Manifest
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24b64913-3f22-450b-888d-a02758dfa3a2/4a3da061670e8a3ce2d2ac68cbe5d12acead8eca.mft
File: 4a3da061670e8a3ce2d2ac68cbe5d12acead8eca.mft (raw, json)
Hash identifier: GEosLSCXmH9OAf95C4wuR8QgO/I6hNjuKavF35QmHsU=
Subject key identifier: 33:91:F3:85:1A:D6:31:74:6A:D9:C1:B6:60:A9:A5:D6:65:BE:24:06
Authority key identifier: DD:04:C7:59:99:C6:77:29:62:60:0E:C2:01:3D:94:4B:8E:1D:5B:62
Certificate issuer: /CN=4a3da061670e8a3ce2d2ac68cbe5d12acead8eca
Certificate serial: 084502
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a3da061670e8a3ce2d2ac68cbe5d12acead8eca.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/24b64913-3f22-450b-888d-a02758dfa3a2/4a3da061670e8a3ce2d2ac68cbe5d12acead8eca.mft
Manifest number: 4C
Signing time: Thu 12 Jan 2023 20:15:32 +0000
Manifest this update: Thu 12 Jan 2023 19:14:49 +0000
Manifest next update: Sun 15 Jan 2023 22:29:49 +0000
Files and hashes: 1: 4a3da061670e8a3ce2d2ac68cbe5d12acead8eca.crl (hash: UjCZ3Rq77YIQJ/QKEGwCadB06EP2ZVOxjkEQ8PSYNGI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 541954 (0x84502)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a3da061670e8a3ce2d2ac68cbe5d12acead8eca
Validity
Not Before: Jan 12 19:14:49 2023 GMT
Not After : Jan 15 22:29:49 2023 GMT
Subject: CN=45d62e66dd0d57a1d7917cc5a323fe7d23e12dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2d:88:46:12:2a:f9:7f:ae:a6:a9:af:79:34:
bc:9c:45:80:42:e0:96:b2:4d:3d:52:40:61:ca:92:
90:f3:b2:2c:bc:d3:b6:19:10:94:d7:ca:f4:84:95:
12:45:01:29:21:5f:30:10:78:a0:cf:cd:f6:8a:37:
f8:06:1a:f6:f8:fa:02:1e:52:36:1e:3b:28:c9:77:
c2:bb:e9:5a:4e:2b:d7:44:c7:c5:c9:3b:8f:c2:84:
1b:1f:e7:36:27:6a:cd:f9:43:e5:5b:59:b8:3c:24:
a5:81:20:19:9f:ed:86:da:dd:2e:9d:ed:36:44:33:
12:86:f9:f6:c1:8f:1d:9c:d1:cd:aa:cd:55:1c:23:
a7:62:99:c7:95:45:9d:d9:df:99:5f:63:7d:6b:4b:
38:07:57:40:b9:31:7c:c3:56:ce:7c:f6:6b:f1:a2:
10:90:95:b0:2a:42:3b:58:2c:11:e3:2d:af:34:97:
9d:30:52:ce:ec:34:68:f0:dc:02:3c:fd:7b:04:fb:
3c:61:4d:c0:19:f8:64:d4:4a:d2:41:6f:82:b1:92:
97:5a:3d:50:24:40:c8:cb:ad:aa:f7:d0:3c:4d:cd:
89:6b:cf:8a:57:59:f4:cd:38:3d:49:ac:13:e0:e3:
9f:63:e5:e4:8e:73:4c:e7:a3:56:16:3b:f7:cf:68:
83:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:91:F3:85:1A:D6:31:74:6A:D9:C1:B6:60:A9:A5:D6:65:BE:24:06
X509v3 Authority Key Identifier:
keyid:DD:04:C7:59:99:C6:77:29:62:60:0E:C2:01:3D:94:4B:8E:1D:5B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a3da061670e8a3ce2d2ac68cbe5d12acead8eca.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24b64913-3f22-450b-888d-a02758dfa3a2/4a3da061670e8a3ce2d2ac68cbe5d12acead8eca.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/24b64913-3f22-450b-888d-a02758dfa3a2/4a3da061670e8a3ce2d2ac68cbe5d12acead8eca.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:59:5f:81:f5:1a:66:bf:43:d5:6a:b3:82:02:6a:84:ad:0f:
