Manifest
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2313c386-130b-4422-8c45-26b5158a3f9a/df0cf296a05fe6769855d4d68aa95a8328ee45d9.mft
File: df0cf296a05fe6769855d4d68aa95a8328ee45d9.mft (raw, json)
Hash identifier: AYMXpL7wmLEh4ihwC5zLDzPmrBNyjwwW/3hMvs5arQw=
Subject key identifier: 74:2F:56:F4:BC:AE:98:B5:61:81:B1:A7:15:05:1D:5D:A9:99:E3:A5
Authority key identifier: B3:7C:1A:7C:5B:82:57:D2:3E:34:BB:4F:92:BE:33:0F:F3:EF:1A:D3
Certificate issuer: /CN=df0cf296a05fe6769855d4d68aa95a8328ee45d9
Certificate serial: 08B2EB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df0cf296a05fe6769855d4d68aa95a8328ee45d9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2313c386-130b-4422-8c45-26b5158a3f9a/df0cf296a05fe6769855d4d68aa95a8328ee45d9.mft
Manifest number: 0496
Signing time: Mon 15 Apr 2024 05:21:02 +0000
Manifest this update: Mon 15 Apr 2024 04:20:17 +0000
Manifest next update: Thu 18 Apr 2024 06:53:17 +0000
Files and hashes: 1: df0cf296a05fe6769855d4d68aa95a8328ee45d9.crl (hash: xtYcsT3doOdIrcGuHs4+vJ4GwAW8a31+nYPeODI/GaI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 570091 (0x8b2eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0cf296a05fe6769855d4d68aa95a8328ee45d9
Validity
Not Before: Apr 15 04:20:17 2024 GMT
Not After : Apr 18 06:53:17 2024 GMT
Subject: CN=0631f2024828ef165dedf72df1291caf6cd53dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c2:1b:53:67:ed:86:8f:e2:a4:e5:a8:9a:e3:
61:60:4a:79:a1:18:19:e5:23:f3:47:ad:c0:ac:e8:
b4:67:32:cb:b5:2a:29:42:5d:08:5c:76:f5:04:9f:
30:c4:ef:78:25:60:7c:db:82:75:21:f3:11:d4:a9:
b0:c9:a1:5b:09:4b:3a:55:41:47:49:4d:f6:d0:66:
3d:03:40:95:18:e2:2f:6a:50:ae:b9:86:5b:7a:e6:
17:ca:6d:55:02:65:e6:7e:11:97:73:41:5b:1b:4e:
38:75:cf:e7:6d:11:3c:6d:89:bc:a1:7a:f6:6f:cb:
af:44:09:8c:41:93:d8:76:63:02:1d:6c:c4:ad:25:
82:b2:c5:df:01:df:45:8f:80:bd:13:6d:aa:1f:c4:
b0:29:0e:5b:fd:dd:c5:bf:4c:71:65:d1:c8:33:39:
0b:6c:9b:2c:f1:00:92:2a:65:d8:de:8c:26:05:75:
67:f6:1d:97:48:a1:0b:f3:32:58:6f:d6:f5:3d:66:
81:32:e5:f9:1c:c4:ca:29:11:4f:df:a3:13:8e:21:
4d:fe:f9:14:29:44:62:0a:1f:4c:a2:2e:ae:2a:1e:
3d:22:e0:b0:8e:8d:cd:c0:d5:58:8b:da:cc:4c:fd:
70:b4:8f:0c:0d:8b:46:f7:92:8c:44:e8:8e:bf:3b:
27:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2F:56:F4:BC:AE:98:B5:61:81:B1:A7:15:05:1D:5D:A9:99:E3:A5
X509v3 Authority Key Identifier:
keyid:B3:7C:1A:7C:5B:82:57:D2:3E:34:BB:4F:92:BE:33:0F:F3:EF:1A:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df0cf296a05fe6769855d4d68aa95a8328ee45d9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2313c386-130b-4422-8c45-26b5158a3f9a/df0cf296a05fe6769855d4d68aa95a8328ee45d9.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2313c386-130b-4422-8c45-26b5158a3f9a/df0cf296a05fe6769855d4d68aa95a8328ee45d9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:7c:62:de:fe:8d:52:26:d8:81:7c:a5:a8:e0:f2:25:9c:ba:
c5:0d:83:a8:a9:d3:a4:d8:98:34:cf:1a:78:2b:a8:74:79:b2:
65:99:72:4b:85:4b:09:8f:b5:7c:a2:75:2c:0e:1b:8d:8e:c2:
ef:4f:25:07:1a:44:9d:21:cc:5d:0e:3c:97:de:ec:2a:51:1a:
49:ef:3c:28:3f:f8:72:27:0c:cd:d5:0f:d6:90:bf:77:e8:0b:
dc:0f:7d:17:45:b1:b8:c2:84:60:89:d4:bf:bf:32:a9:4e:d6:
e2:f7:03:04:87:d9:8a:91:b5:b7:f0:3c:8b:a5:fd:70:6e:19:
54:ce:65:94:10:37:a3:da:c7:ae:55:4a:76:8f:03:22:26:74:
dc:ac:85:ff:e7:85:eb:0f:34:37:39:b8:bd:92:fa:b8:60:cc:
68:20:5c:59:9a:d7:60:2c:31:fc:5c:87:b1:87:40:74:e6:3f:
7a:07:93:b6:13:b7:20:a0:5e:19:d2:cc:70:14:b0:cc:a8:73:
77:87:71:fe:20:9c:f4:eb:5e:40:c3:20:35:fd:85:47:3c:40:
24:40:98:3e:9f:ff:c3:a2:74:11:ee:57:2d:22:27:10:e1:7a:
35:11:09:b1:4d:30:ad:9c:de:f8:be:0f:54:7f:bf:e9:3e:0c:
5b:9e:5c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:24 2024 by rpki-client on console-fra.rpki-client.org