Manifest
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e08329b-b55a-4666-b304-ccc7a4d1755b/8420de7ba136b3cf96ae4a8fa6f70abfc9b3fd95.mft
File: 8420de7ba136b3cf96ae4a8fa6f70abfc9b3fd95.mft (raw, json)
Hash identifier: U35lY/qSyuFpzrXc1gDB7KESmaeQpBGoGnum6Ew+SDA=
Subject key identifier: 67:CC:B6:70:3D:CF:52:83:DB:46:B0:24:EC:E0:B8:27:0D:79:F0:89
Authority key identifier: 54:98:AA:EE:D7:FD:33:C3:FB:C2:58:BC:F1:76:EB:F5:76:0E:EC:70
Certificate issuer: /CN=8420de7ba136b3cf96ae4a8fa6f70abfc9b3fd95
Certificate serial: 09116C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8420de7ba136b3cf96ae4a8fa6f70abfc9b3fd95.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9e08329b-b55a-4666-b304-ccc7a4d1755b/8420de7ba136b3cf96ae4a8fa6f70abfc9b3fd95.mft
Manifest number: 04AA
Signing time: Mon 15 Apr 2024 09:21:14 +0000
Manifest this update: Mon 15 Apr 2024 08:20:18 +0000
Manifest next update: Thu 18 Apr 2024 09:57:18 +0000
Files and hashes: 1: 8420de7ba136b3cf96ae4a8fa6f70abfc9b3fd95.crl (hash: dQRP+7bdv1No1D3ZzQZdyQ9wCVQ44oFFfUcIQ8/L/6s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 594284 (0x9116c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8420de7ba136b3cf96ae4a8fa6f70abfc9b3fd95
Validity
Not Before: Apr 15 08:20:18 2024 GMT
Not After : Apr 18 09:57:18 2024 GMT
Subject: CN=c02a21ba3ea52ccbd9323c3fc46e31b3b5484622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4b:e3:08:e6:1d:1f:00:3b:0b:55:78:f7:41:
72:70:a0:ee:d9:6e:cc:4f:37:34:d7:37:07:ca:f1:
0d:9b:0d:6d:88:fd:19:5b:e8:45:39:b7:89:bc:d4:
69:61:3e:a7:0c:fa:97:0b:bd:33:94:08:fa:5a:eb:
86:07:c9:e7:b3:c6:65:75:84:6d:c1:c8:99:3d:ff:
c9:fb:ef:ba:6f:cb:ed:42:06:2c:78:d4:31:3e:92:
cd:a2:f4:85:84:25:f9:aa:5c:52:03:b5:81:5d:f9:
17:a3:0f:6f:bd:35:51:89:b3:78:93:da:86:60:d0:
59:fc:8e:d9:ee:6f:97:c2:d7:b2:9d:2a:46:01:ad:
82:45:67:a2:d3:ab:cc:37:03:8e:e0:4d:3e:f1:ab:
4f:7b:c6:c7:7c:bc:84:b5:ff:fc:3e:89:2b:bf:59:
f3:a7:7b:2f:68:72:b5:08:21:1d:c7:39:28:e3:ed:
92:cb:87:ee:e9:be:f2:ef:8d:6e:92:af:46:b2:02:
c7:b6:65:e5:c3:1f:f8:2e:27:0b:a9:2a:15:03:52:
e3:44:da:df:b4:15:d6:0f:c5:92:26:5a:23:20:63:
57:39:c0:6d:8b:11:cb:81:6a:d4:01:5d:7e:ca:17:
e8:3f:65:fe:b2:84:5f:3f:ab:9c:e5:28:fe:22:82:
9c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CC:B6:70:3D:CF:52:83:DB:46:B0:24:EC:E0:B8:27:0D:79:F0:89
X509v3 Authority Key Identifier:
keyid:54:98:AA:EE:D7:FD:33:C3:FB:C2:58:BC:F1:76:EB:F5:76:0E:EC:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8420de7ba136b3cf96ae4a8fa6f70abfc9b3fd95.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e08329b-b55a-4666-b304-ccc7a4d1755b/8420de7ba136b3cf96ae4a8fa6f70abfc9b3fd95.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9e08329b-b55a-4666-b304-ccc7a4d1755b/8420de7ba136b3cf96ae4a8fa6f70abfc9b3fd95.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:10:fc:37:c7:4f:ec:35:3b:4f:e3:95:76:4f:54:f6:bd:bc:
e6:b5:b8:fd:f6:50:60:f7:79:a1:f9:df:dc:ba:c6:6f:7c:18:
d1:2d:14:48:52:65:a8:4a:99:77:30:e8:d2:b4:51:a6:82:60:
0c:cd:f4:b8:42:c3:2d:be:f9:31:3f:c0:8e:79:17:fc:8e:1f:
41:1c:8a:6a:59:60:b2:48:8e:3c:b3:b1:78:73:f8:ed:29:19:
6a:6d:3f:e3:c6:e7:34:78:71:95:ea:e8:fa:74:9f:6c:db:4e:
8a:0d:bc:8f:cb:88:ea:2e:b2:a0:c8:ee:ac:be:31:ee:37:a8:
57:d1:76:38:3f:00:66:4e:90:5e:2a:be:76:1b:34:4d:d9:b6:
13:c6:4e:e4:22:90:98:dc:a6:76:34:40:ed:91:d3:b9:78:c5:
47:94:0a:37:e3:fb:8e:96:5d:80:ec:1d:cd:58:a8:aa:9b:02:
0a:86:14:d6:3e:c1:98:7f:cb:52:2c:cb:5b:ba:47:c9:2a:ce:
bf:c5:5c:03:49:54:a8:8d:bc:d8:41:16:8d:36:50:88:17:c4:
95:5f:5a:6d:a2:d9:18:7d:27:ab:5d:23:59:ca:79:3c:72:18:
bf:5e:4a:1c:67:7c:13:49:b3:44:64:3d:c0:50:ca:2d:5c:fa:
7c:ca:fd:65
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDCRFsMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg0
MjBkZTdiYTEzNmIzY2Y5NmFlNGE4ZmE2ZjcwYWJmYzliM2ZkOTUwHhcNMjQwNDE1
MDgyMDE4WhcNMjQwNDE4MDk1NzE4WjAzMTEwLwYDVQQDEyhjMDJhMjFiYTNlYTUy
Y2NiZDkzMjNjM2ZjNDZlMzFiM2I1NDg0NjIyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAg0vjCOYdHwA7C1V490FycKDu2W7MTzc01zcHyvENmw1tiP0Z
W+hFObeJvNRpYT6nDPqXC70zlAj6WuuGB8nns8ZldYRtwciZPf/J+++6b8vtQgYs
eNQxPpLNovSFhCX5qlxSA7WBXfkXow9vvTVRibN4k9qGYNBZ/I7Z7m+XwteynSpG
Aa2CRWei06vMNwOO4E0+8atPe8bHfLyEtf/8Pokrv1nzp3svaHK1CCEdxzko4+2S
y4fu6b7y741ukq9GsgLHtmXlwx/4LicLqSoVA1LjRNrftBXWD8WSJlojIGNXOcBt
ixHLgWrUAV1+yhfoP2X+soRfP6uc5Sj+IoKcFQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFGfMtnA9z1KD20awJOzguCcNefCJMB8GA1UdIwQYMBaAFFSYqu7X/TPD+8JY
vPF26/V2DuxwMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODQyMGRl
N2JhMTM2YjNjZjk2YWU0YThmYTZmNzBhYmZjOWIzZmQ5NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWUwODMyOWItYjU1YS00NjY2LWIzMDQtY2NjN2E0
ZDE3NTViLzg0MjBkZTdiYTEzNmIzY2Y5NmFlNGE4ZmE2ZjcwYWJmYzliM2ZkOTUu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZTA4MzI5Yi1iNTVhLTQ2NjYtYjMwNC1jY2M3
YTRkMTc1NWIvODQyMGRlN2JhMTM2YjNjZjk2YWU0YThmYTZmNzBhYmZjOWIzZmQ5
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBANwQ/DfHT+w1O0/jlXZPVPa9vOa1uP32UGD3eaH539y6xm98
GNEtFEhSZahKmXcw6NK0UaaCYAzN9LhCwy2++TE/wI55F/yOH0EcimpZYLJIjjyz
sXhz+O0pGWptP+PG5zR4cZXq6Pp0n2zbTooNvI/LiOousqDI7qy+Me43qFfRdjg/
AGZOkF4qvnYbNE3ZthPGTuQikJjcpnY0QO2R07l4xUeUCjfj+46WXYDsHc1YqKqb
AgqGFNY+wZh/y1Isy1u6R8kqzr/FXANJVKiNvNhBFo02UIgXxJVfWm2i2Rh9J6td
I1nKeTxyGL9eShxnfBNJs0RkPcBQyi1c+nzK/WU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org