Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft
File:                     BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft (raw, json)
Hash identifier:          vTmaowBpuGF6JSLREYBcjiivfsbxZ8dmq5JZoJnmKrQ=
Subject key identifier:   3C:93:C5:70:0C:CA:BA:9E:8F:FE:1F:0A:C8:52:04:28:50:EF:C5:29
Authority key identifier: 04:C9:0B:0F:6B:6E:59:94:F6:65:87:E3:70:F7:F7:CB:E6:61:12:07
Certificate issuer:       /CN=F3615826RI/serialNumber=04C90B0F6B6E5994F66587E370F7F7CBE6611207
Certificate serial:       05D8
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft
Manifest number:          05D8
Signing time:             Sun 27 Jul 2025 02:28:19 +0000
Manifest this update:     Sun 27 Jul 2025 02:28:18 +0000
Manifest next update:     Tue 29 Jul 2025 02:28:18 +0000
Files and hashes:         1: BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.crl (hash: I10fq/vuAyzAUJdlD6ZOWQ6bKaVxo7kJsbdJqsHaUO8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft
                          rsync://rpki.afrinic.net/repository/ripe/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1496 (0x5d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615826RI, serialNumber=04C90B0F6B6E5994F66587E370F7F7CBE6611207
        Validity
            Not Before: Jul 27 02:28:18 2025 GMT
            Not After : Jul 29 02:28:18 2025 GMT
        Subject: CN=68858ec3-f9d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0d:20:d0:68:14:f1:d2:3b:91:07:27:6d:1e:
                    c9:ca:ca:5c:33:83:2e:05:a0:b7:65:c6:76:35:b8:
                    0c:ea:93:c3:67:d0:9a:44:05:3b:b8:33:14:9f:ed:
                    1a:b3:54:2d:d4:e7:48:c9:06:7c:2a:73:4d:32:be:
                    1a:e0:2e:c4:62:06:e9:36:dc:43:b3:cf:4c:01:1c:
                    ce:cc:78:3f:f3:99:0b:dd:15:64:c7:5a:22:7f:fd:
                    ea:61:f8:df:79:70:d2:66:89:43:fd:41:36:7e:af:
                    d5:c8:ed:d1:29:f3:39:55:18:c4:1b:d6:e3:a7:fc:
                    3f:5f:6d:38:48:51:37:50:e6:2a:a0:d5:57:0f:de:
                    52:89:ed:59:db:ad:02:34:71:09:7c:4c:92:43:07:
                    dc:f5:54:ee:ad:e6:f8:e1:20:ec:66:05:8c:94:cd:
                    2e:ea:70:a5:7c:d8:6d:ea:82:d8:14:ca:6f:bd:ee:
                    28:79:47:8c:c1:3e:bc:64:a0:db:24:71:0b:1d:6e:
                    f4:ee:d4:e1:cc:56:63:aa:d5:be:e3:c0:4e:16:a4:
                    f2:f4:49:56:a9:65:62:cd:d3:b4:b8:a4:ff:7d:37:
                    cf:6d:e5:ac:21:78:5c:e5:e7:42:2a:13:76:ce:22:
                    21:6e:7e:68:41:89:0e:7b:88:5a:07:8f:68:e4:2a:
                    29:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:93:C5:70:0C:CA:BA:9E:8F:FE:1F:0A:C8:52:04:28:50:EF:C5:29
            X509v3 Authority Key Identifier:
