Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/hTvMypswbARZZY4oio0_3nUbT2s.mft
File:                     hTvMypswbARZZY4oio0_3nUbT2s.mft (raw, json)
Hash identifier:          Un8BNf/IXLPYA5TZjsuJ7reOyfIBdZ/M6N+j4/2xsaA=
Subject key identifier:   99:00:8B:21:A2:5A:0E:57:17:43:E3:E6:6F:A8:AC:04:45:30:8A:43
Authority key identifier: 85:3B:CC:CA:9B:30:6C:04:59:65:8E:28:8A:8D:3F:DE:75:1B:4F:6B
Certificate issuer:       /CN=853BCCCA9B306C0459658E288A8D3FDE751B4F6B
Certificate serial:       17
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hTvMypswbARZZY4oio0_3nUbT2s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/hTvMypswbARZZY4oio0_3nUbT2s.mft
Manifest number:          0246
Signing time:             Fri 31 Jan 2025 16:10:57 +0000
Manifest this update:     Fri 31 Jan 2025 16:10:57 +0000
Manifest next update:     Sat 15 Feb 2025 16:10:57 +0000
Files and hashes:         1: BeJxvOUmqHAVvO_vR20NdDEasTo.roa (hash: IWbyAwySUzCXselWr6GUs2MY6TseHEN0/v+HCJkTFT4=)
                          2: hTvMypswbARZZY4oio0_3nUbT2s.crl (hash: /gXvF5pqQEJ55eNnNTKMoCsk4phg1ytOxmVyetMXpsk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=853BCCCA9B306C0459658E288A8D3FDE751B4F6B
        Validity
            Not Before: Jan 15 01:37:44 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=99008B21A25A0E571743E3E66FA8AC0445308A43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ea:ee:f0:77:fa:04:78:20:44:92:dd:e3:6b:
                    86:e2:9b:56:f6:22:36:43:ea:9f:93:fb:a0:53:51:
                    9c:5c:93:b8:7b:bc:b5:67:f8:4c:72:03:e7:96:de:
                    7d:ca:73:69:5a:71:d8:58:fd:ad:b4:a8:61:57:5a:
                    16:5b:f5:b8:1c:32:9a:ce:e2:ff:88:2e:a6:06:49:
                    3b:ae:6c:0d:ab:0c:25:d3:7e:6f:1a:dc:e3:a3:0c:
                    4f:44:af:06:75:a3:83:29:2e:41:9b:db:15:0a:dd:
                    13:b4:77:a9:8b:99:06:14:1f:37:b5:76:c9:61:e3:
                    e8:4f:2f:f5:96:58:d0:7f:14:99:c8:60:be:c6:0b:
                    64:a6:74:f7:b1:43:5f:d4:db:82:51:f7:27:30:d8:
                    3a:bf:6b:50:b7:48:3b:f3:54:8b:cc:bb:ec:bf:8c:
                    cf:fa:66:df:79:8b:b8:50:42:36:22:44:ee:82:84:
                    d9:11:7a:a9:ae:d7:a6:cb:ed:85:a1:5c:ce:aa:a8:
                    54:12:c9:80:0c:71:00:60:73:f2:e6:89:74:4c:57:
                    55:4b:e1:9d:63:5d:54:87:f4:19:d9:16:ff:31:a1:
                    c2:9b:94:dd:b4:f6:d6:84:68:f3:58:ca:fc:da:b3:
                    bf:a5:4d:a3:0b:5f:fc:00:4d:e2:6c:45:02:69:70:
                    10:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:00:8B:21:A2:5A:0E:57:17:43:E3:E6:6F:A8:AC:04:45:30:8A:43
            X509v3 Authority Key Identifier:
