Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
File:                     1b-H2jRmyC2MbY40473YW8050us.mft (raw, json)
Hash identifier:          S4wiRYwZ/eZIp2dfnSO1NzYHqeaS0sQBkTu9oV94VP0=
Subject key identifier:   E8:55:80:AA:D3:5D:38:11:7B:EE:01:4E:23:71:D4:70:A8:A8:EF:08
Authority key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Certificate issuer:       /CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Certificate serial:       0F36
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
Subject info access:      rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
Manifest number:          0F2E
Signing time:             Tue 04 Nov 2025 00:35:20 +0000
Manifest this update:     Tue 04 Nov 2025 00:35:12 +0000
Manifest next update:     Thu 06 Nov 2025 00:35:12 +0000
Files and hashes:         1: 1b-H2jRmyC2MbY40473YW8050us.crl (hash: bqv0fxB1qflAh4FtTlZ+5UMoKL+UHT554tVjCx2GHlg=)
                          2: QDrQFAXpeziMuD5pbQudgLuguLg.cer (hash: NCStj/i7KlY2Ak+W+wwurLtHm0ApfNUw0aHhTIl52Rg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
                          rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3894 (0xf36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=LACNICTOAFRINIC, serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
        Validity
            Not Before: Nov  4 00:35:12 2025 GMT
            Not After : Nov  6 00:35:12 2025 GMT
        Subject: CN=69094a41-5212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a8:17:fc:51:2f:e7:76:4b:e0:0a:8e:cf:28:
                    97:8d:b9:4a:17:3e:40:e2:a2:05:86:65:15:b3:97:
                    c1:bb:7c:e1:86:30:96:a1:d1:f5:23:05:88:60:af:
                    63:1e:d4:d5:82:14:df:7c:1e:d8:f6:09:95:76:75:
                    e3:7d:70:31:2b:40:f6:a0:0f:00:97:65:d7:37:e6:
                    d8:f1:a9:dc:00:33:79:71:3f:67:27:0c:a0:93:fd:
                    ab:eb:5a:69:85:41:da:d8:09:8c:2c:ba:ab:8d:87:
                    03:75:e9:24:85:29:b5:22:16:b8:c3:4d:63:0e:4f:
                    8d:d1:cf:58:dd:dc:05:5f:45:02:82:84:13:1e:88:
                    f2:47:63:3e:71:15:15:0f:f5:3c:02:c7:1d:1a:e0:
                    28:ff:d7:d3:ce:b3:d7:9c:49:1f:d3:af:0d:c0:c6:
                    87:2d:49:89:67:bd:1c:89:96:3e:c0:ab:97:18:0e:
                    19:7b:d3:e4:0e:cb:ac:0c:d5:00:ff:66:0e:c3:b7:
                    88:50:5e:2a:ea:e0:35:1c:1d:4b:4f:85:01:12:56:
                    64:43:9d:fe:14:36:39:97:11:92:4d:a5:b4:63:45:
                    16:59:a6:26:2b:ad:0a:d4:8a:7f:c1:9c:86:98:f3:
                    1c:33:7b:4d:b7:02:e9:d2:b7:63:19:19:db:0f:f4:
                    66:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:55:80:AA:D3:5D:38:11:7B:EE:01:4E:23:71:D4:70:A8:A8:EF:08
            X509v3 Authority Key Identifier:
                keyid:D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:6a:da:d4:48:f4:4f:22:ea:e5:b7:f8:7e:b2:1b:91:7f:fd:
         07:94:b2:f6:cf:24:60:d3:c5:3c:f3:5d:07:46:cc:c6:0b:78:
         3b:2b:18:a6:6f:a3:2f:3b:2f:56:52:d2:bb:66:eb:a8:db:0a:
         4a:39:e7:bd:90:1f:c7:d1:de:3e:05:c2:9b:cd:76:a0:e4:25:
         8f:45:ae:da:9e:af:d6:ab:a2:3e:a6:3f:f1:f9:ef:c7:cf:60:
         f8:2d:3f:63:42:ea:85:00:9b:ff:76:fe:e1:3d:91:98:b4:34:
         6b:69:62:2f:2e:48:1f:00:5e:76:7c:85:e6:d8:63:60:5b:7f:
         b6:a0:dd:cc:b7:7b:02:67:27:e3:cb:5e:07:57:a1:f8:12:49:
         0b:c8:b1:46:de:c3:cd:7a:d5:0a:d6:0c:c7:5b:e6:3b:13:8a:
         b5:b7:ef:e8:4e:c8:c5:9b:c9:ab:57:35:d5:54:6b:f4:88:3d:
         b4:4f:3c:1f:f3:0c:78:1d:99:6e:ac:0b:8b:bd:8a:10:dc:0f:
         e1:aa:7a:87:f3:f2:9b:a6:25:93:d8:a4:20:1e:59:96:27:14:
         18:b2:00:62:2a:25:3f:cd:b8:1f:37:f3:8c:b9:fc:94:e5:ef:
         35:e8:c0:a0:7d:5c:fc:6a:b3:87:8d:67:45:d7:4b:d1:5b:9e:
         76:39:07:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:35:49 2025 by rpki-client