Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
File:                     hala3Sz1h3QDC2qbk7QROG_jBkA.mft (raw, json)
Hash identifier:          NJ/YtHNqfB62WhEctz+JIMPlzOuH9oSuLptxjQ4aOJA=
Subject key identifier:   81:6F:04:76:6A:0B:21:04:45:F7:3F:DA:39:7E:E1:D8:94:0C:0F:B2
Authority key identifier: 85:A9:5A:DD:2C:F5:87:74:03:0B:6A:9B:93:B4:11:38:6F:E3:06:40
Certificate issuer:       /CN=F36F5173AF/serialNumber=85A95ADD2CF58774030B6A9B93B411386FE30640
Certificate serial:       07CB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
Manifest number:          07C7
Signing time:             Tue 12 Aug 2025 01:53:08 +0000
Manifest this update:     Tue 12 Aug 2025 01:53:07 +0000
Manifest next update:     Thu 14 Aug 2025 01:53:07 +0000
Files and hashes:         1: hala3Sz1h3QDC2qbk7QROG_jBkA.crl (hash: lvjJeUiOdjwSnQN3bqvNGVRAGAY9kk3c7wqE/Ctvo+w=)
                          2: 3427972686F611EA93690486F8AEA228.roa (hash: V/sXPJRFataMhL4hJmI2vdCPCgDCsxZaHnu+zFRnfs8=)
                          3: CAE2CB0486F611EA9BCADC07F8AEA228.roa (hash: VDKvE/A73Sf7vYOhnC0lj6HdM/VyRRMLJnvzm5crfzE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 Aug 2025 01:53:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1995 (0x7cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F5173AF, serialNumber=85A95ADD2CF58774030B6A9B93B411386FE30640
        Validity
            Not Before: Aug 12 01:53:07 2025 GMT
            Not After : Aug 14 01:53:07 2025 GMT
        Subject: CN=689a9e84-bc17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:68:c5:64:b9:45:f2:7d:bc:c4:e6:34:23:8d:
                    d4:7a:9c:cd:63:86:d9:c9:dd:a4:35:11:1b:5e:83:
                    f5:b7:1a:c0:b1:bc:4a:02:56:35:2e:15:ed:d4:08:
                    8b:71:67:1e:0e:74:c7:f9:d8:0f:3b:ce:f4:88:30:
                    24:0d:1c:fe:aa:b5:a6:62:40:8d:0f:5c:99:cd:9b:
                    90:01:72:06:08:ed:96:23:27:14:2e:1b:eb:53:1d:
                    62:99:da:50:5a:6e:ec:88:71:30:32:b5:23:f4:75:
                    d5:f6:47:c1:cf:3c:67:83:5f:79:a4:1b:f1:c9:3e:
                    b1:c5:27:6b:aa:bf:0c:20:c2:05:07:da:db:18:1e:
                    b2:90:be:25:7d:00:ee:ba:f2:7e:91:69:51:c3:6c:
                    dd:da:79:ae:33:cb:31:40:2f:ad:98:2f:9d:71:01:
                    2f:de:01:43:32:6d:3f:42:d6:75:c7:0c:cc:41:96:
                    6e:56:de:95:70:52:ed:92:17:76:42:3b:f8:2a:05:
                    05:4e:8c:f7:ef:ff:83:0a:4e:01:ca:75:4f:12:38:
                    4f:f5:f1:43:0f:24:b9:24:20:d9:f6:9e:ba:96:5b:
                    c2:91:03:7e:90:f8:14:b2:89:5c:40:5d:56:77:45:
                    fa:34:fc:91:4c:a1:a4:55:f6:45:fa:3f:fa:13:7f:
                    fa:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:6F:04:76:6A:0B:21:04:45:F7:3F:DA:39:7E:E1:D8:94:0C:0F:B2
            X509v3 Authority Key Identifier:
                keyid:85:A9:5A:DD:2C:F5:87:74:03:0B:6A:9B:93:B4:11:38:6F:E3:06:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:26:2d:73:26:ab:b1:29:e6:e8:2a:51:ed:4f:78:5e:4a:fc:
         f3:24:b5:97:d7:d7:6a:4c:26:7f:c2:43:38:4c:5e:9f:7a:ac:
         d3:4c:bc:4a:a9:89:c3:10:17:bc:5c:f3:c2:12:ab:2c:e3:aa:
         e0:9f:98:62:d5:d6:d3:48:82:0b:4f:90:47:b9:30:7a:e5:59:
         ed:fe:24:60:7a:e3:50:09:fa:c5:3f:b2:f5:a1:e9:17:e2:90:
         dd:95:a4:67:82:d3:03:45:6b:c1:85:37:6e:70:fc:06:d0:a1:
         e7:0f:0f:48:5c:69:c1:b2:24:64:35:4f:bf:bb:84:f5:50:fe:
         c0:de:c7:51:a3:8a:84:9a:94:77:34:82:c1:e8:d5:7b:1f:21:
         32:f1:43:55:81:85:34:bb:c6:ef:c3:11:91:76:58:96:97:49:
         2e:5b:84:91:1b:b4:32:11:23:b5:2b:40:9a:4d:ba:ca:ca:24:
         94:56:cd:29:e2:75:75:e2:84:d3:f5:05:ef:92:15:e1:87:0c:
         9c:d3:09:d1:35:8d:2d:be:eb:1e:99:e6:03:c5:7d:13:c8:fe:
         75:4e:37:44:97:0c:66:60:4d:08:15:6c:c8:ae:55:17:ac:bc:
         97:a6:93:65:13:f2:86:a9:fe:a2:fd:1f:b5:64:9d:74:72:08:
         e2:28:7d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 19:09:34 2025 by rpki-client