Manifest
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ff72a380-8b97-46fe-bb0c-152b202f4a4a/021a168cf68ddbf90cd8b94e942cd81f43caedd1.mft
File: 021a168cf68ddbf90cd8b94e942cd81f43caedd1.mft (raw, json)
Hash identifier: dDsR5USG5ZVRizvMrU0vBc6bOkM+VT4xx2yxe7bM7Xo=
Subject key identifier: 45:88:50:D9:2E:A0:BC:6E:AD:0E:BA:94:3F:E4:98:2D:1F:C1:81:C8
Authority key identifier: 00:AB:A3:B8:0B:BB:EB:1B:1C:FA:E8:FB:CD:DC:10:12:BD:82:3B:14
Certificate issuer: /CN=021a168cf68ddbf90cd8b94e942cd81f43caedd1
Certificate serial: 08014E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/021a168cf68ddbf90cd8b94e942cd81f43caedd1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ff72a380-8b97-46fe-bb0c-152b202f4a4a/021a168cf68ddbf90cd8b94e942cd81f43caedd1.mft
Manifest number: 042A
Signing time: Mon 15 Apr 2024 09:21:13 +0000
Manifest this update: Mon 15 Apr 2024 08:20:18 +0000
Manifest next update: Thu 18 Apr 2024 09:24:18 +0000
Files and hashes: 1: 021a168cf68ddbf90cd8b94e942cd81f43caedd1.crl (hash: qLMIi8Rr7wc3kmomWfzv+onjvegia4wmZOG8Wd66Uao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 524622 (0x8014e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021a168cf68ddbf90cd8b94e942cd81f43caedd1
Validity
Not Before: Apr 15 08:20:18 2024 GMT
Not After : Apr 18 09:24:18 2024 GMT
Subject: CN=c44103920e189f9921c5f8a8c07c122ba87c53ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cd:9e:67:84:9b:6e:d8:cf:03:ad:5d:1f:62:
f6:4d:5a:eb:3e:1e:0a:0d:92:47:e4:48:c3:bb:00:
7d:e3:50:63:0d:3e:04:cf:1f:75:94:f3:26:c0:32:
ae:b4:c8:8f:2e:a7:c2:ee:c5:76:3c:b6:c9:1c:b6:
ea:d8:db:ba:85:15:43:6a:c0:67:fd:14:41:0a:1a:
73:75:51:88:d8:6a:b2:89:62:db:3e:9b:15:87:73:
bf:73:1d:be:c0:80:5e:37:01:bf:fb:af:ce:d2:59:
d9:70:37:65:23:ff:73:d1:ed:ea:2e:8f:c8:89:4b:
0e:05:a6:37:5c:d1:09:ab:41:55:c5:cc:ab:da:06:
0d:aa:12:66:d0:d8:0a:b2:cf:60:50:b1:b8:b0:12:
53:7d:86:c9:b9:ff:0e:f6:42:14:3d:4e:43:33:ac:
06:57:11:82:0b:17:04:1d:55:3b:43:d0:82:fe:50:
d0:5d:08:ef:bb:98:ac:88:c1:4e:88:71:49:5b:90:
22:92:83:f2:dc:f5:50:06:cf:e1:2d:53:33:21:50:
1f:fc:81:94:48:c1:6a:1c:6a:3c:30:e7:1a:9d:8f:
ad:58:91:10:72:b0:1f:83:dc:5b:37:00:ce:e6:89:
55:83:46:2d:a2:e3:49:c9:d1:91:f3:32:7a:96:73:
81:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:88:50:D9:2E:A0:BC:6E:AD:0E:BA:94:3F:E4:98:2D:1F:C1:81:C8
X509v3 Authority Key Identifier:
keyid:00:AB:A3:B8:0B:BB:EB:1B:1C:FA:E8:FB:CD:DC:10:12:BD:82:3B:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/021a168cf68ddbf90cd8b94e942cd81f43caedd1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ff72a380-8b97-46fe-bb0c-152b202f4a4a/021a168cf68ddbf90cd8b94e942cd81f43caedd1.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ff72a380-8b97-46fe-bb0c-152b202f4a4a/021a168cf68ddbf90cd8b94e942cd81f43caedd1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:42:92:78:cc:da:30:9d:51:d0:e1:7c:a6:1b:69:67:12:2d:
