Manifest
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d84090b3-5e41-4ca4-8863-6068ac96e5c9/9be1ea9bb90486e08daa38d4d03496f60d6efc17.mft
File: 9be1ea9bb90486e08daa38d4d03496f60d6efc17.mft (raw, json)
Hash identifier: cQVFGTj//Cy4ru4ZDDZtMOKDtRlgH4LWdOF1LoF0IAE=
Subject key identifier: CB:07:7B:33:FF:56:05:C9:EC:DA:F4:38:1A:AF:2F:79:73:4C:61:CE
Authority key identifier: 7D:3B:6D:FA:32:9B:2A:59:DD:EC:6C:9B:DE:05:B6:CB:BF:34:4C:F2
Certificate issuer: /CN=9be1ea9bb90486e08daa38d4d03496f60d6efc17
Certificate serial: 07A24A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9be1ea9bb90486e08daa38d4d03496f60d6efc17.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d84090b3-5e41-4ca4-8863-6068ac96e5c9/9be1ea9bb90486e08daa38d4d03496f60d6efc17.mft
Manifest number: 03D2
Signing time: Mon 15 Apr 2024 01:21:12 +0000
Manifest this update: Mon 15 Apr 2024 00:20:17 +0000
Manifest next update: Thu 18 Apr 2024 03:04:17 +0000
Files and hashes: 1: 9be1ea9bb90486e08daa38d4d03496f60d6efc17.crl (hash: gr/d3BnsaZjQLpxF68GjXqUBEXjSfUv2NeE2vwX7Z3c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 500298 (0x7a24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be1ea9bb90486e08daa38d4d03496f60d6efc17
Validity
Not Before: Apr 15 00:20:17 2024 GMT
Not After : Apr 18 03:04:17 2024 GMT
Subject: CN=75a13278345836ccbfe7f174f46f46997cb725b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:23:d0:b6:9f:3b:75:1b:ca:14:78:33:39:8b:
89:fc:1e:da:79:94:64:c9:04:4f:04:e9:7d:b7:4a:
9d:e2:e5:e7:f5:5d:75:d8:50:e3:18:e4:de:42:5d:
73:f9:53:ea:5e:53:56:9d:2d:e6:5e:f2:6b:fe:3f:
a6:9e:8f:a5:e2:8f:a7:1a:de:a7:4e:ca:0a:15:94:
46:d5:f5:9a:0a:d9:b1:ed:90:0e:bc:53:40:12:09:
57:fd:25:92:9b:9b:ac:ad:b7:77:8e:05:ee:d5:d4:
97:65:10:7d:48:c2:c5:99:41:3f:e8:aa:ea:80:d1:
f6:7d:d5:ff:c0:29:e3:77:0c:12:4a:33:1b:91:d7:
25:73:a6:bd:4d:74:b1:12:fb:79:9c:0d:ff:a9:af:
77:0c:39:46:c0:ab:1c:ae:18:f6:c1:6a:15:b1:9a:
0e:0d:9e:e2:b0:13:3e:af:05:df:97:1c:a4:31:e4:
14:bf:34:ed:34:40:8f:7b:54:f1:1f:30:73:0c:ac:
9b:34:5c:b1:e7:ef:8e:13:8f:a9:8f:2e:a4:48:3c:
ed:11:71:65:78:3a:cf:60:5b:3c:e2:55:cf:68:88:
d7:97:b4:8d:be:b2:eb:c7:63:72:5f:5e:c6:32:54:
ba:b1:5f:5f:6c:84:0c:17:15:ae:9f:f4:07:73:66:
88:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:07:7B:33:FF:56:05:C9:EC:DA:F4:38:1A:AF:2F:79:73:4C:61:CE
X509v3 Authority Key Identifier:
keyid:7D:3B:6D:FA:32:9B:2A:59:DD:EC:6C:9B:DE:05:B6:CB:BF:34:4C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9be1ea9bb90486e08daa38d4d03496f60d6efc17.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d84090b3-5e41-4ca4-8863-6068ac96e5c9/9be1ea9bb90486e08daa38d4d03496f60d6efc17.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d84090b3-5e41-4ca4-8863-6068ac96e5c9/9be1ea9bb90486e08daa38d4d03496f60d6efc17.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:36:81:fb:ae:13:33:e2:98:43:35:6b:bf:26:10:cb:7f:52:
