Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
File:                     Sh_na037AXO28xt_NqWpguCNnBk.mft (raw, json)
Hash identifier:          X7ungWDctyxss5T3OEK9W2CRzugDCtGpdRr7k1vswj0=
Subject key identifier:   A3:49:58:E1:7D:2B:79:B2:D5:89:F6:C4:D0:43:A4:8C:E5:D4:48:1C
Authority key identifier: 4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
Certificate issuer:       /CN=F366FE6CAF/serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
Certificate serial:       071F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
Manifest number:          0708
Signing time:             Thu 03 Jul 2025 02:02:11 +0000
Manifest this update:     Thu 03 Jul 2025 02:02:10 +0000
Manifest next update:     Sat 05 Jul 2025 02:02:10 +0000
Files and hashes:         1: Sh_na037AXO28xt_NqWpguCNnBk.crl (hash: W0KX5EFES/ReBLOg7rwUnxoiWFCQo+waVAQK46hN+bI=)
                          2: 03943110953711EF8D4D5F78762E951A.roa (hash: /HXJIxp+1AeXCx/6WZIM4AGk0tA46ZtIn5pRUbeOrQI=)
                          3: 4BE78D3A883811ED906E8B82F1222468.roa (hash: P1a4o7zimn2iWivbBBL1U0weBJSNcWDRg6pwAy1kVVk=)
                          4: 73DBD4FA428511EFA029B45B762E951A.roa (hash: QAi6WbgSVfhI+TNStf+5Kn/V9ArZCu3jwOYAtj3nVxk=)
                          5: 454592CA428511EFBE4A735B762E951A.roa (hash: ni4XacQAgOJExFku3yS01ORpXr2aOQQMopYH1L7qFac=)
                          6: FA451D540E5311F0AD34E842762E951A.roa (hash: v4Hnu/zBr9ZJXzMlo/mymcexhZgGmTK0xB97wv2VfiQ=)
                          7: 27DA075C0E5411F094C60A43762E951A.roa (hash: uSWwhbpaM7heLFZrX193ZEyM5nKa4FeuK+VjWT68aec=)
                          8: F9C82400D97B11EF9B0C96BA762E951A.roa (hash: M9e20X5bFGzfJk5f5uvwTRlfX+u30RyUqYb0LXotErI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Jul 2025 00:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1823 (0x71f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366FE6CAF, serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
        Validity
            Not Before: Jul  3 02:02:10 2025 GMT
            Not After : Jul  5 02:02:10 2025 GMT
        Subject: CN=6865e4a3-5308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b1:3d:12:85:9a:ea:b2:da:57:fb:47:da:70:
                    4e:76:42:b8:ee:45:53:0f:f8:5e:07:e7:55:27:f1:
                    c7:c9:53:0b:c6:8e:9f:31:c3:66:fc:71:48:b6:b6:
                    5d:54:f0:f3:3e:95:5e:8c:78:f6:ad:6a:5c:e3:af:
                    1d:e4:a9:e3:19:8d:b1:e2:36:a0:8e:60:57:11:86:
                    9f:e4:d8:3e:25:8e:a0:13:0f:a4:c0:31:29:3e:70:
                    92:05:3f:3e:ef:a4:b1:18:4e:39:72:26:45:00:e0:
                    47:17:cf:53:5a:d4:85:30:b3:17:c3:01:b2:2d:ae:
                    44:54:f8:43:b6:96:d1:0f:41:2b:74:39:1f:08:03:
                    3d:b2:d4:e0:5c:c8:ad:41:88:55:40:f8:fa:78:db:
                    22:50:67:70:dd:d0:11:5f:93:00:ac:f1:d6:22:74:
                    cc:30:91:65:e1:a8:5a:59:24:6c:16:b8:20:87:de:
                    ff:be:b0:0a:52:d3:86:1f:9a:a6:34:dd:43:fe:50:
                    fa:ec:d5:ee:10:77:ea:2a:0c:e1:ca:03:33:bd:03:
