Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1611/dBy43AAUAFl7vLIdMeSR1_VaLIA.mft
File:                     dBy43AAUAFl7vLIdMeSR1_VaLIA.mft (raw, json)
Hash identifier:          Kjrlf7298Q6CQk8Q19VGsm4qIMf0FITlJi2C0CGOgjI=
Subject key identifier:   05:1F:04:81:BA:26:C8:0C:08:27:12:9C:57:32:60:C7:D1:32:D9:D2
Authority key identifier: 74:1C:B8:DC:00:14:00:59:7B:BC:B2:1D:31:E4:91:D7:F5:5A:2C:80
Certificate issuer:       /CN=741CB8DC001400597BBCB21D31E491D7F55A2C80
Certificate serial:       4D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dBy43AAUAFl7vLIdMeSR1_VaLIA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1611/dBy43AAUAFl7vLIdMeSR1_VaLIA.mft
Manifest number:          0967
Signing time:             Mon 28 Apr 2025 20:16:03 +0000
Manifest this update:     Mon 28 Apr 2025 20:16:03 +0000
Manifest next update:     Tue 13 May 2025 20:16:03 +0000
Files and hashes:         1: AYAThmql9n-pepRmVAGtvI_8jZY.roa (hash: cVGbJD6nyguMRBg01f/692NxMMoP1CiKH+yNGvU0IY0=)
                          2: dBy43AAUAFl7vLIdMeSR1_VaLIA.crl (hash: 5Wnyg4XNbwAb4oTyOCJzvI1wvddAlxtj2Ep1iP2forE=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1611/dBy43AAUAFl7vLIdMeSR1_VaLIA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1611/dBy43AAUAFl7vLIdMeSR1_VaLIA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dBy43AAUAFl7vLIdMeSR1_VaLIA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=741CB8DC001400597BBCB21D31E491D7F55A2C80
        Validity
            Not Before: Apr 15 01:35:03 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=051F0481BA26C80C0827129C573260C7D132D9D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:65:1f:a5:75:db:64:30:4e:37:2f:1b:30:09:
                    e9:b9:8c:41:25:9b:2f:76:ea:ae:bf:0d:ed:89:8b:
                    f4:cd:98:2a:dd:59:c9:94:26:5b:e8:23:b3:96:ff:
                    98:f1:77:4f:d9:08:b5:fd:47:24:58:0e:fa:26:8f:
                    ca:eb:8c:d7:15:23:ce:cc:a0:1d:15:9d:8a:85:3b:
                    f6:62:6e:62:7d:e7:8d:98:00:ad:2e:92:29:90:97:
                    f2:7d:11:c0:0b:e9:3f:1e:a0:ec:bd:e9:9c:21:63:
                    f3:fe:1b:18:8b:59:01:4c:36:e0:2a:b4:84:10:6f:
                    bb:d5:9b:f0:31:1a:c2:00:5c:2e:8d:47:ad:f0:ff:
                    d1:81:f2:67:6d:73:a1:e9:56:7d:86:5d:6a:70:09:
                    7c:6c:4b:90:e6:6b:25:82:68:c1:03:2f:91:7b:18:
                    34:50:24:3b:e7:23:30:e2:ea:a2:04:7d:54:8d:c9:
                    12:d7:ba:6f:87:8a:d8:2a:87:0e:12:39:2c:b9:19:
                    68:ec:72:a8:5c:6c:00:d9:90:57:ac:8b:f4:e3:aa:
                    8e:f9:82:ea:e2:34:54:2d:4f:10:21:52:37:b6:af:
                    d0:ac:78:26:30:00:5c:b5:89:cc:16:09:5d:3f:bd:
                    60:d0:0b:53:a8:b0:24:d9:c5:95:8f:03:58:ab:b8:
                    aa:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1F:04:81:BA:26:C8:0C:08:27:12:9C:57:32:60:C7:D1:32:D9:D2
            X509v3 Authority Key Identifier:
                keyid:74:1C:B8:DC:00:14:00:59:7B:BC:B2:1D:31:E4:91:D7:F5:5A:2C:80

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1611/dBy43AAUAFl7vLIdMeSR1_VaLIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dBy43AAUAFl7vLIdMeSR1_VaLIA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1611/dBy43AAUAFl7vLIdMeSR1_VaLIA.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:5a:c9:c1:23:36:15:fb:2b:4e:39:56:40:85:9e:66:ee:fa:
         b8:14:41:8d:dd:fd:6a:8e:58:03:8c:56:4c:02:f8:25:a8:c9:
         12:25:cc:29:78:38:f2:c8:13:69:96:27:18:63:ea:60:44:1a:
         35:67:90:9d:86:04:c7:d3:6a:cd:8e:99:90:3c:ae:66:fe:f7:
         8c:ee:27:82:7d:2c:1f:d2:9d:f5:15:12:46:ab:12:b7:8d:c3:
         e7:37:3b:93:08:98:83:eb:81:ab:40:cd:72:26:e3:6d:3b:91:
         f4:b0:e8:e0:0b:5e:66:34:5a:48:12:87:bf:1e:2c:66:59:bc:
         de:a1:37:2c:fa:e0:3c:da:a0:1d:dc:a3:fb:5f:5c:93:f4:2a:
         16:c0:6f:89:13:c3:8e:56:9c:4e:f0:7d:f9:e6:d8:d0:25:d7:
         ed:b8:f0:e1:f5:2e:5e:a4:37:53:9e:cf:d6:24:e0:af:6e:fa:
         8c:2a:52:08:5a:c4:e6:f4:9c:41:fd:60:fc:d3:b1:ff:5e:c1:
         90:a0:3b:98:ab:27:87:83:97:fc:25:4d:8e:58:46:4a:88:f3:
         d8:5a:a0:fb:dc:74:bc:69:85:5a:ae:e7:b0:ef:7f:1a:01:87:
         27:92:e2:14:3d:6b:a0:6f:b5:3a:ab:51:1c:9a:a9:a2:5e:3d:
         20:55:89:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:06 2025 by rpki-client on console.sobornost.net