Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
File:                     hala3Sz1h3QDC2qbk7QROG_jBkA.mft (raw, json)
Hash identifier:          Bqcf6C0nYjnvLHHIICTQbOJxpNTQcb3dvEDHb4oK+a4=
Subject key identifier:   4B:EC:CB:81:3F:F9:4E:E7:73:8F:FF:55:BC:E0:08:1F:AD:31:32:62
Authority key identifier: 85:A9:5A:DD:2C:F5:87:74:03:0B:6A:9B:93:B4:11:38:6F:E3:06:40
Certificate issuer:       /CN=F36F5173AF/serialNumber=85A95ADD2CF58774030B6A9B93B411386FE30640
Certificate serial:       075F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
Manifest number:          075B
Signing time:             Sun 27 Apr 2025 01:52:41 +0000
Manifest this update:     Sun 27 Apr 2025 01:52:40 +0000
Manifest next update:     Tue 29 Apr 2025 01:52:40 +0000
Files and hashes:         1: hala3Sz1h3QDC2qbk7QROG_jBkA.crl (hash: 1kLzHCc57kt2T0J6ijD+d7c0SyxJX8FZOFN6b0i8rig=)
                          2: 3427972686F611EA93690486F8AEA228.roa (hash: V/sXPJRFataMhL4hJmI2vdCPCgDCsxZaHnu+zFRnfs8=)
                          3: CAE2CB0486F611EA9BCADC07F8AEA228.roa (hash: VDKvE/A73Sf7vYOhnC0lj6HdM/VyRRMLJnvzm5crfzE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1887 (0x75f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F5173AF, serialNumber=85A95ADD2CF58774030B6A9B93B411386FE30640
        Validity
            Not Before: Apr 27 01:52:40 2025 GMT
            Not After : Apr 29 01:52:40 2025 GMT
        Subject: CN=680d8de9-4f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:31:53:9b:63:24:b2:1b:b8:c7:28:a9:c1:b3:
                    8d:05:b5:81:11:eb:b3:3e:67:f5:53:b7:9b:6a:a8:
                    35:26:71:d9:3b:eb:e2:e2:76:9e:da:aa:f4:13:18:
                    99:7b:56:6f:7d:97:30:3f:a3:7e:9f:22:d9:0b:25:
                    4b:86:8d:a3:e5:e3:6a:ad:9e:e7:08:04:76:12:97:
                    d7:42:cf:80:06:3f:3d:c3:99:cb:d1:d5:df:8d:b4:
                    22:55:10:9b:bc:5d:dd:6f:69:c8:37:72:ef:05:af:
                    f1:6e:c7:2b:c6:d0:c2:36:10:6d:1b:d6:82:3d:d4:
                    e2:c1:2e:aa:35:89:04:b3:af:30:d0:da:5b:51:af:
                    50:7d:4f:9a:3c:8b:26:54:f8:9a:3a:27:20:0e:a3:
                    3f:46:4f:54:1a:d2:d3:29:20:56:3f:d6:2e:b2:53:
                    be:e9:6a:4f:f0:0c:99:38:f4:bd:c2:45:03:cb:f4:
                    25:69:3a:41:0b:16:24:b5:0c:ab:b8:ef:08:ad:42:
                    11:a6:fa:f6:2e:7f:48:dc:a3:74:d7:8e:3f:a7:cb:
                    d5:d0:9b:4d:db:97:7b:69:7a:a7:d5:5e:aa:ee:88:
                    45:98:69:aa:a3:d5:c3:70:9a:37:c6:07:75:61:ee:
                    a6:1b:e6:f4:07:a0:47:cf:7d:a3:8e:64:cb:4c:a6:
                    4e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:EC:CB:81:3F:F9:4E:E7:73:8F:FF:55:BC:E0:08:1F:AD:31:32:62
            X509v3 Authority Key Identifier:
                keyid:85:A9:5A:DD:2C:F5:87:74:03:0B:6A:9B:93:B4:11:38:6F:E3:06:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c1:78:88:30:af:94:95:fa:df:05:e5:18:2e:37:f2:8b:e2:
         38:23:29:f9:c1:d3:4c:39:4c:a0:b0:5a:f7:e5:7f:6d:53:b1:
         4f:b9:d1:a1:34:b4:fb:88:47:36:32:00:9e:f8:fa:7a:fc:1c:
         a3:4d:3f:88:4f:42:6e:e2:14:24:5c:f9:99:d9:40:3c:16:f6:
         b8:ab:3b:cd:4e:74:ad:10:b5:0e:f1:be:d6:87:d5:83:37:99:
         11:fc:4c:15:bc:0d:c8:01:34:4f:fe:96:ae:44:65:d8:a8:6f:
         e5:e0:10:2c:9a:5f:6c:a7:25:de:cc:c5:37:ca:30:34:23:b4:
         b1:a0:ff:85:76:ca:5b:56:81:22:c2:a8:2d:eb:2e:48:d9:62:
         6a:71:cc:a5:86:bc:31:a3:03:e4:bd:ba:a5:d2:8b:f6:fb:ca:
         75:2b:70:2e:33:ab:93:b6:1f:1b:44:26:9b:90:3f:c2:04:0a:
         bb:ef:b3:b9:1b:4a:1e:f0:f2:27:e6:69:c2:f6:c0:14:e8:da:
         97:9b:23:0f:f9:5e:cd:fc:3f:85:52:bd:8a:00:0f:98:8b:fa:
         54:c3:90:7a:a4:32:65:f4:cd:1b:dd:ef:ad:1b:22:76:cc:ed:
         31:eb:18:b8:b5:88:39:a0:0c:42:95:5e:ba:5d:53:45:79:e4:
         6b:67:03:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:27:06 2025 by rpki-client