                    0d:b6:6d:b2:0b:47:30:35:68:d2:57:1a:22:e6:37:
                    33:29:0d:2e:b2:05:81:6c:57:d9:6e:c0:26:5c:07:
                    87:11:68:3d:2f:37:b9:2f:57:1e:ae:04:f5:1d:b0:
                    f3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:49:58:E1:7D:2B:79:B2:D5:89:F6:C4:D0:43:A4:8C:E5:D4:48:1C
            X509v3 Authority Key Identifier:
                keyid:4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:82:ef:74:9d:6c:b0:8a:6c:cf:e6:af:d9:e0:3c:f3:65:bd:
         22:34:30:a7:72:f9:b8:bf:b0:34:0a:a4:3e:c0:74:d4:51:15:
         bc:30:f3:8d:ee:50:e8:dc:6d:4c:8a:18:75:0a:f7:b1:36:ce:
         77:c6:35:0f:a8:88:a6:90:99:d5:9b:58:b9:9d:a9:07:a9:82:
         86:28:e7:ae:b9:a1:25:0b:7a:65:0b:f7:53:29:c8:8a:c6:51:
         9e:ce:89:11:ca:d1:38:52:b0:0c:f7:47:3d:95:22:58:58:1d:
         bf:77:f9:32:a9:dd:c5:fb:a8:ab:5a:91:1e:c8:2e:6c:c6:7e:
         c6:e1:55:ad:c8:8a:4d:fa:c6:71:ec:7f:b3:b2:44:a3:d6:0b:
         ec:38:c3:69:84:97:b2:78:ed:c6:7a:3f:0c:34:00:f1:85:c6:
         1c:be:d8:80:28:73:b7:cf:df:30:15:12:7c:15:c4:fc:8c:0e:
         5f:39:d0:92:5c:36:c1:c5:12:dd:af:cf:4e:ce:d9:a1:f8:78:
         d8:14:8a:6f:c1:6b:5e:bd:b8:fc:25:8a:c1:65:b1:ac:50:be:
         6f:f8:a3:72:df:29:dc:43:f6:5b:c4:5a:78:41:f9:76:a4:1b:
         f2:ba:46:2b:53:19:56:5f:06:e0:66:3a:48:22:4b:2a:17:e2:
         fd:93:ea:86
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBx8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkZFNkNBRjExMC8GA1UEBRMoNEExRkU3NkI0REZCMDE3M0I2RjMxQjdGMzZBNUE5
ODJFMDhEOUMxOTAeFw0yNTA3MDMwMjAyMTBaFw0yNTA3MDUwMjAyMTBaMBgxFjAU
BgNVBAMTDTY4NjVlNGEzLTUzMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0sT0ShZrqstpX+0facE52QrjuRVMP+F4H51Un8cfJUwvGjp8xw2b8cUi2
tl1U8PM+lV6MePatalzjrx3kqeMZjbHiNqCOYFcRhp/k2D4ljqATD6TAMSk+cJIF
Pz7vpLEYTjlyJkUA4EcXz1Na1IUwsxfDAbItrkRU+EO2ltEPQSt0OR8IAz2y1OBc
yK1BiFVA+Pp42yJQZ3Dd0BFfkwCs8dYidMwwkWXhqFpZJGwWuCCH3v++sApS04Yf
mqY03UP+UPrs1e4Qd+oqDOHKAzO9Aw22bbILRzA1aNJXGiLmNzMpDS6yBYFsV9lu
wCZcB4cRaD0vN7kvVx6uBPUdsPMlAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUo0lY
4X0rebLVifbE0EOkjOXUSBwwHwYDVR0jBBgwFoAUSh/na037AXO28xt/NqWpguCN
nBkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZGRTZDL0IzMzc0NDI0MTMxQjExRUJBNDEyMUEzOUY4QUVBMjI4L1NoX25h
MDM3QVhPMjh4dF9OcVdwZ3VDTm5Cay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NoX25hMDM3QVhPMjh4dF9OcVdwZ3VDTm5Cay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkZFNkMvQjMzNzQ0MjQxMzFCMTFFQkE0MTIxQTM5RjhB
RUEyMjgvU2hfbmEwMzdBWE8yOHh0X05xV3BndUNObkJrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCNgu90nWywimzP5q/Z4DzzZb0iNDCn
cvm4v7A0CqQ+wHTUURW8MPON7lDo3G1Mihh1CvexNs53xjUPqIimkJnVm1i5nakH
qYKGKOeuuaElC3plC/dTKciKxlGezokRytE4UrAM90c9lSJYWB2/d/kyqd3F+6ir
WpEeyC5sxn7G4VWtyIpN+sZx7H+zskSj1gvsOMNphJeyeO3Gej8MNADxhcYcvtiA
KHO3z98wFRJ8FcT8jA5fOdCSXDbBxRLdr89Oztmh+HjYFIpvwWtevbj8JYrBZbGs
UL5v+KNy3yncQ/ZbxFp4Qfl2pBvyukYrUxlWXwbgZjpIIksqF+L9k+qG
-----END CERTIFICATE-----
Generated at Thu Jul 3 07:03:29 2025 by rpki-client