Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.mft
File:                     BqhITfT7r-XEjZiKBGtqtqgbLfM.mft (raw, json)
Hash identifier:          r10fctVEGbX0a0rQagELWV08zMQ2SK/r3jci27m21s8=
Subject key identifier:   E2:3C:28:05:66:C8:40:96:51:25:98:EF:39:E5:E2:B6:5A:B6:78:06
Authority key identifier: 06:A8:48:4D:F4:FB:AF:E5:C4:8D:98:8A:04:6B:6A:B6:A8:1B:2D:F3
Certificate issuer:       /CN=06A8484DF4FBAFE5C48D988A046B6AB6A81B2DF3
Certificate serial:       46
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.mft
Manifest number:          0315
Signing time:             Fri 31 Jan 2025 16:24:14 +0000
Manifest this update:     Fri 31 Jan 2025 16:24:14 +0000
Manifest next update:     Sat 15 Feb 2025 16:24:14 +0000
Files and hashes:         1: 4HwLxq39Jp4bNk9RUHc34E3tyzc.roa (hash: VteTo+NUytLgn9v0U0YcytZQPMWv68xpGKof5uV0NY8=)
                          2: BqhITfT7r-XEjZiKBGtqtqgbLfM.crl (hash: OIhM3V1kfBNz9/WYLg/suDneGAjT3DBeE5h/xQCQzAE=)
                          3: G_S0Gz3KTyh-MqzAOua6wLduGAI.roa (hash: 9XGjozh1G2Anp7EXh+cJlebAWIWL1XDMHThLmfGh8ck=)
                          4: ZXuos-JEHWQcWv_PGq0NWZkhB9k.roa (hash: GjdLJdIqTadhJ7yNRh70YPtOT+LzMauEQ0aBOBT+Zhs=)
                          5: gXJMlFIb5gGqwKsaF3UnKaQ4SOA.roa (hash: FWSayJ+Q8MyzWxO1VutrOzC6k8P23b5jlJ+Ua+d4N48=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06A8484DF4FBAFE5C48D988A046B6AB6A81B2DF3
        Validity
            Not Before: Jan 15 01:35:30 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=E23C280566C84096512598EF39E5E2B65AB67806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:89:f2:5e:fc:7e:5f:f4:57:24:01:c8:13:a5:
                    8a:19:7e:e5:e1:3d:65:64:0d:33:5d:32:2a:b9:6e:
                    46:73:49:e6:47:f8:85:fc:eb:40:37:89:b3:8d:2b:
                    5c:58:71:fb:3c:59:57:96:fc:e5:00:53:01:ac:55:
                    76:ac:87:a8:f4:0e:69:c9:c3:29:19:e5:a3:34:69:
                    30:13:37:e0:2b:45:be:af:df:1e:bc:b9:44:b1:62:
                    29:46:6c:8c:9c:37:34:0c:50:52:d3:e5:eb:c8:08:
                    98:2b:ee:7b:9f:d6:7f:e0:d5:6a:8d:d6:92:09:fb:
                    eb:a9:70:68:9e:ea:9a:e3:38:ee:5a:38:13:ce:27:
                    89:99:13:22:bf:c9:6c:10:5c:4d:ce:7b:c1:80:89:
                    8c:6b:6a:61:9f:1f:bf:86:f8:3c:de:fe:1c:57:f4:
                    83:c4:a0:6c:67:dd:dd:aa:68:8e:cd:da:c3:d7:b3:
                    89:46:65:1b:d0:b2:a1:d9:f8:21:50:1f:d6:18:64:
                    26:45:ef:07:ef:f6:36:b1:4e:91:ef:07:1c:fb:cc:
                    3d:cf:d7:e0:9d:9e:66:ae:29:9c:67:0f:3e:44:56:
                    09:7a:92:00:0a:dd:0c:2f:12:d8:73:3e:83:b7:b9:
                    d4:00:fd:d0:bd:e7:49:41:94:00:9e:68:c9:7e:6a:
