Manifest
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ec642924-4f55-4d65-8b08-d099e8957749/68dc444b7779a72ab8d29128e2010ab45d6a1a75.mft
File: 68dc444b7779a72ab8d29128e2010ab45d6a1a75.mft (raw, json)
Hash identifier: mfSQ63CQcgFhKstBdqI57sKIcE66khHBDRj1J9SWiu4=
Subject key identifier: E8:5D:FB:3C:4E:72:42:6F:52:B1:58:5B:3D:5E:85:89:44:FE:22:53
Authority key identifier: C4:1A:81:D9:53:F9:67:66:87:1A:8E:72:5F:F1:51:AA:A4:7D:CF:97
Certificate issuer: /CN=68dc444b7779a72ab8d29128e2010ab45d6a1a75
Certificate serial: 03FD1A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68dc444b7779a72ab8d29128e2010ab45d6a1a75.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ec642924-4f55-4d65-8b08-d099e8957749/68dc444b7779a72ab8d29128e2010ab45d6a1a75.mft
Manifest number: 0210
Signing time: Mon 15 Apr 2024 03:21:28 +0000
Manifest this update: Mon 15 Apr 2024 02:20:17 +0000
Manifest next update: Thu 18 Apr 2024 05:42:17 +0000
Files and hashes: 1: 68dc444b7779a72ab8d29128e2010ab45d6a1a75.crl (hash: +8PQqJ8BhCx+hviw5gUN84yREivtEUk9C1Amdh6686E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261402 (0x3fd1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68dc444b7779a72ab8d29128e2010ab45d6a1a75
Validity
Not Before: Apr 15 02:20:17 2024 GMT
Not After : Apr 18 05:42:17 2024 GMT
Subject: CN=1fc59a5f0aecd6ffcb5585d798f9111429f7288e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2f:06:e7:1c:7c:ec:69:88:90:ec:e4:87:e7:
e9:be:33:ec:c6:2d:25:3e:98:dc:f7:20:32:50:d0:
8a:2f:e0:89:6d:00:b7:a7:0b:22:19:1c:34:a7:0b:
a8:2a:14:1b:12:e0:49:05:b1:a7:a9:38:ba:5a:d9:
c0:79:48:86:90:1e:4a:aa:d0:24:9d:6e:8e:e7:a6:
4a:bf:8b:f2:5b:18:79:6a:92:db:4c:19:23:45:83:
11:1a:e6:8b:f1:ab:9f:88:b9:c2:84:0d:54:0c:f1:
74:6f:db:4f:60:d6:57:5d:92:31:7d:e0:e3:f4:a4:
69:0f:d2:40:34:70:26:51:28:fa:d2:85:37:6f:3f:
4a:19:6a:12:2e:fa:14:84:a4:55:bb:54:c4:81:3a:
7c:85:1b:f8:77:fb:2d:65:cd:e1:42:89:4b:70:63:
26:b1:fd:87:48:89:b5:a5:f1:27:4a:21:39:bb:56:
0a:9e:a9:d7:db:55:b2:fc:dc:90:3f:58:f0:2a:64:
fb:07:67:96:65:7c:e0:27:f6:0d:03:c9:24:6e:17:
0f:46:ad:d9:ec:3b:46:03:8b:66:04:f5:2e:91:55:
6d:39:4a:9a:bf:05:24:85:88:13:2b:66:69:4d:5d:
91:5f:13:1c:2b:c3:4f:c5:93:78:fc:5f:85:c7:f6:
e6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5D:FB:3C:4E:72:42:6F:52:B1:58:5B:3D:5E:85:89:44:FE:22:53
X509v3 Authority Key Identifier:
keyid:C4:1A:81:D9:53:F9:67:66:87:1A:8E:72:5F:F1:51:AA:A4:7D:CF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68dc444b7779a72ab8d29128e2010ab45d6a1a75.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ec642924-4f55-4d65-8b08-d099e8957749/68dc444b7779a72ab8d29128e2010ab45d6a1a75.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ec642924-4f55-4d65-8b08-d099e8957749/68dc444b7779a72ab8d29128e2010ab45d6a1a75.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9a:76:9f:d0:fb:86:73:0b:32:73:9c:e2:bc:b6:da:39:59:
d6:a5:f5:ff:97:13:a8:bc:09:e9:0e:70:80:7b:82:62:10:08:
4d:3b:43:0d:ff:08:58:4a:48:96:03:e7:97:4b:14:0a:69:07:
53:2a:92:37:50:2a:50:e8:ef:10:64:4a:1a:82:d1:45:6c:a2:
9b:6a:a0:0e:c0:e4:58:e7:40:c6:3d:df:68:dd:d0:40:05:1e:
34:3d:21:ff:f9:62:bc:25:ef:0c:6c:c0:8c:2a:9b:90:9e:57:
a8:88:77:f0:5e:6a:9a:c2:7a:b9:b5:dd:67:8b:7f:4e:ba:fc:
ff:0c:5d:d2:98:a3:a4:34:dd:bd:16:6f:61:b3:78:2b:da:1b:
59:da:6e:0a:e7:6b:d3:ad:a6:35:d3:4e:4d:28:d4:e6:da:2b:
00:47:ed:d2:70:77:b9:1d:16:be:d0:4d:79:3b:8c:32:82:e8:
e5:99:b9:88:f2:2d:40:4a:d0:74:bc:73:97:3d:2c:4f:d1:d1:
92:1b:1a:2e:9f:67:19:66:51:f3:11:a7:f2:07:d6:db:45:2d:
f4:64:49:3b:75:a9:ce:f0:a6:95:e7:63:da:64:34:d0:32:69:
0d:28:9a:05:7a:d1:2e:41:d7:67:50:1a:ca:ef:64:88:9e:b2:
93:c5:be:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org