Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
File: 1b-H2jRmyC2MbY40473YW8050us.mft (raw, json)
Hash identifier: 3GCL+P53anft1nMDDQoBNOW4OJzwBYZjPNA0bUTfDDI=
Subject key identifier: EA:B2:6F:84:6E:8A:F4:B9:68:C0:35:11:5D:68:39:76:C1:39:6E:E5
Authority key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Certificate issuer: /CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Certificate serial: 0E85
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
Manifest number: 0E7D
Signing time: Mon 12 May 2025 00:35:29 +0000
Manifest this update: Mon 12 May 2025 00:35:21 +0000
Manifest next update: Wed 14 May 2025 00:35:21 +0000
Files and hashes: 1: 1b-H2jRmyC2MbY40473YW8050us.crl (hash: c+b2D5VExhLY2xOhNp4TA3UYkNgMsnNunad7C5AVACg=)
2: QDrQFAXpeziMuD5pbQudgLuguLg.cer (hash: NCStj/i7KlY2Ak+W+wwurLtHm0ApfNUw0aHhTIl52Rg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 00:35:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3717 (0xe85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=LACNICTOAFRINIC, serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Validity
Not Before: May 12 00:35:21 2025 GMT
Not After : May 14 00:35:21 2025 GMT
Subject: CN=6821424a-71b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:de:a0:5b:90:c0:f2:d9:45:25:21:06:c6:d0:
23:38:50:fc:44:1a:50:41:e5:54:be:46:24:74:b7:
13:8d:e7:2d:0a:d9:e1:ce:3a:64:ba:00:39:1d:36:
4d:5b:6a:d7:2c:29:56:c3:01:62:d1:b7:4f:69:77:
b5:e9:d8:05:c9:5a:c5:d5:52:6c:3b:1d:f8:81:4c:
e2:a1:f0:98:ec:b6:19:f3:47:ce:4c:5c:37:67:a0:
48:8a:ee:d6:c4:8e:2c:2a:5b:dd:4d:1a:19:08:e0:
71:08:12:12:84:c9:a5:ea:94:7a:7a:27:ba:3e:05:
94:bc:eb:52:20:9d:7a:2f:94:e8:06:1f:05:a5:2c:
bc:47:8b:e2:9b:33:81:d0:8f:42:e4:d5:e1:93:60:
70:3d:bf:2e:6d:a2:90:67:d5:22:64:f6:e6:3b:35:
47:65:9f:6c:c2:3b:99:23:71:b7:70:97:03:3b:0a:
b2:ba:31:bf:b3:d5:5c:24:74:ac:7a:eb:9a:de:5b:
17:5e:53:1a:a8:00:ae:0b:f9:0a:31:e2:e6:ed:b5:
43:ed:eb:38:e2:e5:3c:f2:8f:14:0a:8f:71:54:5d:
d5:2e:40:30:50:ab:0c:d9:b0:07:65:36:1f:a8:80:
9e:e0:8c:c2:7a:cd:c4:c0:9d:a7:d6:ff:47:78:1b:
67:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B2:6F:84:6E:8A:F4:B9:68:C0:35:11:5D:68:39:76:C1:39:6E:E5
X509v3 Authority Key Identifier:
keyid:D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:52:45:fc:bd:52:9c:83:3e:6f:9b:34:89:8f:21:10:2c:47:
db:20:8c:35:61:46:cb:3d:d8:12:28:12:0f:f4:38:3b:a0:31:
8b:fd:84:92:e2:d8:1a:62:83:5e:f0:5b:f1:79:79:16:72:9a:
22:ab:8d:b4:43:6a:ea:8d:a0:4a:a7:88:55:9e:e8:85:dc:06:
67:9e:96:44:80:4d:9b:44:e6:f7:8b:d5:df:ad:00:b2:a2:92:
1d:df:1a:ff:8d:6b:f4:98:d3:40:85:0d:25:09:8f:bb:61:2b:
c5:9f:17:cd:11:b1:2f:dd:7c:1a:29:49:13:9f:1b:49:0a:08:
01:d6:8b:7c:49:aa:e6:e5:dc:7e:05:4d:38:ac:31:c8:f7:ca:
73:ee:38:32:dd:65:dc:a6:83:20:5a:39:25:48:3b:80:b4:4f:
99:0a:66:79:8e:8c:b1:b7:9c:19:80:27:f5:fb:11:11:39:af:
05:e0:44:63:fa:20:ef:4a:f6:07:97:c1:6d:64:10:8c:8f:fd:
7e:84:e4:e2:bc:2b:64:a1:93:12:bb:e8:d0:fb:8a:b8:47:02:
e1:6e:21:78:bc:26:98:0b:3e:34:e7:ac:55:f4:b5:77:59:6f:
6a:bc:51:a7:cd:01:8b:0f:50:6e:50:52:e4:dc:53:ac:8c:b2:
d2:83:12:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:11:10 2025 by rpki-client