Manifest
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.mft
File: 5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.mft (raw, json)
Hash identifier: FwKUO4DR2MRFDI6v8GOBggaa5ki201mXBv4YkJ0txSU=
Subject key identifier: 1A:A6:0E:10:29:01:EB:44:32:28:80:46:3F:4F:FF:6B:F9:83:E6:0D
Authority key identifier: 5E:20:38:E8:41:92:BA:FB:E7:BC:D3:AC:CA:5B:C5:B4:3E:61:DA:2D
Certificate issuer: /CN=5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D
Certificate serial: 6F044609D740B53AC29D405DC7CE66D4184F3D63
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.mft
Manifest number: D2
Signing time: Thu 27 Mar 2025 18:06:13 +0000
Manifest this update: Thu 27 Mar 2025 18:01:13 +0000
Manifest next update: Wed 02 Apr 2025 14:29:13 +0000
Files and hashes: 1: 323830333a3465303a3a2f33322d3335203d3e20323632323133.roa (hash: AC/m95tcdXd0ChvruS8w2KSV8+5h8PfJjD6Y2xO4RDU=)
2: 34352e3139312e35302e302f32342d3234203d3e20323733393733.roa (hash: 9F212eExLRkMa2ljWMpBEOBkIPaiAI6PRqOkjfApwHI=)
3: 34352e3139312e34382e302f32322d3234203d3e20323632323133.roa (hash: C8HfC958RoMYZLyJD/qWNgZx5v04BPizwv+ILT9q9n8=)
4: 5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.crl (hash: h/8Ba6xcg635AWtG/CkfBStWUqnFAouaoy4JYkBaCcY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:04:46:09:d7:40:b5:3a:c2:9d:40:5d:c7:ce:66:d4:18:4f:3d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D
Validity
Not Before: Mar 27 18:01:13 2025 GMT
Not After : Apr 2 14:29:13 2025 GMT
Subject: CN=1AA60E102901EB44322880463F4FFF6BF983E60D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:45:f9:c2:cf:f8:7e:70:9b:ab:5d:66:b8:
ba:33:ee:24:88:b0:6d:a9:aa:ec:e4:03:08:77:cc:
84:0e:75:3f:69:66:0e:5e:1a:a3:38:8d:b7:d7:65:
3d:41:41:67:9d:6b:2c:54:a1:a8:b0:fc:fd:c2:f2:
f8:4d:40:07:69:96:77:d8:0f:0b:89:83:bb:0c:00:
e9:0c:95:b3:da:cc:59:d6:29:d6:15:bf:46:89:a2:
92:ba:db:ef:61:f1:54:f7:3e:13:d4:27:bd:e0:ec:
27:f6:59:f4:b9:7b:dc:b2:a2:20:65:dc:d2:c1:de:
b0:e2:b9:22:57:28:e6:35:a7:7f:a5:76:70:21:8f:
c5:74:dc:70:ed:55:c5:ea:1e:b6:ab:4e:90:86:29:
b7:9c:e1:d7:f5:77:13:b3:42:64:ea:92:14:1a:bb:
f0:2a:68:ba:d5:46:13:50:ef:52:a3:79:68:d0:6b:
8a:5a:ef:bf:46:79:cc:53:4b:0a:b1:3b:e5:9e:11:
0e:09:6f:c1:8e:cc:82:93:38:b5:55:08:ef:aa:d9:
d5:cc:9f:5a:a3:72:ce:b7:14:8e:c8:c8:d1:1e:b8:
e5:55:9b:53:8e:67:6b:50:29:f3:61:85:cd:6c:15:
61:b5:13:16:6e:30:e0:10:bd:6f:f2:55:19:e9:62:
1e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A6:0E:10:29:01:EB:44:32:28:80:46:3F:4F:FF:6B:F9:83:E6:0D
X509v3 Authority Key Identifier:
keyid:5E:20:38:E8:41:92:BA:FB:E7:BC:D3:AC:CA:5B:C5:B4:3E:61:DA:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9b:63:5b:e5:21:05:ee:97:3a:7b:ee:15:bf:d0:9a:a2:90:
