Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
File: 1b-H2jRmyC2MbY40473YW8050us.mft (raw, json)
Hash identifier: sM7pNs84CCKTr8QSAt1HRopGHHkIhX5o98MWS4JhMVc=
Subject key identifier: 5A:83:67:36:20:3C:E5:E8:82:85:C4:EE:E1:78:6C:B7:E1:BE:61:08
Authority key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Certificate issuer: /CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Certificate serial: 0E6C
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
Manifest number: 0E64
Signing time: Thu 17 Apr 2025 00:35:26 +0000
Manifest this update: Thu 17 Apr 2025 00:35:19 +0000
Manifest next update: Sat 19 Apr 2025 00:35:19 +0000
Files and hashes: 1: 1b-H2jRmyC2MbY40473YW8050us.crl (hash: aAoe5ut+VEAd+WEof8RNobz0NneyX61TLnjlZ6DJoJA=)
2: QDrQFAXpeziMuD5pbQudgLuguLg.cer (hash: NCStj/i7KlY2Ak+W+wwurLtHm0ApfNUw0aHhTIl52Rg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 19 Apr 2025 00:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3692 (0xe6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=LACNICTOAFRINIC, serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Validity
Not Before: Apr 17 00:35:19 2025 GMT
Not After : Apr 19 00:35:19 2025 GMT
Subject: CN=68004cc8-df2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:32:c9:37:f6:31:34:93:71:63:33:0f:d3:71:
d1:17:63:28:bc:bb:b5:e8:45:e3:dd:85:0a:04:5a:
d7:6a:22:bc:93:f2:23:39:07:d0:2b:18:8f:39:16:
f9:18:07:bd:20:f6:f4:e7:84:d0:45:f2:d0:9b:17:
c7:23:de:0c:8c:38:35:69:5a:06:c2:db:e0:d7:0f:
90:75:98:91:b2:28:ae:2d:3b:f2:2a:c5:5f:d7:7a:
22:a1:c1:83:71:ea:ae:b9:d6:77:79:ad:54:d9:08:
31:b5:9e:cd:d4:7c:2e:c3:53:7f:e4:f5:08:31:dc:
51:34:74:9d:fe:2e:c1:77:64:ca:9a:72:25:63:62:
49:aa:c3:32:5f:07:4e:a7:0c:33:75:ca:7f:87:e5:
92:1a:0c:fe:5b:3a:59:05:bd:c1:75:07:a0:27:fe:
0f:7c:6b:47:6a:43:d1:56:68:f5:65:1f:57:ce:13:
66:a8:38:96:47:59:6e:a3:32:13:5c:f3:42:6d:c7:
e6:4d:99:7e:be:51:a8:c9:9a:a3:9c:1c:30:85:ac:
d6:1a:09:ac:55:49:5e:65:50:53:19:07:80:48:2c:
50:cb:07:9f:7c:22:37:49:52:f5:c2:11:23:3d:9c:
f8:9f:7c:3b:c4:31:3a:8a:ee:cc:a6:0e:4b:db:d8:
da:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:83:67:36:20:3C:E5:E8:82:85:C4:EE:E1:78:6C:B7:E1:BE:61:08
X509v3 Authority Key Identifier:
keyid:D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:e1:04:f9:1c:23:0d:db:a8:a7:81:6d:fa:94:db:7c:32:47:
cd:ec:01:9a:61:35:2c:78:dc:97:b0:11:17:32:dc:d2:16:f9:
c9:0f:73:4d:ad:48:3e:f4:31:90:b6:31:41:e1:17:67:8d:0e:
5b:ea:bb:f2:9b:ce:67:b1:4f:6c:b3:f8:65:5b:e3:12:ca:dc:
4c:d1:99:40:38:be:2c:eb:1b:0a:e4:44:bb:5a:d3:25:0e:bf:
00:20:32:80:10:ae:81:5d:52:94:81:e1:dc:04:dd:21:84:fe:
7c:3e:73:c4:10:18:bc:e8:60:dc:e5:e0:56:87:05:d4:c0:c7:
c8:31:24:2c:6e:56:93:51:d9:72:4f:de:a6:cf:70:5c:42:c3:
10:b0:72:98:a2:89:cb:52:34:ba:b5:0e:7b:95:b5:8a:34:c2:
46:a6:34:5c:f2:f7:9a:c7:20:b6:9b:c6:e5:a3:dc:c3:af:06:
a7:c1:cd:16:95:d6:d8:70:87:8e:34:94:1b:1b:34:0a:0d:76:
ca:67:8a:d5:44:2f:a8:97:24:c6:b0:e9:aa:9e:79:cc:ef:82:
fd:7c:60:5b:b7:fa:7c:1c:e4:5a:cf:01:d9:0e:3c:cb:ad:b8:
de:c9:bc:7b:fe:51:52:72:fd:0f:58:ed:44:3c:29:17:a3:56:
9b:cd:36:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:57:16 2025 by rpki-client