![](/console.gif)
Manifest
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3f3c617c-8440-4abe-9c03-90923eb1fcd0/bce920cc53ed6dc0af3febc31cab5b52dff302fa.mft
File: bce920cc53ed6dc0af3febc31cab5b52dff302fa.mft (raw, json)
Hash identifier: xYUS/3j5u7vV6/5U/PylUZhgVTPqR3y15yRFOtg61yM=
Subject key identifier: 3F:DE:0C:9B:EE:C6:89:23:3A:6C:42:5E:55:2E:13:D6:0F:C6:AA:BF
Authority key identifier: 82:61:8B:57:DB:A6:EE:6D:FB:F8:BB:41:A8:2B:9F:DB:E0:6D:FB:53
Certificate issuer: /CN=bce920cc53ed6dc0af3febc31cab5b52dff302fa
Certificate serial: 27B899
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bce920cc53ed6dc0af3febc31cab5b52dff302fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3f3c617c-8440-4abe-9c03-90923eb1fcd0/bce920cc53ed6dc0af3febc31cab5b52dff302fa.mft
Manifest number: 0DF7
Signing time: Mon 15 Apr 2024 05:20:41 +0000
Manifest this update: Mon 15 Apr 2024 04:20:17 +0000
Manifest next update: Thu 18 Apr 2024 06:14:17 +0000
Files and hashes: 1: 110eed28da505fc1e375920409b5a8a0a0c04d25.roa (hash: Rsu49FTXYnh6bSPleRZwXk/psxfrA1H68aStlByOqFE=)
2: bce920cc53ed6dc0af3febc31cab5b52dff302fa.crl (hash: GA4wXV7sodlWIP5OgevUuEsBZrYAvRoxSLmKL3ARCZs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2603161 (0x27b899)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bce920cc53ed6dc0af3febc31cab5b52dff302fa
Validity
Not Before: Apr 15 04:20:17 2024 GMT
Not After : Apr 18 06:14:17 2024 GMT
Subject: CN=e36668950d5a2f892686515c68d1e89291178781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fb:df:90:d2:11:5a:1a:5b:4b:85:a5:a6:f3:
ec:16:4b:11:29:45:eb:69:40:90:b0:6c:02:b2:92:
be:2b:aa:5e:e3:d8:64:19:03:32:4e:84:f2:0d:3e:
42:cb:3d:79:02:03:d1:69:86:d1:f5:ad:76:a6:32:
1d:8b:01:d9:19:b5:5c:5b:78:96:7e:8e:95:03:bb:
43:5b:3d:5b:cd:67:ed:1a:23:51:bd:83:22:c0:7d:
d0:a2:e4:af:66:56:e8:33:c3:e0:8f:59:46:be:7e:
c2:2c:75:cb:52:18:fb:ca:80:ee:e8:14:7e:fb:7e:
30:cd:9f:dd:00:ae:2f:59:85:c1:ff:f9:44:a0:6a:
90:b1:93:63:5c:2c:1d:dc:a5:aa:cb:36:70:0d:d6:
a3:54:1d:08:d7:e1:da:72:fb:17:30:c0:26:6e:c7:
05:fd:9b:e8:7e:16:45:ad:d4:d9:8e:e1:f0:f1:4c:
00:4d:3d:1e:c3:db:6a:38:e8:e7:c0:03:cd:fc:fa:
95:14:00:e4:b6:bb:11:da:0f:f2:2a:13:21:77:51:
5a:9e:c1:cc:98:88:b1:b9:75:2b:80:db:a2:b9:41:
6e:be:d1:7e:94:5b:08:09:b3:a9:b1:27:81:4a:08:
41:aa:80:4d:72:92:da:3e:60:06:2f:db:5c:9b:ab:
ac:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DE:0C:9B:EE:C6:89:23:3A:6C:42:5E:55:2E:13:D6:0F:C6:AA:BF
X509v3 Authority Key Identifier:
keyid:82:61:8B:57:DB:A6:EE:6D:FB:F8:BB:41:A8:2B:9F:DB:E0:6D:FB:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bce920cc53ed6dc0af3febc31cab5b52dff302fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3f3c617c-8440-4abe-9c03-90923eb1fcd0/bce920cc53ed6dc0af3febc31cab5b52dff302fa.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3f3c617c-8440-4abe-9c03-90923eb1fcd0/bce920cc53ed6dc0af3febc31cab5b52dff302fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ce:dd:e1:e3:fd:6a:3f:ed:cc:c8:ef:f2:86:2a:b7:3e:50:
d7:e9:e4:9e:49:19:60:0b:86:9d:4c:2c:f0:16:76:63:5a:da:
76:ed:28:45:c9:36:98:ba:83:ae:5a:ca:5d:c5:7c:14:71:9c:
83:1c:fe:a5:bc:e8:32:22:8e:8a:89:11:a6:cd:17:cc:48:b6:
58:6c:85:95:30:1c:3c:b7:b3:34:2e:16:07:09:5d:1d:a6:3a:
67:a6:50:c4:48:c0:b8:ae:1b:75:a0:8e:1a:e8:a8:dd:0f:f3:
cb:a0:f3:cf:b6:89:10:e6:cd:bc:ef:e3:55:85:f7:b1:c8:6a:
dc:57:c5:54:39:7d:72:0a:4f:10:34:23:1c:7a:3c:b1:a5:62:
87:86:4d:37:6c:59:5f:84:3d:bb:50:00:7e:52:39:03:0c:f9:
0c:09:0c:04:15:12:e3:34:d8:fd:72:de:06:65:49:fe:5d:f1:
9a:4b:98:59:27:45:c8:f9:23:66:0b:4b:71:cc:b9:68:07:aa:
b1:f1:9f:d0:00:f2:dc:3b:30:7e:46:f2:b1:d4:25:5c:29:7e:
d7:3b:3c:4c:a0:9d:4f:17:fe:81:e1:6f:f5:30:2f:cc:89:1b:
45:11:21:fe:66:08:82:80:c3:0e:69:56:ce:7b:b9:34:2b:a4:
e4:d8:a0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org