Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B2F5/B5C786A63B9111F0A0FE1AB2DAE4EC9C/BMcND-EMj2sq-Ce3xmYXrcLvIeU.mft
File:                     BMcND-EMj2sq-Ce3xmYXrcLvIeU.mft (raw, json)
Hash identifier:          GVukZKeGE4Cj49gPP8BshPyRNE1mdjgx9kUyQSLIiEA=
Subject key identifier:   5D:43:3B:52:CF:BB:71:C3:4A:0D:30:F9:9C:1F:4A:05:54:40:FC:5C
Authority key identifier: 04:C7:0D:0F:E1:0C:8F:6B:2A:F8:27:B7:C6:66:17:AD:C2:EF:21:E5
Certificate issuer:       /CN=F362B2F5AF/serialNumber=04C70D0FE10C8F6B2AF827B7C66617ADC2EF21E5
Certificate serial:       5F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BMcND-EMj2sq-Ce3xmYXrcLvIeU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B2F5/B5C786A63B9111F0A0FE1AB2DAE4EC9C/BMcND-EMj2sq-Ce3xmYXrcLvIeU.mft
Manifest number:          5D
Signing time:             Sat 23 Aug 2025 05:16:42 +0000
Manifest this update:     Sat 23 Aug 2025 05:16:41 +0000
Manifest next update:     Mon 25 Aug 2025 05:16:41 +0000
Files and hashes:         1: BMcND-EMj2sq-Ce3xmYXrcLvIeU.crl (hash: /rpBxACQQ2R1UXDZoRJK/lQtctedEuktLJumS2R0caI=)
                          2: 39B8368C3BAA11F09A3A42CEDAE4EC9C.roa (hash: NGOVvxGcMctTOcLjdKtNGDdIQDHinApagvdcC37+4wQ=)
                          3: F3CD790A3B9211F0B6A215B9DAE4EC9C.roa (hash: uy0pfZG46ZecPcXleZMS+n60uaQG5DsddR4RCRLej+Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B2F5/B5C786A63B9111F0A0FE1AB2DAE4EC9C/BMcND-EMj2sq-Ce3xmYXrcLvIeU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B2F5/B5C786A63B9111F0A0FE1AB2DAE4EC9C/BMcND-EMj2sq-Ce3xmYXrcLvIeU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BMcND-EMj2sq-Ce3xmYXrcLvIeU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B2F5AF, serialNumber=04C70D0FE10C8F6B2AF827B7C66617ADC2EF21E5
        Validity
            Not Before: Aug 23 05:16:41 2025 GMT
            Not After : Aug 25 05:16:41 2025 GMT
        Subject: CN=68a94eba-5e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ba:ae:8b:33:3f:0b:16:b4:a6:4c:16:90:94:
                    25:74:92:85:42:09:4e:0a:83:dc:ca:46:c1:3a:aa:
                    a4:67:04:36:cb:a3:16:cd:bc:e0:ef:83:75:e6:0c:
                    31:31:0c:01:88:aa:53:b8:41:2a:13:0f:51:ae:f9:
                    b8:5f:9b:08:ed:2e:dc:4b:ee:a9:31:c3:a4:4b:2c:
                    88:c9:c4:1d:0e:97:52:d9:ca:4f:75:51:59:a2:7e:
                    a5:47:e1:a1:32:89:b7:50:26:f7:7f:29:a5:eb:d9:
                    2a:b0:74:61:ca:c4:5d:ed:49:67:cc:75:3e:4b:04:
                    8c:bf:db:85:c4:b2:ea:7c:fc:4c:4d:45:d9:53:6c:
                    d0:e4:8f:97:e0:f1:8d:e7:d9:09:5c:52:29:16:02:
                    14:71:f2:f2:50:c7:62:d4:1c:69:d1:ff:c5:21:be:
                    c1:67:e3:fa:78:71:ea:e3:a1:ae:22:2d:7f:31:56:
                    a8:f7:51:8c:75:84:5d:ae:af:71:b8:97:a9:55:c3:
                    2b:37:48:41:d2:7f:9b:05:16:e3:13:a7:49:74:d2:
                    c5:df:36:03:2a:29:dd:dd:bb:1a:0f:43:53:5c:b5:
                    18:20:22:09:b4:a0:b6:db:b3:e4:5e:64:a7:10:e0:
                    b8:c3:eb:2d:00:e6:62:af:ec:3e:f9:df:8f:7a:41:
                    81:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:43:3B:52:CF:BB:71:C3:4A:0D:30:F9:9C:1F:4A:05:54:40:FC:5C
            X509v3 Authority Key Identifier:
                keyid:04:C7:0D:0F:E1:0C:8F:6B:2A:F8:27:B7:C6:66:17:AD:C2:EF:21:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B2F5/B5C786A63B9111F0A0FE1AB2DAE4EC9C/BMcND-EMj2sq-Ce3xmYXrcLvIeU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BMcND-EMj2sq-Ce3xmYXrcLvIeU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B2F5/B5C786A63B9111F0A0FE1AB2DAE4EC9C/BMcND-EMj2sq-Ce3xmYXrcLvIeU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:a0:2f:bc:c8:75:e2:a6:39:d0:5e:a1:cd:b0:93:92:61:8c:
         64:a5:cd:7d:95:a3:08:6a:03:be:65:a4:49:f3:ad:e8:08:b4:
         72:bd:d2:a5:25:52:3b:d4:ee:45:37:53:c8:73:62:74:b2:a5:
         2e:57:bd:ff:b0:7d:be:eb:07:a7:cd:14:e3:12:26:98:cf:8e:
         ca:34:fa:c2:c3:41:c0:38:f7:f1:b1:c3:8d:67:2a:f3:78:d1:
         68:72:08:82:1c:d2:43:5b:0e:92:c6:2b:c0:3d:13:aa:53:6b:
         d4:0c:db:aa:db:52:9f:c0:fd:6f:b4:26:27:0f:3e:f1:c2:fb:
         9d:eb:76:30:0a:ad:d6:b4:62:23:cc:9f:4a:a8:a6:0a:5d:71:
         9f:35:11:de:f1:99:7b:cc:49:2b:6c:23:d7:94:6a:ea:2c:49:
         28:73:1b:0a:37:09:39:cd:38:12:14:33:b8:7c:e4:14:b0:74:
         9e:08:53:3a:13:42:fa:ab:95:1e:1f:56:e3:87:97:83:57:c3:
         cf:d2:dc:d6:c2:13:96:c5:53:72:7f:b9:4b:50:8a:c3:5a:7a:
         b6:96:87:1a:da:1b:43:d6:81:9a:81:df:c5:cd:54:eb:e2:57:
         31:50:97:54:bf:65:c7:c5:63:1d:5b:b9:5c:0d:3b:46:a9:1a:
         80:3e:73:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:04:32 2025 by rpki-client