Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
File:                     hala3Sz1h3QDC2qbk7QROG_jBkA.mft (raw, json)
Hash identifier:          atPbt9tuZ3FfDhwmdq/mr8ZE+KY09OPeofa33f+BvSc=
Subject key identifier:   AA:2F:7A:AB:07:B3:0F:A1:2C:CB:BD:76:7F:C1:6D:54:CC:53:AD:E5
Authority key identifier: 85:A9:5A:DD:2C:F5:87:74:03:0B:6A:9B:93:B4:11:38:6F:E3:06:40
Certificate issuer:       /CN=F36F5173AF/serialNumber=85A95ADD2CF58774030B6A9B93B411386FE30640
Certificate serial:       07D6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
Manifest number:          07D2
Signing time:             Sat 23 Aug 2025 01:52:17 +0000
Manifest this update:     Sat 23 Aug 2025 01:52:16 +0000
Manifest next update:     Mon 25 Aug 2025 01:52:16 +0000
Files and hashes:         1: hala3Sz1h3QDC2qbk7QROG_jBkA.crl (hash: JpyD+PNq97ZAoqwgJND6TPQhisHy1wBPEGuqUbHVhvU=)
                          2: 3427972686F611EA93690486F8AEA228.roa (hash: V/sXPJRFataMhL4hJmI2vdCPCgDCsxZaHnu+zFRnfs8=)
                          3: CAE2CB0486F611EA9BCADC07F8AEA228.roa (hash: VDKvE/A73Sf7vYOhnC0lj6HdM/VyRRMLJnvzm5crfzE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2006 (0x7d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F5173AF, serialNumber=85A95ADD2CF58774030B6A9B93B411386FE30640
        Validity
            Not Before: Aug 23 01:52:16 2025 GMT
            Not After : Aug 25 01:52:16 2025 GMT
        Subject: CN=68a91ed0-cb92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e2:f5:15:ea:7c:4f:fb:7c:96:f8:2f:8b:bc:
                    f5:97:86:e8:8b:6d:e3:27:a1:c6:63:09:d6:85:be:
                    47:d1:7d:8a:b8:dd:83:2b:51:02:a6:5c:9c:f5:ab:
                    39:e1:04:94:cb:0b:1e:f9:65:40:7a:f5:9d:90:0e:
                    99:62:2a:60:06:ed:6b:f8:4f:69:60:39:9a:5f:2e:
                    73:ba:0e:e1:70:31:7f:f8:92:ac:bd:aa:00:42:55:
                    41:dc:85:c3:f9:85:29:8f:03:5c:27:fb:56:4f:34:
                    04:50:06:07:f1:3f:31:fa:87:72:9a:de:cb:4b:88:
                    8b:00:bb:3e:28:34:c3:34:74:7f:29:8c:f5:50:fe:
                    da:f6:2c:d3:33:2c:f2:2d:be:33:97:bf:c2:17:ea:
                    75:37:3d:db:24:1b:1a:46:e4:76:c0:f3:a9:18:ef:
                    d1:a8:ce:b1:7c:0b:18:9a:46:2e:28:72:c9:07:79:
                    2e:22:e8:d4:16:e5:53:3d:64:fc:0c:f0:22:44:df:
                    36:a9:6a:7d:94:7b:c9:8b:86:18:01:20:c8:32:fb:
                    9c:b6:9d:7d:4c:c3:f1:03:82:ee:a7:9d:dd:35:24:
                    0d:a9:1c:25:de:69:5a:3e:e8:de:dd:ed:ad:5a:c5:
                    41:5c:5c:b4:9d:85:b0:8b:3c:ce:a7:3c:6c:59:53:
                    87:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:2F:7A:AB:07:B3:0F:A1:2C:CB:BD:76:7F:C1:6D:54:CC:53:AD:E5
            X509v3 Authority Key Identifier:
                keyid:85:A9:5A:DD:2C:F5:87:74:03:0B:6A:9B:93:B4:11:38:6F:E3:06:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:67:fa:2e:7c:1a:a5:33:4a:d2:f4:28:67:8f:a6:46:34:3a:
         76:c5:a8:10:58:d3:b9:4c:a1:9b:18:f0:42:21:4d:b5:cf:3a:
         ad:9a:31:c7:d1:60:8c:18:6d:53:5b:9c:56:a6:0e:a3:26:b0:
         23:67:23:41:ae:1b:51:93:08:e3:86:4a:da:b5:9a:42:ff:63:
         90:ed:ff:2e:98:68:47:22:74:d6:dd:de:12:c7:46:46:88:2a:
         b4:b8:e8:ba:14:cf:ba:f9:14:fd:34:cc:eb:75:eb:5f:10:b8:
         df:5e:16:a5:b7:4c:43:ca:97:6c:06:8b:21:47:e3:da:31:e7:
         37:85:bd:cb:25:30:53:79:8c:e0:31:5d:f2:b2:3f:0e:ae:36:
         c4:2e:c6:08:ce:83:e7:d9:ff:11:58:8a:9b:72:f2:0a:dc:ef:
         fe:43:8d:00:96:1e:18:03:51:b3:16:16:85:6f:ba:ca:e9:9c:
         46:b5:5e:0a:d6:85:c9:02:2b:74:d1:47:14:73:b2:b9:b9:c0:
         72:42:f7:e4:11:81:d9:c5:37:8d:bf:80:b7:83:7e:f4:46:2f:
         77:64:f3:70:36:0b:18:4c:f3:3c:6f:d8:df:bd:01:11:4a:45:
         bf:3d:50:db:7d:4e:10:66:51:14:39:c8:15:3f:5c:95:c5:67:
         f9:8b:24:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:05:05 2025 by rpki-client