Manifest

$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File:                     5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier:          xPyyVDwX6pbHuLcOy+k7mDN2aJI2yP1eK+c5oeIH26Y=
Subject key identifier:   3E:77:64:22:04:E8:3B:63:BE:45:19:4E:C9:5F:61:32:D1:A5:0A:1F
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer:       /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial:       0386C19E4031D350CB112806A3EAFBD065A4C86E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access:      rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number:          0A6A
Signing time:             Fri 28 Mar 2025 21:44:00 +0000
Manifest this update:     Fri 28 Mar 2025 21:39:00 +0000
Manifest next update:     Sat 29 Mar 2025 21:44:00 +0000
Files and hashes:         1: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: Q5jeTRNUVGCTNe4HZ4Se6mI8lzRPzfK0OxDR2WqWJEU=)
                          2: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: FqcqaK70ydTZMxC6YCnd1SPlxVTn7JLZ51PyVADC+6w=)
                          3: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: cIY8MVlLm9JgK/dm24sUQfxqntuvPhnKzYtz/zbgxlQ=)
                          4: 47717A8A2E301D872DAC129F2CBAC587F01A0813.cer (hash: lOH37mNZ7GeDqNovMClGKLJ0pYQzmLTzievvpRu1ycw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:86:c1:9e:40:31:d3:50:cb:11:28:06:a3:ea:fb:d0:65:a4:c8:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114E750000
        Validity
            Not Before: Mar 28 21:39:00 2025 GMT
            Not After : Apr  4 21:44:00 2025 GMT
        Subject: CN=3082010A0282010100DFA93782FAED048A48DBA760955FF22775F5280805E742253D1FB600BB5DEAEA7B4473BA8DEDBA6AAD9FABF77A8D3A71FE8BC853D02B283D68EAD4DBD8884ACFDBD21ACF8CCBB7DE89374984F1BFA2489D3262F1445A1D23BCC159F97985B87616CA4BA95834B3BB7D3357C0B4359C537C0C262A6AEB95D4981350EC38DC771AE623AFCD55382A15AECF663E0CDE49EA4925FBC77C7F60D2E0A885C14D991AE5543BB9F7BA50C3DD24EA5CF2C65BFB27B1720125D8D0532A0ECD7CFB6901E5953830BCF7E8A75F7249221F51E331B64F30552890E16B36E815EA859B3EB26F6A07839344DD03E95EFAC7AF2E859801E2B3C7BC6038D04E4E9352FCE5DD8C230F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a9:37:82:fa:ed:04:8a:48:db:a7:60:95:5f:
                    f2:27:75:f5:28:08:05:e7:42:25:3d:1f:b6:00:bb:
                    5d:ea:ea:7b:44:73:ba:8d:ed:ba:6a:ad:9f:ab:f7:
                    7a:8d:3a:71:fe:8b:c8:53:d0:2b:28:3d:68:ea:d4:
                    db:d8:88:4a:cf:db:d2:1a:cf:8c:cb:b7:de:89:37:
                    49:84:f1:bf:a2:48:9d:32:62:f1:44:5a:1d:23:bc:
                    c1:59:f9:79:85:b8:76:16:ca:4b:a9:58:34:b3:bb:
                    7d:33:57:c0:b4:35:9c:53:7c:0c:26:2a:6a:eb:95:
                    d4:98:13:50:ec:38:dc:77:1a:e6:23:af:cd:55:38:
                    2a:15:ae:cf:66:3e:0c:de:49:ea:49:25:fb:c7:7c:
                    7f:60:d2:e0:a8:85:c1:4d:99:1a:e5:54:3b:b9:f7:
                    ba:50:c3:dd:24:ea:5c:f2:c6:5b:fb:27:b1:72:01:
                    25:d8:d0:53:2a:0e:cd:7c:fb:69:01:e5:95:38:30:
                    bc:f7:e8:a7:5f:72:49:22:1f:51:e3:31:b6:4f:30:
                    55:28:90:e1:6b:36:e8:15:ea:85:9b:3e:b2:6f:6a:
                    07:83:93:44:dd:03:e9:5e:fa:c7:af:2e:85:98:01:
                    e2:b3:c7:bc:60:38:d0:4e:4e:93:52:fc:e5:dd:8c:
                    23:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:77:64:22:04:E8:3B:63:BE:45:19:4E:C9:5F:61:32:D1:A5:0A:1F
            X509v3 Authority Key Identifier:
                keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:2a:1c:e6:bc:0d:93:f5:ec:52:0c:da:d9:15:3b:bc:24:80:
         b6:b9:fc:c8:9f:25:99:40:bd:aa:e3:36:d8:89:77:0a:58:75:
         b5:ea:66:bc:cf:47:21:68:1a:38:af:a5:25:6f:ea:86:a0:37:
         68:78:26:07:e5:c9:ef:21:8a:54:46:74:10:51:a7:d6:f7:fa:
         03:b8:21:c7:0e:ae:11:a5:7a:b9:cc:b8:62:66:05:76:39:56:
         92:d7:ab:1e:e2:65:8c:aa:6f:20:e9:94:ca:90:5f:8b:6d:e0:
         4c:10:79:8f:85:1a:e0:d8:5a:aa:25:23:c3:d2:50:f1:1c:76:
         39:97:ea:76:60:8e:db:1c:15:50:37:58:b2:3f:11:7c:5f:bf:
         d0:90:55:e3:bf:7e:a8:28:d5:54:8b:ed:6e:e4:5b:98:7e:92:
         ea:c5:97:26:0f:77:19:e1:99:d3:e0:80:75:90:19:47:97:19:
         00:d2:e6:db:3d:fb:3a:2a:73:37:5a:40:45:83:98:eb:97:e3:
         ad:ac:5a:8e:4f:8c:9e:05:dd:52:4a:00:8b:53:1a:de:31:b7:
         d2:93:ef:fc:50:a1:64:75:c2:7c:97:97:db:5a:b3:90:7c:3f:
         eb:20:a0:97:23:2f:ef:b2:47:e1:27:c6:af:1b:8f:37:47:34:
         2a:20:4d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:25:36 2025 by rpki-client