Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
File:                     Sh_na037AXO28xt_NqWpguCNnBk.mft (raw, json)
Hash identifier:          tjLw9ccUdbvqrgVbTbXX2SexwGIkp+RtD8e8XLPRKak=
Subject key identifier:   49:7D:00:DD:79:1C:79:10:06:A7:9C:2E:3C:5B:42:73:C0:BF:E6:5A
Authority key identifier: 4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
Certificate issuer:       /CN=F366FE6CAF/serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
Certificate serial:       0569
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
Manifest number:          0559
Signing time:             Sun 19 May 2024 01:15:41 +0000
Manifest this update:     Sun 19 May 2024 01:15:40 +0000
Manifest next update:     Tue 21 May 2024 01:15:40 +0000
Files and hashes:         1: Sh_na037AXO28xt_NqWpguCNnBk.crl (hash: clZNLnKOL0Z8+b4w0GksiTpgru3QYtaSJ1adjjKRN8I=)
                          2: 4BE78D3A883811ED906E8B82F1222468.roa (hash: P1a4o7zimn2iWivbBBL1U0weBJSNcWDRg6pwAy1kVVk=)
                          3: D43BD5D28F3611EEB630AF3BD25BE465.roa (hash: Ga9uiDXwGqhcP8odYfdexD+5RvtRv1KJPvB/3KtZ/zg=)
                          4: 748BEB066CB611EE8D6C01504AD9E6FC.roa (hash: 9Nr7hTGhvg8y+DpCJjw/pxjzdvmGp2e5v2ZBaNJrhrU=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1385 (0x569)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366FE6CAF/serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
        Validity
            Not Before: May 19 01:15:40 2024 GMT
            Not After : May 21 01:15:40 2024 GMT
        Subject: CN=664952bc-9841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:93:51:a4:cf:31:2c:f7:77:a1:84:22:6f:70:
                    2e:c0:80:fe:ec:78:d1:95:f8:af:96:e3:88:a5:dc:
                    11:fb:28:ef:31:09:73:ff:25:5a:cd:14:08:06:22:
                    bb:7a:b8:ea:60:37:eb:e9:05:c6:7c:66:e2:ae:7c:
                    75:82:ce:0d:1b:f9:1c:ac:8f:97:02:1d:7e:00:88:
                    14:53:03:b7:81:b3:bf:d9:c4:ca:68:be:78:93:2c:
                    19:bf:93:d0:68:e5:2f:89:5f:4a:a3:1f:f7:c1:75:
                    e1:cb:d0:c9:e4:23:f0:89:d0:c3:b4:8e:cf:12:1c:
                    87:d8:84:9d:b9:6f:49:61:1e:15:90:5c:4f:33:21:
                    d2:cd:57:04:08:b5:36:77:2d:e9:b6:cc:d3:f7:01:
                    6f:96:16:fa:55:3c:de:65:77:5c:fc:25:62:af:b2:
                    99:aa:4b:26:13:1f:49:df:62:0e:8d:04:0b:ec:b5:
                    1e:54:6f:20:08:fe:61:b7:e4:fa:5e:43:c3:d6:a2:
                    bc:ef:a1:00:d3:b1:cb:fb:f1:bc:db:12:22:c3:49:
                    81:b2:bf:75:73:3b:20:0c:69:13:bb:97:4f:2c:e7:
                    77:39:e8:ab:85:38:c2:e8:bd:9e:3d:1e:fa:db:2d:
                    d3:47:c8:ba:ca:86:5f:64:c2:0b:c0:ad:0e:d5:08:
                    05:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:7D:00:DD:79:1C:79:10:06:A7:9C:2E:3C:5B:42:73:C0:BF:E6:5A
            X509v3 Authority Key Identifier:
                keyid:4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:be:5b:27:6d:29:30:82:49:cf:98:b8:69:d7:6e:4a:e3:20:
         f4:c1:ee:08:8e:78:22:79:f6:60:87:c7:91:c9:87:ce:4e:f3:
         57:ce:51:92:bd:0e:f4:19:1a:26:a7:bf:ea:2e:23:e6:d7:a4:
         8f:fa:87:65:7b:53:c0:c0:ba:d6:b3:85:57:08:3b:dd:1b:ae:
         e8:dc:4c:64:d6:b1:3b:27:49:66:86:fd:91:95:3d:dd:9c:d7:
         04:20:cd:40:10:13:bb:c3:38:cd:47:e4:86:81:f8:b5:10:37:
         37:ae:4b:2f:1f:73:a9:d4:b3:72:3b:71:51:56:df:9b:d2:e6:
         02:56:e1:d9:3e:a8:50:3e:fa:3c:3b:94:fa:33:8c:d8:aa:d9:
         b0:5b:9e:18:37:ee:06:55:ac:2d:5c:bc:c7:a8:5b:ca:84:a5:
         25:a0:61:a5:6b:fc:94:e4:c2:fb:0d:da:39:f3:c6:a4:1f:43:
         ba:34:3a:42:df:f4:a6:29:ce:89:62:88:d8:e3:de:78:0a:57:
         cd:3e:11:ba:86:4e:b0:60:75:e1:47:55:1a:56:4f:1f:46:b1:
         61:59:24:9d:2e:18:f9:0e:57:bf:6b:01:0f:12:a7:63:61:4c:
         c6:ff:2b:9c:11:e8:01:71:47:1a:d0:3e:10:90:b3:84:78:0a:
         84:dc:f6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:46:47 2024 by rpki-client on console-fra.rpki-client.org