Manifest
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3d502848-6168-47ee-84a9-5cde99118088/bf0a20c447a12249959d50c2b5fb7ed8e7aa32ef.mft
File: bf0a20c447a12249959d50c2b5fb7ed8e7aa32ef.mft (raw, json)
Hash identifier: /w8g3tpQJNGY+2WkErRGaakj1B35HFDwofPCFlKQ8zg=
Subject key identifier: 16:9C:5E:FB:95:AF:F1:6A:81:CC:91:B6:EA:D1:5F:59:77:D0:CA:C8
Authority key identifier: D5:EE:65:9D:2C:EA:04:E5:46:0F:CB:9A:0B:98:45:9C:CC:FC:74:56
Certificate issuer: /CN=bf0a20c447a12249959d50c2b5fb7ed8e7aa32ef
Certificate serial: 042232
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf0a20c447a12249959d50c2b5fb7ed8e7aa32ef.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3d502848-6168-47ee-84a9-5cde99118088/bf0a20c447a12249959d50c2b5fb7ed8e7aa32ef.mft
Manifest number: 0212
Signing time: Mon 15 Apr 2024 11:20:33 +0000
Manifest this update: Mon 15 Apr 2024 10:20:18 +0000
Manifest next update: Thu 18 Apr 2024 13:14:18 +0000
Files and hashes: 1: bf0a20c447a12249959d50c2b5fb7ed8e7aa32ef.crl (hash: zRgBtCLjcYNo3EuC4SkR1/yDCz6jRfaojBjI6kTJZZw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270898 (0x42232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf0a20c447a12249959d50c2b5fb7ed8e7aa32ef
Validity
Not Before: Apr 15 10:20:18 2024 GMT
Not After : Apr 18 13:14:18 2024 GMT
Subject: CN=abc520dd6c6513d5193da137bdd4ecb95cb353c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:41:bf:89:c4:22:79:37:6e:f0:55:eb:b6:ba:
c8:ff:af:3f:2d:e9:98:49:e1:3c:49:1a:7e:17:96:
ac:31:aa:fa:36:bf:3d:84:1e:41:0b:4c:f8:43:32:
63:6c:33:2a:f2:aa:e4:89:52:f2:8d:7f:5b:d0:b7:
29:eb:fb:29:49:31:4a:e4:db:af:39:da:4e:07:c6:
78:c5:bc:9b:6b:5e:c9:28:d3:ae:b2:40:75:90:d2:
dc:f3:2a:76:52:e1:59:c2:2e:38:a7:76:28:80:53:
f9:75:84:bb:60:0a:6a:da:55:86:36:8d:95:2a:ca:
3f:08:0b:e6:52:8c:b0:4e:a4:20:7b:35:d4:44:ae:
5c:27:8e:19:e9:d3:e7:7b:11:ff:2d:8e:d2:ae:f0:
aa:38:99:5d:70:52:12:f2:60:2d:2f:57:ec:22:c8:
3f:51:ac:1e:e4:13:de:36:29:00:bc:cd:d8:d8:bd:
d4:85:8a:12:49:1f:2f:99:18:5e:12:4a:b4:7d:0e:
33:8e:e1:55:12:b4:6d:13:ad:67:25:59:0d:46:a0:
21:66:58:dc:36:c0:5e:14:a6:26:42:33:f1:54:a8:
14:60:76:f8:54:68:05:a1:fa:04:9d:05:dd:63:21:
29:bc:4b:9a:13:f4:c5:51:95:ed:f8:e5:77:51:8b:
39:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9C:5E:FB:95:AF:F1:6A:81:CC:91:B6:EA:D1:5F:59:77:D0:CA:C8
X509v3 Authority Key Identifier:
keyid:D5:EE:65:9D:2C:EA:04:E5:46:0F:CB:9A:0B:98:45:9C:CC:FC:74:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf0a20c447a12249959d50c2b5fb7ed8e7aa32ef.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3d502848-6168-47ee-84a9-5cde99118088/bf0a20c447a12249959d50c2b5fb7ed8e7aa32ef.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3d502848-6168-47ee-84a9-5cde99118088/bf0a20c447a12249959d50c2b5fb7ed8e7aa32ef.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:65:58:8a:7f:f5:00:d6:fb:b4:e9:40:a9:d1:82:fc:4c:b0:
80:82:e1:08:24:cb:b0:67:84:f9:02:bc:11:85:8a:89:e3:5b:
83:50:c2:6e:1f:d0:55:b1:70:3d:a8:eb:e2:e1:76:d1:7e:69:
4d:a6:ea:70:61:4c:40:77:ab:5b:7e:85:de:b6:67:0a:6f:31:
d1:9f:90:59:17:2f:b2:17:db:44:31:30:c9:e4:10:c1:00:a0:
b7:2a:61:5c:77:b8:8a:05:29:42:f3:80:17:9a:43:8e:d8:15:
1c:b1:cd:99:7e:8a:46:a0:f2:d5:df:ee:ad:8b:fb:f0:71:1b:
b0:94:f1:e1:cb:96:0d:68:9d:a4:d5:62:61:b9:3e:d0:b5:09:
cc:ec:da:28:ed:37:18:c2:c3:fe:73:fa:82:e7:4c:d9:da:22:
d3:0b:61:59:7b:f6:c8:0a:56:86:ab:b9:41:a0:e6:45:93:85:
61:d8:6d:9c:a7:25:93:a6:87:39:f8:19:4e:34:4a:2a:4d:e5:
bf:f7:58:f0:19:1c:3a:4e:d3:7d:0d:b6:b4:f3:9a:77:45:7a:
56:36:79:e9:c3:40:95:40:00:b4:15:17:df:c6:15:cb:7b:8c:
1d:09:e6:3c:f0:92:17:69:89:ac:aa:72:6b:a3:28:8f:fa:e1:
60:84:4d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:30 2024 by rpki-client on console-fra.rpki-client.org