Manifest
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/deddbbd1-f527-46a1-8fc7-02bb3c04f9af/874dd1d8bbfccd0b7a362fbb72654cd64097efa5.mft
File: 874dd1d8bbfccd0b7a362fbb72654cd64097efa5.mft (raw, json)
Hash identifier: YGQplXnk7d0McNsGjbNT61XSXncH5V2eC4C7fvRWGWY=
Subject key identifier: A0:27:BD:0D:5F:65:5C:1C:44:BA:37:5A:DD:58:EB:2E:1D:DD:B8:AD
Authority key identifier: 31:04:4C:1F:85:51:AD:87:C3:CA:38:38:1D:F8:06:4A:0F:8A:0F:DE
Certificate issuer: /CN=874dd1d8bbfccd0b7a362fbb72654cd64097efa5
Certificate serial: 1257F9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/874dd1d8bbfccd0b7a362fbb72654cd64097efa5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/deddbbd1-f527-46a1-8fc7-02bb3c04f9af/874dd1d8bbfccd0b7a362fbb72654cd64097efa5.mft
Manifest number: 0959
Signing time: Mon 15 Apr 2024 07:21:34 +0000
Manifest this update: Mon 15 Apr 2024 06:20:17 +0000
Manifest next update: Thu 18 Apr 2024 07:40:17 +0000
Files and hashes: 1: 874dd1d8bbfccd0b7a362fbb72654cd64097efa5.crl (hash: Juv/IckAYY8iaANbzl7SZTmYr6l2QEnbFncpdslIlI4=)
2: cdc57ed0a6af51170658272eb083e3336138a40e.roa (hash: yuyhNKzc/i1BvWdCPhRGknBxnRpyX1Xj6Ue7+Id/Xic=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1202169 (0x1257f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874dd1d8bbfccd0b7a362fbb72654cd64097efa5
Validity
Not Before: Apr 15 06:20:17 2024 GMT
Not After : Apr 18 07:40:17 2024 GMT
Subject: CN=1a181110eb14c8634a51dd7ce94ea92cbc9a3f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cf:1a:0e:0d:18:02:6d:f6:61:f3:08:39:b8:
17:bf:69:4d:8a:7b:d1:02:98:8c:76:13:21:da:fb:
6c:52:61:fd:d1:86:70:5c:22:01:d4:d7:4f:ef:56:
67:73:0a:09:1d:c6:b4:69:ce:b1:7f:97:00:55:ef:
88:fb:45:7c:51:55:ef:91:d9:a6:f1:f3:59:65:84:
57:27:11:b4:c8:69:fb:9c:a7:33:f4:e4:2c:80:f6:
76:97:3a:54:f3:95:0b:3f:43:12:61:38:3d:81:94:
87:8f:99:79:b3:96:13:8d:d2:8c:50:ec:b5:2b:1e:
c8:d8:21:5f:4e:7f:4f:3c:97:36:43:95:2a:fb:f9:
a1:b2:11:be:4d:8b:c8:d8:b8:a3:c6:0d:c3:1c:41:
3d:03:06:e6:92:10:f6:6c:d3:04:18:ae:a5:5a:6a:
e1:ea:ee:fa:9d:f4:c2:f3:c0:91:41:f1:5a:c9:b0:
77:cd:5b:33:6b:d1:2d:8e:a1:21:1e:8f:09:f0:78:
f1:27:87:31:04:92:7f:f9:ee:f5:a6:a4:28:68:72:
68:d1:73:7e:31:4e:67:b5:e2:07:28:de:13:b7:63:
c5:8b:1c:0b:1e:a9:df:3c:3c:92:19:df:46:ac:3a:
05:c5:bc:b4:3d:96:38:33:74:5d:55:5b:2e:46:26:
32:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:27:BD:0D:5F:65:5C:1C:44:BA:37:5A:DD:58:EB:2E:1D:DD:B8:AD
X509v3 Authority Key Identifier:
keyid:31:04:4C:1F:85:51:AD:87:C3:CA:38:38:1D:F8:06:4A:0F:8A:0F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/874dd1d8bbfccd0b7a362fbb72654cd64097efa5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/deddbbd1-f527-46a1-8fc7-02bb3c04f9af/874dd1d8bbfccd0b7a362fbb72654cd64097efa5.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/deddbbd1-f527-46a1-8fc7-02bb3c04f9af/874dd1d8bbfccd0b7a362fbb72654cd64097efa5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:90:05:df:ca:24:73:5e:fa:86:23:71:65:92:a1:07:b9:78:
79:78:cd:84:92:a2:df:52:52:f8:aa:6b:5a:63:0d:84:72:76:
6b:ff:c6:24:3a:4c:d2:df:e7:03:dd:06:81:e2:40:97:1b:93:
57:d6:4c:74:58:ba:aa:8d:3c:ad:95:48:91:95:e0:1e:cc:bb:
a7:09:b2:78:11:9b:1c:30:7e:f2:2d:5b:ef:d4:6f:b9:ea:69:
25:02:bd:27:4b:2c:53:ea:0e:b3:2a:ed:98:66:30:7b:bc:49:
9e:1a:0c:f9:23:ef:4b:e1:9f:0d:71:e5:77:08:49:d9:f2:f9:
f0:3b:01:c7:5a:63:b6:f1:b5:af:a9:93:74:4e:5a:15:97:e3:
d1:7d:98:1a:fb:1b:ba:38:da:cf:6a:1c:37:62:d7:63:f7:e9:
c6:f0:bb:67:1a:e4:9f:f0:12:f1:3b:59:94:7c:44:09:63:1e:
5b:9e:1b:fc:00:80:68:40:92:5d:83:ff:76:2e:ba:4b:2a:88:
28:d6:3f:8a:41:37:b9:fe:77:42:35:b4:7c:44:5e:7e:50:93:
11:cc:5a:e9:70:32:59:62:4d:ec:4b:92:2e:19:b2:4b:bf:e3:
7d:bc:cb:62:c4:a4:11:c0:49:9b:de:07:88:10:c7:3e:b4:99:
cd:58:45:2d
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDElf5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg3
NGRkMWQ4YmJmY2NkMGI3YTM2MmZiYjcyNjU0Y2Q2NDA5N2VmYTUwHhcNMjQwNDE1
MDYyMDE3WhcNMjQwNDE4MDc0MDE3WjAzMTEwLwYDVQQDEygxYTE4MTExMGViMTRj
ODYzNGE1MWRkN2NlOTRlYTkyY2JjOWEzZjU5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAh88aDg0YAm32YfMIObgXv2lNinvRApiMdhMh2vtsUmH90YZw
XCIB1NdP71ZncwoJHca0ac6xf5cAVe+I+0V8UVXvkdmm8fNZZYRXJxG0yGn7nKcz
9OQsgPZ2lzpU85ULP0MSYTg9gZSHj5l5s5YTjdKMUOy1Kx7I2CFfTn9PPJc2Q5Uq
+/mhshG+TYvI2Lijxg3DHEE9AwbmkhD2bNMEGK6lWmrh6u76nfTC88CRQfFaybB3
zVsza9EtjqEhHo8J8HjxJ4cxBJJ/+e71pqQoaHJo0XN+MU5nteIHKN4Tt2PFixwL
HqnfPDySGd9GrDoFxby0PZY4M3RdVVsuRiYyUQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFKAnvQ1fZVwcRLo3Wt1Y6y4d3bitMB8GA1UdIwQYMBaAFDEETB+FUa2Hw8o4
OB34BkoPig/eMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODc0ZGQx
ZDhiYmZjY2QwYjdhMzYyZmJiNzI2NTRjZDY0MDk3ZWZhNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGVkZGJiZDEtZjUyNy00NmExLThmYzctMDJiYjNj
MDRmOWFmLzg3NGRkMWQ4YmJmY2NkMGI3YTM2MmZiYjcyNjU0Y2Q2NDA5N2VmYTUu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kZWRkYmJkMS1mNTI3LTQ2YTEtOGZjNy0wMmJi
M2MwNGY5YWYvODc0ZGQxZDhiYmZjY2QwYjdhMzYyZmJiNzI2NTRjZDY0MDk3ZWZh
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAHqQBd/KJHNe+oYjcWWSoQe5eHl4zYSSot9SUviqa1pjDYRy
dmv/xiQ6TNLf5wPdBoHiQJcbk1fWTHRYuqqNPK2VSJGV4B7Mu6cJsngRmxwwfvIt
W+/Ub7nqaSUCvSdLLFPqDrMq7ZhmMHu8SZ4aDPkj70vhnw1x5XcISdny+fA7Acda
Y7bxta+pk3ROWhWX49F9mBr7G7o42s9qHDdi12P36cbwu2ca5J/wEvE7WZR8RAlj
HlueG/wAgGhAkl2D/3YuuksqiCjWP4pBN7n+d0I1tHxEXn5QkxHMWulwMlliTexL
ki4Zsku/4328y2LEpBHASZveB4gQxz60mc1YRS0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:37 2024 by rpki-client on console-ams.rpki-client.org