                    40:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:3C:28:05:66:C8:40:96:51:25:98:EF:39:E5:E2:B6:5A:B6:78:06
            X509v3 Authority Key Identifier:
                keyid:06:A8:48:4D:F4:FB:AF:E5:C4:8D:98:8A:04:6B:6A:B6:A8:1B:2D:F3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:04:6e:0a:f5:6c:cf:57:6c:60:f3:9a:08:16:58:48:36:5c:
         52:48:f1:2c:e7:e1:d9:6f:4d:26:dd:e1:c5:58:a8:e2:18:14:
         51:bd:9c:68:99:39:31:3e:cd:20:4b:ed:45:bc:10:f5:27:3c:
         e1:62:f3:51:d8:53:f7:83:a5:9e:6b:eb:7f:56:1f:d8:ea:ef:
         82:5f:9b:f2:51:fb:14:e1:82:ae:ea:e6:09:6f:61:ac:41:3e:
         ba:74:6d:55:cd:9b:ca:a7:6c:d1:20:b3:90:ec:cd:5c:0e:73:
         fb:6e:5b:87:66:c3:93:94:ff:a5:a9:bf:20:ca:62:d1:14:5b:
         d5:38:57:85:07:ab:db:cb:3b:19:c5:81:fb:82:82:f2:20:d8:
         7f:8b:d7:3a:32:95:67:18:2b:fa:d0:0b:c6:16:fd:c5:21:75:
         63:3d:a6:7c:c9:54:d7:a4:6b:39:f2:75:0b:c7:29:26:86:fe:
         2d:8c:62:f1:a1:07:4c:be:44:1b:59:11:cf:6d:ed:6c:0c:51:
         2b:b7:e8:15:27:0a:7a:81:0e:e1:6e:10:22:82:8b:12:22:73:
         d1:de:fc:b9:3d:6a:a3:a6:bd:1b:c6:1a:01:65:d1:7d:c5:b4:
         a0:47:55:e2:61:66:71:1c:98:32:3c:9c:43:68:30:ee:e0:8b:
         fc:31:ac:55
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIBRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNkE4
NDg0REY0RkJBRkU1QzQ4RDk4OEEwNDZCNkFCNkE4MUIyREYzMB4XDTI1MDExNTAx
MzUzMFoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoRTIzQzI4MDU2NkM4NDA5
NjUxMjU5OEVGMzlFNUUyQjY1QUI2NzgwNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJaJ8l78fl/0VyQByBOlihl+5eE9ZWQNM10yKrluRnNJ5kf4hfzr
QDeJs40rXFhx+zxZV5b85QBTAaxVdqyHqPQOacnDKRnlozRpMBM34CtFvq/fHry5
RLFiKUZsjJw3NAxQUtPl68gImCvue5/Wf+DVao3Wkgn766lwaJ7qmuM47lo4E84n
iZkTIr/JbBBcTc57wYCJjGtqYZ8fv4b4PN7+HFf0g8SgbGfd3apojs3aw9eziUZl
G9Cyodn4IVAf1hhkJkXvB+/2NrFOke8HHPvMPc/X4J2eZq4pnGcPPkRWCXqSAArd
DC8S2HM+g7e51AD90L3nSUGUAJ5oyX5qQD8CAwEAAaOCAj0wggI5MB0GA1UdDgQW
BBTiPCgFZshAllElmO855eK2WrZ4BjAfBgNVHSMEGDAWgBQGqEhN9Puv5cSNmIoE
a2q2qBst8zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTI0L0JxaElUZlQ3ci1YRWpaaUtCR3RxdHFnYkxmTS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JxaElUZlQ3ci1YRWpaaUtCR3RxdHFn
YkxmTS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85MjQvQnFoSVRmVDdyLVhFalppS0JHdHF0cWdiTGZNLm1mdDBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAKwEbgr1bM9XbGDzmggWWEg2XFJI8Szn4dlvTSbd4cVYqOIYFFG9nGiZOTE+
zSBL7UW8EPUnPOFi81HYU/eDpZ5r639WH9jq74Jfm/JR+xThgq7q5glvYaxBPrp0
bVXNm8qnbNEgs5DszVwOc/tuW4dmw5OU/6WpvyDKYtEUW9U4V4UHq9vLOxnFgfuC
gvIg2H+L1zoylWcYK/rQC8YW/cUhdWM9pnzJVNekaznydQvHKSaG/i2MYvGhB0y+
RBtZEc9t7WwMUSu36BUnCnqBDuFuECKCixIic9He/Lk9aqOmvRvGGgFl0X3FtKBH
VeJhZnEcmDI8nENoMO7gi/wxrFU=
-----END CERTIFICATE-----