Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
File: 1b-H2jRmyC2MbY40473YW8050us.mft (raw, json)
Hash identifier: N2fQx4mLSj6HAVfSQV6S/lzqwWgxc9AbJmZtZUudO0c=
Subject key identifier: 71:B8:3E:01:9D:69:3F:A9:72:8D:CE:37:E5:B2:D9:9F:06:F9:DB:F6
Authority key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Certificate issuer: /CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Certificate serial: 0E7B
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
Manifest number: 0E73
Signing time: Fri 02 May 2025 00:35:26 +0000
Manifest this update: Fri 02 May 2025 00:35:20 +0000
Manifest next update: Sun 04 May 2025 00:35:20 +0000
Files and hashes: 1: 1b-H2jRmyC2MbY40473YW8050us.crl (hash: ijzJ5et2u789vFKmC8kkeVC0UsijknlwMjg9DAvEJh0=)
2: QDrQFAXpeziMuD5pbQudgLuguLg.cer (hash: NCStj/i7KlY2Ak+W+wwurLtHm0ApfNUw0aHhTIl52Rg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 04 May 2025 00:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3707 (0xe7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=LACNICTOAFRINIC, serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Validity
Not Before: May 2 00:35:20 2025 GMT
Not After : May 4 00:35:20 2025 GMT
Subject: CN=68141348-ac1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cd:64:b7:2f:1f:4f:3d:e1:76:de:ac:e1:fc:
ea:c7:b4:c8:82:5e:1f:fc:52:96:55:e3:4f:41:0b:
05:37:0d:ea:49:40:50:b1:95:4c:a7:3a:90:3e:74:
da:66:5c:95:f3:c0:6d:5f:7e:c6:3c:a4:35:7c:05:
6d:4e:5c:08:f1:03:3c:41:94:2d:59:7b:cf:4b:3d:
7b:8c:0a:40:31:99:7e:b9:a6:56:04:0d:6b:cc:c9:
77:fb:54:fb:4e:25:0b:02:ff:fc:5b:a4:b2:30:a9:
5f:7b:ab:10:37:80:67:42:ab:cb:35:ba:8e:c2:cc:
91:40:0b:9a:e3:87:65:69:4d:fd:bd:16:c7:b8:1a:
6e:09:45:0e:9b:13:34:b5:b1:06:59:32:be:15:c2:
da:e1:f4:0b:70:42:a8:6a:83:ae:1f:84:60:87:51:
6c:50:a4:20:93:f4:fc:c3:e5:93:33:55:14:c8:40:
2c:76:05:32:5a:74:56:9f:8e:86:43:e6:70:01:30:
98:b5:96:e5:b7:0a:19:12:f3:1b:a7:37:c7:c7:18:
f6:90:48:0c:1c:49:35:d2:8f:2a:4c:5b:6e:b6:6a:
c4:b3:5c:b9:99:ff:24:0f:57:2d:c2:7c:73:ff:c1:
05:86:8f:a9:00:f7:45:c0:dc:cc:e7:a6:60:97:80:
f3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B8:3E:01:9D:69:3F:A9:72:8D:CE:37:E5:B2:D9:9F:06:F9:DB:F6
X509v3 Authority Key Identifier:
keyid:D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:a5:f3:d8:eb:c0:41:e4:24:00:ff:5c:e9:0a:c0:9f:d3:e4:
d2:60:db:11:d5:95:9b:98:12:66:ee:5f:a5:9a:4c:7f:9a:57:
6c:ff:ce:24:66:49:e4:39:6c:35:fc:89:62:58:6c:a1:8c:ef:
cd:e1:36:5e:f5:5e:a0:0d:56:da:a3:c7:01:4e:1d:d3:90:ab:
c7:1c:a0:a8:d4:f7:de:83:f9:d8:f7:a2:b5:e2:5a:bd:e5:d5:
ee:fb:e5:7b:e5:38:a4:e3:b0:23:d0:a1:f4:0e:b6:1c:73:53:
93:63:1f:35:bb:0d:ed:c0:db:52:96:13:4a:c9:84:6e:c4:49:
34:15:e9:37:b7:52:e2:7d:ae:db:48:ad:64:12:8a:71:ac:7a:
d4:3d:88:72:fb:e4:52:32:d6:1d:9a:a5:13:10:d2:7b:ee:b2:
1a:cb:f1:5c:ef:9e:4d:9d:48:35:a4:4e:cb:cf:33:87:1f:ee:
be:b2:ba:c0:d5:89:34:46:1a:03:4f:94:0e:4f:a5:13:c6:6e:
cf:51:5e:6d:b3:03:e6:89:f5:3f:90:83:12:83:76:46:6a:14:
90:90:cd:c2:7f:b6:b0:32:9d:5f:10:6e:31:47:8a:eb:8a:7f:
ed:8b:1c:ca:ad:37:c8:74:96:d5:35:49:99:04:27:84:d3:a9:
b0:29:52:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 21:14:09 2025 by rpki-client