Manifest
$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier: LH1LMmlWWw9tlPiaNg84vptufu8H/6glIcbGhkAsIoI=
Subject key identifier: 5B:18:E6:C1:8C:56:34:8C:5D:CA:43:9D:0A:63:CF:2C:7E:16:61:98
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer: /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial: 1B5F43CC81247A66E4F4BA0F7B2F44E8834520CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number: 09AA
Signing time: Thu 21 Nov 2024 20:34:00 +0000
Manifest this update: Thu 21 Nov 2024 20:29:00 +0000
Manifest next update: Fri 22 Nov 2024 20:34:00 +0000
Files and hashes: 1: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: cIY8MVlLm9JgK/dm24sUQfxqntuvPhnKzYtz/zbgxlQ=)
2: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: FqcqaK70ydTZMxC6YCnd1SPlxVTn7JLZ51PyVADC+6w=)
3: 47717A8A2E301D872DAC129F2CBAC587F01A0813.cer (hash: dvYdMAoepFWyruPdMOF0MCEzIXKByC5Xj2vGke0hyRY=)
4: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: ByWvA3EqzisDSnydLQHBxhUHvf/8NTWWojTiR5HeFAE=)
Validation: OK
Signature path: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 20:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:5f:43:cc:81:24:7a:66:e4:f4:ba:0f:7b:2f:44:e8:83:45:20:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Validity
Not Before: Nov 21 20:29:00 2024 GMT
Not After : Nov 28 20:34:00 2024 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a6:55:fe:53:97:83:14:e4:b0:4d:71:22:f6:
fb:fd:e8:8f:0b:42:ef:e9:e3:52:5a:d7:c5:5d:c8:
1f:ae:92:08:b8:f5:60:06:d1:93:41:67:9e:6c:ed:
83:12:ff:91:99:9a:ab:61:7b:26:63:11:ad:ec:a4:
b9:dd:29:a7:31:ec:7c:37:b4:55:db:3a:59:bd:67:
cc:f0:b6:9b:04:19:49:0c:53:f7:59:f8:63:50:c8:
d9:4a:12:24:ec:68:f7:59:0a:21:69:78:02:aa:af:
81:b3:2b:0d:8f:c4:f3:65:38:32:12:c4:78:ba:ed:
0e:1b:c2:f4:ea:64:66:d5:a2:dc:9a:1b:a0:93:ab:
73:84:51:4f:df:ac:b5:d9:48:fc:97:b8:38:ae:c3:
ec:ea:c2:b3:5f:b6:f4:92:41:97:c0:fa:57:b4:87:
e0:99:ee:97:01:0d:4f:30:0f:8c:a5:77:60:2b:eb:
36:ec:9f:28:f5:b3:f7:3a:d5:37:16:63:11:cb:27:
21:3e:42:79:33:ef:98:ba:8c:19:af:d8:9c:98:f4:
e8:96:27:de:f2:00:ef:d3:dc:cb:66:5b:2c:bf:cb:
3b:df:c5:21:4d:3b:85:c7:68:70:4a:bf:aa:72:7c:
89:67:a4:b2:87:59:ad:05:6b:5e:e1:8a:f9:d4:9e:
51:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:18:E6:C1:8C:56:34:8C:5D:CA:43:9D:0A:63:CF:2C:7E:16:61:98
X509v3 Authority Key Identifier:
keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject Information Access:
Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:0c:f2:02:d9:ee:56:0d:9e:ec:18:1f:ed:81:fe:01:92:7e:
25:e0:48:ed:7e:73:91:f0:9e:06:d9:a5:4e:af:02:f7:99:60:
55:ee:2c:a6:d7:71:2b:27:d5:62:dc:45:ac:e7:a6:f8:f1:03:
9e:9f:dc:58:2b:ef:21:1c:52:47:80:5e:a5:5a:29:1f:e2:6a:
a4:4e:82:d3:90:9e:e7:d4:7b:46:14:5c:1f:c6:f7:df:f5:28:
33:78:fa:1b:c7:03:a1:ab:1e:e9:6a:37:f2:95:df:9a:fa:15:
f3:4d:d2:2d:c0:1e:26:cc:cb:9f:d6:1d:b8:a0:ce:c0:6a:a0:
49:3f:b1:a2:a6:32:8e:c3:f9:10:92:27:bc:3c:9e:6c:fb:7b:
