Manifest

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/simple/2/BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808.mft
File:                     BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808.mft (raw, json)
Hash identifier:          7yaayGwGsco2c/iJJywkhN5ppmFqwLDKQJO3cfEKVCU=
Subject key identifier:   15:11:F2:6D:E7:E5:0F:E2:67:26:F5:49:0E:FF:26:01:51:FB:D7:10
Authority key identifier: BF:62:B3:9E:CA:ED:B0:C4:EF:1B:AB:32:7D:1A:9A:54:51:FB:88:08
Certificate issuer:       /CN=A91E8DF50000/serialNumber=BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808
Certificate serial:       2AB1A11753A3DB3EBA668A03871A7791DB278A04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2KznsrtsMTvG6syfRqaVFH7iAg.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/simple/2/BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808.mft
Manifest number:          7C
Signing time:             Mon 24 Feb 2025 17:35:48 +0000
Manifest this update:     Mon 24 Feb 2025 17:30:48 +0000
Manifest next update:     Tue 25 Feb 2025 18:32:48 +0000
Files and hashes:         1: 3130332e3234342e3136332e302f32342d3234203d3e203230343733.roa (hash: wZ0LAMToyajnk8K1wcrcFMPbvkkgy3krVL/403IsyPQ=)
                          2: 323030313a6466323a343563303a3a2f34372d3438203d3e2039393233.roa (hash: ayzzgQwiZltziys5ObIUVNlBT4S3ejHRN4FI5uEmycY=)
                          3: 3130332e3232342e39322e302f32342d3234203d3e20323135333634.roa (hash: 5mYj+UyXn59cm9WHj/jKSJrx8deUPU1w0xYp65xLx4g=)
                          4: 3130332e3234342e3136332e302f32342d3332203d3e20313432303436.roa (hash: d5phvaZPd2/L9thePGOSTNwlasQgkQLPsuxhjsVMdaI=)
                          5: 3130332e3232342e39322e302f32342d3234203d3e20313531313838.roa (hash: oI/iyPCKE7Dhiyna6BSlrjwcht0MioCVz33JmPEPdpg=)
                          6: 3130332e3234342e3136332e302f32342d3234203d3e20313531313838.roa (hash: iAKsMSJgYc/F+LavCcjlyxEXsCUkLL4CKK+ghLCCS/k=)
                          7: 323030313a6466323a343563303a3a2f34372d3438203d3e203332353935.roa (hash: dpiE0Kb9EoEweztdhsPBmvX3mySrHEvg2zyPRUgRUGE=)
                          8: 3130332e3232342e39322e302f32342d3234203d3e203332353935.roa (hash: hL2WxXdpEmlHDA0wQO/yYnmtaJfEdPaQRBSGQikxaZE=)
                          9: BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808.crl (hash: nxsH0K4YYZVgu8UzSQvTB9i242bZSLnc4BixhqbzI4M=)

Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/simple/2/BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808.crl
                          rsync://oto.wakuwaku.ne.jp/pki/simple/2/BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2KznsrtsMTvG6syfRqaVFH7iAg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Feb 2025 18:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b1:a1:17:53:a3:db:3e:ba:66:8a:03:87:1a:77:91:db:27:8a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8DF50000/serialNumber=BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808
        Validity
            Not Before: Feb 24 17:30:48 2025 GMT
            Not After : Feb 25 18:32:48 2025 GMT
        Subject: CN=1511F26DE7E50FE26726F5490EFF260151FBD710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:03:c4:2c:d7:cd:dc:ab:35:d6:7f:88:55:76:
                    af:76:00:84:df:a4:83:ae:49:33:f1:43:79:b1:f7:
                    91:48:b9:a6:34:e0:d1:74:6b:da:50:f3:99:7d:c6:
                    3f:9f:56:df:54:27:86:fa:c4:ce:f4:66:46:5c:ee:
                    05:99:ad:34:cf:b4:d4:a3:73:0b:59:23:ed:70:32:
                    e4:6e:09:58:93:bb:6d:6e:c9:ed:d1:19:90:d1:62:
                    8a:f7:8a:55:87:a7:d9:d7:df:19:83:06:c0:6d:2b:
                    f3:ec:36:91:09:cd:8a:92:1f:32:80:ba:c6:ac:52:
                    62:58:fe:6a:f7:c3:ef:f6:c8:1d:f8:80:80:9d:3b:
                    cc:5e:da:26:0a:83:52:1d:55:f4:c8:05:cf:4d:23:
                    d6:36:00:9e:ae:cd:87:93:2e:4f:b0:b1:c0:90:a2:
                    44:45:ff:11:2b:3d:0e:8c:00:38:d7:83:b7:e5:30:
                    14:66:7a:a2:5d:c7:e6:c8:ef:40:e2:2d:17:e4:bc:
                    ba:e2:96:23:dc:d0:30:3e:58:23:61:8f:a7:34:eb:
                    fd:a1:20:a8:2c:7c:a2:61:c8:0f:33:e3:fe:1e:b0:
                    7d:48:26:67:e9:61:84:e4:01:3c:76:99:6d:97:25:
                    e5:61:35:80:22:81:b6:83:7b:75:b7:d4:37:55:3c:
                    15:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:11:F2:6D:E7:E5:0F:E2:67:26:F5:49:0E:FF:26:01:51:FB:D7:10
            X509v3 Authority Key Identifier:
                keyid:BF:62:B3:9E:CA:ED:B0:C4:EF:1B:AB:32:7D:1A:9A:54:51:FB:88:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/simple/2/BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2KznsrtsMTvG6syfRqaVFH7iAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/simple/2/BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:29:65:9d:3e:70:6e:94:a8:2f:07:22:0a:ba:32:fe:7b:bd:
         70:75:fa:07:25:7f:a8:64:a9:55:2d:e4:b9:43:a2:ea:0d:47:
         6f:0b:9a:53:85:7f:cd:11:7e:b1:95:92:5e:fd:a2:17:8f:09:
         dd:3f:50:70:86:31:c7:53:84:cf:f9:ec:1d:36:98:66:3f:1b:
         43:f9:48:8c:c9:82:f4:4b:a4:da:32:cb:97:01:19:40:bd:ea:
         f6:b3:d5:c6:7a:81:10:7a:f9:4f:fc:a4:03:23:c2:df:52:ad:
         aa:94:94:c6:d6:16:af:53:d8:aa:c4:b4:42:08:97:03:89:0a:
         57:dc:eb:98:1b:50:78:7f:a0:91:70:5f:17:53:34:f5:1c:5e:
         2d:1c:94:0d:c3:2d:0a:45:ab:98:32:94:9d:89:06:ad:60:11:
         2c:6e:8c:c4:39:6a:56:0b:34:15:16:20:fa:c7:50:c7:2b:fc:
         eb:67:a1:9d:27:e2:41:f2:6e:cb:08:fa:3c:e8:59:6a:a3:24:
         be:1d:32:ca:ea:05:73:d7:62:3a:41:f6:72:c2:54:fe:32:f1:
         e8:6e:1e:bb:c0:b1:4d:c5:16:2a:7b:cc:aa:03:6e:ba:9e:50:
         8f:9c:a9:0c:e2:34:0d:5f:22:3c:ca:91:80:72:9a:61:00:f5:
         2a:9f:e0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 25 03:23:49 2025 by rpki-client on console.sobornost.net