Manifest
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7bb9da9-e8f8-411f-8f3f-a3ed895a822e/71551dc34af40822e5acdd443b22d6450fe5317b.mft
File: 71551dc34af40822e5acdd443b22d6450fe5317b.mft (raw, json)
Hash identifier: ug/g2V8MCf+CieRfDub/4tmosUWovc9ukqVU7Ew0j5k=
Subject key identifier: CF:D0:FF:5D:2D:7A:4A:C2:5B:72:EB:A6:52:71:E6:7F:B2:73:BE:14
Authority key identifier: 7E:23:9D:47:99:CC:5B:47:C4:3B:81:43:B3:10:DE:BB:45:D1:9A:87
Certificate issuer: /CN=71551dc34af40822e5acdd443b22d6450fe5317b
Certificate serial: 2891A3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71551dc34af40822e5acdd443b22d6450fe5317b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b7bb9da9-e8f8-411f-8f3f-a3ed895a822e/71551dc34af40822e5acdd443b22d6450fe5317b.mft
Manifest number: 0E03
Signing time: Mon 15 Apr 2024 02:21:11 +0000
Manifest this update: Mon 15 Apr 2024 01:20:29 +0000
Manifest next update: Thu 18 Apr 2024 02:31:29 +0000
Files and hashes: 1: 71551dc34af40822e5acdd443b22d6450fe5317b.crl (hash: x6RjTjh33qSX7NeCSJJTLvQfJTdJoyYb9GOsjaJSW1s=)
2: 7d87c619603447fd5b9be32a10e1b3973c4cad65.roa (hash: 9Uh4+j0I0IqXFj8sqCjD6FIReykXG+0VofBqgU7ml1k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2658723 (0x2891a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71551dc34af40822e5acdd443b22d6450fe5317b
Validity
Not Before: Apr 15 01:20:29 2024 GMT
Not After : Apr 18 02:31:29 2024 GMT
Subject: CN=d2fcf23625820dc3550b2614f3105e1d2c3a8093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:82:8b:43:45:7a:6f:e1:6b:42:24:23:45:14:
6c:dd:3b:55:11:6b:ba:3c:90:e5:ed:3d:ca:94:d4:
26:1a:4f:dc:4f:f6:30:44:5d:e2:6d:c0:4f:dd:37:
a2:8e:e1:2b:50:78:3e:9d:54:fc:9e:cd:e2:33:0c:
da:e0:27:c7:cf:ca:ad:aa:66:c6:74:8b:d5:44:64:
f4:ba:2e:9f:d5:9a:bf:47:e2:80:35:0a:cd:fb:b5:
7f:ad:e1:a2:a7:6d:52:51:bb:c4:c5:4b:98:66:d1:
7f:8d:4c:31:54:9a:f7:06:7c:19:12:18:42:25:7f:
c1:ba:52:40:bc:9e:c0:4a:4b:c7:77:26:2c:a7:5d:
e3:9e:23:ed:90:98:c9:8c:0f:2a:46:c0:e9:83:c9:
6a:e0:54:c3:7f:85:52:af:a5:ba:98:76:52:69:86:
ba:ad:6b:89:a6:32:fd:f5:ff:14:cb:e7:1b:2f:79:
54:11:7a:da:c9:36:35:35:8c:6a:d1:48:7d:f8:ca:
69:c4:38:59:e5:61:5a:01:c7:a6:85:83:0c:8c:ed:
0b:c5:84:74:73:59:dc:84:e9:7a:31:a3:fe:79:b3:
c2:ca:95:d1:6f:39:75:bb:26:00:ec:b4:00:29:ff:
5b:eb:fc:e0:3a:f3:f0:b7:51:72:b8:64:7e:ce:75:
d6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D0:FF:5D:2D:7A:4A:C2:5B:72:EB:A6:52:71:E6:7F:B2:73:BE:14
X509v3 Authority Key Identifier:
keyid:7E:23:9D:47:99:CC:5B:47:C4:3B:81:43:B3:10:DE:BB:45:D1:9A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71551dc34af40822e5acdd443b22d6450fe5317b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7bb9da9-e8f8-411f-8f3f-a3ed895a822e/71551dc34af40822e5acdd443b22d6450fe5317b.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b7bb9da9-e8f8-411f-8f3f-a3ed895a822e/71551dc34af40822e5acdd443b22d6450fe5317b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:db:dc:48:04:a4:d9:c9:48:50:be:c4:36:f5:6f:7f:f8:69:
f3:43:fb:fa:02:be:0e:85:43:2f:4d:11:e6:88:74:f3:b4:5d:
de:1b:dc:f4:ca:5a:37:b5:e1:23:37:a0:f5:c4:48:1a:9f:6d:
d8:6b:ea:5a:14:ae:ee:1d:6f:0d:c2:e3:f4:3e:fd:ff:de:6e:
26:7b:9b:d2:2c:e5:dc:b5:11:73:6b:7b:e0:b9:8a:29:72:af:
3d:46:e7:af:65:46:35:99:fe:b3:21:9c:9a:e4:bd:1c:53:0d:
d1:e4:2c:f1:0c:96:21:8d:3d:76:15:d9:11:ca:42:f4:55:88:
c6:c2:8a:ab:22:1c:dd:00:f7:e0:81:37:c2:22:6b:f6:e0:07:
23:5c:d7:8d:f7:41:47:14:df:83:7e:49:0b:ab:48:78:27:21:
d4:1a:e9:5f:12:91:f2:0f:65:13:e4:18:39:d5:76:5f:9b:53:
1f:3d:66:90:8f:9f:cb:f9:61:3f:0d:5c:19:c8:ea:01:14:42:
c1:5e:0c:74:60:a3:1c:87:e0:63:98:ca:cb:55:85:9e:29:7e:
1e:c6:1b:99:23:a0:f1:5d:eb:60:34:3c:b0:13:1c:4e:86:80:
f0:59:71:2e:13:f2:02:e6:ee:65:a5:66:c5:41:22:cf:eb:ad:
11:06:ab:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-ams.rpki-client.org