Manifest
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b9dc3a54-5022-4a44-aef1-24eae3a1ba3d/87321cd9210d28b0affd9a79118b5f6d1ae80b2f.mft
File: 87321cd9210d28b0affd9a79118b5f6d1ae80b2f.mft (raw, json)
Hash identifier: /ai+17OLXFPJjTjMe0yTuaSbTDcjyKhKS1QGlSlKrlE=
Subject key identifier: 4A:14:67:2D:87:32:3B:89:B9:FC:8E:C3:AD:F8:DE:08:35:2D:21:26
Authority key identifier: BA:2B:3F:17:AA:3E:1F:CA:1F:49:05:2E:78:B9:02:F8:63:A6:9C:DB
Certificate issuer: /CN=87321cd9210d28b0affd9a79118b5f6d1ae80b2f
Certificate serial: 280484
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87321cd9210d28b0affd9a79118b5f6d1ae80b2f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b9dc3a54-5022-4a44-aef1-24eae3a1ba3d/87321cd9210d28b0affd9a79118b5f6d1ae80b2f.mft
Manifest number: 0DF1
Signing time: Mon 15 Apr 2024 03:21:02 +0000
Manifest this update: Mon 15 Apr 2024 02:20:17 +0000
Manifest next update: Thu 18 Apr 2024 05:31:17 +0000
Files and hashes: 1: 87321cd9210d28b0affd9a79118b5f6d1ae80b2f.crl (hash: hiumJXxCz8muE8MV6Gh/SDsChsrvRfOTcFrk4TdxKAo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2622596 (0x280484)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87321cd9210d28b0affd9a79118b5f6d1ae80b2f
Validity
Not Before: Apr 15 02:20:17 2024 GMT
Not After : Apr 18 05:31:17 2024 GMT
Subject: CN=e7f34d729e59074ed39ad40aa59011007eb7cdb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6d:1d:dd:11:22:a2:4d:1d:79:4e:ab:5a:52:
7f:a1:34:dc:b9:34:72:b9:0e:18:d1:50:a2:b9:de:
33:23:0a:67:57:5c:b4:ba:df:a8:41:92:ab:42:36:
72:ca:02:f1:1f:0c:bd:ca:25:b4:3a:1b:3f:22:37:
b7:87:d1:f6:8b:49:0a:36:1e:78:b7:d7:71:c7:90:
4d:f8:e6:0f:4a:51:4b:1e:cd:a3:2e:06:24:ee:79:
50:0c:49:c0:aa:1e:b2:86:e2:9e:40:0e:9c:30:87:
d2:c7:55:61:c2:ac:04:84:d0:b3:84:9c:7d:5d:54:
c8:0e:42:29:95:27:48:85:09:28:45:cc:09:7b:4c:
2f:7a:fa:79:02:72:81:06:a2:fd:f5:6e:48:87:bd:
79:2f:f5:3b:8f:78:82:7b:6a:3b:5d:64:22:b1:cb:
74:68:cf:4e:8b:d0:27:90:7a:6a:17:1c:96:c9:a4:
ef:f3:1d:ce:b4:ca:52:0d:92:9f:82:c2:6f:86:c6:
86:d2:f6:3b:5e:33:20:53:33:ef:d6:71:96:d6:72:
78:cb:8a:64:d9:69:32:7b:d5:74:c6:c0:05:eb:43:
ce:fc:2d:cc:37:20:f8:46:3e:d4:b4:e0:e3:ae:af:
75:6c:ea:bc:ab:05:6f:c2:3b:03:f1:38:44:80:67:
98:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:14:67:2D:87:32:3B:89:B9:FC:8E:C3:AD:F8:DE:08:35:2D:21:26
X509v3 Authority Key Identifier:
keyid:BA:2B:3F:17:AA:3E:1F:CA:1F:49:05:2E:78:B9:02:F8:63:A6:9C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87321cd9210d28b0affd9a79118b5f6d1ae80b2f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b9dc3a54-5022-4a44-aef1-24eae3a1ba3d/87321cd9210d28b0affd9a79118b5f6d1ae80b2f.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b9dc3a54-5022-4a44-aef1-24eae3a1ba3d/87321cd9210d28b0affd9a79118b5f6d1ae80b2f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ed:24:7c:c8:1e:28:65:d4:b3:3e:08:61:70:2a:cb:06:05:
55:25:96:1f:36:93:5c:74:67:68:ba:23:89:6a:55:98:b1:9e:
7f:31:e4:f6:d0:81:14:a3:93:c8:30:c5:5f:80:63:f8:da:be:
74:f3:cc:ce:3f:28:ab:a0:95:88:8a:37:06:c2:04:89:ca:2a:
94:82:43:a0:3b:89:32:03:03:86:b1:cb:64:63:50:a0:24:8b:
16:40:c6:a3:5c:7e:59:24:c5:07:7c:6d:fc:f2:76:96:db:72:
bb:a5:80:e1:9a:6d:d9:e9:a9:06:3c:03:68:ac:39:9c:30:16:
79:ea:1d:e5:2e:8b:61:6e:21:87:dd:6b:d6:88:8b:e0:e4:2f:
4a:9a:2d:cb:36:40:2d:91:46:b1:bf:90:d8:08:a4:06:dd:ad:
5f:4f:78:c7:2b:8e:d3:b7:97:88:20:0d:ec:ed:fd:8c:f2:0d:
c4:6a:88:36:34:75:c7:82:13:74:cd:21:83:65:4c:af:e5:08:
64:97:a2:06:e0:2c:86:d4:2a:27:d3:6c:3d:2d:aa:c8:78:8d:
24:c1:d3:a2:24:95:c0:bc:cd:f1:90:e6:34:6a:ab:da:f6:69:
44:83:5e:b1:f4:23:c5:8a:c6:da:b4:82:dd:f8:e1:de:ae:c2:
db:04:63:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-ams.rpki-client.org