Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.mft
File:                     JFBahrANzQW6NgvKZq3_YCvZWqg.mft (raw, json)
Hash identifier:          y+4mCCCYCqGI164vwtvy6SJ6vWvm0OtvpZRxoRR0UK4=
Subject key identifier:   37:54:72:5C:CF:50:D9:28:FB:7B:09:EA:73:AD:61:6E:C2:6B:18:2A
Authority key identifier: 24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8
Certificate issuer:       /CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
Certificate serial:       79
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.mft
Manifest number:          1689
Signing time:             Sat 26 Apr 2025 14:06:32 +0000
Manifest this update:     Sat 26 Apr 2025 14:06:32 +0000
Manifest next update:     Sun 11 May 2025 14:06:32 +0000
Files and hashes:         1: 9LzZ6itj0-XE7xid-GvA2cN24jY.roa (hash: hmAJNcO+Y9kpkfI2EclwSmKm3FKDveuciI0Oyebf+cs=)
                          2: BLMB65YKDilSH2-ivPU31QSZJnI.roa (hash: THgO3N5FUnlH3Uo1kiIYx+DO/Mj2TaUZULagIphNwj0=)
                          3: DGtrIHfUxKyle1Ld7ooXa6MBuFU.roa (hash: BTsVDDcZ0Wqr48K2JkZUod6kC2JTarmjwBJNCwF4PvA=)
                          4: JFBahrANzQW6NgvKZq3_YCvZWqg.crl (hash: +FuluvzdSqQSuGUiQAifWncBc6LtNCaOpA8v2Em8Yi0=)
                          5: UWP5aFt5WfIDsDftrt0pnMBrRp8.roa (hash: IK9+a0NJqHMg1dH5NccdFL402pRGKPoT23G1LDPOC2Y=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 15:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
        Validity
            Not Before: Apr 15 01:33:03 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=3754725CCF50D928FB7B09EA73AD616EC26B182A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:78:a7:b6:7f:99:b5:66:a9:91:70:29:1c:4f:
                    2b:39:f8:f8:29:34:1e:9c:dc:b1:a9:cc:ac:0d:58:
                    60:69:40:fd:75:c4:76:eb:52:3f:94:29:4b:c2:70:
                    12:1d:07:95:a4:8a:92:95:20:95:64:f0:6b:57:88:
                    f9:87:6d:95:d7:e9:9f:cc:a8:3c:d7:c4:11:81:5e:
                    d2:80:80:11:e2:38:7f:65:21:6f:80:44:6a:47:63:
                    3c:8a:91:62:42:c0:cd:70:ee:07:e4:ce:d5:80:e0:
                    0c:71:34:ed:e3:7b:e1:67:e1:55:21:6b:39:5b:58:
                    aa:5d:66:a4:2d:d0:ee:ae:6f:02:65:ee:6f:1a:c9:
                    e8:4d:2f:3f:6e:f9:12:21:aa:52:db:5e:ed:9c:75:
                    6d:ad:01:49:e2:bd:f1:2d:2e:12:99:4a:6f:1a:92:
                    b7:20:55:11:71:8c:6a:fb:ef:42:d8:c4:3a:17:8c:
                    67:5e:6d:42:3f:65:a3:b2:2f:5f:48:78:7f:18:f6:
                    65:0f:02:3e:5b:ac:3c:d4:d2:38:ed:45:6a:62:87:
                    a9:e3:b2:fe:83:30:b0:e1:ff:04:8c:ab:c6:11:aa:
                    c3:83:65:60:58:88:c7:94:e7:35:a4:67:57:99:f3:
                    1f:68:9b:7a:40:9b:51:70:94:ac:ef:cd:04:7d:97:
                    20:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:54:72:5C:CF:50:D9:28:FB:7B:09:EA:73:AD:61:6E:C2:6B:18:2A
            X509v3 Authority Key Identifier:
                keyid:24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:0d:01:d0:59:9b:f7:fe:3e:66:97:90:f6:2b:bd:94:2b:3f:
         2c:1f:5b:92:d2:5c:7f:12:38:06:22:7e:bb:e4:ca:b0:18:ad:
         ae:c9:8f:6a:a8:dd:17:20:f5:8c:5a:ba:ad:b5:fe:17:e8:80:
         4e:cd:62:fc:3c:1f:9f:9f:ef:80:7e:57:6c:50:64:1a:61:8f:
         f5:f5:d8:76:61:0d:05:ee:df:51:96:45:d1:9b:08:4a:cd:ae:
         1a:29:35:89:21:5d:82:0c:c7:40:b9:7c:2d:a4:f2:45:08:17:
         c6:56:c3:1e:cb:4c:2f:49:56:7b:21:aa:19:80:d1:9d:4f:4e:
         b4:59:93:0a:fd:23:34:b9:30:a3:e6:92:f6:e4:77:39:ad:b9:
         d6:30:f3:97:5c:48:73:1e:40:ae:39:57:b7:76:fa:5b:a8:4d:
         65:c6:a1:1e:c4:e6:ed:d8:97:39:68:86:63:82:14:d3:84:20:
         e9:66:9a:f7:fa:ce:79:83:3f:76:fc:8c:45:a4:37:a8:d5:28:
         1e:f5:af:a3:ee:08:9b:c1:bd:40:48:1a:16:46:27:26:99:c7:
         39:bf:1e:ef:34:4c:f1:f0:8a:fc:e9:8e:a5:a4:a8:4e:cf:ce:
         06:8b:74:68:55:c7:d3:08:be:e0:f3:33:55:7e:21:ea:87:15:
         a6:5a:90:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:32:03 2025 by rpki-client