Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft
File:                     BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft (raw, json)
Hash identifier:          YAcz4JZ+vHAjS8BqGxzu8Kfc7WJEgROch1Gq2/Ab9s0=
Subject key identifier:   42:E9:23:3F:10:E3:3F:23:FE:14:77:90:A1:73:5A:B0:A7:51:84:DF
Authority key identifier: 04:C9:0B:0F:6B:6E:59:94:F6:65:87:E3:70:F7:F7:CB:E6:61:12:07
Certificate issuer:       /CN=F3615826RI/serialNumber=04C90B0F6B6E5994F66587E370F7F7CBE6611207
Certificate serial:       058A
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft
Manifest number:          058A
Signing time:             Sun 11 May 2025 02:27:25 +0000
Manifest this update:     Sun 11 May 2025 02:27:24 +0000
Manifest next update:     Tue 13 May 2025 02:27:24 +0000
Files and hashes:         1: BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.crl (hash: qShM1ZVl+6NFtuIdweQs7km3pd8rc2Vx+0v/z+hf4ZQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft
                          rsync://rpki.afrinic.net/repository/ripe/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 May 2025 00:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1418 (0x58a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615826RI, serialNumber=04C90B0F6B6E5994F66587E370F7F7CBE6611207
        Validity
            Not Before: May 11 02:27:24 2025 GMT
            Not After : May 13 02:27:24 2025 GMT
        Subject: CN=68200b0d-60f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4d:0c:1a:b3:d1:1e:b7:54:5a:b5:c6:c7:57:
                    ff:20:ce:90:22:e9:f0:23:04:b6:9d:54:4d:35:85:
                    8b:fc:1f:25:ce:f5:fd:6c:13:9b:37:ac:2a:06:1f:
                    7a:5f:e8:89:1e:0b:78:42:ba:a2:37:62:c0:6a:ef:
                    c4:d0:f1:64:47:33:33:97:b3:88:b3:2c:05:7a:29:
                    aa:c0:c7:e3:46:b3:14:aa:af:c5:1c:51:12:e3:b1:
                    9d:c0:53:2d:de:54:3e:f2:27:5e:b6:2b:cf:61:9e:
                    da:32:f7:96:47:57:c9:9d:ab:b5:cb:fa:29:51:8f:
                    e8:d5:11:f7:3e:ae:79:70:c2:05:d6:1e:d3:53:29:
                    1d:2a:e0:4e:b9:e1:a9:70:e2:e8:82:e9:9e:f3:64:
                    81:ba:80:41:1f:c1:49:e7:e4:31:00:1b:bf:57:23:
                    40:91:73:d4:4b:a4:cd:4d:c3:7e:63:e9:16:6b:3d:
                    2d:9e:ad:ad:9a:b1:be:90:ec:44:88:dd:54:a9:59:
                    98:44:5b:2b:8c:54:70:91:a6:cf:d3:65:88:c0:9b:
                    b0:df:32:91:ce:07:9e:43:35:f4:5c:9d:27:a0:ad:
                    0b:49:0d:fc:e6:86:47:58:08:50:54:17:5a:ac:a2:
                    94:0d:d5:ba:6b:84:e9:d0:f1:d0:02:a2:08:53:7e:
                    52:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E9:23:3F:10:E3:3F:23:FE:14:77:90:A1:73:5A:B0:A7:51:84:DF
            X509v3 Authority Key Identifier:
                keyid:04:C9:0B:0F:6B:6E:59:94:F6:65:87:E3:70:F7:F7:CB:E6:61:12:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:a3:89:47:3a:35:62:d1:5e:d6:79:8e:ab:87:f6:4a:ab:c4:
         f0:df:c2:b5:da:c5:a5:72:15:66:a9:c4:02:e9:7e:60:33:f9:
         26:c6:77:fb:1c:ff:83:70:61:22:68:ae:49:aa:6c:a1:44:b1:
         cf:25:e2:b1:1f:fa:26:af:c9:b9:c4:85:87:63:d3:50:52:4a:
         9c:ab:20:22:87:a0:2d:cb:37:ea:53:9b:0e:62:2a:b3:ef:2b:
         7c:3e:15:cd:de:2d:b6:ca:5e:63:33:35:50:8b:ee:19:4b:d2:
         d5:0a:40:c0:8b:60:19:ab:0a:98:b3:d9:f1:88:07:d8:ec:c9:
         4a:d8:77:1c:a1:81:41:79:55:4e:80:fe:99:42:da:b7:d1:ea:
         12:41:ff:ba:9d:cb:c5:0e:ca:92:06:04:e5:ed:80:21:ad:56:
         2a:25:be:86:23:f5:01:c9:f1:f0:55:c3:46:d7:e4:e0:37:61:
         c7:97:68:24:80:04:89:a9:cd:d2:5f:0d:a8:16:2b:fa:1a:4f:
         65:b8:fd:2a:80:a1:5a:5b:85:94:56:4f:b8:3c:03:d7:cf:3a:
         01:ed:cc:58:14:8d:ae:7a:84:e6:c4:47:08:13:e5:22:c7:b8:
         59:58:a3:a4:ee:7f:ae:d7:a7:d8:75:ad:cc:67:84:d8:fa:00:
         44:ca:69:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:02:34 2025 by rpki-client