Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
File: 1b-H2jRmyC2MbY40473YW8050us.mft (raw, json)
Hash identifier: DIVcCSrgay7QAVdWVkNcaxNXQKeDms7fIn0Y1ef3tnA=
Subject key identifier: CD:7C:E2:B2:78:7D:3A:79:3B:0D:BB:0D:7A:84:9F:A2:D6:AC:31:9C
Authority key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Certificate issuer: /CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Certificate serial: 0CFD
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
Manifest number: 0CF6
Signing time: Wed 24 Apr 2024 00:20:13 +0000
Manifest this update: Wed 24 Apr 2024 00:20:11 +0000
Manifest next update: Fri 26 Apr 2024 00:20:11 +0000
Files and hashes: 1: 1b-H2jRmyC2MbY40473YW8050us.crl (hash: SLmlFZGGAsNW07oga7LUfS5uFBr7vb+DxfGbwAx7dRk=)
2: QDrQFAXpeziMuD5pbQudgLuguLg.cer (hash: JJ37I0exiv8TadzvWI/EPPKTpn77BpMisPZctbKqt0M=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 00:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3325 (0xcfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Validity
Not Before: Apr 24 00:20:11 2024 GMT
Not After : Apr 26 00:20:11 2024 GMT
Subject: CN=6628503b-7763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:58:a0:68:2e:15:e0:a2:a1:df:3c:aa:7d:5f:
9d:e7:ee:d3:68:d9:f8:84:01:3e:e7:2a:b8:c5:04:
fd:dd:4f:91:28:f3:11:ff:70:ab:89:e5:87:3c:a1:
90:f2:a2:1a:0f:e7:73:26:31:33:67:6c:bd:b8:6a:
72:d7:2f:60:87:9b:25:94:65:41:c4:5d:6f:6e:47:
9f:f1:27:68:71:a7:f9:33:7e:d5:08:20:2e:f9:15:
4a:cb:66:22:5d:80:50:a3:90:27:3e:b2:4b:8b:fa:
84:8f:17:46:f7:fa:80:83:08:30:6a:a4:16:f0:93:
36:ee:af:b3:82:e8:13:05:c7:a6:ad:d3:86:b2:43:
45:1e:f0:b6:e9:98:a4:58:ed:58:19:81:4b:46:fa:
04:4a:e8:b0:a3:a1:25:cd:87:3b:c0:02:6c:42:59:
c6:77:15:16:62:01:11:bb:11:20:cc:68:d4:51:8a:
d2:22:75:3a:ee:b2:24:16:15:04:a5:90:3c:77:98:
c8:b1:a2:ee:e7:13:fd:9b:1b:51:f7:d4:2a:aa:8b:
11:cd:98:bb:5c:55:76:6c:65:64:78:30:95:11:a9:
db:0a:14:78:18:2e:02:c7:83:8c:2c:76:d8:08:09:
27:52:27:35:e4:9d:1d:9b:76:d8:2f:bc:ea:60:b4:
f7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7C:E2:B2:78:7D:3A:79:3B:0D:BB:0D:7A:84:9F:A2:D6:AC:31:9C
X509v3 Authority Key Identifier:
keyid:D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:8f:51:c6:4f:f4:7c:2a:ef:8e:58:cf:5e:60:30:4f:46:d9:
50:bb:93:76:8c:be:03:5f:3f:f6:82:33:b6:a1:54:02:22:d6:
94:ee:a3:52:a6:d4:a2:a7:7a:cd:04:7a:92:c1:c4:ba:4a:f1:
f3:d1:d7:10:82:c0:13:5c:33:8e:41:ca:d0:a0:71:3b:48:af:
18:c5:26:f6:39:3b:42:10:d9:fb:a6:fd:a2:d1:ea:81:e9:07:
35:c7:15:a8:f1:16:dd:e8:82:dc:91:17:f6:c9:17:9a:d4:9c:
49:af:b9:df:70:80:1a:6f:27:79:4a:de:2c:d5:f5:d3:74:7c:
03:db:b5:76:66:de:14:8d:52:c4:c8:7f:06:b4:39:61:89:84:
08:14:3d:27:af:16:a9:b2:4e:d1:19:e7:9c:56:ed:9c:64:f2:
84:47:62:db:97:ec:65:8e:f5:86:c6:22:ea:c5:d5:1b:a8:d1:
73:3d:ff:1c:d1:0d:94:92:c5:ad:87:7e:6f:28:06:9d:48:b8:
2a:22:02:dc:78:95:47:75:2d:e5:4d:17:cc:19:78:fb:5c:c5:
1c:fc:3b:38:7f:fc:c9:15:8e:19:80:57:6a:88:f0:c1:65:a2:
cb:d4:4f:b3:3f:c9:c7:50:cb:ff:29:55:24:29:2c:01:20:06:
d9:c1:09:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 01:55:48 2024 by rpki-client on console-ams.rpki-client.org