Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
File:                     Sh_na037AXO28xt_NqWpguCNnBk.mft (raw, json)
Hash identifier:          c5QDAqy7/wOjP9bxlPj5DH7JHAUQs3xjVjduIR7nIP0=
Subject key identifier:   95:FB:F5:B0:0B:3F:80:1D:D7:BB:F6:2E:78:F0:14:54:EE:1B:91:2D
Authority key identifier: 4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
Certificate issuer:       /CN=F366FE6CAF/serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
Certificate serial:       0567
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
Manifest number:          0557
Signing time:             Fri 17 May 2024 01:16:47 +0000
Manifest this update:     Fri 17 May 2024 01:16:46 +0000
Manifest next update:     Sun 19 May 2024 01:16:46 +0000
Files and hashes:         1: Sh_na037AXO28xt_NqWpguCNnBk.crl (hash: oxJPqz6O/qqgOC10HrNnpFvhsydYfXmpFjGnpqOxQbs=)
                          2: 4BE78D3A883811ED906E8B82F1222468.roa (hash: P1a4o7zimn2iWivbBBL1U0weBJSNcWDRg6pwAy1kVVk=)
                          3: D43BD5D28F3611EEB630AF3BD25BE465.roa (hash: Ga9uiDXwGqhcP8odYfdexD+5RvtRv1KJPvB/3KtZ/zg=)
                          4: 748BEB066CB611EE8D6C01504AD9E6FC.roa (hash: 9Nr7hTGhvg8y+DpCJjw/pxjzdvmGp2e5v2ZBaNJrhrU=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 May 2024 00:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1383 (0x567)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366FE6CAF/serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
        Validity
            Not Before: May 17 01:16:46 2024 GMT
            Not After : May 19 01:16:46 2024 GMT
        Subject: CN=6646afff-40df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5f:a4:e7:4e:e1:d4:35:85:4e:43:8c:f3:c4:
                    0f:49:c1:8e:4c:e9:ce:1b:d3:2f:cd:f3:6d:bc:ff:
                    73:34:8b:f7:43:0f:79:6c:e7:69:a3:ed:fc:cd:70:
                    2c:0c:cc:1d:8b:02:1e:a2:2c:5e:3f:fc:81:35:83:
                    ba:93:e5:70:f8:77:8d:41:01:b6:eb:3f:08:f8:57:
                    2e:7c:c3:b7:e6:75:97:36:a8:9d:b9:f6:ee:cf:84:
                    8d:18:ac:b7:b2:9b:0a:66:2c:9d:92:66:ca:a8:5b:
                    7d:c2:e8:65:90:76:3b:64:f7:78:1d:d3:4c:c8:7a:
                    6e:25:98:5e:c8:df:0e:a3:b6:6e:03:e6:c1:6e:9a:
                    7e:18:85:b9:87:56:d6:75:1c:84:a6:2a:e6:ff:48:
                    36:d4:81:07:50:a0:51:dc:e9:67:d8:66:fd:b3:92:
                    35:f9:bb:c6:ca:a1:0c:78:b8:41:50:60:c1:91:82:
                    6e:e7:1f:84:b3:43:f5:3a:17:37:be:cc:27:a1:16:
                    b8:53:16:29:0c:37:04:84:a2:80:dc:d8:42:0a:ba:
                    bc:e3:1c:b7:9a:a4:e8:9e:56:f0:ed:f1:30:32:d0:
                    ee:db:3c:5e:f0:52:d8:2b:be:7f:2c:f2:83:36:7f:
                    43:cf:7b:11:8d:dc:ff:0a:2a:ce:9c:1e:5c:49:d5:
                    81:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FB:F5:B0:0B:3F:80:1D:D7:BB:F6:2E:78:F0:14:54:EE:1B:91:2D
            X509v3 Authority Key Identifier:
                keyid:4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:67:5a:f2:88:76:d0:d7:80:c4:19:e0:5a:dc:5b:da:48:7f:
         65:70:cf:5a:11:76:54:6e:b2:f6:7a:18:53:22:c2:8f:04:08:
         d0:ca:28:83:ce:d3:0c:01:dc:e4:ce:a5:c3:32:e1:76:eb:9e:
         dc:ad:ca:dc:b7:ac:30:e5:92:43:a7:26:11:2e:a8:de:07:d0:
         bf:30:ce:45:a6:25:24:d6:d3:e1:ba:ee:d0:78:f4:02:2d:b6:
         00:56:42:18:c5:c7:bb:6f:ac:6d:6c:0c:1a:77:9f:42:e1:a6:
         80:d4:d2:26:bf:22:79:f2:99:e0:05:e2:b0:75:12:c9:ca:67:
         ae:c1:52:e6:fb:28:82:79:21:0a:fa:a0:c0:52:0a:25:ce:82:
         ff:62:e6:14:2f:38:37:8c:bd:03:f8:3a:92:bf:73:69:7b:9f:
         1a:77:c9:81:37:4d:db:8e:b9:4e:9d:74:b7:bc:4b:54:47:38:
         cc:75:4c:f0:16:a6:39:8d:ce:fc:86:91:e7:88:07:21:c3:8d:
         4e:5e:52:bf:90:b2:63:01:6c:a3:d6:9b:33:ff:35:d5:ee:c2:
         c0:a4:e0:81:b7:dd:07:8a:80:f0:8e:c1:ce:13:73:06:68:fa:
         fa:26:23:76:46:55:f3:2d:0c:1b:08:04:9b:86:4e:24:b3:2f:
         73:97:e1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----