Manifest
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71acecec-fb75-4092-a179-f9a83cb9a118/aff8b20fe002c6eb1b8d420be5376226ac7381bb.mft
File: aff8b20fe002c6eb1b8d420be5376226ac7381bb.mft (raw, json)
Hash identifier: 2Kh1iCu8rfL/0KvfePyQHBEEktfiRj6uP7UiQqbhkVg=
Subject key identifier: 47:08:98:51:65:8D:97:53:C9:76:72:DF:4D:C5:FF:65:EF:B1:FA:4F
Authority key identifier: 72:1D:4D:1F:E3:96:53:69:4B:B3:D0:04:54:82:3D:1A:BD:76:8C:7E
Certificate issuer: /CN=aff8b20fe002c6eb1b8d420be5376226ac7381bb
Certificate serial: 0902E7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aff8b20fe002c6eb1b8d420be5376226ac7381bb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/71acecec-fb75-4092-a179-f9a83cb9a118/aff8b20fe002c6eb1b8d420be5376226ac7381bb.mft
Manifest number: 04B8
Signing time: Mon 15 Apr 2024 08:21:03 +0000
Manifest this update: Mon 15 Apr 2024 07:20:16 +0000
Manifest next update: Thu 18 Apr 2024 10:30:16 +0000
Files and hashes: 1: aff8b20fe002c6eb1b8d420be5376226ac7381bb.crl (hash: ieUU5STqq+oUBFloO1fHZsIxRBiZUlbN1mfK+6hzcx8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 590567 (0x902e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff8b20fe002c6eb1b8d420be5376226ac7381bb
Validity
Not Before: Apr 15 07:20:16 2024 GMT
Not After : Apr 18 10:30:16 2024 GMT
Subject: CN=2d3d8533351f15b7003610ffe9fe00d9689fa368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:da:31:7f:3e:5b:4b:a7:28:59:a1:45:3d:6a:
58:1c:d6:42:74:12:41:5e:45:44:70:93:16:81:7c:
d2:89:76:28:90:d1:29:28:cb:9f:f1:ad:07:38:2e:
be:b9:29:fd:c4:b0:f8:7e:6f:50:e9:42:95:f7:86:
a4:b9:2c:b4:61:d0:ce:de:e1:4d:bf:e6:f3:a8:41:
70:b7:9f:1a:f5:1e:8a:45:5c:e5:41:8c:57:db:48:
c6:49:49:bc:31:6e:f5:75:f5:b7:ab:e5:53:08:95:
fd:9f:b4:b6:d3:a0:f7:f6:65:da:e5:77:5f:e5:2a:
f0:23:02:a1:3b:eb:ac:83:de:a1:62:8a:84:60:36:
bd:45:53:9b:67:e3:51:ee:e0:ff:cd:e4:58:af:39:
13:21:5a:56:bd:52:0d:63:12:ba:ea:59:df:40:ba:
dc:ad:6c:77:f4:4a:ad:a4:b7:a5:0a:e7:a8:05:a5:
80:a0:f7:cc:04:d3:4d:d4:09:43:f3:25:a3:b9:bf:
5a:7a:68:f9:e1:e9:f4:3c:ac:6f:26:18:65:dc:31:
e9:4a:63:91:1c:05:9f:b5:eb:58:f7:f6:36:ad:23:
d7:88:9b:17:cb:09:02:09:70:70:06:55:ee:7d:e4:
d8:e4:a6:88:1c:8e:20:99:f5:69:60:2e:0e:3f:2e:
68:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:08:98:51:65:8D:97:53:C9:76:72:DF:4D:C5:FF:65:EF:B1:FA:4F
X509v3 Authority Key Identifier:
keyid:72:1D:4D:1F:E3:96:53:69:4B:B3:D0:04:54:82:3D:1A:BD:76:8C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aff8b20fe002c6eb1b8d420be5376226ac7381bb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71acecec-fb75-4092-a179-f9a83cb9a118/aff8b20fe002c6eb1b8d420be5376226ac7381bb.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/71acecec-fb75-4092-a179-f9a83cb9a118/aff8b20fe002c6eb1b8d420be5376226ac7381bb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:4d:cc:46:5b:8b:3f:0f:0b:50:57:8e:2f:29:1e:0e:33:9e:
13:dd:0d:98:7f:82:f6:b5:bd:5d:3b:89:90:cf:8e:1c:f8:21:
3e:42:e7:9f:f0:a0:8a:b6:48:b4:1b:41:5e:8f:82:68:c9:fe:
f2:c9:a7:30:0c:30:e5:91:a4:ee:0b:d7:62:a6:9d:71:a7:43:
7e:9b:bf:75:19:9c:a8:8e:4e:de:44:27:66:35:44:ac:d3:df:
5d:03:75:9e:7d:51:9f:ad:b5:99:16:0a:dd:34:23:b1:f2:69:
48:63:bb:ce:96:a0:bf:a6:76:59:59:a7:25:5b:12:3f:21:69:
11:95:f9:ca:0d:9b:0c:8d:be:a3:98:c4:d4:6c:a6:cd:c8:e7:
74:1e:9f:f3:1a:2a:96:65:92:64:e0:3d:f6:b7:2b:7d:ef:1d:
5c:3c:31:dc:7b:1d:48:a6:91:70:c4:da:3c:48:fc:74:33:c1:
c8:17:9d:de:45:22:c7:00:23:e2:61:0c:70:87:5d:93:0d:ce:
d9:c5:f2:b4:e4:60:ff:c5:62:74:c7:fa:21:b4:99:7f:b3:4a:
68:25:23:6c:b8:6d:87:ca:e8:a3:15:b8:a0:1f:76:bb:81:d1:
a0:ac:2e:53:6f:1f:8d:25:83:48:ed:3f:ff:26:69:62:8c:84:
6c:15:dd:c4
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDCQLnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFm
ZjhiMjBmZTAwMmM2ZWIxYjhkNDIwYmU1Mzc2MjI2YWM3MzgxYmIwHhcNMjQwNDE1
MDcyMDE2WhcNMjQwNDE4MTAzMDE2WjAzMTEwLwYDVQQDEygyZDNkODUzMzM1MWYx
NWI3MDAzNjEwZmZlOWZlMDBkOTY4OWZhMzY4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA3Noxfz5bS6coWaFFPWpYHNZCdBJBXkVEcJMWgXzSiXYokNEp
KMuf8a0HOC6+uSn9xLD4fm9Q6UKV94akuSy0YdDO3uFNv+bzqEFwt58a9R6KRVzl
QYxX20jGSUm8MW71dfW3q+VTCJX9n7S206D39mXa5Xdf5SrwIwKhO+usg96hYoqE
YDa9RVObZ+NR7uD/zeRYrzkTIVpWvVINYxK66lnfQLrcrWx39EqtpLelCueoBaWA
oPfMBNNN1AlD8yWjub9aemj54en0PKxvJhhl3DHpSmORHAWftetY9/Y2rSPXiJsX
ywkCCXBwBlXufeTY5KaIHI4gmfVpYC4OPy5o+wIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFEcImFFljZdTyXZy303F/2XvsfpPMB8GA1UdIwQYMBaAFHIdTR/jllNpS7PQ
BFSCPRq9dox+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWZmOGIy
MGZlMDAyYzZlYjFiOGQ0MjBiZTUzNzYyMjZhYzczODFiYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzFhY2VjZWMtZmI3NS00MDkyLWExNzktZjlhODNj
YjlhMTE4L2FmZjhiMjBmZTAwMmM2ZWIxYjhkNDIwYmU1Mzc2MjI2YWM3MzgxYmIu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83MWFjZWNlYy1mYjc1LTQwOTItYTE3OS1mOWE4
M2NiOWExMTgvYWZmOGIyMGZlMDAyYzZlYjFiOGQ0MjBiZTUzNzYyMjZhYzczODFi
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAF5NzEZbiz8PC1BXji8pHg4znhPdDZh/gva1vV07iZDPjhz4
IT5C55/woIq2SLQbQV6PgmjJ/vLJpzAMMOWRpO4L12KmnXGnQ36bv3UZnKiOTt5E
J2Y1RKzT310DdZ59UZ+ttZkWCt00I7HyaUhju86WoL+mdllZpyVbEj8haRGV+coN
mwyNvqOYxNRsps3I53Qen/MaKpZlkmTgPfa3K33vHVw8Mdx7HUimkXDE2jxI/HQz
wcgXnd5FIscAI+JhDHCHXZMNztnF8rTkYP/FYnTH+iG0mX+zSmglI2y4bYfK6KMV
uKAfdruB0aCsLlNvH40lg0jtP/8maWKMhGwV3cQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org