5e:66:51:04:8a:d4:b1:75:0f:c6:11:1c:15:09:00:c7:41:55:
48:49:36:b0:c7:85:18:47:51:df:16:5c:db:4e:8d:7a:05:be:
5f:3f:45:77:9d:83:0b:12:d4:0e:8c:2b:ef:75:63:0d:31:99:
4f:04:9c:26:35:a3:00:d2:9b:13:93:c8:b3:2c:b1:19:fc:22:
08:75:34:df:0d:25:20:ab:ab:12:a5:5f:0a:a2:16:ea:9e:5b:
5b:3b:2a:1c:4e:f2:ba:7d:9d:eb:06:9b:a4:03:3f:4e:5e:4f:
e1:8f:ce:2d:e6:33:37:77:de:1d:b5:d7:28:f0:87:1c:98:c0:
ce:5e:1b:82:c2:89:3d:4e:15:3e:e0:83:8f:ef:fc:f0:0f:b1:
f7:77:49:31:5a:04:49:03:2c:ad:0a:fe:ff:da:40:5d:6c:47:
41:4d:76:57:38:4e:e5:01:57:38:1d:d7:f6:fc:4e:29:b7:ff:
8b:3e:43:7e:b1:d5:92:3b:41:2a:a6:03:19:8b:4d:bc:15:4f:
eb:23:f0:ea:37:f3:73:4e:6b:e9:a1:06:85:00:06:e0:55:9d:
c8:4a:18:2d:6c:fd:25:13:2c:97:58:a8:d1:d9:62:c0:33:b9:
e9:a5:59:0f
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDCAFOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDAy
MWExNjhjZjY4ZGRiZjkwY2Q4Yjk0ZTk0MmNkODFmNDNjYWVkZDEwHhcNMjQwNDE1
MDgyMDE4WhcNMjQwNDE4MDkyNDE4WjAzMTEwLwYDVQQDEyhjNDQxMDM5MjBlMTg5
Zjk5MjFjNWY4YThjMDdjMTIyYmE4N2M1M2JhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoM2eZ4SbbtjPA61dH2L2TVrrPh4KDZJH5EjDuwB941BjDT4E
zx91lPMmwDKutMiPLqfC7sV2PLbJHLbq2Nu6hRVDasBn/RRBChpzdVGI2GqyiWLb
PpsVh3O/cx2+wIBeNwG/+6/O0lnZcDdlI/9z0e3qLo/IiUsOBaY3XNEJq0FVxcyr
2gYNqhJm0NgKss9gULG4sBJTfYbJuf8O9kIUPU5DM6wGVxGCCxcEHVU7Q9CC/lDQ
XQjvu5isiMFOiHFJW5AikoPy3PVQBs/hLVMzIVAf/IGUSMFqHGo8MOcanY+tWJEQ
crAfg9xbNwDO5olVg0YtouNJydGR8zJ6lnOBsQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFEWIUNkuoLxurQ66lD/kmC0fwYHIMB8GA1UdIwQYMBaAFACro7gLu+sbHPro
+83cEBK9gjsUMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDIxYTE2
OGNmNjhkZGJmOTBjZDhiOTRlOTQyY2Q4MWY0M2NhZWRkMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmY3MmEzODAtOGI5Ny00NmZlLWJiMGMtMTUyYjIw
MmY0YTRhLzAyMWExNjhjZjY4ZGRiZjkwY2Q4Yjk0ZTk0MmNkODFmNDNjYWVkZDEu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mZjcyYTM4MC04Yjk3LTQ2ZmUtYmIwYy0xNTJi
MjAyZjRhNGEvMDIxYTE2OGNmNjhkZGJmOTBjZDhiOTRlOTQyY2Q4MWY0M2NhZWRk
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAIRCknjM2jCdUdDhfKYbaWcSLV5mUQSK1LF1D8YRHBUJAMdB
VUhJNrDHhRhHUd8WXNtOjXoFvl8/RXedgwsS1A6MK+91Yw0xmU8EnCY1owDSmxOT
yLMssRn8Igh1NN8NJSCrqxKlXwqiFuqeW1s7KhxO8rp9nesGm6QDP05eT+GPzi3m
Mzd33h211yjwhxyYwM5eG4LCiT1OFT7gg4/v/PAPsfd3STFaBEkDLK0K/v/aQF1s
R0FNdlc4TuUBVzgd1/b8Tim3/4s+Q36x1ZI7QSqmAxmLTbwVT+sj8Oo383NOa+mh
BoUABuBVnchKGC1s/SUTLJdYqNHZYsAzuemlWQ8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:15 2024 by rpki-client on console-fra.rpki-client.org