Manifest
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a57c46e8-3600-45a0-ab1a-06630552bd03/842601fa44eedca80a2af201faefd1bee51292e0.mft
File: 842601fa44eedca80a2af201faefd1bee51292e0.mft (raw, json)
Hash identifier: SY3I39T/O/Nt7Zy1yJBfrCEFbFptEh15B1/698ZIcwE=
Subject key identifier: BB:6D:59:A9:5F:68:4F:A3:1F:27:8A:F6:3C:81:7B:67:23:1F:CB:2B
Authority key identifier: B3:CB:CA:83:8F:C8:70:76:AA:F4:E7:67:D7:A4:B4:68:34:3B:7C:F7
Certificate issuer: /CN=842601fa44eedca80a2af201faefd1bee51292e0
Certificate serial: 085B47
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/842601fa44eedca80a2af201faefd1bee51292e0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a57c46e8-3600-45a0-ab1a-06630552bd03/842601fa44eedca80a2af201faefd1bee51292e0.mft
Manifest number: 0448
Signing time: Mon 15 Apr 2024 07:21:21 +0000
Manifest this update: Mon 15 Apr 2024 06:20:17 +0000
Manifest next update: Thu 18 Apr 2024 07:39:17 +0000
Files and hashes: 1: 842601fa44eedca80a2af201faefd1bee51292e0.crl (hash: nzvCl20jzFWqKjvJdOXhPI3U3IsEP1qm2f3e9WBFtvk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 547655 (0x85b47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=842601fa44eedca80a2af201faefd1bee51292e0
Validity
Not Before: Apr 15 06:20:17 2024 GMT
Not After : Apr 18 07:39:17 2024 GMT
Subject: CN=0c9385fa57737f5a3d5de6837e3a58e07ba8656c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d6:ff:24:36:6a:5a:0f:cf:d7:39:ea:c6:7c:
5f:50:94:a2:a4:31:49:0d:26:9b:1c:f9:88:42:24:
98:15:9f:3b:a1:6b:89:ea:0c:80:22:4e:ab:4b:3e:
41:be:7a:b8:73:96:11:3e:57:7b:8f:7b:0b:e9:2c:
11:34:63:63:8e:7a:b9:25:16:e6:71:9c:a1:64:0e:
29:4a:0d:18:50:cd:5b:37:18:54:4c:18:2d:e8:95:
10:7f:16:a6:37:d0:70:59:5a:6d:8d:cd:c5:be:6d:
c2:49:48:fb:f3:36:59:88:d1:21:c6:94:6d:b6:e5:
56:60:e2:b7:40:4a:df:1a:f9:b9:7a:4e:3f:26:f7:
f0:cd:17:9b:40:9a:23:24:cf:89:2f:7e:c8:3d:48:
fd:dc:3c:00:b6:2e:f1:c4:42:a9:77:eb:3d:21:7f:
19:d9:a1:dc:3d:2c:63:70:c1:4b:7a:47:77:e8:65:
aa:77:3b:6e:d0:59:be:c3:94:bf:80:c5:57:19:a9:
0d:f5:17:b9:76:2c:00:29:0f:cd:5f:53:d0:7f:9b:
be:86:36:ea:71:51:73:ff:bc:76:90:fc:1c:b3:a4:
ff:b5:76:fd:1a:e7:da:81:fc:7c:14:72:97:db:78:
66:39:47:24:66:fa:88:bb:31:e2:1c:91:5d:16:0e:
0b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6D:59:A9:5F:68:4F:A3:1F:27:8A:F6:3C:81:7B:67:23:1F:CB:2B
X509v3 Authority Key Identifier:
keyid:B3:CB:CA:83:8F:C8:70:76:AA:F4:E7:67:D7:A4:B4:68:34:3B:7C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/842601fa44eedca80a2af201faefd1bee51292e0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a57c46e8-3600-45a0-ab1a-06630552bd03/842601fa44eedca80a2af201faefd1bee51292e0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a57c46e8-3600-45a0-ab1a-06630552bd03/842601fa44eedca80a2af201faefd1bee51292e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e0:84:96:66:8c:bc:e4:5a:a3:33:db:ad:1a:cd:46:3f:d6:
