Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft
File:                     14hnjmTSkYTCPaqttZS_2briQFw.mft (raw, json)
Hash identifier:          JSGrSjAucA3hBS90mZDdlnCqG6y1K294j28Ub9m/dCA=
Subject key identifier:   CF:B8:7D:00:EA:33:E1:6E:8E:BE:6A:3E:31:9D:6F:E6:E8:AE:7E:A3
Authority key identifier: D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C
Certificate issuer:       /CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
Certificate serial:       50
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft
Manifest number:          04E9
Signing time:             Mon 28 Apr 2025 19:48:05 +0000
Manifest this update:     Mon 28 Apr 2025 19:48:05 +0000
Manifest next update:     Tue 13 May 2025 19:48:05 +0000
Files and hashes:         1: 14hnjmTSkYTCPaqttZS_2briQFw.crl (hash: FMDnrHqNy3i7TGSqA0ok9CQ4SzxSh805phDrYDnGZDI=)
                          2: 6afVIS-bqjMN-ZgP0oW9kRIWtWg.roa (hash: Frmg6rXHq0iRbDHzZARmVldGsR8jIVt9/AdC6WZPWOw=)
                          3: 9BpIcIvEotW5aJTKFAdz4M5kYCc.roa (hash: Cl/JVb/d1j3VcjeAZbIdxpK4WvVJfBbKMRHjp6kQki4=)
                          4: PJgJRdA3YN5AFSPYqpQB9L1MdCs.roa (hash: 1wKDmNGsnCUjQjgmPtolMJSttIbyOdiD1Y1nMDhSXHU=)
                          5: ceUbC3Y9cm5cPTNXXDZbqE3b6Ow.roa (hash: hg23RsibQfxr53wTNsd05Yc7DJfdidcZrUzLwdvA1Bo=)
                          6: dEuavb7I5mefUCOerDMS7ouZQ-I.roa (hash: +5X8/2CYHhn7hfcrvh53PwuVy8Rxh1PjkaZ290fLbto=)
                          7: jsaJlhGw-FrMjV5c6w2bhDZl08o.roa (hash: HFjnOnWDSd78O7fkzJv0NHa4Wj0KZBlKc3PS3EV+W80=)
                          8: p75GmbqFGUzMC24wnpycrlzSvXM.roa (hash: PovJ9tXKNf4p58GGk11nhNd22KTozzYSxcearHJWqOE=)
                          9: q7_qVl4IQSzcHbxX608E7qmAWeI.roa (hash: lQYRE59R6cquvtQF+XMuhQ78O66Tj7mtjxmI9KE65jI=)
                          10: ziZXHDq-HpDoSCvr1h_V6faQZAs.roa (hash: WfQ/Kfi94xEgap9ftGA8PyI1+M97JQnN/NdPiOLjg/I=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
        Validity
            Not Before: Apr 15 01:36:07 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=CFB87D00EA33E16E8EBE6A3E319D6FE6E8AE7EA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:88:97:c6:72:75:ac:6d:57:ca:f2:6a:9a:85:
                    ed:79:c6:07:06:98:6b:a5:69:83:60:a1:ac:78:25:
                    74:52:65:31:a4:2f:6b:62:a0:d3:9c:f0:2d:37:6f:
                    a6:05:a3:dd:b1:cf:62:31:a5:41:39:21:99:33:45:
                    59:51:6a:b9:05:fd:f5:f9:de:7f:2f:4b:6f:37:1f:
                    d1:df:8f:a5:09:b8:d7:48:25:66:24:f9:74:2f:20:
                    92:dc:1c:da:f1:bb:ab:b4:93:f5:c0:5b:1d:a6:7b:
                    58:43:31:fe:35:9c:f2:59:62:10:ea:5d:53:81:9a:
                    e3:ce:ab:c8:90:f6:74:ed:3d:f8:fe:e1:c4:d6:b9:
                    2a:a7:28:10:de:16:b3:d4:d0:89:ea:c5:db:4f:e0:
                    26:ee:ba:dd:8f:45:e9:6d:96:b5:04:9a:cd:b5:8f:
                    4a:af:1b:97:4e:74:81:91:34:aa:5a:80:73:9e:e3:
                    1c:c4:66:2b:b9:3f:79:6b:32:3d:06:df:1d:bd:8e:
                    84:87:6a:85:23:3c:f3:eb:10:b9:1d:e1:56:b2:19:
                    4f:08:3a:ab:f4:21:f5:a3:94:fe:b6:ef:f9:01:1f:
                    f6:d6:73:ab:e6:ad:3f:e1:dd:3b:cb:f4:5e:d1:29:
                    8f:88:a4:34:98:3b:49:55:1e:cf:d3:8e:37:ce:6d:
                    d6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B8:7D:00:EA:33:E1:6E:8E:BE:6A:3E:31:9D:6F:E6:E8:AE:7E:A3
            X509v3 Authority Key Identifier:
                keyid:D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:e7:d1:74:b1:2b:69:a1:4d:27:35:b9:23:97:45:4e:db:ee:
         8c:da:32:be:92:37:6c:08:11:71:0f:56:d9:30:0a:f0:d2:02:
         38:54:c0:47:6f:92:70:0a:9a:4b:8f:7f:9f:1d:96:7a:a3:94:
         7a:54:9e:7e:20:68:6c:30:ef:1d:6e:a5:a9:d4:36:7f:e9:c2:
         8b:e0:20:3e:e8:e4:5a:26:98:75:b1:bb:7c:22:80:da:fa:16:
         83:62:fb:b2:97:b3:9b:63:95:ee:14:ed:f2:8e:8a:b1:b4:5e:
         ec:c1:6d:fe:8d:68:4e:1e:a6:c9:42:27:11:0d:89:bb:78:b2:
         ba:c2:69:d8:6f:63:57:17:30:5f:c7:b2:05:84:15:92:e4:51:
         35:91:7a:f1:58:44:e6:56:e4:47:6e:6f:2f:a1:d3:a7:db:c1:
         4a:cb:a1:31:43:70:df:aa:cd:6d:02:3e:7a:ee:7e:b9:c3:3b:
         91:09:63:4f:bf:c2:ef:81:3d:9e:6a:69:7a:33:23:d3:98:02:
         99:86:00:d1:54:ab:e1:dc:17:92:ab:52:50:96:4b:ea:d0:7a:
         a3:3e:e7:be:d5:8a:e0:c9:dd:ee:b7:d2:3f:d0:80:3a:ce:b0:
         89:2a:21:e1:74:43:fb:f0:00:71:17:4d:f8:3c:01:34:44:6c:
         ef:f3:d4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:16 2025 by rpki-client on console.sobornost.net