Manifest
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3690df96-de7e-488e-ac1e-e296d6f17a11/7fa6f3db8d0c6e7c34a090038461e357bad000ef.mft
File: 7fa6f3db8d0c6e7c34a090038461e357bad000ef.mft (raw, json)
Hash identifier: KSN+12zaM5w9mUN1sD1ZMQy7Vd2u8IsSaKgBT9XzsNg=
Subject key identifier: 98:7E:43:63:DB:3A:EF:40:63:2F:D7:D3:65:3A:2F:DB:FC:E1:97:CB
Authority key identifier: A4:F7:B4:FA:AF:D4:B3:16:91:89:F1:56:B5:21:06:53:74:47:80:07
Certificate issuer: /CN=7fa6f3db8d0c6e7c34a090038461e357bad000ef
Certificate serial: 28C549
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fa6f3db8d0c6e7c34a090038461e357bad000ef.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3690df96-de7e-488e-ac1e-e296d6f17a11/7fa6f3db8d0c6e7c34a090038461e357bad000ef.mft
Manifest number: 0DF4
Signing time: Mon 15 Apr 2024 08:20:40 +0000
Manifest this update: Mon 15 Apr 2024 07:20:16 +0000
Manifest next update: Thu 18 Apr 2024 09:03:16 +0000
Files and hashes: 1: 7fa6f3db8d0c6e7c34a090038461e357bad000ef.crl (hash: hCihGoi6tNiPCqYbet2R5K7wtuQhkywC9DImeLZHslI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2671945 (0x28c549)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fa6f3db8d0c6e7c34a090038461e357bad000ef
Validity
Not Before: Apr 15 07:20:16 2024 GMT
Not After : Apr 18 09:03:16 2024 GMT
Subject: CN=622581523b9ccba64ade3fac607aa27a5d17a450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:38:37:1a:ef:51:9a:28:ed:e8:5b:5c:f5:ed:
6d:c0:03:fe:14:bb:66:aa:4e:fa:3a:b5:1b:02:d5:
47:2d:73:1f:a0:63:2e:c8:3a:8c:80:19:ab:3c:1e:
32:99:64:02:e1:24:46:2c:9a:23:f7:46:69:d4:c7:
f0:71:5f:23:67:68:f7:b9:b6:43:c5:52:6a:61:34:
c1:ff:51:3c:5c:ea:35:92:62:d0:07:18:54:20:83:
29:98:03:00:4b:2d:52:33:88:8b:bc:9a:01:eb:b4:
ef:94:eb:50:d6:9d:24:e1:7c:e0:f7:de:31:eb:c4:
0a:58:48:29:29:94:17:3a:8e:52:21:af:ff:fa:75:
70:28:6e:86:02:03:a8:3b:e5:4f:48:d3:3f:94:ce:
b0:1e:8e:ae:11:d6:df:04:90:89:55:79:1f:47:ee:
91:f9:16:71:fc:5b:25:2a:b7:26:e5:53:56:a3:c2:
68:e2:33:e7:78:3e:86:42:90:b7:36:29:92:ec:50:
b0:30:7a:9f:41:7e:bd:7c:0e:1f:2b:f7:e3:f5:10:
04:89:d2:02:5d:cf:d7:c2:a0:c4:70:91:ef:81:25:
55:4c:e6:89:cf:81:08:5d:9a:c1:f5:2c:50:76:c4:
26:51:6c:b7:04:6e:c3:02:8d:2b:a9:79:19:a4:76:
28:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7E:43:63:DB:3A:EF:40:63:2F:D7:D3:65:3A:2F:DB:FC:E1:97:CB
X509v3 Authority Key Identifier:
keyid:A4:F7:B4:FA:AF:D4:B3:16:91:89:F1:56:B5:21:06:53:74:47:80:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fa6f3db8d0c6e7c34a090038461e357bad000ef.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3690df96-de7e-488e-ac1e-e296d6f17a11/7fa6f3db8d0c6e7c34a090038461e357bad000ef.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3690df96-de7e-488e-ac1e-e296d6f17a11/7fa6f3db8d0c6e7c34a090038461e357bad000ef.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:af:df:6b:96:a3:6e:c1:d3:55:31:78:2a:2a:08:00:ab:65:
