Manifest
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ce6faab5-01e0-4fc7-95d9-f591dfef405f/35af00abdadfe4637375bb25e8881464f0e7e350.mft
File: 35af00abdadfe4637375bb25e8881464f0e7e350.mft (raw, json)
Hash identifier: tvofiK3pN7BCtehS1KqcGK2n8PYaAScIHRCkd4Fbxlo=
Subject key identifier: D4:47:CA:51:B0:26:43:A6:E1:67:06:75:4E:2A:90:69:C3:52:2B:4A
Authority key identifier: D8:81:42:91:78:72:5A:E1:60:6A:4B:C5:C0:A3:B3:16:77:0B:2B:EE
Certificate issuer: /CN=35af00abdadfe4637375bb25e8881464f0e7e350
Certificate serial: 0171F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/35af00abdadfe4637375bb25e8881464f0e7e350.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ce6faab5-01e0-4fc7-95d9-f591dfef405f/35af00abdadfe4637375bb25e8881464f0e7e350.mft
Manifest number: C8
Signing time: Mon 15 Apr 2024 06:21:42 +0000
Manifest this update: Mon 15 Apr 2024 05:20:39 +0000
Manifest next update: Thu 18 Apr 2024 06:42:39 +0000
Files and hashes: 1: 35af00abdadfe4637375bb25e8881464f0e7e350.crl (hash: hWwuRRDxPoc7UUiRq3FamTCPwKX1+hmrgTj7vRsozZ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94712 (0x171f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35af00abdadfe4637375bb25e8881464f0e7e350
Validity
Not Before: Apr 15 05:20:39 2024 GMT
Not After : Apr 18 06:42:39 2024 GMT
Subject: CN=e39918c6fa7966494f9bc1650bc04e389b1f7b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d0:08:3b:4b:96:e7:88:87:fc:67:c2:51:6a:
2a:8a:ba:82:ea:37:e4:24:60:b8:33:7a:4e:70:d6:
d8:d0:2f:68:b0:cb:96:84:8f:3a:4b:61:d0:ec:48:
63:29:b8:4e:6e:5f:18:5c:6b:75:c0:c6:04:6f:d1:
50:d7:38:3e:b9:17:9b:52:aa:9b:5f:83:e1:1a:8a:
02:66:81:a7:6e:07:95:22:7d:d7:43:1a:59:b8:7d:
7c:1f:04:29:f8:37:bf:11:11:65:d5:8d:b3:2f:6e:
8d:4e:cb:ce:87:a2:82:e8:36:07:3a:3e:0b:64:d1:
c3:af:1c:46:33:3d:69:0d:d7:06:36:f6:5e:09:67:
02:4d:e1:ab:de:38:94:b1:84:85:d1:c0:8e:f2:33:
9f:cf:aa:78:64:b0:62:d9:0f:6f:14:1d:26:c0:32:
25:00:c7:71:fc:0c:41:0e:3f:c8:2f:3a:c1:70:ef:
36:50:4c:80:7d:b0:53:e7:be:f0:98:8c:5c:7a:86:
1d:82:08:44:a3:ef:aa:a8:f0:f7:f0:48:c6:cd:93:
4f:4c:b1:7f:5d:af:5a:d6:4c:21:bc:06:e0:35:3a:
99:f0:ca:a8:22:bd:44:ad:a5:6e:45:9d:c9:63:bf:
48:43:fc:b5:f8:35:df:32:dd:8a:28:0c:53:68:d2:
04:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:47:CA:51:B0:26:43:A6:E1:67:06:75:4E:2A:90:69:C3:52:2B:4A
X509v3 Authority Key Identifier:
keyid:D8:81:42:91:78:72:5A:E1:60:6A:4B:C5:C0:A3:B3:16:77:0B:2B:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/35af00abdadfe4637375bb25e8881464f0e7e350.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ce6faab5-01e0-4fc7-95d9-f591dfef405f/35af00abdadfe4637375bb25e8881464f0e7e350.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ce6faab5-01e0-4fc7-95d9-f591dfef405f/35af00abdadfe4637375bb25e8881464f0e7e350.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:dc:c7:cf:1d:fa:fc:12:b2:59:bb:6a:49:b7:5c:3d:c9:9b:
