Manifest
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b42dea8e-774c-425c-9975-8149f1dd1ab9/aafb715400c40e4a598c89a6775b6b30f9e41990.mft
File: aafb715400c40e4a598c89a6775b6b30f9e41990.mft (raw, json)
Hash identifier: NHK12kGDgysAv4elCntHLur2NnoZ3Ainj2guIF20XCc=
Subject key identifier: 7E:A5:AE:F2:69:10:EE:2F:75:AF:A5:6A:12:DC:32:12:F9:02:AF:31
Authority key identifier: 61:42:85:E9:8D:E3:EC:3D:A7:B6:9F:B8:0B:ED:DB:B2:51:52:12:18
Certificate issuer: /CN=aafb715400c40e4a598c89a6775b6b30f9e41990
Certificate serial: 0441DE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aafb715400c40e4a598c89a6775b6b30f9e41990.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b42dea8e-774c-425c-9975-8149f1dd1ab9/aafb715400c40e4a598c89a6775b6b30f9e41990.mft
Manifest number: 021C
Signing time: Mon 15 Apr 2024 07:20:43 +0000
Manifest this update: Mon 15 Apr 2024 06:20:17 +0000
Manifest next update: Thu 18 Apr 2024 08:42:17 +0000
Files and hashes: 1: aafb715400c40e4a598c89a6775b6b30f9e41990.crl (hash: raXXR3TCHegIbFby9kVf31acxReJic+9vYPJwfSZw1c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279006 (0x441de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafb715400c40e4a598c89a6775b6b30f9e41990
Validity
Not Before: Apr 15 06:20:17 2024 GMT
Not After : Apr 18 08:42:17 2024 GMT
Subject: CN=94b7a685bfcf0624d4f352d663b66fe76a890ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:05:7a:74:9e:c3:01:14:6f:77:50:31:bb:d1:
7b:f5:b2:e2:88:85:ad:3b:8a:41:43:05:c3:5e:72:
1a:46:ad:92:8b:95:f7:7e:35:b8:aa:2a:bf:60:c1:
27:ff:66:98:de:e8:da:d6:16:a6:74:d2:56:18:63:
0d:35:a6:64:50:c2:60:fb:fa:a2:ee:a6:af:38:35:
a9:c0:e1:3a:30:9b:7e:13:83:fa:46:68:39:18:c4:
cb:0c:b4:0a:d2:3f:f5:d0:f1:3a:7b:a2:9e:90:c9:
ad:56:72:5d:3e:a2:ed:d6:87:c2:cb:2e:f1:12:d8:
65:45:30:17:a0:aa:fb:24:7d:76:4c:6a:19:d6:8c:
90:a4:bb:58:da:95:9d:1e:db:da:25:b2:f7:02:55:
e1:bb:54:d4:99:c6:c5:26:61:33:65:2f:52:0f:01:
6a:2c:54:99:73:b9:dd:06:58:44:9f:50:d9:90:3e:
92:54:36:f2:6d:02:0e:14:b6:3b:de:da:4c:b5:aa:
d7:61:30:55:c1:4d:f8:be:b2:a9:ce:f8:74:bf:6d:
fd:f2:9d:3a:39:c4:3a:d4:d3:ef:ba:66:2e:8a:29:
ae:28:71:18:5f:3a:d4:21:d4:fa:3f:89:19:bb:43:
ff:24:86:e8:81:e5:25:57:3f:e1:72:a1:63:72:7d:
1c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A5:AE:F2:69:10:EE:2F:75:AF:A5:6A:12:DC:32:12:F9:02:AF:31
X509v3 Authority Key Identifier:
keyid:61:42:85:E9:8D:E3:EC:3D:A7:B6:9F:B8:0B:ED:DB:B2:51:52:12:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aafb715400c40e4a598c89a6775b6b30f9e41990.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b42dea8e-774c-425c-9975-8149f1dd1ab9/aafb715400c40e4a598c89a6775b6b30f9e41990.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b42dea8e-774c-425c-9975-8149f1dd1ab9/aafb715400c40e4a598c89a6775b6b30f9e41990.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:43:72:66:d3:9d:04:26:7f:c9:ff:70:35:ca:77:9f:1c:c4:
73:fe:42:0a:68:49:75:66:e0:e0:b2:96:44:b4:4e:a2:a2:09:
59:45:dc:2b:6a:44:3a:23:5c:bc:91:a0:0a:79:19:dc:42:f4:
1f:d4:f5:03:7d:74:1f:fe:90:99:53:5e:b4:bf:de:9a:cb:4a:
3e:1c:04:00:ed:91:b4:a7:c7:36:1d:c0:ed:a6:b1:75:51:2d:
df:0e:12:56:f7:d9:fb:4f:1e:9b:28:7f:20:f6:c1:55:bb:8d:
f8:b6:67:4b:b8:eb:7b:25:8d:fc:e5:f5:45:f1:e1:ec:7b:0a:
3f:7d:cd:48:0f:6d:42:bc:7c:f8:e5:c8:41:e2:04:ed:d7:80:
05:8d:ab:d1:ca:0f:57:30:32:92:51:e6:c8:a6:29:ad:fa:dd:
de:70:18:09:21:17:17:a4:db:43:59:86:0a:30:71:5b:cc:b1:
ca:59:fe:ff:34:35:60:df:e0:c4:92:c3:ae:12:70:13:1c:3d:
82:08:bb:52:dc:6c:46:30:6c:27:6d:cf:87:8d:2c:79:5a:46:
b8:59:cc:b6:34:92:33:ec:73:c6:c9:af:ac:92:28:16:86:88:
bc:d1:69:5d:13:bb:ad:cd:9a:aa:0b:7a:92:61:89:55:02:b1:
b9:d0:80:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:23 2024 by rpki-client on console-ams.rpki-client.org