                keyid:04:C9:0B:0F:6B:6E:59:94:F6:65:87:E3:70:F7:F7:CB:E6:61:12:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:33:dc:db:46:a9:51:a1:c5:6b:71:cc:c4:e6:dd:5e:e9:ea:
         ab:fe:15:29:7c:59:3f:ad:b8:2e:28:1e:fa:20:f3:03:0f:e9:
         ce:39:ae:d3:b1:53:76:f7:97:8c:9b:52:0c:42:bb:7f:6f:13:
         74:36:29:7e:27:00:bb:e0:d4:f8:6f:13:02:84:82:95:d7:3d:
         f8:df:11:60:1e:04:50:bd:83:c5:bf:2e:28:4d:ef:85:f4:65:
         d2:89:fa:19:38:c4:bc:db:2d:6f:fa:d9:2a:ab:23:93:ae:6b:
         7d:50:9b:27:bc:72:8b:65:98:21:89:6f:3c:df:fb:fc:c4:01:
         3b:14:8b:70:14:7f:ba:1a:ba:a8:0c:17:5f:44:78:9e:65:88:
         40:30:37:fe:3d:50:4f:d0:34:81:ad:68:29:39:44:95:36:1c:
         21:e1:8f:ec:fd:41:7c:8e:95:c7:b7:84:9a:2b:6b:79:77:69:
         c0:f1:67:19:c9:a6:fd:3c:75:25:96:b4:10:6b:a3:ce:f5:70:
         ac:f3:56:f8:25:39:c1:16:65:3e:6d:90:34:be:50:a3:e2:df:
         f9:96:4d:85:e9:90:db:77:ed:35:64:d3:61:ad:38:a5:ac:a9:
         b5:89:d2:18:b3:9d:67:99:d3:d9:2c:b1:9a:88:ed:0d:6d:3a:
         1b:ca:ca:e5
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBdgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTU4MjZSSTExMC8GA1UEBRMoMDRDOTBCMEY2QjZFNTk5NEY2NjU4N0UzNzBGN0Y3
Q0JFNjYxMTIwNzAeFw0yNTA3MjcwMjI4MThaFw0yNTA3MjkwMjI4MThaMBgxFjAU
BgNVBAMTDTY4ODU4ZWMzLWY5ZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+DSDQaBTx0juRBydtHsnKylwzgy4FoLdlxnY1uAzqk8Nn0JpEBTu4MxSf
7RqzVC3U50jJBnwqc00yvhrgLsRiBuk23EOzz0wBHM7MeD/zmQvdFWTHWiJ//eph
+N95cNJmiUP9QTZ+r9XI7dEp8zlVGMQb1uOn/D9fbThIUTdQ5iqg1VcP3lKJ7Vnb
rQI0cQl8TJJDB9z1VO6t5vjhIOxmBYyUzS7qcKV82G3qgtgUym+97ih5R4zBPrxk
oNskcQsdbvTu1OHMVmOq1b7jwE4WpPL0SVapZWLN07S4pP99N89t5awheFzl50Iq
E3bOIiFufmhBiQ57iFoHj2jkKik7AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUPJPF
cAzKup6P/h8KyFIEKFDvxSkwHwYDVR0jBBgwFoAUBMkLD2tuWZT2ZYfjcPf3y+Zh
EgcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE1ODI2LzQ0NTkyNTFDRjA1NzExRUJBNUM4RDEzOEQ4QTAxNENFL0JNa0xE
MnR1V1pUMlpZZmpjUGYzeS1aaEVnYy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L0JNa0xEMnR1V1pUMlpZZmpjUGYzeS1aaEVnYy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MTU4MjYvNDQ1OTI1MUNGMDU3MTFFQkE1QzhEMTM4RDhBMDE0
Q0UvQk1rTEQydHVXWlQyWllmamNQZjN5LVpoRWdjLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLM9zbRqlRocVrcczE5t1e6eqr/hUpfFk/
rbguKB76IPMDD+nOOa7TsVN295eMm1IMQrt/bxN0Nil+JwC74NT4bxMChIKV1z34
3xFgHgRQvYPFvy4oTe+F9GXSifoZOMS82y1v+tkqqyOTrmt9UJsnvHKLZZghiW88
3/v8xAE7FItwFH+6GrqoDBdfRHieZYhAMDf+PVBP0DSBrWgpOUSVNhwh4Y/s/UF8
jpXHt4SaK2t5d2nA8WcZyab9PHUllrQQa6PO9XCs81b4JTnBFmU+bZA0vlCj4t/5
lk2F6ZDbd+01ZNNhrTilrKm1idIYs51nmdPZLLGaiO0NbTobysrl
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:12:35 2025 by rpki-client