Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
File:                     1b-H2jRmyC2MbY40473YW8050us.mft (raw, json)
Hash identifier:          jd08wS9FOkU3OAwA4YJYsF/B9b4ot9J6qDlhFeslQMo=
Subject key identifier:   6D:1E:EC:2D:58:4E:AD:30:72:F0:90:85:52:B5:88:74:18:B5:EB:CB
Authority key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Certificate issuer:       /CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Certificate serial:       0E76
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
Subject info access:      rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
Manifest number:          0E6E
Signing time:             Sun 27 Apr 2025 00:35:26 +0000
Manifest this update:     Sun 27 Apr 2025 00:35:20 +0000
Manifest next update:     Tue 29 Apr 2025 00:35:20 +0000
Files and hashes:         1: 1b-H2jRmyC2MbY40473YW8050us.crl (hash: SppkyQ9/iyts/letLFkllDVM5C/iC3sMDTySoqjT2Pw=)
                          2: QDrQFAXpeziMuD5pbQudgLuguLg.cer (hash: NCStj/i7KlY2Ak+W+wwurLtHm0ApfNUw0aHhTIl52Rg=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
                          rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:35:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3702 (0xe76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=LACNICTOAFRINIC, serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
        Validity
            Not Before: Apr 27 00:35:20 2025 GMT
            Not After : Apr 29 00:35:20 2025 GMT
        Subject: CN=680d7bc8-5f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:90:68:7d:a4:2a:e0:1f:fc:4e:81:e6:70:61:
                    fb:35:b1:85:1e:bf:28:51:e6:a8:71:a9:f5:e4:99:
                    63:cf:83:36:54:6a:7b:b5:b0:1b:96:1c:3b:27:72:
                    45:03:4f:c9:0a:26:76:a8:06:a9:24:d5:3e:71:78:
                    39:95:95:45:0a:94:5f:4f:24:a8:64:d0:20:35:ce:
                    10:99:82:6d:40:31:e9:96:ed:e5:a1:e3:2c:29:c8:
                    e1:a4:82:91:bb:c0:46:9b:b1:12:2f:17:45:97:89:
                    4d:88:57:1a:56:c2:8d:be:33:cb:a4:2a:bd:82:c6:
                    d6:00:b3:d2:d5:0b:14:52:42:a2:79:8b:f8:b8:af:
                    6c:80:92:3c:79:c9:a0:86:bd:e0:c8:4f:ce:89:0f:
                    90:ad:24:44:82:69:e0:14:d1:ea:19:47:04:7f:37:
                    cb:9b:be:00:1c:e3:e4:d3:bb:36:fa:1e:95:d8:90:
                    a1:92:08:49:58:70:a0:97:27:34:b0:02:35:bc:2c:
                    29:06:ed:a7:68:eb:f4:df:37:b6:f0:e9:be:84:19:
                    26:70:c0:03:ad:dc:68:77:0a:43:ac:c6:cd:96:8a:
                    9a:99:c9:ca:52:9a:36:cc:63:16:e7:a4:8e:cd:4c:
                    2c:0c:12:c5:15:61:a2:2c:51:4a:1b:a4:e8:e2:6e:
                    db:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1E:EC:2D:58:4E:AD:30:72:F0:90:85:52:B5:88:74:18:B5:EB:CB
            X509v3 Authority Key Identifier:
