Manifest
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9c169f1b-d65a-4498-8422-b4592b6caccd/ae02fdac5e4e467f2c3e10ce098ac749c3bbd143.mft
File: ae02fdac5e4e467f2c3e10ce098ac749c3bbd143.mft (raw, json)
Hash identifier: xM9cQ6ETqMOT/lgqb8IaCg9BH3enRujlyp5FY9/2qow=
Subject key identifier: 8F:E4:D0:F1:26:51:47:77:99:24:42:99:7E:C3:15:49:00:88:79:60
Authority key identifier: 61:10:D4:98:6F:CB:47:FA:45:8B:D1:87:98:87:8C:3C:AA:B7:28:21
Certificate issuer: /CN=ae02fdac5e4e467f2c3e10ce098ac749c3bbd143
Certificate serial: 280A85
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae02fdac5e4e467f2c3e10ce098ac749c3bbd143.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9c169f1b-d65a-4498-8422-b4592b6caccd/ae02fdac5e4e467f2c3e10ce098ac749c3bbd143.mft
Manifest number: 0DE1
Signing time: Mon 15 Apr 2024 10:21:06 +0000
Manifest this update: Mon 15 Apr 2024 09:20:25 +0000
Manifest next update: Thu 18 Apr 2024 12:25:25 +0000
Files and hashes: 1: 09d164937ea631a82674bf2fe24d369f7926aa60.roa (hash: KIBrwtiAVvo4bEKudl+uzdI11o0z5NzSmu06p3JF9Qc=)
2: 1db74152a4ed10499b8c0026589ae686b37072be.roa (hash: mIoFsqkU5XwGejoUhUSSMNsA3jbZwyE0eGBSBRtzgmY=)
3: 1dc0a72bddf4de12e6dcdafbe7b9370b24699cac.roa (hash: psOrx/Ur8e7nNV/qHsHEQXiK8D1pYUQnkwbOncobXLI=)
4: 377f0bf76aba47cc82ef21543e9091f3a6bab447.roa (hash: lEmMdJflSs3kxl7cQZzljSLVE4w0pHCPzU1wWRV0LJM=)
5: 95f75affc5719f7d06f3bc769bf6da9e1a452250.roa (hash: wDx3TqoJcPDQOMor2WiiUhqCAEAcGnwN4IenScZ0FWA=)
6: ae02fdac5e4e467f2c3e10ce098ac749c3bbd143.crl (hash: iASXCBIwWVWVHcQ+UR9WRHe0IOIAUylJ7gty2Wkhb/s=)
7: f51624d1c3500df43c60b0b5c7bb77c4099e2f5f.roa (hash: tmenWncM5GL1JZc/AwBdn3VzXTMhE3zK6VnPRL9h03A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2624133 (0x280a85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae02fdac5e4e467f2c3e10ce098ac749c3bbd143
Validity
Not Before: Apr 15 09:20:25 2024 GMT
Not After : Apr 18 12:25:25 2024 GMT
Subject: CN=8b22afc8aa30529c0257d143873dd337efe63eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c5:8b:e3:26:c2:61:49:22:71:fa:f3:9e:dd:
11:67:25:d1:2d:fa:6d:3d:34:88:4a:d8:43:3a:1d:
ea:a7:bd:6e:70:b6:7f:77:8d:f1:29:5c:01:b1:02:
65:ca:5e:da:5f:7d:16:02:64:f6:4a:c3:e8:7a:01:
5a:74:39:10:fd:7e:01:f1:c9:52:8b:8b:d7:93:7e:
55:bf:fa:5a:1f:b5:26:f5:fa:e4:71:29:5f:d5:96:
e3:b2:08:cf:7b:10:9d:2b:33:33:d4:52:f5:9d:10:
ab:f9:35:56:24:53:46:90:b9:c5:0b:fd:ed:b5:04:
cf:ac:ae:82:5e:aa:b0:d1:bf:60:f6:ee:0d:44:24:
4b:13:ff:42:07:9e:43:f4:09:ce:b1:fd:e5:c9:06:
1f:6a:7d:50:18:bd:76:40:49:4d:69:59:6e:95:e8:
da:41:14:7f:aa:67:fd:82:f6:81:5a:1b:7e:61:60:
8e:8b:8b:41:d9:ea:ee:ec:f3:8a:dc:46:b4:9c:8f:
ba:f8:4a:47:03:32:59:65:70:94:c2:23:88:bd:e2:
d3:ef:b6:6c:3d:d6:79:2e:3d:e0:59:59:2e:4b:a3:
c7:c1:74:78:b1:f8:f9:5f:82:5d:78:9a:d2:df:c9:
f8:bb:0a:a9:04:32:d4:d8:c8:50:5a:62:91:1a:b8:
8c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E4:D0:F1:26:51:47:77:99:24:42:99:7E:C3:15:49:00:88:79:60
X509v3 Authority Key Identifier:
keyid:61:10:D4:98:6F:CB:47:FA:45:8B:D1:87:98:87:8C:3C:AA:B7:28:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae02fdac5e4e467f2c3e10ce098ac749c3bbd143.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9c169f1b-d65a-4498-8422-b4592b6caccd/ae02fdac5e4e467f2c3e10ce098ac749c3bbd143.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9c169f1b-d65a-4498-8422-b4592b6caccd/ae02fdac5e4e467f2c3e10ce098ac749c3bbd143.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:10:22:ff:97:9d:64:6d:d0:de:7e:87:9a:c8:e1:8b:31:58:
b7:34:a1:a7:09:84:5f:31:83:5b:71:49:a9:91:4d:61:9f:38:
55:7d:ae:dc:a3:56:5f:06:32:6a:05:28:cb:35:2c:c8:79:ea:
9d:43:12:af:ef:9b:df:5b:7b:43:d5:f4:31:c6:66:90:d5:52:
59:20:2e:69:a6:5a:cc:ed:a4:96:25:ff:f4:1a:09:b9:a8:29:
ab:f1:d1:74:c3:8d:e8:b3:e0:c3:5d:3b:1f:46:f7:55:6d:39:
58:fd:27:f7:4b:1d:25:5e:b3:74:02:10:c7:ae:95:c5:50:78:
9a:ed:f2:a4:ef:73:a3:d8:46:37:45:90:66:be:7f:c7:94:87:
c0:01:d1:ce:2d:f4:a5:00:7a:0d:66:ff:84:74:08:57:c5:97:
c1:6d:92:48:1f:70:a5:2b:4a:12:df:d9:d8:1c:e8:d0:90:7a:
7e:c8:bb:ed:f1:04:1d:b6:7a:8a:13:e8:7c:3b:bd:79:5b:fa:
74:fd:8d:96:6a:3c:a1:11:5e:95:8a:36:2b:f0:8c:9a:cc:3d:
aa:7e:4d:0a:93:2c:53:12:bf:95:93:c5:73:2f:22:7f:9c:ce:
ff:05:8c:a8:cf:13:c6:fb:01:63:1f:c9:5b:31:a4:7c:55:17:
68:44:b9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org