Manifest

$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File:                     5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier:          QG1BrxkKG9fT4CgDon5PmblRzgMb0R8gxEw809OgDUc=
Subject key identifier:   D0:10:59:63:F3:5B:3E:92:3A:3E:8D:FD:B8:35:81:EF:EB:C4:88:C0
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer:       /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial:       02659087163D62CFB01E8C718C77B9C96EA85438
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access:      rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number:          0873
Signing time:             Wed 01 May 2024 02:00:00 +0000
Manifest this update:     Wed 01 May 2024 01:55:00 +0000
Manifest next update:     Thu 02 May 2024 02:00:00 +0000
Files and hashes:         1: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: r0XHzV8Dk3lA7stXbRdaC/+iAdXFViUWZaWc94eWAZM=)
                          2: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: ItRiMrje0JiDcKec3h1w6pzk25xLDucbgK3Fz8QBivE=)
                          3: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: PmZ5BtC+skyYSQWdIt9rPVtvGDtkP2Mbo9J+jtoiTIw=)
                          4: 47717A8A2E301D872DAC129F2CBAC587F01A0813.cer (hash: dvYdMAoepFWyruPdMOF0MCEzIXKByC5Xj2vGke0hyRY=)

Validation:               OK
Signature path:           rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:65:90:87:16:3d:62:cf:b0:1e:8c:71:8c:77:b9:c9:6e:a8:54:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
        Validity
            Not Before: May  1 01:55:00 2024 GMT
            Not After : May  8 02:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e3:90:71:7c:50:c8:bb:1c:8e:e3:bb:6c:ae:
                    d4:c2:2d:00:55:47:eb:63:4c:e9:58:f7:99:de:ec:
                    3e:69:2c:61:23:6f:92:00:59:5c:77:b7:7e:44:ee:
                    f8:9c:b5:aa:27:f5:d3:4e:d5:97:ad:50:57:13:04:
                    7f:6c:99:09:4f:6a:32:b6:bd:8a:c7:82:ba:86:d3:
                    68:7f:d6:89:35:eb:80:5c:2e:04:8f:4a:02:6f:5a:
                    6a:87:d3:d7:0d:d3:c2:e8:68:4f:51:8f:4d:4e:e7:
                    b8:25:12:42:4e:c9:09:ad:70:03:97:f6:12:b0:d0:
                    2d:a6:a6:98:d5:ef:6a:24:09:9e:a3:98:43:74:72:
                    0b:09:ef:b5:76:f5:a3:ba:88:08:03:fd:77:1d:c5:
                    94:ec:07:68:c7:47:d4:03:6d:2e:d5:93:7a:06:fc:
                    c6:de:84:16:2d:8e:e3:8d:e6:57:67:51:f2:7e:dd:
                    24:ed:ad:c7:b3:da:fd:fa:60:3e:d9:26:84:c5:44:
                    76:8d:dc:f2:d1:57:f7:78:30:fa:cf:0d:10:56:4f:
                    cb:cc:f7:8c:7f:c0:51:b8:d1:86:e5:7d:3a:cf:da:
                    fc:46:57:46:29:c8:21:cf:3b:7d:6b:62:82:d6:95:
                    66:79:bd:fd:b5:e6:25:26:8e:e6:d0:67:cf:ab:a6:
                    5c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:10:59:63:F3:5B:3E:92:3A:3E:8D:FD:B8:35:81:EF:EB:C4:88:C0
            X509v3 Authority Key Identifier:
                keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ef:7e:10:e5:03:3f:59:72:6e:a3:01:59:d5:be:03:26:d5:
         bd:04:a3:11:0b:8e:84:d8:92:27:05:ca:3d:14:6a:dd:53:92:
         54:85:29:83:64:48:d8:6e:dc:67:d0:22:a0:18:7f:b3:99:8f:
         51:a1:55:55:0d:61:1d:14:80:fd:62:2a:9d:30:ff:70:db:9b:
         4a:82:5c:3f:8f:8d:7f:a1:a5:06:c1:4a:a5:bb:c8:bb:2f:c4:
         b9:f3:f2:fd:c3:98:10:e0:e0:5c:a8:37:db:62:80:0e:5c:fc:
         92:b5:b4:74:48:78:f6:26:77:83:90:23:74:c6:09:d2:98:02:
         1c:2f:e6:78:18:62:33:db:7a:db:62:90:f3:b5:76:2e:68:d3:
         bd:3f:99:4f:f5:df:45:cf:08:d5:e8:83:c2:aa:ef:28:16:1e:
         b2:5f:e9:23:9c:97:20:b2:a3:ba:82:89:30:97:a9:28:dd:a3:
         d0:a1:41:0a:b7:e1:c6:24:17:30:1a:87:e7:ab:13:9f:9e:ed:
         e1:21:44:26:8c:ae:f8:dc:31:17:ec:a1:c0:60:b6:44:db:8a:
         9f:0f:cb:b2:db:3e:bc:55:49:98:00:c9:f0:4a:c6:e7:4b:50:
         3b:23:8c:15:6d:85:f7:e3:1f:3d:19:ff:5e:e6:36:ca:9f:7c:
         8c:9f:ac:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 04:03:59 2024 by rpki-client on console-ams.rpki-client.org