Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
File:                     hala3Sz1h3QDC2qbk7QROG_jBkA.mft (raw, json)
Hash identifier:          OQ5bppc7Q2Xk2A83n99GKTL58khPxo27UaxbS03BLHo=
Subject key identifier:   05:6C:A9:C9:44:EF:04:B7:02:ED:78:7B:6F:8C:3B:22:B3:1D:5C:99
Authority key identifier: 85:A9:5A:DD:2C:F5:87:74:03:0B:6A:9B:93:B4:11:38:6F:E3:06:40
Certificate issuer:       /CN=F36F5173AF/serialNumber=85A95ADD2CF58774030B6A9B93B411386FE30640
Certificate serial:       0820
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
Manifest number:          081C
Signing time:             Tue 04 Nov 2025 02:28:03 +0000
Manifest this update:     Tue 04 Nov 2025 02:28:02 +0000
Manifest next update:     Thu 06 Nov 2025 02:28:02 +0000
Files and hashes:         1: hala3Sz1h3QDC2qbk7QROG_jBkA.crl (hash: qjDaYUf1eGyBdeE4UMfBSFl7oIVrOG13YAixxXFo51c=)
                          2: 3427972686F611EA93690486F8AEA228.roa (hash: V/sXPJRFataMhL4hJmI2vdCPCgDCsxZaHnu+zFRnfs8=)
                          3: CAE2CB0486F611EA9BCADC07F8AEA228.roa (hash: VDKvE/A73Sf7vYOhnC0lj6HdM/VyRRMLJnvzm5crfzE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2080 (0x820)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F5173AF, serialNumber=85A95ADD2CF58774030B6A9B93B411386FE30640
        Validity
            Not Before: Nov  4 02:28:02 2025 GMT
            Not After : Nov  6 02:28:02 2025 GMT
        Subject: CN=690964b3-fd81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2a:56:fd:9b:7b:b6:99:88:25:1d:bd:5d:85:
                    1e:05:63:e2:14:d1:fe:8f:ca:e8:dd:64:c7:1d:f3:
                    04:11:96:5b:82:a9:74:9c:2e:20:7f:ae:af:fa:3b:
                    06:96:87:ba:ad:2c:38:b0:3d:13:9e:5b:f2:96:f7:
                    81:f7:c7:7a:2e:62:85:5b:db:07:fc:c1:a2:b4:48:
                    e1:7f:e3:8d:06:84:31:54:ac:5b:18:f6:14:4d:70:
                    90:f0:9d:93:f5:2f:39:8e:3e:34:1a:95:0f:99:6c:
                    94:82:94:e3:99:b7:80:0e:76:df:87:be:bf:54:a3:
                    b2:17:e3:7e:e2:46:6c:3d:6e:6a:33:81:8a:9e:36:
                    5a:72:dc:fa:75:03:dc:82:b9:f5:ee:23:1e:2a:fb:
                    9d:dc:55:0a:81:b4:7c:d6:7e:f1:15:9b:7c:66:c4:
                    a4:e0:80:a9:7c:ef:2a:38:70:ca:cf:1d:cb:14:6c:
                    4c:7c:7f:f4:ce:54:49:49:db:4c:1e:91:15:5d:5f:
                    b6:db:53:55:11:56:12:43:ff:cc:b4:47:c4:67:83:
                    d4:57:61:82:a6:db:ab:6f:d0:04:a3:7a:32:b0:98:
                    77:2f:e2:c3:51:c5:c0:5f:93:9e:e2:7d:6b:5b:6e:
                    9c:52:d1:16:42:45:06:1f:95:97:bf:46:22:19:ff:
                    c4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6C:A9:C9:44:EF:04:B7:02:ED:78:7B:6F:8C:3B:22:B3:1D:5C:99
            X509v3 Authority Key Identifier:
                keyid:85:A9:5A:DD:2C:F5:87:74:03:0B:6A:9B:93:B4:11:38:6F:E3:06:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:15:b1:dc:d8:fb:ba:33:f4:38:bc:a5:ca:15:ec:db:72:a3:
         40:88:52:a0:e6:63:dc:dd:44:4a:df:f0:93:cd:0c:2b:cb:8b:
         a3:55:5a:6f:00:66:e1:57:7c:c8:3c:66:44:fd:f6:46:1e:2e:
         54:72:ab:c7:c3:86:31:43:06:41:3c:d3:fe:d1:47:d3:66:ba:
         6a:2c:1d:07:09:9b:2c:95:d0:52:f7:3e:7d:72:a6:2c:32:55:
         ef:c7:10:c1:de:46:e8:71:79:18:fa:ec:08:1b:a0:34:c2:5b:
         8b:e4:c2:a2:18:15:56:9a:3c:05:b5:f8:aa:ae:e9:6a:b6:63:
         86:8a:72:1e:f8:97:37:93:fa:83:b8:e6:9e:75:02:f1:7c:3e:
         a6:cf:2b:43:b3:91:36:5a:40:ca:c0:0a:d6:06:ef:12:84:a1:
         06:93:c4:b2:95:22:08:97:9b:87:cc:78:25:d5:80:5c:96:89:
         b3:6b:cd:0f:43:64:bd:3f:af:27:cd:c2:fe:17:6e:71:30:1b:
         20:fe:ae:43:07:d2:80:92:e2:af:37:5d:6b:e9:d8:c8:ac:5c:
         b0:6f:4c:30:c8:ad:77:6d:c6:2b:af:63:cf:6a:30:ce:d6:d0:
         fc:33:22:bd:0d:1c:d0:b0:82:5d:d2:73:47:39:32:5b:70:ea:
         90:f8:fc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:21:05 2025 by rpki-client