bb:44:57:42:99:16:68:94:c8:45:57:7c:da:74:6f:15:1d:7f:
a1:b9:41:98:28:bb:ed:62:e2:1c:95:13:9b:22:53:de:ef:ab:
59:92:ff:af:f9:eb:f1:75:d1:e5:8d:1a:55:70:45:88:f6:c1:
7e:5a:7d:1f:20:41:66:4a:bc:53:c7:0b:19:4e:ba:fd:85:03:
97:60:34:00:9d:d2:33:4a:64:7a:03:20:14:9b:50:3a:2c:38:
8a:5a:b1:6e:fe:2d:e5:16:c9:d2:86:e7:81:1c:81:61:ff:ff:
33:5d:c5:af:f6:65:c6:75:c8:14:77:5e:0c:21:80:91:bf:ba:
89:fe:70:a0:f6:3a:6c:4d:fa:e3:7e:e3:41:e3:3a:72:c6:79:
01:f4:2c:72:54:c6:c0:e8:f6:50:b1:4e:8a:3d:be:f3:03:c8:
51:6f:82:97:32:b5:ff:fc:91:fd:8f:fa:df:df:d6:7d:35:a8:
45:df:aa:3d:55:a6:9e:0d:13:15:66:34:de:5c:bd:af:9f:0a:
c0:9b:e4:f0:bc:87:9e:f5:60:66:98:71:7b:6e:28:dc:32:b9:
cf:57:bb:44:03:c2:5b:07:55:8c:06:7a:03:a0:cd:f6:55:1b:
ee:d9:81:48
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDAXH4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM1
YWYwMGFiZGFkZmU0NjM3Mzc1YmIyNWU4ODgxNDY0ZjBlN2UzNTAwHhcNMjQwNDE1
MDUyMDM5WhcNMjQwNDE4MDY0MjM5WjAzMTEwLwYDVQQDEyhlMzk5MThjNmZhNzk2
NjQ5NGY5YmMxNjUwYmMwNGUzODliMWY3YjY2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiNAIO0uW54iH/GfCUWoqirqC6jfkJGC4M3pOcNbY0C9osMuW
hI86S2HQ7EhjKbhObl8YXGt1wMYEb9FQ1zg+uRebUqqbX4PhGooCZoGnbgeVIn3X
QxpZuH18HwQp+De/ERFl1Y2zL26NTsvOh6KC6DYHOj4LZNHDrxxGMz1pDdcGNvZe
CWcCTeGr3jiUsYSF0cCO8jOfz6p4ZLBi2Q9vFB0mwDIlAMdx/AxBDj/ILzrBcO82
UEyAfbBT577wmIxceoYdgghEo++qqPD38EjGzZNPTLF/Xa9a1kwhvAbgNTqZ8Mqo
Ir1EraVuRZ3JY79IQ/y1+DXfMt2KKAxTaNIEywIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFNRHylGwJkOm4WcGdU4qkGnDUitKMB8GA1UdIwQYMBaAFNiBQpF4clrhYGpL
xcCjsxZ3CyvuMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzVhZjAw
YWJkYWRmZTQ2MzczNzViYjI1ZTg4ODE0NjRmMGU3ZTM1MC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2U2ZmFhYjUtMDFlMC00ZmM3LTk1ZDktZjU5MWRm
ZWY0MDVmLzM1YWYwMGFiZGFkZmU0NjM3Mzc1YmIyNWU4ODgxNDY0ZjBlN2UzNTAu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jZTZmYWFiNS0wMWUwLTRmYzctOTVkOS1mNTkx
ZGZlZjQwNWYvMzVhZjAwYWJkYWRmZTQ2MzczNzViYjI1ZTg4ODE0NjRmMGU3ZTM1
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAErcx88d+vwSslm7akm3XD3Jm7tEV0KZFmiUyEVXfNp0bxUd
f6G5QZgou+1i4hyVE5siU97vq1mS/6/56/F10eWNGlVwRYj2wX5afR8gQWZKvFPH
CxlOuv2FA5dgNACd0jNKZHoDIBSbUDosOIpasW7+LeUWydKG54EcgWH//zNdxa/2
ZcZ1yBR3XgwhgJG/uon+cKD2OmxN+uN+40HjOnLGeQH0LHJUxsDo9lCxToo9vvMD
yFFvgpcytf/8kf2P+t/f1n01qEXfqj1Vpp4NExVmNN5cva+fCsCb5PC8h571YGaY
cXtuKNwyuc9Xu0QDwlsHVYwGegOgzfZVG+7ZgUg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org