:         1: ffVKoQDp9LZlNekg64ni4UvKzbA.crl (hash: RTn0Z3l4M1FmmLLyLyuFCxIIAioWRlE3/m4zE7I37dE=)
                          2: v_hbC66phVVUU7Clg3hsR6RLGqY.roa (hash: xv2e0Y96H0nQ5PIBdh6xNIk17L6Ww0c9hyyH+tE79Xk=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/ffVKoQDp9LZlNekg64ni4UvKzbA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/ffVKoQDp9LZlNekg64ni4UvKzbA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ffVKoQDp9LZlNekg64ni4UvKzbA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DF54AA100E9F4B66535E920EB89E2E14BCACDB0
        Validity
            Not Before: May 15 01:32:31 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=30EB939CA02955123F3EF493B040E4B547997AB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e5:00:e5:fb:57:7c:d7:9a:8f:69:35:e7:1e:
                    36:b0:b5:9d:62:c1:16:17:f0:d5:49:f2:99:99:f0:
                    7a:63:1a:cc:3c:8f:c3:fe:25:ce:7b:eb:46:67:8f:
                    af:81:f0:8d:d0:50:21:6d:a6:a9:4e:ed:1b:1e:75:
                    85:c5:86:60:90:14:54:c6:9a:c7:09:a7:d6:97:d6:
                    b2:fb:01:c4:db:1a:08:d5:f7:73:f6:e7:a3:19:5f:
                    39:f9:bb:6d:5f:e7:83:d7:e2:41:1a:e9:41:18:c5:
                    b1:79:5f:13:e4:24:c1:11:e3:4c:37:0d:94:ec:f9:
                    50:d9:51:fb:02:b4:20:25:bb:2c:ac:2e:98:44:db:
                    21:c2:24:4c:b0:53:e8:c7:4a:2c:a8:dc:89:ad:d5:
                    fd:9f:09:ba:04:c7:49:8c:22:cd:5c:83:0f:9b:07:
                    7d:29:f0:ba:8f:34:f9:51:8d:26:9a:5c:29:6a:92:
                    9c:e2:cd:10:47:d2:8c:a4:00:5e:a7:76:2f:77:80:
                    72:fe:60:31:19:e9:47:52:1d:78:27:44:37:37:25:
                    c6:1f:eb:7c:d6:0b:06:06:11:d3:8b:9f:d6:b6:f9:
                    4a:81:a6:8f:9d:c0:c2:d4:fd:32:9b:21:23:6a:c1:
                    2a:cc:bf:8b:62:ac:b3:60:1e:a0:fc:cc:4d:74:57:
                    0d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:EB:93:9C:A0:29:55:12:3F:3E:F4:93:B0:40:E4:B5:47:99:7A:B1
            X509v3 Authority Key Identifier:
                keyid:7D:F5:4A:A1:00:E9:F4:B6:65:35:E9:20:EB:89:E2:E1:4B:CA:CD:B0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/ffVKoQDp9LZlNekg64ni4UvKzbA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ffVKoQDp9LZlNekg64ni4UvKzbA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/ffVKoQDp9LZlNekg64ni4UvKzbA.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:6f:32:a8:c3:06:29:50:d6:db:1a:15:a6:0a:44:f3:68:64:
         cf:55:0b:e6:6d:ee:e8:d3:2d:28:d4:51:89:bc:f6:fd:f7:c5:
         1a:ab:b6:fe:3c:33:8f:a1:60:b4:fa:ee:46:93:1e:ae:2a:9d:
         14:f1:7c:ff:cf:33:ee:62:46:2c:f9:de:39:df:b1:9e:32:99:
         98:d2:a4:0c:98:64:e0:86:eb:b9:15:f0:5f:1a:d3:9a:b5:b1:
         a9:ab:fb:d1:4c:a7:34:69:5a:f0:d1:0c:f2:16:4a:4e:46:3b:
         85:e5:26:0f:e0:a8:c0:33:ed:f4:cd:71:89:a2:79:a1:70:6f:
         e7:6a:52:c5:93:0b:63:f1:8a:25:64:db:0d:da:13:b9:03:75:
         f5:08:ae:54:f5:6b:8c:b6:26:cb:39:5f:c2:d8:69:48:ff:ef:
         a9:45:6c:b5:e7:83:5c:dd:e2:63:e1:da:2a:9d:9b:bc:1a:01:
         29:cb:47:58:48:59:2b:3d:47:70:74:3c:ae:cf:7b:13:38:b4:
         54:21:85:0f:9b:60:ca:a7:a0:a1:94:38:06:9f:b8:c2:0c:4b:
         cc:7c:9e:51:ee:80:f1:18:c5:77:05:bb:1c:a5:a0:47:a7:fe:
         4b:92:6c:93:23:ad:b5:41:df:5f:10:c6:71:4f:a3:bd:f0:25:
         95:ed:31:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:54 2024 by rpki-client on console-ams.rpki-client.org