Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
File: 1b-H2jRmyC2MbY40473YW8050us.mft (raw, json)
Hash identifier: NYF93AotfpGApq9ANCEL0UiVeHv6SvA7gP4rdEsNJcM=
Subject key identifier: ED:C8:30:33:F1:FD:AA:0B:DB:E1:D5:16:0D:1A:E6:B5:8D:1E:31:DD
Authority key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Certificate issuer: /CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Certificate serial: 0D07
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
Manifest number: 0D00
Signing time: Sat 04 May 2024 00:20:13 +0000
Manifest this update: Sat 04 May 2024 00:20:11 +0000
Manifest next update: Mon 06 May 2024 00:20:11 +0000
Files and hashes: 1: 1b-H2jRmyC2MbY40473YW8050us.crl (hash: +KtEIS0Vb2/F7qcANN+li6ek/tbzj3bO+hCeyYZQ5to=)
2: QDrQFAXpeziMuD5pbQudgLuguLg.cer (hash: JJ37I0exiv8TadzvWI/EPPKTpn77BpMisPZctbKqt0M=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3335 (0xd07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Validity
Not Before: May 4 00:20:11 2024 GMT
Not After : May 6 00:20:11 2024 GMT
Subject: CN=66357f3b-af76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9d:4c:c6:84:bd:00:8f:81:4f:1a:4f:05:a7:
e4:0e:c4:62:ed:a3:b0:f8:92:fc:7d:e6:6e:d9:9d:
dc:1f:9a:f2:a8:18:a2:13:a1:0f:ed:b6:59:f1:de:
76:3e:b8:83:f1:0d:bb:8b:93:5a:f4:9e:51:8a:29:
51:40:4a:5e:d1:63:a7:13:e2:78:2c:3c:d0:ee:39:
75:97:23:98:67:85:56:5d:07:a0:ba:06:04:f2:92:
71:93:ce:99:11:6a:d0:5f:c3:16:6b:08:d4:3c:65:
d3:63:ea:23:34:1d:d8:1c:2b:ec:37:13:28:14:7a:
5f:34:00:9c:af:95:1e:12:f7:7d:3a:9c:f7:f9:71:
2c:44:17:83:3d:6b:d6:bb:78:af:3b:10:bf:8f:89:
43:92:29:b1:97:34:46:b1:46:de:61:e0:8b:51:73:
e3:b3:d4:b4:eb:3a:4f:fc:55:8c:b0:af:9b:a2:b8:
fb:c2:a3:64:71:8f:4e:42:b3:25:88:c9:91:67:41:
40:f4:db:f2:db:12:e7:c3:0c:cb:5f:9f:05:5f:90:
26:c1:60:04:00:17:5c:5d:9a:c5:95:00:da:12:67:
66:ba:c0:f6:0b:77:f5:40:bd:23:59:91:bd:55:19:
e1:9e:5e:6c:3a:8a:db:19:6b:b5:cd:2c:5e:76:5e:
ba:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C8:30:33:F1:FD:AA:0B:DB:E1:D5:16:0D:1A:E6:B5:8D:1E:31:DD
X509v3 Authority Key Identifier:
keyid:D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e9:16:92:75:5e:b2:6d:8e:0f:d0:f5:71:ef:1b:0d:1f:11:
95:88:4b:cb:5a:98:bd:4f:8f:33:bc:c3:c7:a5:fe:ea:0e:d9:
65:bd:7d:06:56:f6:43:22:a6:ff:d6:2a:85:f0:a3:09:d9:2c:
49:cb:64:06:54:60:5d:8f:6a:c6:cc:c1:e3:25:fa:36:11:ab:
60:f3:22:53:79:40:25:ef:aa:db:02:60:e1:5a:30:8c:82:12:
84:24:98:23:fa:d8:86:67:84:09:04:56:1f:6f:c7:b3:58:cf:
69:15:9d:96:0e:46:61:03:07:9c:00:3d:46:ad:d5:42:20:ce:
8e:b1:9d:d2:48:23:61:63:86:f7:1b:2c:e7:6a:43:22:7b:71:
89:2a:14:53:d4:1d:a8:4b:78:3a:3d:47:29:45:be:e7:a6:7f:
3d:84:cc:63:b0:0b:fd:4e:cd:e0:c5:93:a7:17:f1:55:06:3c:
61:d0:48:c5:55:38:68:6c:8a:58:45:54:4f:41:91:0c:8d:e2:
3a:fa:93:fe:0b:96:18:36:00:e2:0c:43:dc:19:43:a7:39:90:
eb:2c:36:9c:38:a6:22:85:ba:94:60:f8:65:dd:1f:4c:7a:e2:
97:e1:58:39:a5:13:a9:5e:0f:1e:35:8a:12:d5:12:e7:6e:97:
c2:d3:94:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:37:12 2024 by rpki-client on console-fra.rpki-client.org