38:e5:6e:91:47:57:df:7a:c7:b1:cf:e0:1c:66:18:c1:98:66:
87:23:b5:1c:83:5a:57:1a:c7:c1:ec:69:a5:5e:fa:cc:75:69:
c1:06:d5:f1:62:be:cc:db:b4:fd:e9:0a:e6:5b:a8:57:63:31:
30:7d:97:12:cc:d6:54:53:c7:a8:7d:a7:f5:2d:cd:ee:c3:a2:
b4:c0:7d:cc:1b:53:7c:06:3b:2a:78:ca:2f:a1:a7:fc:35:1e:
69:0c:15:6b:4d:d5:66:40:47:cb:ee:8f:91:0f:04:4c:a3:c5:
92:47:f3:23:60:9d:29:b9:d9:ec:30:dc:11:68:c1:b1:72:66:
fb:90:cf:b6:6a:ac:e7:11:af:70:e6:f1:8f:b7:86:58:19:ca:
42:56:ef:8f:ce:17:cc:10:62:0f:b4:3e:f0:e6:33:4b:38:18:
0c:dd:5f:64:95:ef:85:96:e7:30:0f:b2:1a:37:30:56:a5:25:
6b:db:b2:09:94:fe:18:10:ed:8b:08:c6:97:c7:96:3d:7a:57:
bd:5c:7f:91:a9:a0:1e:f1:8f:e7:8f:76:6d:fe:5d:95:57:71:
39:71:f6:38:96:4c:68:a4:d6:ff:1a:8c:e8:f3:c6:4f:e9:29:
c8:4f:be:91
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDB6JKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDli
ZTFlYTliYjkwNDg2ZTA4ZGFhMzhkNGQwMzQ5NmY2MGQ2ZWZjMTcwHhcNMjQwNDE1
MDAyMDE3WhcNMjQwNDE4MDMwNDE3WjAzMTEwLwYDVQQDEyg3NWExMzI3ODM0NTgz
NmNjYmZlN2YxNzRmNDZmNDY5OTdjYjcyNWIyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjiPQtp87dRvKFHgzOYuJ/B7aeZRkyQRPBOl9t0qd4uXn9V11
2FDjGOTeQl1z+VPqXlNWnS3mXvJr/j+mno+l4o+nGt6nTsoKFZRG1fWaCtmx7ZAO
vFNAEglX/SWSm5usrbd3jgXu1dSXZRB9SMLFmUE/6KrqgNH2fdX/wCnjdwwSSjMb
kdclc6a9TXSxEvt5nA3/qa93DDlGwKscrhj2wWoVsZoODZ7isBM+rwXflxykMeQU
vzTtNECPe1TxHzBzDKybNFyx5++OE4+pjy6kSDztEXFleDrPYFs84lXPaIjXl7SN
vrLrx2NyX17GMlS6sV9fbIQMFxWun/QHc2aIMwIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFMsHezP/VgXJ7Nr0OBqvL3lzTGHOMB8GA1UdIwQYMBaAFH07bfoymypZ3exs
m94Ftsu/NEzyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWJlMWVh
OWJiOTA0ODZlMDhkYWEzOGQ0ZDAzNDk2ZjYwZDZlZmMxNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDg0MDkwYjMtNWU0MS00Y2E0LTg4NjMtNjA2OGFj
OTZlNWM5LzliZTFlYTliYjkwNDg2ZTA4ZGFhMzhkNGQwMzQ5NmY2MGQ2ZWZjMTcu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kODQwOTBiMy01ZTQxLTRjYTQtODg2My02MDY4
YWM5NmU1YzkvOWJlMWVhOWJiOTA0ODZlMDhkYWEzOGQ0ZDAzNDk2ZjYwZDZlZmMx
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAHE2gfuuEzPimEM1a78mEMt/UjjlbpFHV996x7HP4BxmGMGY
ZocjtRyDWlcax8HsaaVe+sx1acEG1fFivszbtP3pCuZbqFdjMTB9lxLM1lRTx6h9
p/Utze7DorTAfcwbU3wGOyp4yi+hp/w1HmkMFWtN1WZAR8vuj5EPBEyjxZJH8yNg
nSm52eww3BFowbFyZvuQz7ZqrOcRr3Dm8Y+3hlgZykJW74/OF8wQYg+0PvDmM0s4
GAzdX2SV74WW5zAPsho3MFalJWvbsgmU/hgQ7YsIxpfHlj16V71cf5GpoB7xj+eP
dm3+XZVXcTlx9jiWTGik1v8ajOjzxk/pKchPvpE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org