Manifest
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/379d4ac8-324b-417a-9e2c-0bf38d9e168d/5d3488bdd011aaba522a8ada0307e9a6c60ebc1e.mft
File: 5d3488bdd011aaba522a8ada0307e9a6c60ebc1e.mft (raw, json)
Hash identifier: MHvJ9076W645Z6IU0+Ov+EXMcqfnPwaUPXc3WpYwwqQ=
Subject key identifier: 6A:07:B7:3B:5F:C3:84:4E:18:2A:0E:15:2C:54:E1:AB:8F:CF:8F:CF
Authority key identifier: A2:99:D7:56:89:68:0F:AD:0A:0F:04:83:52:77:E3:68:3B:E5:36:D8
Certificate issuer: /CN=5d3488bdd011aaba522a8ada0307e9a6c60ebc1e
Certificate serial: 09B468
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d3488bdd011aaba522a8ada0307e9a6c60ebc1e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/379d4ac8-324b-417a-9e2c-0bf38d9e168d/5d3488bdd011aaba522a8ada0307e9a6c60ebc1e.mft
Manifest number: 04DE
Signing time: Mon 15 Apr 2024 08:21:04 +0000
Manifest this update: Mon 15 Apr 2024 07:20:16 +0000
Manifest next update: Thu 18 Apr 2024 09:15:16 +0000
Files and hashes: 1: 5d3488bdd011aaba522a8ada0307e9a6c60ebc1e.crl (hash: WjbmK/R00QcPbEv7Nj+cKAtgR+GQ6hE/ZmIJg01LoSQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 636008 (0x9b468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3488bdd011aaba522a8ada0307e9a6c60ebc1e
Validity
Not Before: Apr 15 07:20:16 2024 GMT
Not After : Apr 18 09:15:16 2024 GMT
Subject: CN=2d08839d996787b4d873a75f5572e7355af5abcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0b:bc:bc:39:99:e8:85:04:b4:bb:ae:b8:56:
c9:a3:d5:52:88:2e:ad:c1:67:58:fb:9c:54:8d:b6:
2a:75:86:0f:d6:f3:67:60:f7:a0:28:a1:8d:42:5d:
8f:1f:11:8a:1a:e7:5e:53:6c:da:e9:2c:ba:99:66:
95:bb:8f:6c:54:71:7a:63:32:1f:75:40:86:5d:32:
da:29:6e:46:dd:8b:77:b0:63:94:6f:7d:2a:9e:81:
7a:37:2b:d3:0f:98:c6:e0:7b:37:b9:01:b9:fc:fc:
37:86:a3:bd:86:cd:ba:64:2a:97:50:64:19:e8:3f:
47:28:8a:6f:b9:93:fa:a1:b8:a8:e4:c8:97:ee:a5:
40:25:dd:1b:7d:44:94:62:f2:e8:25:56:5d:e8:4f:
10:2f:ef:10:cd:38:44:6e:6e:b5:0d:8b:cf:88:8c:
ec:5f:b8:e8:1f:7e:13:b5:2b:c9:5b:a2:25:cc:f0:
5a:14:18:2c:14:54:76:2f:20:08:88:6a:5b:c4:7a:
f4:ae:e6:b0:99:1b:42:7e:0d:ad:1b:62:70:3b:38:
3d:1f:77:c4:05:f8:44:29:58:b9:5a:f8:47:42:46:
20:4e:20:9e:c5:7f:73:05:24:0b:f2:4a:66:82:ee:
a0:bc:6c:73:c5:6a:5f:a0:09:e4:39:30:aa:40:3b:
59:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:07:B7:3B:5F:C3:84:4E:18:2A:0E:15:2C:54:E1:AB:8F:CF:8F:CF
X509v3 Authority Key Identifier:
keyid:A2:99:D7:56:89:68:0F:AD:0A:0F:04:83:52:77:E3:68:3B:E5:36:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d3488bdd011aaba522a8ada0307e9a6c60ebc1e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/379d4ac8-324b-417a-9e2c-0bf38d9e168d/5d3488bdd011aaba522a8ada0307e9a6c60ebc1e.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/379d4ac8-324b-417a-9e2c-0bf38d9e168d/5d3488bdd011aaba522a8ada0307e9a6c60ebc1e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d0:90:a7:c2:17:b3:cb:0c:45:18:ad:ab:78:c5:ee:14:be:
24:2d:95:5a:8b:2c:bb:2b:b5:e6:f3:e0:cf:25:e7:d4:c5:fe:
0b:5b:29:ed:bb:a6:5f:9d:ac:55:1d:31:52:c4:86:fb:d9:e9:
1e:8e:de:23:7e:b9:43:04:bb:d5:57:f5:7c:2d:8a:5a:0c:aa:
4d:09:8a:9a:77:f1:ef:ac:2a:8a:34:d9:6e:3e:d7:81:0a:03:
31:fb:12:77:11:60:6d:b4:07:fd:bd:b4:85:db:22:2e:82:7e:
de:0f:0e:bb:68:ee:cc:a1:71:ea:f2:67:a7:33:89:b5:07:15:
27:4f:30:37:2b:cc:c5:fd:fd:0c:a0:ca:48:12:4c:7d:b3:fd:
bd:3f:1b:4d:ca:fa:82:64:4f:b6:2b:c3:5e:5e:8e:0f:d6:ce:
dd:ec:48:1d:fe:c2:a7:96:c3:61:fd:f3:83:e0:46:fa:1f:3c:
6d:ab:84:b2:8f:51:74:48:be:75:62:bb:43:ac:cc:89:d7:90:
a9:c8:09:21:bb:c5:55:d7:42:fc:11:15:14:68:b3:40:c1:e5:
38:b6:ce:f5:fb:0a:cd:40:1c:37:ad:29:73:02:c3:2e:d6:c3:
90:66:18:91:f1:c3:96:ea:9f:5b:35:91:68:3f:70:ff:b6:a4:
b8:e1:a2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:26 2024 by rpki-client on console-fra.rpki-client.org