                keyid:D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:db:93:8d:64:52:18:54:28:bf:f0:60:da:67:6a:19:7f:16:
         18:bd:1a:89:25:b1:d1:77:61:16:93:6a:bf:7e:2a:91:19:d8:
         fa:09:2b:9b:dd:17:44:0c:61:5c:01:68:43:99:e0:f9:f0:2e:
         77:4b:86:9f:ea:91:ed:fc:92:cf:39:30:26:ea:80:18:4f:1e:
         26:74:ed:72:7e:7d:49:a3:0c:17:49:51:5e:98:11:b5:e1:5a:
         7a:36:d6:00:19:d1:13:27:63:dc:8a:c7:92:bd:84:1a:89:3c:
         08:5d:9a:ae:58:67:e7:a8:2e:e8:4b:ce:66:ae:ef:74:0b:d7:
         4d:ca:d3:c7:97:1d:4c:81:59:25:cc:15:61:8c:12:e1:b6:6f:
         7e:67:f9:ea:91:ed:5f:77:b4:00:3f:e7:d1:d6:fa:17:a9:1c:
         0a:a5:33:e2:da:cb:dd:7f:61:c8:f6:ea:ea:0b:25:bb:40:bb:
         46:d8:15:23:1f:eb:70:49:90:de:32:36:7b:79:7e:68:c4:f2:
         03:04:7e:11:eb:f5:02:7b:25:7b:46:59:05:e8:20:46:70:a7:
         92:0a:aa:3f:0f:97:72:e0:67:31:72:cb:72:7e:ea:ee:a3:b8:
         c5:b0:10:87:4c:98:83:ed:08:8e:f9:a9:58:98:d0:e4:61:36:
         dd:6c:30:36
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgICDnYwDQYJKoZIhvcNAQELBQAwTTEYMBYGA1UEAxMPTEFD
TklDVE9BRlJJTklDMTEwLwYDVQQFEyhENUJGODdEQTM0NjZDODJEOEM2RDhFMzRF
M0JERDg1QkNEMzlEMkVCMB4XDTI1MDQyNzAwMzUyMFoXDTI1MDQyOTAwMzUyMFow
GDEWMBQGA1UEAxMNNjgwZDdiYzgtNWYwMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMeQaH2kKuAf/E6B5nBh+zWxhR6/KFHmqHGp9eSZY8+DNlRqe7Ww
G5YcOydyRQNPyQomdqgGqSTVPnF4OZWVRQqUX08kqGTQIDXOEJmCbUAx6Zbt5aHj
LCnI4aSCkbvARpuxEi8XRZeJTYhXGlbCjb4zy6QqvYLG1gCz0tULFFJConmL+Liv
bICSPHnJoIa94MhPzokPkK0kRIJp4BTR6hlHBH83y5u+ABzj5NO7NvoeldiQoZII
SVhwoJcnNLACNbwsKQbtp2jr9N83tvDpvoQZJnDAA63caHcKQ6zGzZaKmpnJylKa
NsxjFuekjs1MLAwSxRVhoixRShuk6OJu278CAwEAAaOCAlYwggJSMB0GA1UdDgQW
BBRtHuwtWE6tMHLwkIVStYh0GLXryzAfBgNVHSMEGDAWgBTVv4faNGbILYxtjjTj
vdhbzTnS6zAOBgNVHQ8BAf8EBAMCB4AwWwYDVR0fBFQwUjBQoE6gTIZKcnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbGFjbmljLzFiLUgyalJteUMy
TWJZNDA0NzNZVzgwNTB1cy5jcmwwdgYIKwYBBQUHAQEEajBoMGYGCCsGAQUFBzAC
hlpyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS8wNEU4QjBEODBG
NEQxMUUwQjY1N0Q4OTMxMzY3QUU3RC9sYWNuaWMtdG8tYWZyaW5pYy5jZXIwTwYD
VR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jw
a2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwgZ8GCCsGAQUFBwELBIGSMIGP
MFYGCCsGAQUFBzALhkpyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9y
eS9sYWNuaWMvMWItSDJqUm15QzJNYlk0MDQ3M1lXODA1MHVzLm1mdDA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF
ADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBg25ONZFIYVCi/8GDaZ2oZfxYY
vRqJJbHRd2EWk2q/fiqRGdj6CSub3RdEDGFcAWhDmeD58C53S4af6pHt/JLPOTAm
6oAYTx4mdO1yfn1JowwXSVFemBG14Vp6NtYAGdETJ2PciseSvYQaiTwIXZquWGfn
qC7oS85mru90C9dNytPHlx1MgVklzBVhjBLhtm9+Z/nqke1fd7QAP+fR1voXqRwK
pTPi2svdf2HI9urqCyW7QLtG2BUjH+twSZDeMjZ7eX5oxPIDBH4R6/UCeyV7RlkF
6CBGcKeSCqo/D5dy4Gcxcstyfuruo7jFsBCHTJiD7QiO+alYmNDkYTbdbDA2
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:38 2025 by rpki-client on console.sobornost.net