Manifest
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bcda472e-4568-4a2a-bead-afacece282c7/25aa741c125bd84e6e3471829a20580875e27e19.mft
File: 25aa741c125bd84e6e3471829a20580875e27e19.mft (raw, json)
Hash identifier: 4TG42uaLIq3vQtFLET4+VElRwlOqo2fPbhtdBIGmqzM=
Subject key identifier: D2:A1:86:1B:B7:0B:01:E4:83:EF:DE:23:23:F6:AE:97:33:13:2B:DE
Authority key identifier: 08:80:7D:8C:3C:87:07:5A:C5:BA:88:72:3F:B7:8F:7E:16:11:B2:95
Certificate issuer: /CN=25aa741c125bd84e6e3471829a20580875e27e19
Certificate serial: 078ABC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/25aa741c125bd84e6e3471829a20580875e27e19.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bcda472e-4568-4a2a-bead-afacece282c7/25aa741c125bd84e6e3471829a20580875e27e19.mft
Manifest number: 03DD
Signing time: Mon 15 Apr 2024 08:21:12 +0000
Manifest this update: Mon 15 Apr 2024 07:20:16 +0000
Manifest next update: Thu 18 Apr 2024 10:08:16 +0000
Files and hashes: 1: 25aa741c125bd84e6e3471829a20580875e27e19.crl (hash: 9TAHMwqZZ8SEKWmnxwytXDDLcuCvC4wirs8NraOovNM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 494268 (0x78abc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25aa741c125bd84e6e3471829a20580875e27e19
Validity
Not Before: Apr 15 07:20:16 2024 GMT
Not After : Apr 18 10:08:16 2024 GMT
Subject: CN=3259812ba7c63058129417e1c3e0a873f38e0af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8e:60:ff:34:6b:47:f6:e8:6c:70:d6:fd:5e:
92:fe:9b:e0:3b:e1:be:24:0b:ce:e4:95:37:c2:93:
e8:4f:06:a6:91:bf:1c:4b:42:c3:e8:43:01:15:00:
0c:c8:d0:ac:54:a5:8d:33:f2:d8:7b:60:18:c1:d7:
83:be:11:aa:f9:2c:6e:08:f7:3c:9a:3c:e2:57:7b:
e3:68:fa:f8:24:8a:63:04:a3:d7:bc:44:b6:9b:c7:
ae:e6:36:be:8e:17:37:b6:72:2b:0b:57:26:6f:8b:
47:57:a5:0a:1b:58:ae:09:93:6d:a0:3a:fc:3c:c8:
0e:1c:6b:58:b5:45:b5:75:13:5c:09:10:0d:bc:6f:
83:f9:3c:f0:57:e0:38:56:95:94:cf:8c:06:07:03:
33:66:c1:f3:01:41:a6:ae:96:4b:ce:82:70:e6:51:
5b:9e:7a:38:a3:d3:78:46:69:8c:09:d5:1a:c9:b0:
74:fe:2b:b2:b6:94:b7:57:28:1f:cd:bc:9e:4c:1d:
a7:f2:ef:ac:69:7a:2b:b1:07:21:37:0e:c2:a7:41:
91:dd:e2:51:32:c6:de:00:71:2a:72:bf:62:19:55:
f1:b7:6f:30:f7:3b:7a:58:ba:aa:a0:24:61:45:dc:
8f:1f:59:5c:a5:20:fe:b6:54:85:fe:01:66:6a:81:
5d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A1:86:1B:B7:0B:01:E4:83:EF:DE:23:23:F6:AE:97:33:13:2B:DE
X509v3 Authority Key Identifier:
keyid:08:80:7D:8C:3C:87:07:5A:C5:BA:88:72:3F:B7:8F:7E:16:11:B2:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/25aa741c125bd84e6e3471829a20580875e27e19.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bcda472e-4568-4a2a-bead-afacece282c7/25aa741c125bd84e6e3471829a20580875e27e19.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bcda472e-4568-4a2a-bead-afacece282c7/25aa741c125bd84e6e3471829a20580875e27e19.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:17:47:1f:0f:c2:5f:a5:14:d4:e4:0d:b6:b3:a4:5f:44:ca:
b7:d5:e8:aa:08:27:a2:2b:64:2e:e3:ae:b0:01:d5:b2:3e:6f:
44:62:16:c0:f9:c5:2f:95:4f:4f:0b:95:45:b9:cb:74:26:77:
76:16:8d:d2:4e:01:e4:0d:a6:f9:30:86:c9:03:e8:cf:c0:6d:
d8:9c:4a:4a:7b:4f:df:67:13:39:0f:03:c3:4e:bc:2a:4b:d3:
84:2b:73:09:a2:7b:d5:35:6a:00:8f:c3:25:38:27:14:75:a9:
70:4f:08:16:83:21:bc:5c:4c:7d:b7:c0:54:ef:e5:c1:75:6a:
61:cd:81:21:ae:55:67:92:b0:8d:5e:35:ce:66:31:90:f9:45:
3e:d3:03:dd:c0:68:f7:2b:90:be:9b:24:96:3e:aa:bb:8b:6c:
bb:bd:c8:ec:ba:2a:f2:97:74:cd:52:72:41:cb:a0:a1:f6:a0:
06:f8:bc:af:09:0d:27:f5:4f:2c:34:44:e7:d3:44:02:4d:ae:
6d:02:c8:21:86:18:18:8a:57:53:e6:00:dd:9a:10:ba:01:6b:
df:d8:82:ec:38:22:54:78:f8:80:0e:0b:c9:29:2f:02:9d:cd:
5e:76:77:a6:40:0e:b8:f6:8b:88:27:95:97:9d:ce:fa:6a:97:
1a:d5:a0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:03 2024 by rpki-client on console-fra.rpki-client.org