Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
File:                     hala3Sz1h3QDC2qbk7QROG_jBkA.mft (raw, json)
Hash identifier:          KmLqy/lZ8bLKqewV6edtw1r0ohC2fcrXrnziAKdZKWU=
Subject key identifier:   66:C4:28:BA:C3:78:90:53:20:5D:6C:E8:24:88:8F:4F:D2:9D:27:D1
Authority key identifier: 85:A9:5A:DD:2C:F5:87:74:03:0B:6A:9B:93:B4:11:38:6F:E3:06:40
Certificate issuer:       /CN=F36F5173AF/serialNumber=85A95ADD2CF58774030B6A9B93B411386FE30640
Certificate serial:       07EF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
Manifest number:          07EB
Signing time:             Wed 17 Sep 2025 01:47:19 +0000
Manifest this update:     Wed 17 Sep 2025 01:47:18 +0000
Manifest next update:     Fri 19 Sep 2025 01:47:18 +0000
Files and hashes:         1: hala3Sz1h3QDC2qbk7QROG_jBkA.crl (hash: 78/FKvFH1D2UdrCVbd7xm3MP31Aixh+uxBrWwibSp3c=)
                          2: 3427972686F611EA93690486F8AEA228.roa (hash: V/sXPJRFataMhL4hJmI2vdCPCgDCsxZaHnu+zFRnfs8=)
                          3: CAE2CB0486F611EA9BCADC07F8AEA228.roa (hash: VDKvE/A73Sf7vYOhnC0lj6HdM/VyRRMLJnvzm5crfzE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 01:47:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2031 (0x7ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F5173AF, serialNumber=85A95ADD2CF58774030B6A9B93B411386FE30640
        Validity
            Not Before: Sep 17 01:47:18 2025 GMT
            Not After : Sep 19 01:47:18 2025 GMT
        Subject: CN=68ca1327-03c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6a:f5:31:bd:34:4e:84:93:c7:33:d5:66:83:
                    ea:5f:89:3b:17:0d:59:44:cc:5a:56:bc:71:1d:32:
                    f1:95:dd:3b:c2:b5:b0:1e:a4:2b:55:47:43:60:d6:
                    66:a1:ba:72:33:37:9f:1b:30:c9:a8:e0:77:ca:6b:
                    b7:b2:bf:cf:85:22:02:b3:cf:a0:4a:5c:19:a8:26:
                    ef:cf:3c:28:52:1e:e8:88:73:c9:e3:3c:d6:7c:0b:
                    31:1e:e0:d4:8f:ba:aa:29:5e:1a:35:6f:82:72:bc:
                    20:a9:b9:4a:c5:3b:c0:1e:a5:59:f3:b4:f9:01:70:
                    fe:e8:9f:8e:6b:cd:5b:4b:cc:6c:c1:bd:91:5a:8e:
                    79:bd:e3:37:c7:ac:b7:90:1b:ac:56:2c:36:77:ee:
                    a4:62:83:4e:d4:dc:9a:4f:a5:e6:a0:99:f2:12:e5:
                    e6:9d:2a:50:df:dd:e0:29:5b:dd:d4:ad:4a:2e:be:
                    1f:cd:9e:d8:a0:53:85:03:e7:8f:b9:96:12:96:6b:
                    0c:b9:d8:c8:af:39:62:6d:8b:51:2c:01:a9:02:d4:
                    dc:b3:82:00:1a:a4:19:71:47:94:17:a1:07:87:bb:
                    54:bb:c4:b4:36:bc:2d:25:b4:28:09:be:7d:2f:b0:
                    e1:a7:b3:3d:85:4a:20:15:85:e3:4f:2d:91:ae:b3:
                    44:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C4:28:BA:C3:78:90:53:20:5D:6C:E8:24:88:8F:4F:D2:9D:27:D1
            X509v3 Authority Key Identifier:
                keyid:85:A9:5A:DD:2C:F5:87:74:03:0B:6A:9B:93:B4:11:38:6F:E3:06:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:83:08:63:76:fa:98:24:4c:fa:99:93:a4:0c:15:dd:f4:a9:
         bd:2f:3e:b5:3f:81:6f:2c:6b:30:f6:d8:31:f4:d0:a5:78:e7:
         03:d3:7e:65:36:cb:c5:10:76:b4:9c:f5:27:db:47:0f:1d:be:
         0c:d2:ef:b1:bd:3c:69:85:cb:d3:de:f4:26:b0:56:23:45:d3:
         fa:9c:14:29:a5:e4:ff:f1:6e:a5:40:56:d0:cc:86:8b:bc:bd:
         24:a8:50:16:3f:6c:8f:e3:8a:c9:ae:7f:25:13:82:1f:4f:8e:
         4e:de:14:d5:22:07:b0:3e:d9:25:94:fd:87:f4:8f:33:1a:73:
         3f:ea:2d:c2:79:d5:1d:9b:17:3e:c9:01:1d:92:69:19:77:8e:
         a1:d7:c5:e6:2c:92:c6:04:87:bd:f2:fc:a0:a0:53:36:1b:7c:
         5d:43:d4:20:34:33:69:58:47:cf:26:0c:ff:53:94:b9:cb:73:
         85:27:63:80:ff:d4:c6:a7:aa:e0:f4:2a:ab:14:fc:44:a3:53:
         12:54:0f:78:69:3e:63:a3:f6:63:e4:8b:09:29:f2:d6:ac:25:
         54:36:e8:64:d7:66:91:f3:a1:59:4b:18:88:ab:df:91:c3:cc:
         ca:fa:26:3e:f0:73:6c:1f:2d:e6:58:a7:b5:41:7c:2d:9a:bb:
         89:77:fe:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 02:26:15 2025 by rpki-client