77:28:8a:62:8b:b0:49:91:59:a1:96:13:8b:f4:33:7e:d5:2c:
c1:5c:aa:89:ca:21:32:33:09:f6:8a:b3:a3:cd:cc:db:13:fa:
86:d4:8e:8a:29:bd:d1:e4:53:0e:eb:37:cb:7c:4d:24:b7:55:
c2:5e:0a:87:82:65:79:6f:c7:3f:6e:3a:2e:64:e2:98:7a:e1:
e4:68:d8:23:b6:23:24:71:97:bc:a0:47:cf:16:d9:19:66:1f:
00:f1:0a:e6:5b:7a:eb:9e:58:ef:6f:5d:82:4d:3f:0b:aa:ac:
5f:35:60:e9:f4:8b:7f:35:70:bd:45:b6:85:b6:67:ab:c1:65:
eb:36:e4:db:03:dd:11:fa:84:0c:ba:29:36:20:27:78:08:2d:
54:2b:aa:d9:26:d2:bb:00:a2:af:50:4f:7e:f2:f6:a1:c5:89:
33:e8:21:4f:b9:b7:55:11:69:5b:c4:98:71:8c:e3:ef:61:0a:
5f:6c:60:cb:69:13:95:ce:b3:28:38:c9:49:be:27:52:87:66:
bc:09:25:a0:76:51:4b:f1:96:e0:1b:14:0a:85:59:62:a2:cf:
50:6a:0c:a5:dd:df:fb:de:63:aa:dc:56:54:32:34:ca:08:00:
78:61:2e:aa
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDKMVJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdm
YTZmM2RiOGQwYzZlN2MzNGEwOTAwMzg0NjFlMzU3YmFkMDAwZWYwHhcNMjQwNDE1
MDcyMDE2WhcNMjQwNDE4MDkwMzE2WjAzMTEwLwYDVQQDEyg2MjI1ODE1MjNiOWNj
YmE2NGFkZTNmYWM2MDdhYTI3YTVkMTdhNDUwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwjg3Gu9Rmijt6Ftc9e1twAP+FLtmqk76OrUbAtVHLXMfoGMu
yDqMgBmrPB4ymWQC4SRGLJoj90Zp1MfwcV8jZ2j3ubZDxVJqYTTB/1E8XOo1kmLQ
BxhUIIMpmAMASy1SM4iLvJoB67TvlOtQ1p0k4Xzg994x68QKWEgpKZQXOo5SIa//
+nVwKG6GAgOoO+VPSNM/lM6wHo6uEdbfBJCJVXkfR+6R+RZx/FslKrcm5VNWo8Jo
4jPneD6GQpC3NimS7FCwMHqfQX69fA4fK/fj9RAEidICXc/XwqDEcJHvgSVVTOaJ
z4EIXZrB9SxQdsQmUWy3BG7DAo0rqXkZpHYodQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFJh+Q2PbOu9AYy/X02U6L9v84ZfLMB8GA1UdIwQYMBaAFKT3tPqv1LMWkYnx
VrUhBlN0R4AHMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2ZhNmYz
ZGI4ZDBjNmU3YzM0YTA5MDAzODQ2MWUzNTdiYWQwMDBlZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzY5MGRmOTYtZGU3ZS00ODhlLWFjMWUtZTI5NmQ2
ZjE3YTExLzdmYTZmM2RiOGQwYzZlN2MzNGEwOTAwMzg0NjFlMzU3YmFkMDAwZWYu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zNjkwZGY5Ni1kZTdlLTQ4OGUtYWMxZS1lMjk2
ZDZmMTdhMTEvN2ZhNmYzZGI4ZDBjNmU3YzM0YTA5MDAzODQ2MWUzNTdiYWQwMDBl
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBABmv32uWo27B01UxeCoqCACrZXcoimKLsEmRWaGWE4v0M37V
LMFcqonKITIzCfaKs6PNzNsT+obUjoopvdHkUw7rN8t8TSS3VcJeCoeCZXlvxz9u
Oi5k4ph64eRo2CO2IyRxl7ygR88W2RlmHwDxCuZbeuueWO9vXYJNPwuqrF81YOn0
i381cL1FtoW2Z6vBZes25NsD3RH6hAy6KTYgJ3gILVQrqtkm0rsAoq9QT37y9qHF
iTPoIU+5t1URaVvEmHGM4+9hCl9sYMtpE5XOsyg4yUm+J1KHZrwJJaB2UUvxluAb
FAqFWWKiz1BqDKXd3/veY6rcVlQyNMoIAHhhLqo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-ams.rpki-client.org