Manifest
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e1128131-49f8-407a-a5bd-9cd2210906f0/5bf5cbf13ac5e602b88c61319c55e6b1052e3e7f.mft
File: 5bf5cbf13ac5e602b88c61319c55e6b1052e3e7f.mft (raw, json)
Hash identifier: 4WztdNol4knsfX9TQsdxHaJkq9HF0+PXL9Ro2BdRBiY=
Subject key identifier: 7B:D0:96:FB:FE:A1:C8:50:79:54:95:CC:8C:65:ED:5A:27:EE:0F:64
Authority key identifier: C3:BE:95:B2:57:1F:F8:04:00:79:03:F2:56:A7:B5:5A:70:EE:21:F1
Certificate issuer: /CN=5bf5cbf13ac5e602b88c61319c55e6b1052e3e7f
Certificate serial: 074107
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5bf5cbf13ac5e602b88c61319c55e6b1052e3e7f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e1128131-49f8-407a-a5bd-9cd2210906f0/5bf5cbf13ac5e602b88c61319c55e6b1052e3e7f.mft
Manifest number: 03A3
Signing time: Mon 15 Apr 2024 04:21:33 +0000
Manifest this update: Mon 15 Apr 2024 03:20:26 +0000
Manifest next update: Thu 18 Apr 2024 06:44:26 +0000
Files and hashes: 1: 5bf5cbf13ac5e602b88c61319c55e6b1052e3e7f.crl (hash: qnCloAlcm4zMrRDN/XH/0nH24+Q953dSKcwsK4LYIg0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475399 (0x74107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf5cbf13ac5e602b88c61319c55e6b1052e3e7f
Validity
Not Before: Apr 15 03:20:26 2024 GMT
Not After : Apr 18 06:44:26 2024 GMT
Subject: CN=8e1dc50bd62896b64fb4c19f211bce990ec9ada1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9b:34:98:2a:39:33:1a:98:97:4a:94:8e:ca:
0b:e1:c6:c7:d4:c9:9e:42:c5:3f:48:a3:af:88:aa:
65:12:42:97:5a:95:2b:51:a5:1a:29:e8:20:55:2b:
26:df:30:3a:7f:f8:d6:e7:ed:86:93:bb:22:01:a4:
ab:75:0c:83:80:e7:2e:b6:be:fc:52:5e:3c:d3:5f:
00:30:ae:c0:f8:12:8e:d5:ef:5e:db:9f:c9:46:df:
36:85:9d:4a:46:56:e0:bd:94:56:e0:a6:80:2d:a3:
ac:c6:00:04:9c:58:25:b0:6a:8b:fb:9c:63:a8:0f:
ac:77:b2:87:90:22:a0:8d:7c:12:98:45:1f:24:2f:
91:d9:13:7b:29:f2:e7:bb:98:f9:e5:a0:5d:86:fc:
77:b9:07:65:c6:d7:5d:0a:3d:93:c9:60:db:63:c5:
4d:b1:e9:25:b3:04:64:41:e4:e8:d2:46:93:50:b9:
b8:f3:a0:a7:82:dc:2c:43:02:2d:b5:62:26:21:4e:
d4:62:87:5a:f1:d2:60:47:ef:82:63:b0:09:19:d1:
71:67:26:aa:5a:b9:3f:ba:5a:98:b3:68:e7:e9:f4:
63:50:55:3b:2f:aa:7b:49:09:34:7f:17:15:fa:0b:
6d:99:c7:60:95:82:ad:45:10:e2:2a:70:d6:93:77:
12:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D0:96:FB:FE:A1:C8:50:79:54:95:CC:8C:65:ED:5A:27:EE:0F:64
X509v3 Authority Key Identifier:
keyid:C3:BE:95:B2:57:1F:F8:04:00:79:03:F2:56:A7:B5:5A:70:EE:21:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5bf5cbf13ac5e602b88c61319c55e6b1052e3e7f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e1128131-49f8-407a-a5bd-9cd2210906f0/5bf5cbf13ac5e602b88c61319c55e6b1052e3e7f.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e1128131-49f8-407a-a5bd-9cd2210906f0/5bf5cbf13ac5e602b88c61319c55e6b1052e3e7f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:74:c1:bb:55:5d:68:81:5b:21:68:db:83:78:da:5c:5a:b8:
d3:78:6c:d1:5c:cb:12:f3:b7:5f:72:f1:f4:6f:be:26:8b:d7:
06:f0:da:08:ca:04:9e:91:d7:0b:fc:f6:55:c2:57:1e:e3:c6:
5c:3b:95:5e:16:c2:b0:13:99:a0:db:dc:eb:35:1d:53:19:48:
14:20:48:d3:df:0e:ed:18:61:e3:fc:9c:99:35:f7:eb:c9:28:
f9:67:39:0e:32:ca:ac:df:2b:83:85:64:75:c3:7b:39:78:92:
3e:6a:30:3e:5a:f7:b7:d4:c2:69:9c:63:98:5f:d6:24:de:28:
eb:69:4f:d9:e6:6c:6e:6e:a2:37:0e:50:75:a8:1a:b9:05:88:
98:ee:f9:77:25:32:07:7a:38:a5:3e:0b:d7:e4:f1:b5:68:ef:
92:3a:22:95:10:3d:15:8d:7a:dd:8a:a0:d2:54:1a:c8:26:6e:
73:01:63:80:be:33:78:20:ec:f3:8c:ba:c9:68:9d:a6:20:95:
77:ba:74:81:9d:cd:35:e1:3b:9a:b7:86:bc:9c:26:37:57:0b:
8b:64:53:d8:83:08:cb:be:d8:ff:63:7f:d3:63:cd:e4:80:f8:
e8:bc:98:64:df:44:ae:1b:13:26:dd:8d:20:83:f7:07:41:1c:
1f:56:5f:9b
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDB0EHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVi
ZjVjYmYxM2FjNWU2MDJiODhjNjEzMTljNTVlNmIxMDUyZTNlN2YwHhcNMjQwNDE1
MDMyMDI2WhcNMjQwNDE4MDY0NDI2WjAzMTEwLwYDVQQDEyg4ZTFkYzUwYmQ2Mjg5
NmI2NGZiNGMxOWYyMTFiY2U5OTBlYzlhZGExMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAp5s0mCo5MxqYl0qUjsoL4cbH1MmeQsU/SKOviKplEkKXWpUr
UaUaKeggVSsm3zA6f/jW5+2Gk7siAaSrdQyDgOcutr78Ul48018AMK7A+BKO1e9e
25/JRt82hZ1KRlbgvZRW4KaALaOsxgAEnFglsGqL+5xjqA+sd7KHkCKgjXwSmEUf
JC+R2RN7KfLnu5j55aBdhvx3uQdlxtddCj2TyWDbY8VNseklswRkQeTo0kaTULm4
86CngtwsQwIttWImIU7UYoda8dJgR++CY7AJGdFxZyaqWrk/ulqYs2jn6fRjUFU7
L6p7SQk0fxcV+gttmcdglYKtRRDiKnDWk3cSCQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFHvQlvv+ochQeVSVzIxl7Von7g9kMB8GA1UdIwQYMBaAFMO+lbJXH/gEAHkD
8lantVpw7iHxMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWJmNWNi
ZjEzYWM1ZTYwMmI4OGM2MTMxOWM1NWU2YjEwNTJlM2U3Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTExMjgxMzEtNDlmOC00MDdhLWE1YmQtOWNkMjIx
MDkwNmYwLzViZjVjYmYxM2FjNWU2MDJiODhjNjEzMTljNTVlNmIxMDUyZTNlN2Yu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lMTEyODEzMS00OWY4LTQwN2EtYTViZC05Y2Qy
MjEwOTA2ZjAvNWJmNWNiZjEzYWM1ZTYwMmI4OGM2MTMxOWM1NWU2YjEwNTJlM2U3
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAK90wbtVXWiBWyFo24N42lxauNN4bNFcyxLzt19y8fRvviaL
1wbw2gjKBJ6R1wv89lXCVx7jxlw7lV4WwrATmaDb3Os1HVMZSBQgSNPfDu0YYeP8
nJk19+vJKPlnOQ4yyqzfK4OFZHXDezl4kj5qMD5a97fUwmmcY5hf1iTeKOtpT9nm
bG5uojcOUHWoGrkFiJju+XclMgd6OKU+C9fk8bVo75I6IpUQPRWNet2KoNJUGsgm
bnMBY4C+M3gg7POMuslonaYglXe6dIGdzTXhO5q3hrycJjdXC4tkU9iDCMu+2P9j
f9NjzeSA+Oi8mGTfRK4bEybdjSCD9wdBHB9WX5s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:09 2024 by rpki-client on console-fra.rpki-client.org