e6:8e:fc:2a:f4:10:3a:c7:fe:bd:84:19:41:62:62:08:fb:33:
14:f7:8c:22:35:c8:df:1e:ea:95:95:2e:85:16:39:3b:06:9c:
4a:83:d6:a8:ac:9c:83:5d:ac:d8:54:a2:af:8d:71:1f:cf:12:
8a:fb:01:41:8e:df:6e:60:bd:d2:c5:ce:80:b5:bb:f3:e5:58:
f1:62:f0:b2:2c:d3:98:08:91:c8:0e:c1:ab:5f:33:23:7e:2f:
82:e7:b4:c6:e4:30:82:e6:30:12:33:b6:a6:89:29:2c:35:a2:
73:62:32:a1:fe:36:0b:fb:64:5c:93:fe:63:02:20:37:99:3b:
77:29:e1:b5:10:2c:f1:81:22:aa:02:6f:eb:e3:d0:71:8c:b0:
02:69:fd:ad:26:e4:ec:66:ba:1e:f5:b2:29:5c:19:6a:77:9b:
96:c2:90:e2:7b:e2:02:1d:5f:82:51:03:b6:da:51:6b:45:52:
87:60:57:17:8b:21:f6:01:ab:93:57:b0:5d:e1:09:ca:8e:4f:
90:71:91:44:c5:c7:4d:0f:0a:6d:c9:65:ac:c5:69:21:10:40:
fa:13:04:0e:da:4c:e9:6f:24:ea:06:3a:e9:94:e1:1a:f9:9e:
b6:3b:0d:3e
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDCEUCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRh
M2RhMDYxNjcwZThhM2NlMmQyYWM2OGNiZTVkMTJhY2VhZDhlY2EwHhcNMjMwMTEy
MTkxNDQ5WhcNMjMwMTE1MjIyOTQ5WjAzMTEwLwYDVQQDEyg0NWQ2MmU2NmRkMGQ1
N2ExZDc5MTdjYzVhMzIzZmU3ZDIzZTEyZGNiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAli2IRhIq+X+upqmveTS8nEWAQuCWsk09UkBhypKQ87IsvNO2
GRCU18r0hJUSRQEpIV8wEHigz832ijf4Bhr2+PoCHlI2HjsoyXfCu+laTivXRMfF
yTuPwoQbH+c2J2rN+UPlW1m4PCSlgSAZn+2G2t0une02RDMShvn2wY8dnNHNqs1V
HCOnYpnHlUWd2d+ZX2N9a0s4B1dAuTF8w1bOfPZr8aIQkJWwKkI7WCwR4y2vNJed
MFLO7DRo8NwCPP17BPs8YU3AGfhk1ErSQW+CsZKXWj1QJEDIy62q99A8Tc2Ja8+K
V1n0zTg9SawT4OOfY+XkjnNM56NWFjv3z2iDCwIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFDOR84Ua1jF0atnBtmCppdZlviQGMB8GA1UdIwQYMBaAFN0Ex1mZxncpYmAO
wgE9lEuOHVtiMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGEzZGEw
NjE2NzBlOGEzY2UyZDJhYzY4Y2JlNWQxMmFjZWFkOGVjYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjRiNjQ5MTMtM2YyMi00NTBiLTg4OGQtYTAyNzU4
ZGZhM2EyLzRhM2RhMDYxNjcwZThhM2NlMmQyYWM2OGNiZTVkMTJhY2VhZDhlY2Eu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yNGI2NDkxMy0zZjIyLTQ1MGItODg4ZC1hMDI3
NThkZmEzYTIvNGEzZGEwNjE2NzBlOGEzY2UyZDJhYzY4Y2JlNWQxMmFjZWFkOGVj
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAEtZX4H1Gma/Q9Vqs4ICaoStD+aO/Cr0EDrH/r2EGUFiYgj7
MxT3jCI1yN8e6pWVLoUWOTsGnEqD1qisnINdrNhUoq+NcR/PEor7AUGO325gvdLF
zoC1u/PlWPFi8LIs05gIkcgOwatfMyN+L4LntMbkMILmMBIztqaJKSw1onNiMqH+
Ngv7ZFyT/mMCIDeZO3cp4bUQLPGBIqoCb+vj0HGMsAJp/a0m5Oxmuh71silcGWp3
m5bCkOJ74gIdX4JRA7baUWtFUodgVxeLIfYBq5NXsF3hCcqOT5BxkUTFx00PCm3J
ZazFaSEQQPoTBA7aTOlvJOoGOumU4Rr5nrY7DT4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:24 2024 by rpki-client on console-fra.rpki-client.org