                keyid:85:3B:CC:CA:9B:30:6C:04:59:65:8E:28:8A:8D:3F:DE:75:1B:4F:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/hTvMypswbARZZY4oio0_3nUbT2s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hTvMypswbARZZY4oio0_3nUbT2s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/hTvMypswbARZZY4oio0_3nUbT2s.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ef:c3:94:df:f5:9c:bb:69:32:a9:47:77:99:10:72:c0:b1:
         dc:18:26:94:bd:7d:35:af:dc:9b:7f:de:5e:08:94:9b:29:59:
         e7:20:15:c9:9b:9a:fc:8e:51:4c:9e:48:c7:41:7f:f5:6e:58:
         d9:30:c0:22:a4:36:c6:8e:61:5e:e0:60:80:91:51:87:9e:dc:
         fb:5e:ea:7c:54:4b:cf:15:87:62:52:85:83:53:2e:77:6f:4f:
         14:63:06:fb:64:10:5b:b2:7d:eb:29:6e:86:9f:c5:2e:42:e3:
         e3:65:1a:b2:7c:38:4e:ba:53:28:bc:69:44:c0:e5:16:bf:6a:
         54:d3:53:4e:03:14:34:60:54:76:a5:0a:36:bc:27:de:0b:c4:
         dd:25:e0:8e:5f:c9:40:f6:46:bb:40:82:a5:d9:b5:2d:8d:ed:
         ee:72:63:32:54:4d:9c:6b:fa:fb:e8:e6:9b:ab:5a:e5:be:f0:
         a5:18:c1:50:b8:29:d3:7d:19:46:3f:ab:5b:e6:67:e9:fe:41:
         f3:d7:0f:49:6b:c5:bf:d4:f1:3b:51:81:31:73:92:d6:de:90:
         e2:e6:ec:c1:d2:ad:ba:59:f0:9e:bd:df:46:4b:1d:a9:e3:53:
         98:09:64:9c:8d:dd:94:ef:04:4e:59:d0:c4:c3:2d:7c:f5:3f:
         c0:b6:cc:4e
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NTNC
Q0NDQTlCMzA2QzA0NTk2NThFMjg4QThEM0ZERTc1MUI0RjZCMB4XDTI1MDExNTAx
Mzc0NFoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoOTkwMDhCMjFBMjVBMEU1
NzE3NDNFM0U2NkZBOEFDMDQ0NTMwOEE0MzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAObq7vB3+gR4IESS3eNrhuKbVvYiNkPqn5P7oFNRnFyTuHu8tWf4
THID55befcpzaVpx2Fj9rbSoYVdaFlv1uBwyms7i/4gupgZJO65sDasMJdN+bxrc
46MMT0SvBnWjgykuQZvbFQrdE7R3qYuZBhQfN7V2yWHj6E8v9ZZY0H8UmchgvsYL
ZKZ097FDX9TbglH3JzDYOr9rULdIO/NUi8y77L+Mz/pm33mLuFBCNiJE7oKE2RF6
qa7XpsvthaFczqqoVBLJgAxxAGBz8uaJdExXVUvhnWNdVIf0GdkW/zGhwpuU3bT2
1oRo81jK/Nqzv6VNowtf/ABN4mxFAmlwEEUCAwEAAaOCAj0wggI5MB0GA1UdDgQW
BBSZAIsholoOVxdD4+ZvqKwERTCKQzAfBgNVHSMEGDAWgBSFO8zKmzBsBFlljiiK
jT/edRtPazAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjQwL2hUdk15cHN3YkFSWlpZNG9pbzBfM25VYlQycy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2hUdk15cHN3YkFSWlpZNG9pbzBfM25V
YlQycy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yNDAvaFR2TXlwc3diQVJaWlk0b2lvMF8zblViVDJzLm1mdDBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAGzvw5Tf9Zy7aTKpR3eZEHLAsdwYJpS9fTWv3Jt/3l4IlJspWecgFcmbmvyO
UUyeSMdBf/VuWNkwwCKkNsaOYV7gYICRUYee3Pte6nxUS88Vh2JShYNTLndvTxRj
BvtkEFuyfespboafxS5C4+NlGrJ8OE66Uyi8aUTA5Ra/alTTU04DFDRgVHalCja8
J94LxN0l4I5fyUD2RrtAgqXZtS2N7e5yYzJUTZxr+vvo5purWuW+8KUYwVC4KdN9
GUY/q1vmZ+n+QfPXD0lrxb/U8TtRgTFzktbekOLm7MHSrbpZ8J6930ZLHanjU5gJ
ZJyN3ZTvBE5Z0MTDLXz1P8C2zE4=
-----END CERTIFICATE-----
Generated at Wed Apr 30 06:32:49 2025 by rpki-client