Manifest
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67d5e32c-e005-455e-9e91-6e0ca7e0daa1/474ef7c6edfa79b5d73f8a63e3e1fe4180b65569.mft
File: 474ef7c6edfa79b5d73f8a63e3e1fe4180b65569.mft (raw, json)
Hash identifier: 2jVsAiilb7JiHWIUdV57vrFxQVmw/5pNyK1cewtAKmk=
Subject key identifier: 3D:0F:40:38:9D:EC:3A:2B:F1:DB:93:C0:EA:49:D9:07:1C:60:E4:F5
Authority key identifier: 4F:87:B7:3B:3E:8E:01:C8:9E:42:02:E2:1C:90:A8:57:47:D3:08:98
Certificate issuer: /CN=474ef7c6edfa79b5d73f8a63e3e1fe4180b65569
Certificate serial: 015616
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/474ef7c6edfa79b5d73f8a63e3e1fe4180b65569.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67d5e32c-e005-455e-9e91-6e0ca7e0daa1/474ef7c6edfa79b5d73f8a63e3e1fe4180b65569.mft
Manifest number: AA
Signing time: Mon 15 Apr 2024 10:21:33 +0000
Manifest this update: Mon 15 Apr 2024 09:20:25 +0000
Manifest next update: Thu 18 Apr 2024 11:47:25 +0000
Files and hashes: 1: 474ef7c6edfa79b5d73f8a63e3e1fe4180b65569.crl (hash: JIg2LFWQ83Z4j/cBVZqMnnlW2BLpxBMRB04GwIoTU9I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87574 (0x15616)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474ef7c6edfa79b5d73f8a63e3e1fe4180b65569
Validity
Not Before: Apr 15 09:20:25 2024 GMT
Not After : Apr 18 11:47:25 2024 GMT
Subject: CN=1d36d444d15bd7fa3f349a938e63c53ee0b9491a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e7:c4:6b:4c:db:7c:36:2d:78:28:91:3b:06:
5c:1f:ba:db:68:11:45:1a:38:8f:03:93:f2:a3:a2:
ec:6a:31:6e:28:4d:b6:e4:df:e0:b4:9f:32:0b:ca:
84:8e:00:96:a0:33:45:1b:46:ef:3a:0d:78:cb:ab:
4a:02:69:ec:c5:59:8f:79:ea:a1:35:c2:70:91:b8:
a5:cb:88:68:74:b2:6b:79:19:b4:2a:5c:0a:15:f0:
30:41:3b:b3:b4:a5:6c:92:dd:7e:ab:33:17:16:88:
97:e7:ef:68:cb:53:c8:07:6f:f5:33:1c:3d:91:83:
73:ed:9e:aa:7e:bc:61:e6:71:ad:36:07:3e:95:0b:
cf:a0:c8:99:fc:dc:bf:b4:c1:d5:4a:d0:71:34:e7:
e4:7a:8e:50:a9:73:a9:a8:cd:c8:73:51:87:77:e7:
6a:11:37:48:ca:19:5f:9b:84:87:1a:88:9f:b9:18:
5e:4c:02:6b:0f:33:57:eb:a6:7a:6d:ce:ed:dc:68:
4e:f6:91:f1:2d:c2:a0:52:34:b2:17:a0:a7:b8:fe:
78:9f:af:1c:5b:d7:34:14:09:f0:39:1b:61:62:cd:
07:6c:09:24:1e:d1:30:58:04:c6:95:06:90:ab:c3:
06:16:7d:93:46:4b:de:5c:5c:b4:ad:8f:21:d1:28:
24:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0F:40:38:9D:EC:3A:2B:F1:DB:93:C0:EA:49:D9:07:1C:60:E4:F5
X509v3 Authority Key Identifier:
keyid:4F:87:B7:3B:3E:8E:01:C8:9E:42:02:E2:1C:90:A8:57:47:D3:08:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/474ef7c6edfa79b5d73f8a63e3e1fe4180b65569.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67d5e32c-e005-455e-9e91-6e0ca7e0daa1/474ef7c6edfa79b5d73f8a63e3e1fe4180b65569.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67d5e32c-e005-455e-9e91-6e0ca7e0daa1/474ef7c6edfa79b5d73f8a63e3e1fe4180b65569.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ee:1f:cc:a4:55:84:ef:69:b2:a8:2e:6a:f3:a8:78:0d:5e:
12:bc:76:da:6b:43:92:17:8b:7c:18:ea:da:b4:49:11:85:3e:
f7:36:cb:9c:57:d7:32:3a:e0:c2:24:6e:e5:80:23:42:bd:09:
26:41:65:bb:25:c2:a1:cc:fb:78:7b:d2:7a:b3:84:51:df:86:
07:64:4a:0b:ed:1f:c5:b6:d9:59:55:bb:8c:d5:06:13:a6:a5:
1e:b8:b5:9d:95:43:63:e6:e3:96:26:22:ad:4c:97:e8:21:61:
c7:53:12:b0:40:0b:64:87:af:9b:eb:11:89:4a:6e:0f:b9:d9:
4d:9f:3c:41:d5:9f:95:d9:62:ff:7a:f0:19:f7:31:ce:9e:2d:
be:a3:7a:56:03:3d:a5:12:f4:0f:cd:62:da:17:bd:92:65:07:
17:49:c3:f3:02:51:d4:08:ad:43:ba:e8:cc:02:10:cc:46:ec:
e4:19:af:0e:1a:92:51:5e:81:a2:6d:a4:89:60:b9:ca:3e:6c:
6d:29:2e:a4:18:e0:67:c7:ca:af:43:b0:5c:d9:a7:9b:31:f9:
53:b3:9f:b6:e3:e4:19:1c:75:af:b7:e9:eb:87:ad:a2:76:82:
2b:76:3a:7a:ee:82:85:42:8d:f7:ea:d2:fe:cd:2f:cc:ff:7e:
a7:d5:db:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org