Manifest

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.mft
File:                     87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.mft (raw, json)
Hash identifier:          CAnTNH+aCNCB2LxRh7H4tp6HXs+47/NTMd/KuDVG4wA=
Subject key identifier:   CB:B6:C6:B3:D1:87:AD:DB:53:77:F9:57:FB:AB:78:D3:07:83:A1:5A
Authority key identifier: 87:AA:4E:5D:70:EB:C0:68:95:E7:FA:24:4E:80:AE:B3:79:1C:B3:3F
Certificate issuer:       /CN=cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af
Certificate serial:       664D1169416908033F6EED39F86CBC3176823004
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.mft
Manifest number:          0105
Signing time:             Fri 31 Jan 2025 16:01:20 +0000
Manifest this update:     Fri 31 Jan 2025 15:56:20 +0000
Manifest next update:     Sat 01 Feb 2025 17:35:20 +0000
Files and hashes:         1: 323630313a316430383a353030303a3a2f34342d3438203d3e20323134363735.roa (hash: kHhMJ9+MBMqxsie4qTN2w6J3UlQz4vyR8iDqFLIpcPQ=)
                          2: 323630313a316430383a383030303a3a2f34302d3438203d3e20323133363034.roa (hash: ApEgEjvPUo0EoQcHXPUCL+tXSSr8DiL0dgagbY4u3e4=)
                          3: 323630313a316430383a3a2f34382d3438203d3e203439383637.roa (hash: xhf3aOsBFzY8E+Smjc4ftCTyzVSLj+2TiH+VaIInrM4=)
                          4: AS401111.asa (hash: z5KtBKaarG7LV9ZvJYN1Pw80TB7lgJ2JqNiv02qn+Oo=)
                          5: 323630313a316430303a3a2f32392d3438203d3e20343031313131.roa (hash: aFGVjRj1mkLmQrUrwNphskFn6i8LIUMG+IauGMPh/os=)
                          6: 323630313a316430383a613030303a3a2f34302d3438203d3e20393435.roa (hash: aq9EHjuVKLNynoGb/p7yJwJpXETKrWUpWZIsalRTDCc=)
                          7: 87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.crl (hash: LfKvoCxbBmA+EFwjpAr+QTMWp3gkzbU68rSRYbJYG6g=)
                          8: 323630313a316430383a343030303a3a2f34342d3438203d3e20313339383838.roa (hash: blZcs0P5y2s1vtRgS+t31bSiOxy3/f5IdMo0rrGyx68=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4d:11:69:41:69:08:03:3f:6e:ed:39:f8:6c:bc:31:76:82:30:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af
        Validity
            Not Before: Jan 31 15:56:20 2025 GMT
            Not After : Feb  1 17:35:20 2025 GMT
        Subject: CN=CBB6C6B3D187ADDB5377F957FBAB78D30783A15A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:eb:e8:f9:df:ba:42:fa:12:26:25:43:73:ee:
                    fd:14:e6:2c:9b:f0:ba:f9:12:ad:46:9e:ad:7c:f1:
                    a0:49:7b:2d:58:68:6a:b0:8c:ac:7e:e2:d0:bd:fc:
                    ee:53:f7:5e:10:e0:89:74:c0:1d:0a:52:ec:ae:a6:
                    d6:c1:02:47:27:bf:8e:b8:7f:0c:8d:7c:33:88:a4:
                    2b:1d:17:32:ea:50:82:b3:b9:59:fb:b5:3e:0d:17:
                    bd:49:e6:ad:11:83:4a:f9:e1:54:d5:a9:64:41:5f:
                    65:89:42:ad:39:3b:0e:06:c3:62:86:16:8e:eb:f4:
                    75:52:e7:e8:c9:0e:3f:c0:e1:48:65:b1:50:13:bd:
                    96:e6:5a:17:7b:e6:23:61:ac:34:a3:ba:c0:2f:2f:
                    e7:20:aa:bb:34:bf:d2:57:7d:87:14:b7:68:1f:b0:
                    c6:23:4d:ae:e1:92:40:4c:dd:f4:73:35:2b:ac:e2:
                    5f:15:ae:f6:84:b4:22:2d:0c:c8:6f:83:a7:6d:82:
                    24:bc:84:e8:01:bb:29:d0:20:ba:ba:98:29:02:ad:
                    60:ee:96:77:bf:93:ca:cf:91:35:b4:1b:13:aa:b1:
                    b9:e9:3f:ac:02:6c:b9:cd:36:ee:0e:c3:62:95:35:
                    d7:18:76:6a:3d:2a:36:06:93:95:8a:bd:92:66:b5:
                    3e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B6:C6:B3:D1:87:AD:DB:53:77:F9:57:FB:AB:78:D3:07:83:A1:5A
            X509v3 Authority Key Identifier:
                keyid:87:AA:4E:5D:70:EB:C0:68:95:E7:FA:24:4E:80:AE:B3:79:1C:B3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:55:bf:69:59:ce:f0:9c:57:7a:fa:8a:7d:82:d0:5d:e1:6e:
         fb:b3:ef:16:07:32:01:2a:89:cd:70:6f:ff:83:1b:7d:ac:59:
         0d:df:84:ac:ee:f8:22:d4:2c:22:ed:91:42:90:64:3d:19:47:
         94:b8:a8:74:f2:cb:0f:04:6b:81:97:36:c8:33:74:7c:c4:f4:
         54:e1:43:36:2a:c2:17:09:48:a2:c8:74:11:ca:5d:fa:91:ac:
         e1:b4:ec:9b:1e:7e:ca:40:c7:6b:bb:ee:5d:e2:30:73:48:27:
         71:7d:d7:64:a3:4f:b5:13:e0:aa:75:8e:f7:27:1a:e2:19:06:
         65:52:6b:4a:f4:0b:a4:65:0e:e7:9d:40:48:87:76:44:f3:9b:
         75:11:6a:f5:3b:1f:5c:a6:a6:f8:69:a3:77:d0:bb:4d:33:dc:
         ad:dc:2b:c8:da:db:b9:2f:98:32:15:50:db:40:4a:5c:eb:ad:
         ac:d2:d6:8c:8f:aa:af:47:b0:bc:ef:6f:15:0a:81:2f:f4:7c:
         61:23:6e:38:98:2a:63:5a:20:03:61:ec:8c:1f:6d:84:03:73:
         ef:35:52:0d:79:16:de:9d:50:ab:13:b2:80:24:f4:80:06:d9:
         89:9f:fd:97:d7:d8:50:42:32:97:a6:69:de:e9:e4:b0:08:8b:
         e2:2a:4e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:23:01 2025 by rpki-client