Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.mft
File:                     guWyiiD0xqYqRhL2xd-3o9ZNneo.mft (raw, json)
Hash identifier:          PPUI9HdNm0CJgufcBlkWLX+rBZjDmwj6DzI9vPi8No4=
Subject key identifier:   38:6B:8C:A4:A5:FD:B1:EE:07:A1:24:DD:EC:82:A3:B3:00:7F:F3:50
Authority key identifier: 82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA
Certificate issuer:       /CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
Certificate serial:       3E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.mft
Manifest number:          02AD
Signing time:             Fri 31 Jan 2025 16:28:39 +0000
Manifest this update:     Fri 31 Jan 2025 16:28:39 +0000
Manifest next update:     Sat 15 Feb 2025 16:28:39 +0000
Files and hashes:         1: 2BNI2Wb5Mkw6-2A40fyC1nR5hj4.roa (hash: acnVgy0vikcd1cp4i6J4K3HcFRFGyzbTlBp2CCSW2qo=)
                          2: 8l1yGgbRhKXc8YLiWlBjYORgxVU.roa (hash: qo5+ZUNixdUnwoBN/DfIP2IGq/vCAAu4h6AVZu6qphg=)
                          3: HCP2hiVnh9cn0htU3pNTk0PR9F4.roa (hash: Ngqy3zLR0l6n06ujxAmNymBAyPzNXncUZttp6wwqWAA=)
                          4: Yp-AHdFoYHq_JJTGdhfkBATIvsE.roa (hash: PxD1BrxRHg/HUChYt23RB03R+3bE6IDwHh58mzI2cq4=)
                          5: e0djzTgeveHHSdjiRHdUJRsjwD0.roa (hash: EV33+66eBe27B/FJAHNynuFdhThDBK4/5SaVcn5RsY4=)
                          6: guWyiiD0xqYqRhL2xd-3o9ZNneo.crl (hash: HbKBZIuqqjJKGZY6ieO0a4hvsmdqRaaNBokFXKfydD4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
        Validity
            Not Before: Jan 15 01:33:10 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=386B8CA4A5FDB1EE07A124DDEC82A3B3007FF350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bb:58:3a:1c:75:36:98:50:2e:a7:58:ad:9d:
                    64:60:e1:10:97:ed:fc:94:b1:4d:69:ba:67:0e:8a:
                    56:e6:38:64:76:b1:43:84:bd:3d:e5:bf:12:59:a1:
                    68:b1:11:92:cc:82:9d:b9:fd:76:f9:5c:15:39:a5:
                    c1:42:5e:03:25:66:6f:bd:91:3a:34:4c:46:e5:77:
                    5f:6d:d1:97:74:5a:50:1b:2c:db:74:1f:e0:f7:76:
                    15:68:a7:b8:a6:46:bd:e5:91:0c:0f:70:38:53:fc:
                    f7:09:4a:37:98:d7:e4:f6:79:42:02:b7:4f:d7:16:
                    28:f3:f0:ee:43:fd:81:4b:05:6b:5a:82:91:02:42:
                    01:25:ea:a6:ad:a7:df:19:10:9e:6a:ed:f8:5d:77:
                    72:f2:17:20:56:45:4d:d2:5c:eb:cd:7a:ed:22:eb:
                    4d:dc:4f:d4:98:b1:bc:61:b9:91:86:6c:47:58:6c:
                    aa:f1:ce:bf:66:c1:5b:fd:79:06:8e:a6:07:d9:71:
                    2c:e7:c5:b6:ec:d6:72:fd:d5:87:c7:2b:da:3c:3c:
                    97:43:1c:00:52:bb:e2:16:6b:ea:9f:4c:46:6a:4f:
                    bf:26:f9:33:25:b4:85:05:77:51:a0:d2:df:83:5b:
                    d9:8b:58:d6:c7:b2:9a:23:15:75:19:a1:bd:bb:85:
                    94:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6B:8C:A4:A5:FD:B1:EE:07:A1:24:DD:EC:82:A3:B3:00:7F:F3:50
            X509v3 Authority Key Identifier:
                keyid:82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:4d:09:9e:66:c1:b1:99:bc:12:e9:5f:fc:a6:26:7d:aa:54:
         97:d6:89:9e:b7:11:77:f7:ab:f5:2e:af:40:03:6c:d3:0a:e4:
         b5:67:ab:dd:41:92:a0:9c:36:c6:1b:ef:47:21:cf:de:0b:71:
         1b:29:b0:75:08:d2:e1:cf:d3:e0:af:9b:f9:45:c7:45:cc:b1:
         6e:5c:10:8a:15:ef:3c:fb:82:0d:cd:66:b2:7a:c4:c9:b6:f1:
         38:2e:16:63:72:d7:08:1b:fa:6a:e1:4b:fe:a9:8f:c4:72:2f:
         f2:70:16:46:74:87:ef:cc:dd:4a:f0:61:18:c9:d5:d9:f2:59:
         6f:58:21:5e:79:7d:2d:4c:98:dd:0e:c6:a2:af:e4:a2:f4:c7:
         4b:80:20:90:cd:92:bf:23:b6:0c:7e:e1:4c:60:f9:9c:fa:49:
         b7:d6:bc:5c:27:7a:f8:20:0b:93:4a:08:13:0a:a8:b2:5e:19:
         3b:a9:d6:01:26:d9:9a:86:9a:e4:60:16:b0:ab:e4:d4:cd:9d:
         2b:2d:fd:0f:37:f2:28:1c:dc:02:4e:33:75:73:c1:36:34:33:
         7f:85:f6:bf:2f:0b:c8:e4:dd:af:74:43:85:fb:b1:95:db:15:
         f6:21:62:16:fa:7a:40:2d:f5:f7:83:25:a8:61:07:7a:ca:69:
         00:5e:43:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----