![](/console.gif)
Manifest
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/083727e2-5f88-4d83-aba6-95e0c39f559c/289abcd1e1f93d61bdc6909a719a00037281ea11.mft
File: 289abcd1e1f93d61bdc6909a719a00037281ea11.mft (raw, json)
Hash identifier: zVOHis836H7z4THVG1SWYujySC482H3nfX3bBaXDi4c=
Subject key identifier: 26:A6:7B:38:58:A8:22:B4:3E:13:42:20:45:5C:CC:31:03:F3:9F:C7
Authority key identifier: D5:29:FD:D5:66:5C:30:7F:C4:06:94:85:C2:E8:C5:FD:34:86:24:73
Certificate issuer: /CN=289abcd1e1f93d61bdc6909a719a00037281ea11
Certificate serial: 2777F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/289abcd1e1f93d61bdc6909a719a00037281ea11.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/083727e2-5f88-4d83-aba6-95e0c39f559c/289abcd1e1f93d61bdc6909a719a00037281ea11.mft
Manifest number: 0DFA
Signing time: Mon 15 Apr 2024 01:21:12 +0000
Manifest this update: Mon 15 Apr 2024 00:20:17 +0000
Manifest next update: Thu 18 Apr 2024 02:07:17 +0000
Files and hashes: 1: 289abcd1e1f93d61bdc6909a719a00037281ea11.crl (hash: H+zjsZh+fLSzELkFmZ8fLhvKbKrlxqv4SZ3+fwWWH3k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2586616 (0x2777f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=289abcd1e1f93d61bdc6909a719a00037281ea11
Validity
Not Before: Apr 15 00:20:17 2024 GMT
Not After : Apr 18 02:07:17 2024 GMT
Subject: CN=b59fda7a7236e125b5f9eb4b6ac173c52b2bf1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9f:3e:a1:e8:7b:77:52:e2:23:74:bf:0a:16:
71:8a:72:33:3b:7e:ca:66:00:e1:9e:e3:41:61:97:
83:ba:71:3f:ee:42:b4:d1:ae:be:2b:4a:cb:b3:1d:
df:42:4c:67:2f:10:8e:f7:fc:a5:0d:dd:8b:bf:18:
31:e1:a4:01:96:07:70:bb:fc:52:1e:77:dd:5d:ba:
39:8f:24:15:19:07:ee:d3:77:dd:b5:7f:74:a1:14:
02:90:64:55:57:0b:d1:45:bb:36:4d:78:a4:20:11:
07:4a:c2:9a:23:24:36:0f:c5:9d:d7:7c:3e:e1:91:
7d:98:46:ee:51:ca:ab:28:88:bf:00:e1:85:b2:76:
4b:bc:c6:83:ca:23:34:9e:a5:4e:8c:98:34:2a:01:
c8:ac:6f:3c:52:df:c5:ab:22:85:8e:3f:c3:8a:01:
29:a5:41:3e:7e:ef:fb:f2:b0:eb:d3:fd:87:52:e1:
48:26:93:e1:c8:c4:b6:26:44:9a:20:7b:50:ba:cd:
c1:0c:e4:1d:3c:03:35:36:ea:1a:71:c8:1f:a5:90:
3f:6a:c9:49:98:47:9f:47:0c:54:05:a6:08:01:f7:
ba:40:35:02:7a:34:d1:3c:e5:32:d0:e3:bc:9a:85:
c0:81:9b:74:99:42:13:a4:c7:42:60:2c:6d:36:2e:
72:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A6:7B:38:58:A8:22:B4:3E:13:42:20:45:5C:CC:31:03:F3:9F:C7
X509v3 Authority Key Identifier:
keyid:D5:29:FD:D5:66:5C:30:7F:C4:06:94:85:C2:E8:C5:FD:34:86:24:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/289abcd1e1f93d61bdc6909a719a00037281ea11.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/083727e2-5f88-4d83-aba6-95e0c39f559c/289abcd1e1f93d61bdc6909a719a00037281ea11.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/083727e2-5f88-4d83-aba6-95e0c39f559c/289abcd1e1f93d61bdc6909a719a00037281ea11.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:b6:f9:dc:ff:74:df:e2:80:30:b7:03:91:7c:50:d6:15:ae:
46:ab:0c:ce:24:42:00:68:52:69:05:24:07:3e:de:d1:40:b8:
ca:ef:90:25:92:52:90:be:69:ac:c8:b2:f8:2b:12:7c:4b:2e:
9f:0f:41:50:62:99:2f:be:c1:89:d4:e5:f9:49:20:3b:07:69:
ba:c0:38:08:55:1b:a6:ab:42:cc:bd:5f:51:29:0e:2f:be:53:
0c:b4:ab:50:4d:1f:ec:fd:64:16:d7:28:c7:f9:ff:11:fa:73:
08:3b:b1:6f:df:63:20:e6:eb:61:5d:3a:89:19:ee:d1:53:bc:
c2:b3:09:23:a4:d7:68:b7:65:e8:a8:ae:6f:7e:54:49:74:d4:
4b:59:45:75:2b:fa:4f:e7:a8:77:f7:ba:a0:2f:f7:ab:83:8a:
36:40:69:0d:04:75:a4:c3:2e:14:16:af:f0:72:c3:7f:62:f9:
5d:6e:9c:fb:54:10:9f:ec:6d:e6:d1:da:df:47:76:1a:98:90:
2d:51:7c:ad:c8:9d:35:92:07:44:5c:c0:e5:64:24:9d:37:00:
aa:7a:bb:e0:57:69:19:ca:3a:e0:4e:bd:46:70:f0:c2:dc:0b:
9c:66:b3:23:22:bb:8e:23:4e:8e:3e:36:fe:7d:e8:4a:39:d3:
b2:f6:89:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:55 2024 by rpki-client on console-ams.rpki-client.org