Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
File: 1b-H2jRmyC2MbY40473YW8050us.mft (raw, json)
Hash identifier: 0pqcLVFZTbLTgVKX4MjSxhr3zBIZ928hOlpPcdzECMs=
Subject key identifier: D2:42:72:15:E6:7C:FF:4D:59:E9:21:9E:89:AE:3A:3E:8C:CB:D8:66
Authority key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Certificate issuer: /CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Certificate serial: 0DD2
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
Manifest number: 0DCB
Signing time: Thu 21 Nov 2024 00:25:26 +0000
Manifest this update: Thu 21 Nov 2024 00:25:19 +0000
Manifest next update: Sat 23 Nov 2024 00:25:19 +0000
Files and hashes: 1: 1b-H2jRmyC2MbY40473YW8050us.crl (hash: pXfp0qMJid1f4dgusZlKfjL+zt4BfoViIHvM+HtTnzY=)
2: QDrQFAXpeziMuD5pbQudgLuguLg.cer (hash: JJ37I0exiv8TadzvWI/EPPKTpn77BpMisPZctbKqt0M=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:25:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3538 (0xdd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Validity
Not Before: Nov 21 00:25:19 2024 GMT
Not After : Nov 23 00:25:19 2024 GMT
Subject: CN=673e7df0-72de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d3:b4:e8:f0:3e:cc:77:87:22:7d:9c:0f:a2:
7a:b5:99:25:2a:1c:21:60:46:df:63:b1:99:61:26:
d4:dd:63:16:85:89:b1:54:85:ba:36:ef:78:76:65:
2b:b6:0e:e6:09:61:f9:e7:f4:93:61:77:d0:9b:6c:
a8:e1:64:67:65:54:0b:8a:65:41:f4:1d:9d:f2:c3:
31:0c:79:90:9c:bd:c0:58:2a:39:8b:9d:02:ef:13:
4f:1a:ec:e0:b0:8a:09:36:03:5e:8f:05:d6:9a:a8:
51:20:a0:3f:a9:d7:15:1d:06:c0:4c:21:2b:34:d9:
0c:3c:89:ff:58:24:9c:3b:e9:d9:9f:f7:a9:f0:c5:
b9:6f:a6:12:8b:3a:18:62:36:2a:64:07:85:c6:0a:
72:24:51:9b:56:c4:eb:56:e0:41:c7:91:79:c3:f3:
35:5d:40:5c:0c:17:e4:e1:49:8b:6d:ab:35:f6:eb:
b1:98:e5:a9:c8:83:fa:a5:60:26:64:32:88:60:eb:
59:01:2d:91:9a:8d:62:2b:ef:24:cb:03:f7:e2:3c:
56:8e:ff:23:58:fc:d3:6c:20:11:2d:05:b5:72:73:
3e:4c:48:99:1d:9d:9e:19:1e:73:76:a1:48:ed:d4:
58:aa:45:72:76:51:5d:b8:e9:8d:17:ef:1b:4c:57:
50:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:42:72:15:E6:7C:FF:4D:59:E9:21:9E:89:AE:3A:3E:8C:CB:D8:66
X509v3 Authority Key Identifier:
keyid:D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:08:fb:d0:79:16:10:b2:ef:e8:7d:de:be:28:23:a1:8b:e8:
2d:51:7c:96:d9:59:d3:c7:05:08:61:05:2b:86:ba:3d:0c:ce:
8f:77:66:ec:8e:c2:4f:7e:b5:14:75:81:32:b0:ae:9d:60:2f:
ff:b1:82:cc:64:58:1c:e2:f2:7b:ae:d3:cd:fb:ca:99:cb:c0:
3d:05:61:03:f2:d1:db:7b:ca:ac:89:a2:4b:16:77:45:33:95:
4b:5f:f3:4d:4e:c3:db:c8:79:18:fc:a6:9a:55:63:b2:38:6f:
32:77:76:d0:69:27:25:34:b8:9c:67:da:f3:9b:6d:df:77:2b:
c0:96:9a:84:c8:fd:c9:4e:86:46:d4:da:7f:de:15:d5:86:8f:
3d:0d:27:2b:77:c4:10:ae:34:7b:9d:47:95:8f:39:3c:5d:ed:
13:1e:dc:57:41:0a:2a:a2:3f:ce:65:20:b4:82:fe:ed:7d:30:
10:6a:46:3a:fb:1e:04:7a:6a:19:f9:56:9a:4c:c7:25:d7:01:
52:6a:89:12:74:f6:e2:19:09:00:0e:8d:e9:a6:52:39:d4:72:
26:c2:ec:85:1d:30:8c:74:36:75:07:d1:1c:62:22:ef:03:4a:
0c:72:7f:0a:38:e9:7b:61:85:91:43:bd:24:97:a1:88:3d:2f:
ca:a9:2a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:54 2024 by rpki-client on console-ams.rpki-client.org