Manifest
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft
File: 688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft (raw, json)
Hash identifier: WXzWSmMr/ZZNJi7Nxg4tozppjirqr3FonrYeTfNU2WM=
Subject key identifier: 7E:30:A7:40:EE:F5:75:5A:0B:F8:14:1D:89:0F:96:02:17:14:E9:36
Authority key identifier: 68:8F:0B:B1:66:D1:4E:7D:D2:5F:A7:8C:78:6B:91:7D:26:42:A8:E6
Certificate issuer: /CN=688F0BB166D14E7DD25FA78C786B917D2642A8E6
Certificate serial: 0860564CE24E6C2AFE22F36E7AF54BA8FD930CBA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft
Manifest number: C2
Signing time: Thu 27 Mar 2025 10:11:22 +0000
Manifest this update: Thu 27 Mar 2025 10:06:22 +0000
Manifest next update: Tue 01 Apr 2025 16:26:22 +0000
Files and hashes: 1: 3137392e34382e3235322e302f32322d3234203d3e20323634383536.roa (hash: 36MFiYsj/rbrvvVvLeus9cYnV2iKLxGfalFiHHn+w8M=)
2: 3139302e31342e3134342e302f32312d3234203d3e20323634383536.roa (hash: p81G8oXFk080ghN5GKWtKTcT6PUTiGK+bopJQcZbhrE=)
3: 688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl (hash: k11pSc809u4FhHQJkbpUTy+JqtIugiPidce286AmfUQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:60:56:4c:e2:4e:6c:2a:fe:22:f3:6e:7a:f5:4b:a8:fd:93:0c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688F0BB166D14E7DD25FA78C786B917D2642A8E6
Validity
Not Before: Mar 27 10:06:22 2025 GMT
Not After : Apr 1 16:26:22 2025 GMT
Subject: CN=7E30A740EEF5755A0BF8141D890F96021714E936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c4:ae:35:aa:46:ec:be:23:55:13:cd:25:79:
43:f8:9e:fe:ee:3b:11:58:25:a4:06:6a:5a:28:95:
b4:a4:06:19:91:76:30:fa:14:43:2c:11:89:a5:11:
2f:53:40:1e:4d:72:f9:a2:f4:88:4b:b2:1f:de:25:
d3:67:8d:d6:3b:77:d1:8a:1c:28:58:6f:55:bd:b6:
b1:38:5c:c6:65:cb:be:36:50:28:df:94:09:b9:e3:
5a:5b:2a:88:b6:25:6f:bc:da:da:af:b3:e9:f7:f7:
cc:d6:f1:2b:67:e1:ab:43:2a:d7:59:7e:e9:49:f5:
66:01:b5:c3:31:0b:3b:6c:21:c5:01:a5:4e:09:12:
49:69:ef:73:52:00:79:09:9e:64:3a:68:83:29:7d:
32:f1:98:c9:01:3a:43:3a:fc:5b:26:b3:80:f7:0d:
fc:4a:ba:af:77:ef:f6:42:01:cb:fa:40:2d:ea:c4:
f5:41:db:4f:b1:48:32:e3:6f:88:1b:e3:3f:fb:06:
8d:a5:27:68:56:fb:1e:f4:47:b1:6c:d7:f2:3e:69:
30:19:ef:35:1c:d6:45:ef:db:cd:80:12:07:52:d3:
f0:0e:e0:34:07:19:aa:b7:77:94:f1:97:d8:31:e1:
12:61:fe:3c:b4:21:51:08:f5:23:fc:a3:7f:5d:b0:
21:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:30:A7:40:EE:F5:75:5A:0B:F8:14:1D:89:0F:96:02:17:14:E9:36
X509v3 Authority Key Identifier:
keyid:68:8F:0B:B1:66:D1:4E:7D:D2:5F:A7:8C:78:6B:91:7D:26:42:A8:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:05:6a:fd:04:ce:26:87:3b:75:68:53:11:90:39:02:cd:76:
73:ad:2e:1a:70:bf:ed:46:63:47:88:2a:54:77:d2:91:2d:31:
9d:ce:92:9d:7b:6c:f9:0e:d9:89:94:7f:4d:e5:29:10:fd:79:
1d:50:05:6a:40:6d:7b:3b:d8:eb:4e:81:3d:1a:fa:84:58:9c:
38:ea:59:4b:70:f4:bd:05:89:95:2b:8a:9e:7c:15:d4:35:3d:
bc:ed:23:dd:25:b7:77:9d:e9:0a:9d:47:78:2d:50:07:72:de:
61:96:09:81:78:9f:27:60:26:17:93:67:c3:9a:e4:7c:60:29:
0d:fc:0a:53:a4:2a:99:e6:c3:85:e3:c5:38:28:88:08:66:f4:
8e:e4:30:a4:9c:a6:61:80:30:c6:4c:79:32:77:96:7e:16:50:
87:6a:7a:53:21:85:cc:a7:b9:54:4f:80:32:54:f8:9b:45:5a:
72:39:9d:fe:78:93:b7:60:a6:14:49:f1:b8:f5:71:fb:e8:32:
b3:b9:7c:bf:bd:e3:37:19:09:64:e6:4d:21:81:06:7d:5f:a8:
e5:e5:7d:b7:56:de:4a:cc:53:bf:3e:51:6b:6b:e0:ee:88:e4:
6f:4e:28:14:ea:21:a6:47:38:fc:0b:2c:74:c8:63:bf:af:b0:
31:6b:26:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:03 2025 by rpki-client