ca:5b:7f:d2:16:c1:ec:8b:c9:7a:d2:c1:91:bd:c8:71:84:b4:
6d:b8:ad:a2:ad:9d:1e:ab:74:6a:61:86:73:da:9c:b2:4c:72:
8a:ea:c7:3d:c2:77:f8:77:ec:12:68:5d:2f:36:f0:19:38:71:
3c:a8:f6:ce:6a:f6:75:a3:84:48:a0:81:eb:9b:4b:61:7a:09:
e7:68:08:b3:62:b5:50:72:6d:79:67:e1:e1:e3:ff:a8:2b:37:
7e:85:9f:25:6c:07:a5:12:13:77:16:b1:fb:97:93:2c:87:9d:
d2:9e:db:d4
-----BEGIN CERTIFICATE-----
MIIHBDCCBeygAwIBAgIUG19DzIEkembk9LoPey9E6INFIMwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTRFNzUwMDAwMTEwLwYDVQQFEyg1QTE3OTY0OEIz
RUYyMzY5RENFN0JEQjU4MTQwRkY3REM3MDYwQUJGMB4XDTI0MTEyMTIwMjkwMFoX
DTI0MTEyODIwMzQwMFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDNUE2NTVGRTUzOTc4MzE0RTRCMDRENzEyMkY2RkJGREU4OEYwQjQyRUZF
OUUzNTI1QUQ3QzU1REM4MUZBRTkyMDhCOEY1NjAwNkQxOTM0MTY3OUU2Q0VEODMx
MkZGOTE5OTlBQUI2MTdCMjY2MzExQURFQ0E0QjlERDI5QTczMUVDN0MzN0I0NTVE
QjNBNTlCRDY3Q0NGMEI2OUIwNDE5NDkwQzUzRjc1OUY4NjM1MEM4RDk0QTEyMjRF
QzY4Rjc1OTBBMjE2OTc4MDJBQUFGODFCMzJCMEQ4RkM0RjM2NTM4MzIxMkM0NzhC
QUVEMEUxQkMyRjRFQTY0NjZENUEyREM5QTFCQTA5M0FCNzM4NDUxNEZERkFDQjVE
OTQ4RkM5N0I4MzhBRUMzRUNFQUMyQjM1RkI2RjQ5MjQxOTdDMEZBNTdCNDg3RTA5
OUVFOTcwMTBENEYzMDBGOENBNTc3NjAyQkVCMzZFQzlGMjhGNUIzRjczQUQ1Mzcx
NjYzMTFDQjI3MjEzRTQyNzkzM0VGOThCQThDMTlBRkQ4OUM5OEY0RTg5NjI3REVG
MjAwRUZEM0RDQ0I2NjVCMkNCRkNCM0JERkM1MjE0RDNCODVDNzY4NzA0QUJGQUE3
MjdDODk2N0E0QjI4NzU5QUQwNTZCNUVFMThBRjlENDlFNTEwOTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFplX+U5eDFOSwTXEi9vv9
6I8LQu/p41Ja18VdyB+ukgi49WAG0ZNBZ55s7YMS/5GZmqtheyZjEa3spLndKacx
7Hw3tFXbOlm9Z8zwtpsEGUkMU/dZ+GNQyNlKEiTsaPdZCiFpeAKqr4GzKw2PxPNl
ODISxHi67Q4bwvTqZGbVotyaG6CTq3OEUU/frLXZSPyXuDiuw+zqwrNftvSSQZfA
+le0h+CZ7pcBDU8wD4yld2Ar6zbsnyj1s/c61TcWYxHLJyE+Qnkz75i6jBmv2JyY
9OiWJ97yAO/T3MtmWyy/yzvfxSFNO4XHaHBKv6pyfIlnpLKHWa0Fa17hivnUnlEJ
AgMBAAGjggH7MIIB9zAdBgNVHQ4EFgQUWxjmwYxWNIxdykOdCmPPLH4WYZgwHwYD
VR0jBBgwFoAUWheWSLPvI2nc5721gUD/fccGCr8wDgYDVR0PAQH/BAQDAgeAMGIG
A1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vc2FrdXlhLm5hdC5tb2UvcmVwby9OQVRP
Q0EvMS81QTE3OTY0OEIzRUYyMzY5RENFN0JEQjU4MTQwRkY3REM3MDYwQUJGLmNy
bDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5p
Yy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZG
Mi9XaGVXU0xQdkkybmM1NzIxZ1VEX2ZjY0dDcjguY2VyMG0GCCsGAQUFBwELBGEw
XzBdBggrBgEFBQcwC4ZRcnN5bmM6Ly9zYWt1eWEubmF0Lm1vZS9yZXBvL05BVE9D
QS8xLzVBMTc5NjQ4QjNFRjIzNjlEQ0U3QkRCNTgxNDBGRjdEQzcwNjBBQkYubWZ0
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYE
AgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDCDPIC2e5WDZ7sGB/tgf4Bkn4l4EjtfnOR8J4G2aVOrwL3mWBV7iym
13ErJ9Vi3EWs56b48QOen9xYK+8hHFJHgF6lWikf4mqkToLTkJ7n1HtGFFwfxvff
9SgzePobxwOhqx7pajfyld+a+hXzTdItwB4mzMuf1h24oM7AaqBJP7GipjKOw/kQ
kie8PJ5s+3vKW3/SFsHsi8l60sGRvchxhLRtuK2irZ0eq3RqYYZz2pyyTHKK6sc9
wnf4d+wSaF0vNvAZOHE8qPbOavZ1o4RIoIHrm0thegnnaAizYrVQcm15Z+Hh4/+o
Kzd+hZ8lbAelEhN3FrH7l5Msh53SntvU
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:14:42 2024 by rpki-client on console-fra.rpki-client.org