1b:7b:44:67:ec:88:e8:12:c9:67:2c:be:aa:06:60:04:2f:1b:
20:6c:64:ad:99:57:9d:98:fc:e1:9f:4b:e4:ce:5e:09:4b:99:
be:13:28:42:f1:d9:99:66:5c:a2:4e:46:8f:68:b5:e4:fc:00:
f5:56:89:a9:6b:ac:22:61:57:35:fa:65:21:76:58:07:71:f8:
e6:96:46:2b:23:30:2a:63:79:23:93:89:46:b3:01:5a:2d:32:
15:9a:c8:bd:9c:38:1c:e3:9f:00:2f:3e:5b:e2:4f:b8:db:21:
61:e7:4a:1b:08:4a:d1:9f:d1:b4:c0:ed:ab:14:dc:62:34:83:
c5:f6:4b:62:a8:f6:1c:6a:90:69:68:3e:af:2f:de:e4:31:ca:
8c:fe:a0:5a:3d:a1:52:ab:95:8f:d2:75:11:e1:9b:3d:d9:eb:
93:7f:d2:f3:c5:c5:5d:89:53:2d:16:c1:d7:a9:2e:05:50:17:
63:fd:5e:c7:d8:30:58:95:74:b8:b7:aa:02:b2:25:59:b8:7a:
5c:f9:b1:eb:0d:69:36:b9:8b:ea:a2:40:c6:95:5b:d8:dd:38:
09:02:4f:96:f6:5e:ab:68:a1:8d:d8:bb:24:bd:3b:b7:e5:51:
af:32:78:b3
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUbwRGCddAtTrCnUBdx85m1BhPPWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUUyMDM4RTg0MTkyQkFGQkU3QkNEM0FDQ0E1QkM1QjQz
RTYxREEyRDAeFw0yNTAzMjcxODAxMTNaFw0yNTA0MDIxNDI5MTNaMDMxMTAvBgNV
BAMTKDFBQTYwRTEwMjkwMUVCNDQzMjI4ODA0NjNGNEZGRjZCRjk4M0U2MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/JEX5ws/4fnCbq11muLoz7iSI
sG2pquzkAwh3zIQOdT9pZg5eGqM4jbfXZT1BQWedayxUoaiw/P3C8vhNQAdplnfY
DwuJg7sMAOkMlbPazFnWKdYVv0aJopK62+9h8VT3PhPUJ73g7Cf2WfS5e9yyoiBl
3NLB3rDiuSJXKOY1p3+ldnAhj8V03HDtVcXqHrarTpCGKbec4df1dxOzQmTqkhQa
u/AqaLrVRhNQ71KjeWjQa4pa779GecxTSwqxO+WeEQ4Jb8GOzIKTOLVVCO+q2dXM
n1qjcs63FI7IyNEeuOVVm1OOZ2tQKfNhhc1sFWG1ExZuMOAQvW/yVRnpYh7PAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUGqYOECkB60QyKIBGP0//a/mD5g0wHwYDVR0j
BBgwFoAUXiA46EGSuvvnvNOsylvFtD5h2i0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRDA4QzFFMDZBREU3MkZCODA5MkREM0E2MTdEQUQ0MDVG
RTlGN0EzRDJDQjMwRDk2QkFERkU4MDJBNDA5Q0QwLzAvNUUyMDM4RTg0MTkyQkFG
QkU3QkNEM0FDQ0E1QkM1QjQzRTYxREEyRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RTIwMzhFODQxOTJCQUZCRTdC
Q0QzQUNDQTVCQzVCNDNFNjFEQTJELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0QwOEMxRTA2QURFNzJGQjgwOTJERDNBNjE3REFENDA1RkU5RjdBM0Qy
Q0IzMEQ5NkJBREZFODAyQTQwOUNEMC8wLzVFMjAzOEU4NDE5MkJBRkJFN0JDRDNB
Q0NBNUJDNUI0M0U2MURBMkQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCHm2Nb5SEF7pc6e+4Vv9CaopAb
e0Rn7IjoEslnLL6qBmAELxsgbGStmVedmPzhn0vkzl4JS5m+EyhC8dmZZlyiTkaP
aLXk/AD1Vompa6wiYVc1+mUhdlgHcfjmlkYrIzAqY3kjk4lGswFaLTIVmsi9nDgc
458ALz5b4k+42yFh50obCErRn9G0wO2rFNxiNIPF9ktiqPYcapBpaD6vL97kMcqM
/qBaPaFSq5WP0nUR4Zs92euTf9LzxcVdiVMtFsHXqS4FUBdj/V7H2DBYlXS4t6oC
siVZuHpc+bHrDWk2uYvqokDGlVvY3TgJAk+W9l6raKGN2LskvTu35VGvMniz
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:02:08 2025 by rpki-client