Manifest
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.mft
File: HLYLQKmK6uBUyu5MCct9murePp0.mft (raw, json)
Hash identifier: w3DmPMp1QbN23Re9izmoVn8JVW/g+Hq+AoywrpLs+jM=
Subject key identifier: F1:54:AA:E4:79:00:D4:E8:D8:99:B4:0C:52:54:DB:C4:1E:C5:D5:97
Authority key identifier: 1C:B6:0B:40:A9:8A:EA:E0:54:CA:EE:4C:09:CB:7D:9A:EA:DE:3E:9D
Certificate issuer: /CN=1CB60B40A98AEAE054CAEE4C09CB7D9AEADE3E9D
Certificate serial: 20
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.mft
Manifest number: 0252
Signing time: Fri 31 Jan 2025 15:50:56 +0000
Manifest this update: Fri 31 Jan 2025 15:50:56 +0000
Manifest next update: Sat 15 Feb 2025 15:50:56 +0000
Files and hashes: 1: C6E29iHs1uMwMC6pdLsCCKwI8RI.roa (hash: 0KcEIuzE4Ed2TtJkTu+Y2lVdDV8+CM2spycW7+pKT6I=)
2: HLYLQKmK6uBUyu5MCct9murePp0.crl (hash: 1L1aXvSxcz5bkGoO0tpm5zgHNK55/U2Vq5aJoB+P5e8=)
3: IY1RX0JknF2Y5qLutazoeAOA0qc.roa (hash: Gnloof5djp0rHZb1ThN4byDXIDozyp1x1urBkTjnIwk=)
4: a8vTnHEuXQdQMz1hdsqJhpLWovs.roa (hash: IsHdrXMLkx2xctsVKiNrEbXqUcKB0pTNkb8UnLWpGWg=)
5: rnPbuexy18dKAU1HlJbtLjOOwds.roa (hash: cvo3OBLyimHwFRLfidLhggBCYWljixIxtfuafJkqXf4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CB60B40A98AEAE054CAEE4C09CB7D9AEADE3E9D
Validity
Not Before: Jan 15 01:37:18 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=F154AAE47900D4E8D899B40C5254DBC41EC5D597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8a:53:94:51:04:9a:58:11:5b:0f:c0:6b:65:
fd:8d:99:d7:37:08:89:14:c7:02:a3:9c:db:e2:f9:
7c:37:37:d0:7f:1d:d1:d8:f8:b6:20:0c:c5:02:ec:
f6:33:5e:4d:51:eb:f5:60:f2:ca:9e:11:3a:5b:d0:
48:a0:86:c5:4a:56:d0:55:df:78:44:a3:7a:0e:d8:
a5:99:08:39:a9:bb:77:fc:54:10:79:09:66:e0:f4:
1f:9c:bf:77:e6:99:91:cd:06:e7:61:6b:bc:6b:de:
f9:17:f1:5c:7f:ed:3a:9a:8d:41:f0:a6:83:16:18:
48:a8:84:39:94:ed:60:9e:a6:01:a8:b7:6f:d8:94:
d7:28:a9:41:b4:f1:99:dc:38:b2:5e:0a:0a:96:7c:
51:f5:bf:ab:03:8d:fa:3f:2a:b6:b9:2b:81:2e:90:
ad:44:eb:03:41:af:e6:9a:65:eb:44:12:8d:e4:c7:
0f:b1:68:1a:10:73:7f:97:b1:95:6f:a2:9a:fe:0f:
50:5f:49:c6:03:13:9f:7c:e0:90:b6:88:fc:84:35:
2c:aa:fa:00:59:da:d6:98:f1:a2:a4:90:8d:45:65:
2a:10:03:69:82:97:d4:1a:0c:be:8e:f7:35:c9:b9:
0b:16:9f:8a:7a:71:ef:f9:e7:1a:f6:6f:3a:f2:41:
34:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:54:AA:E4:79:00:D4:E8:D8:99:B4:0C:52:54:DB:C4:1E:C5:D5:97
X509v3 Authority Key Identifier:
keyid:1C:B6:0B:40:A9:8A:EA:E0:54:CA:EE:4C:09:CB:7D:9A:EA:DE:3E:9D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:8c:79:4b:3e:a5:ae:3c:3f:ac:cc:d3:f2:0e:d2:e1:15:2a:
27:02:ce:46:7f:0a:99:53:2f:14:9f:92:a9:b0:cb:66:fd:3e:
0e:63:94:15:c6:d1:db:4e:70:6e:79:e4:72:93:10:f3:04:dd:
71:ea:fd:ab:98:d9:43:ca:38:45:54:67:f4:c9:af:6a:b2:a3:
22:0c:bf:55:23:f8:16:e3:2f:33:4a:26:77:34:e0:c7:8b:1e:
51:d3:da:01:c0:b0:03:ae:16:c8:9b:4e:dd:f9:fe:53:bb:fb:
81:9b:f5:f8:92:63:67:60:4e:51:ac:3f:83:98:0b:81:03:96:
f8:c8:c6:05:3d:1e:6f:36:42:e9:18:9b:22:c3:fc:2e:21:5f:
58:aa:b2:50:04:5f:94:ff:0b:29:df:7f:83:f1:5b:b1:8f:a6:
a3:33:45:79:a7:d1:7c:5a:34:d8:29:e1:54:05:ea:55:40:89:
3d:93:8a:ca:7c:e8:07:2d:93:7a:e3:fb:2f:5d:cd:15:2f:71:
61:1f:02:a5:99:e5:91:29:aa:49:d6:46:b6:da:12:e9:bd:c1:
38:4a:8a:3e:e8:77:b5:da:6f:c3:2b:39:74:c6:42:59:c6:a6:
e4:ea:0a:24:59:6d:c4:f5:20:e6:73:e2:e0:2e:a0:6f:7c:d1:
20:63:f9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:25:47 2025 by rpki-client