Manifest
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.mft
File: DD21E8538F50D4CF3466F380D64FFA7779EE20D6.mft (raw, json)
Hash identifier: +sc3OePIzYew/2ZlihU5BcSN0Em72jK+BiO+a365zxU=
Subject key identifier: B8:52:25:F6:EE:12:0F:5F:D3:E0:2B:E4:21:A9:15:DC:BA:07:09:00
Authority key identifier: DD:21:E8:53:8F:50:D4:CF:34:66:F3:80:D6:4F:FA:77:79:EE:20:D6
Certificate issuer: /CN=DD21E8538F50D4CF3466F380D64FFA7779EE20D6
Certificate serial: 5385540451858D0CF5B4A49BA39B4B195A2BFF11
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.mft
Manifest number: C2
Signing time: Wed 26 Mar 2025 13:03:46 +0000
Manifest this update: Wed 26 Mar 2025 12:58:46 +0000
Manifest next update: Tue 01 Apr 2025 11:12:46 +0000
Files and hashes: 1: 3136362e37352e352e302f32342d3234203d3e203532333936.roa (hash: /HJpo8fhGLiczdW0hIyPCI+8CejGuyEt1elbN6lOC0E=)
2: DD21E8538F50D4CF3466F380D64FFA7779EE20D6.crl (hash: mW6XvYB00QTe01sBSGyWgbq2XuQFpER0pfSmgm6TTVU=)
3: 3136362e37352e302e302f31362d3234203d3e203136363239.roa (hash: MeEUgBWbdj5gh4Y7oRYwCqgHb8XMIr/E2OvmSZ1vsaE=)
4: 3136362e37352e3130302e302f32342d3234203d3e203532333936.roa (hash: C4kdyy0E/8UNrtzx9QsS1hAX0eB/6CuxTFC9dGm2Ia4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:85:54:04:51:85:8d:0c:f5:b4:a4:9b:a3:9b:4b:19:5a:2b:ff:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD21E8538F50D4CF3466F380D64FFA7779EE20D6
Validity
Not Before: Mar 26 12:58:46 2025 GMT
Not After : Apr 1 11:12:46 2025 GMT
Subject: CN=B85225F6EE120F5FD3E02BE421A915DCBA070900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5f:5b:7b:9c:46:ed:64:70:b0:e9:01:66:70:
91:48:ff:0a:dd:fa:88:94:d7:d6:bd:24:f4:f7:83:
dc:c0:81:90:bd:20:0e:b2:e4:25:95:71:4f:8f:e6:
a3:04:18:86:53:58:5e:3c:80:a2:df:c0:95:ab:0e:
84:7d:a3:8a:26:52:8c:21:37:ba:a8:f9:7b:89:29:
5e:5d:a2:67:45:39:e8:76:ab:15:97:69:09:1d:8d:
b1:f8:d8:23:f7:ce:59:0f:19:94:24:aa:59:5c:6f:
c2:c5:8f:04:38:7c:89:c3:56:71:9e:b6:a9:4c:d9:
fc:ed:3b:11:2c:d1:7b:8e:1f:4e:f8:2b:37:e9:9c:
aa:2a:2d:90:2d:65:52:07:b4:ac:2b:92:c0:31:6a:
eb:70:ce:c5:2e:91:5a:44:54:cd:fe:6d:b9:f0:a5:
08:a4:d5:49:a5:f0:76:ee:f4:89:3b:00:31:04:b3:
f7:df:c5:97:7d:0e:7a:dd:7c:29:c9:f3:75:71:92:
ea:d3:37:6a:aa:17:6b:74:d2:ae:33:e9:ff:0e:41:
0e:86:59:17:34:01:17:1e:c6:8c:7a:67:84:7f:af:
21:8a:09:98:28:4b:d6:c4:e9:50:3d:ee:c5:59:25:
41:1a:7e:0a:7b:9c:0b:d8:e5:6d:4a:ae:63:46:61:
93:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:52:25:F6:EE:12:0F:5F:D3:E0:2B:E4:21:A9:15:DC:BA:07:09:00
X509v3 Authority Key Identifier:
keyid:DD:21:E8:53:8F:50:D4:CF:34:66:F3:80:D6:4F:FA:77:79:EE:20:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:2b:57:f1:57:ab:c3:dc:1b:8f:7a:3e:b4:b9:58:7f:3a:8d:
a8:9e:44:98:1b:03:c5:31:75:cf:09:96:fb:70:c8:05:e0:44:
b8:49:c3:91:c0:e0:90:7f:0a:8c:62:6b:e8:43:8b:b3:dd:65:
30:02:a5:b1:5b:7f:99:c0:50:7e:f1:9d:7c:26:4e:fb:53:9f:
12:37:a5:69:3d:f1:ea:6d:61:0d:f6:d4:10:aa:ae:e1:ca:6c:
a2:6a:a8:c9:0a:c6:bf:43:aa:16:09:e4:cf:c3:c0:fd:dc:87:
47:b8:ac:01:45:5d:e0:e4:28:34:0d:f7:ae:76:32:fc:43:00:
30:0b:e4:10:a2:cd:07:12:6d:53:34:c7:7c:64:af:c5:af:da:
d4:28:c4:93:1e:6f:b4:77:9a:81:93:81:8e:04:7d:a4:ea:6e:
e8:bd:7d:8b:fd:99:48:91:cd:84:48:e6:f1:c0:02:ee:8e:e5:
1f:dd:3a:ea:dd:d2:ed:0a:f7:55:29:42:26:dd:f4:bc:36:eb:
ec:60:50:ca:34:a4:c5:b4:40:e4:b9:83:90:ba:67:f7:ce:ad:
5a:0a:9d:f9:bf:a6:97:29:99:af:5f:6e:69:88:2d:8f:a2:9a:
8f:23:2e:31:9d:c0:b6:b8:78:3f:a0:4f:d4:92:81:a2:79:d9:
0f:e5:bd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:19:20 2025 by rpki-client