b7:0f:bb:72:cd:23:2a:52:2b:39:ad:b6:13:6e:f7:3b:5f:f6:
66:9a:49:c3:4f:97:b1:6c:90:ac:8d:1b:e0:1f:a3:fe:5b:19:
66:cb:fe:ac:07:1b:02:ce:e6:21:e9:e7:37:d8:02:2d:2a:bf:
a3:8a:83:84:28:8c:4f:ed:92:9e:df:f8:a5:4f:9f:53:83:74:
6d:ea:1b:97:2d:14:61:80:0b:06:25:4a:63:77:cc:81:db:0d:
cb:37:57:9c:08:00:e2:80:9f:31:c8:fb:e8:89:5c:26:22:23:
dd:89:e9:04:8c:c6:89:ae:2b:f6:4c:05:d0:f9:9c:b3:d7:94:
7d:3f:e7:22:9b:a0:9c:13:ae:ce:26:d1:43:18:24:1e:fe:d6:
e9:76:bd:f9:8c:24:45:70:2a:2e:4d:ae:3a:a4:76:82:ee:1e:
3f:e6:bd:d2:23:b0:95:5e:b0:31:90:fb:9f:c6:41:37:c8:c9:
04:f7:7d:f2:bd:b2:33:87:46:78:dc:3e:79:e9:4b:9d:6c:b8:
d2:9d:c0:89:1e:8e:ea:4d:fa:85:c1:21:b4:49:a2:c3:ec:b9:
48:18:d3:5e:03:da:9a:78:57:0f:e5:a4:7d:91:e2:b2:03:56:
c3:14:e2:a4
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDCFtHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg0
MjYwMWZhNDRlZWRjYTgwYTJhZjIwMWZhZWZkMWJlZTUxMjkyZTAwHhcNMjQwNDE1
MDYyMDE3WhcNMjQwNDE4MDczOTE3WjAzMTEwLwYDVQQDEygwYzkzODVmYTU3NzM3
ZjVhM2Q1ZGU2ODM3ZTNhNThlMDdiYTg2NTZjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjtb/JDZqWg/P1znqxnxfUJSipDFJDSabHPmIQiSYFZ87oWuJ
6gyAIk6rSz5Bvnq4c5YRPld7j3sL6SwRNGNjjnq5JRbmcZyhZA4pSg0YUM1bNxhU
TBgt6JUQfxamN9BwWVptjc3Fvm3CSUj78zZZiNEhxpRttuVWYOK3QErfGvm5ek4/
JvfwzRebQJojJM+JL37IPUj93DwAti7xxEKpd+s9IX8Z2aHcPSxjcMFLekd36GWq
dztu0Fm+w5S/gMVXGakN9Re5diwAKQ/NX1PQf5u+hjbqcVFz/7x2kPwcs6T/tXb9
Gufagfx8FHKX23hmOUckZvqIuzHiHJFdFg4LGQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFLttWalfaE+jHyeK9jyBe2cjH8srMB8GA1UdIwQYMBaAFLPLyoOPyHB2qvTn
Z9ektGg0O3z3MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODQyNjAx
ZmE0NGVlZGNhODBhMmFmMjAxZmFlZmQxYmVlNTEyOTJlMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTU3YzQ2ZTgtMzYwMC00NWEwLWFiMWEtMDY2MzA1
NTJiZDAzLzg0MjYwMWZhNDRlZWRjYTgwYTJhZjIwMWZhZWZkMWJlZTUxMjkyZTAu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hNTdjNDZlOC0zNjAwLTQ1YTAtYWIxYS0wNjYz
MDU1MmJkMDMvODQyNjAxZmE0NGVlZGNhODBhMmFmMjAxZmFlZmQxYmVlNTEyOTJl
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAIvghJZmjLzkWqMz260azUY/1rcPu3LNIypSKzmtthNu9ztf
9maaScNPl7FskKyNG+Afo/5bGWbL/qwHGwLO5iHp5zfYAi0qv6OKg4QojE/tkp7f
+KVPn1ODdG3qG5ctFGGACwYlSmN3zIHbDcs3V5wIAOKAnzHI++iJXCYiI92J6QSM
xomuK/ZMBdD5nLPXlH0/5yKboJwTrs4m0UMYJB7+1ul2vfmMJEVwKi5NrjqkdoLu
Hj/mvdIjsJVesDGQ+5/GQTfIyQT3ffK9sjOHRnjcPnnpS51suNKdwIkejupN+oXB
IbRJosPsuUgY014D2pp4Vw/lpH2R4rIDVsMU4qQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org