Manifest
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4f9e311f-20e7-453f-979b-aa00941aa256/d5a967db036ee0f604f72e40829d624c3aad70c9.mft
File: d5a967db036ee0f604f72e40829d624c3aad70c9.mft (raw, json)
Hash identifier: CuGDWs7kKIucqV3Ku5h3Tqts5gENaSzvYVgvNCWIDqg=
Subject key identifier: 59:49:C3:1D:3E:A5:C9:33:45:43:66:A0:95:F1:EA:53:7A:1D:7A:E8
Authority key identifier: 48:C5:32:96:96:1A:F8:2A:68:5D:EC:F8:FF:BC:8D:C9:5C:D2:E4:26
Certificate issuer: /CN=d5a967db036ee0f604f72e40829d624c3aad70c9
Certificate serial: 014621
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5a967db036ee0f604f72e40829d624c3aad70c9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4f9e311f-20e7-453f-979b-aa00941aa256/d5a967db036ee0f604f72e40829d624c3aad70c9.mft
Manifest number: A2
Signing time: Mon 15 Apr 2024 06:21:45 +0000
Manifest this update: Mon 15 Apr 2024 05:20:39 +0000
Manifest next update: Thu 18 Apr 2024 09:05:39 +0000
Files and hashes: 1: d5a967db036ee0f604f72e40829d624c3aad70c9.crl (hash: DY82NxSU9OWNYf3xMsVL3QlJ+MZnfS7HBhC20H7crQo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83489 (0x14621)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a967db036ee0f604f72e40829d624c3aad70c9
Validity
Not Before: Apr 15 05:20:39 2024 GMT
Not After : Apr 18 09:05:39 2024 GMT
Subject: CN=bc9005a9a9bbf6ac0618d0c424f6e9f454120a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:cf:fd:4e:8f:75:54:1e:ca:d6:1b:24:d2:7d:
6e:f8:15:1c:2d:a6:65:07:01:d2:06:9d:97:bb:46:
b9:df:40:08:11:63:b0:6f:c4:08:2f:03:8c:3e:32:
15:79:b6:1c:53:81:1f:79:92:98:19:43:ef:93:27:
8c:c3:1b:88:a8:7a:b2:e5:93:44:dd:e0:fb:de:2c:
e4:22:0b:6d:ad:6e:b9:7b:ea:08:8e:2b:cf:12:38:
0d:53:12:42:5d:6e:24:05:e9:1f:b9:a3:2a:e0:61:
ea:a5:9e:60:12:9c:71:48:ec:5b:06:d9:06:f3:46:
15:c2:1a:51:ea:6e:6f:41:6a:6b:f5:bd:92:c2:9b:
e3:28:02:53:79:08:a5:4e:c9:57:cd:bd:52:15:f6:
e0:84:32:aa:76:ae:2a:37:21:71:35:e1:dd:55:a1:
d8:2b:35:4c:4f:27:57:a1:69:b8:54:e0:9d:79:6a:
0e:db:10:d6:c5:e7:4a:0a:d5:10:20:0d:7d:50:bc:
0c:83:bd:ed:53:ad:b8:1e:5a:f8:32:c1:7e:93:85:
c7:8a:85:1a:49:31:9f:fd:ef:04:6e:c3:af:fd:bc:
85:5b:3d:04:50:9f:04:92:27:88:2b:2f:f2:de:a3:
de:08:f2:f1:1b:29:57:2a:f2:e0:02:69:c3:8e:c5:
d8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:49:C3:1D:3E:A5:C9:33:45:43:66:A0:95:F1:EA:53:7A:1D:7A:E8
X509v3 Authority Key Identifier:
keyid:48:C5:32:96:96:1A:F8:2A:68:5D:EC:F8:FF:BC:8D:C9:5C:D2:E4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5a967db036ee0f604f72e40829d624c3aad70c9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4f9e311f-20e7-453f-979b-aa00941aa256/d5a967db036ee0f604f72e40829d624c3aad70c9.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4f9e311f-20e7-453f-979b-aa00941aa256/d5a967db036ee0f604f72e40829d624c3aad70c9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:92:42:57:24:93:cc:9c:9a:f7:53:6b:e5:ac:48:38:c5:fb:
8c:73:48:70:7f:6e:67:2e:6d:14:26:82:cc:30:38:d5:07:ad:
da:74:c5:58:1d:f5:2c:13:af:85:ed:8b:c3:0d:58:7b:5a:73:
6f:81:db:eb:e2:e5:1f:6e:04:0b:09:a5:d0:e3:6b:21:ba:0a:
5d:f7:de:97:5c:85:1e:56:04:86:f9:54:f9:93:13:7c:a6:0f:
82:02:7b:aa:ae:7e:bf:f8:9c:72:a1:9c:a3:d6:02:27:f2:41:
4c:c5:6c:9a:f5:f8:a4:26:94:d2:33:00:14:ee:e9:f8:08:5a:
60:f7:fc:da:2b:95:c6:27:7f:ed:40:b9:34:76:4a:55:b1:3b:
19:ac:2d:a9:07:d2:6b:0c:3b:6b:29:6b:0e:93:23:77:72:12:
27:20:c5:aa:85:7a:79:1f:d4:4b:1a:69:42:28:77:a1:91:9d:
74:9f:5c:e9:8a:e2:f2:56:20:c4:68:1c:89:43:0a:c0:8a:8d:
3a:2f:df:cf:c5:a2:e1:65:2b:58:08:f9:63:fa:62:f7:fd:e1:
85:f7:f4:f6:08:5c:ee:c0:f4:cd:2e:e5:8e:42:f2:4e:e4:f4:
8c:b3:c2:cf:23:55:86:a4:e5:79:50:31:c0:60:bf:8d:be:d2:
fc:b4:03:5d
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDAUYhMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
YTk2N2RiMDM2ZWUwZjYwNGY3MmU0MDgyOWQ2MjRjM2FhZDcwYzkwHhcNMjQwNDE1
MDUyMDM5WhcNMjQwNDE4MDkwNTM5WjAzMTEwLwYDVQQDEyhiYzkwMDVhOWE5YmJm
NmFjMDYxOGQwYzQyNGY2ZTlmNDU0MTIwYTA1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgs/9To91VB7K1hsk0n1u+BUcLaZlBwHSBp2Xu0a530AIEWOw
b8QILwOMPjIVebYcU4EfeZKYGUPvkyeMwxuIqHqy5ZNE3eD73izkIgttrW65e+oI
jivPEjgNUxJCXW4kBekfuaMq4GHqpZ5gEpxxSOxbBtkG80YVwhpR6m5vQWpr9b2S
wpvjKAJTeQilTslXzb1SFfbghDKqdq4qNyFxNeHdVaHYKzVMTydXoWm4VOCdeWoO
2xDWxedKCtUQIA19ULwMg73tU624Hlr4MsF+k4XHioUaSTGf/e8EbsOv/byFWz0E
UJ8EkieIKy/y3qPeCPLxGylXKvLgAmnDjsXYzQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFFlJwx0+pckzRUNmoJXx6lN6HXroMB8GA1UdIwQYMBaAFEjFMpaWGvgqaF3s
+P+8jclc0uQmMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDVhOTY3
ZGIwMzZlZTBmNjA0ZjcyZTQwODI5ZDYyNGMzYWFkNzBjOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGY5ZTMxMWYtMjBlNy00NTNmLTk3OWItYWEwMDk0
MWFhMjU2L2Q1YTk2N2RiMDM2ZWUwZjYwNGY3MmU0MDgyOWQ2MjRjM2FhZDcwYzku
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZjllMzExZi0yMGU3LTQ1M2YtOTc5Yi1hYTAw
OTQxYWEyNTYvZDVhOTY3ZGIwMzZlZTBmNjA0ZjcyZTQwODI5ZDYyNGMzYWFkNzBj
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBACuSQlckk8ycmvdTa+WsSDjF+4xzSHB/bmcubRQmgswwONUH
rdp0xVgd9SwTr4Xti8MNWHtac2+B2+vi5R9uBAsJpdDjayG6Cl333pdchR5WBIb5
VPmTE3ymD4ICe6qufr/4nHKhnKPWAifyQUzFbJr1+KQmlNIzABTu6fgIWmD3/Nor
lcYnf+1AuTR2SlWxOxmsLakH0msMO2spaw6TI3dyEicgxaqFenkf1EsaaUIod6GR
nXSfXOmK4vJWIMRoHIlDCsCKjTov38/FouFlK1gI+WP6Yvf94YX39PYIXO7A9M0u
5Y5C8k7k9Iyzws8jVYak5XlQMcBgv42+0vy0A10=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org