Manifest
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.mft
File: E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.mft (raw, json)
Hash identifier: lHE4A84Yn9g8Rg+wTG0ZOeGDKtIi+fvfXadUAEXrqdA=
Subject key identifier: E0:D7:75:83:54:13:B1:9B:1D:62:C9:C7:80:C0:9D:0D:3E:42:54:C8
Authority key identifier: E2:29:89:8B:6E:7F:B7:F3:04:8E:BD:4F:8C:DB:9F:88:94:D2:52:A8
Certificate issuer: /CN=E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8
Certificate serial: 52DF1C88308E5BE275FBDB7650FDBAC030515F5D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.mft
Manifest number: AD
Signing time: Thu 30 Jan 2025 14:02:05 +0000
Manifest this update: Thu 30 Jan 2025 13:57:05 +0000
Manifest next update: Wed 05 Feb 2025 01:36:05 +0000
Files and hashes: 1: 3136382e3139372e36382e302f32322d3234203d3e20323632313931.roa (hash: ltBEqNUYQWG8BF7GPgEgzrcy+jpKNyUNKvDSGgyIOGY=)
2: E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.crl (hash: AKoxzcp6na/z4SMq3rT8bbaKS6DWoa7c6TyuLt6t5Fg=)
3: 323830333a313538303a3a2f33322d3332203d3e20323632313931.roa (hash: QR4dQvznjO4AkOr+XZ9QCXRC9KUscfCSnYfr1qsDbPU=)
4: 3133312e302e3136382e302f32322d3234203d3e20323632313931.roa (hash: 3r9oxefaOXPjVM8WK2Bf0ETNIGLIpwbZYQD0k2iYu7k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:df:1c:88:30:8e:5b:e2:75:fb:db:76:50:fd:ba:c0:30:51:5f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8
Validity
Not Before: Jan 30 13:57:05 2025 GMT
Not After : Feb 5 01:36:05 2025 GMT
Subject: CN=E0D775835413B19B1D62C9C780C09D0D3E4254C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:01:54:47:fb:2a:66:55:10:bb:bf:40:8e:0a:
91:3a:39:04:d0:89:57:a9:85:b2:1a:f1:48:bd:7c:
a5:80:3c:9f:06:3c:ad:77:2a:fc:10:2b:ef:fe:85:
de:fd:c8:d7:91:48:85:dc:9c:dc:1f:1b:ff:f1:87:
27:da:9b:43:0b:08:23:99:1c:f9:a3:fb:73:a8:ad:
72:8b:54:c9:df:e2:56:0d:9c:c2:d0:5d:08:99:41:
79:c6:ca:10:b1:77:b1:9d:db:29:98:49:56:95:83:
85:77:0d:a5:c8:ce:22:e3:2e:73:58:51:16:8c:4d:
30:78:3f:b3:d8:bb:ee:5b:20:90:35:e2:53:31:77:
fb:ff:47:45:62:10:cf:fa:aa:e7:cd:e0:68:db:70:
cc:82:6c:36:ae:86:ef:a6:5a:a5:ae:db:17:3b:62:
85:25:16:f6:61:4c:22:bd:96:2e:23:1b:83:d2:ee:
d6:4c:e0:a6:19:f2:15:2d:99:b4:02:4a:17:4b:b4:
f1:2b:82:96:4d:c8:cd:2f:1f:e9:8b:53:60:76:82:
50:49:8b:a0:8e:22:cb:c1:29:15:9f:67:55:eb:c2:
07:0f:d9:9f:8b:39:65:21:05:02:d5:5c:7d:35:92:
0e:7e:fc:40:67:32:a9:2c:68:9e:6f:b0:5e:e2:0a:
3b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D7:75:83:54:13:B1:9B:1D:62:C9:C7:80:C0:9D:0D:3E:42:54:C8
X509v3 Authority Key Identifier:
keyid:E2:29:89:8B:6E:7F:B7:F3:04:8E:BD:4F:8C:DB:9F:88:94:D2:52:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:6e:ed:0c:f3:1f:b4:e6:6f:d1:20:f3:bb:da:14:af:62:64:
2c:17:8f:e6:52:13:2f:c9:3d:7e:d0:b7:d8:30:27:37:2e:35:
7f:eb:d9:1e:db:f3:2c:6e:b1:39:94:cd:a4:73:45:f8:02:8a:
87:58:08:52:ed:ac:0a:d1:de:6b:72:e0:d5:7d:99:04:36:8f:
88:db:b7:f8:9f:52:fd:13:74:67:e5:68:32:32:18:7e:89:fe:
a0:bc:39:b9:f2:6b:2a:72:64:2e:ed:09:17:c8:ab:1a:6d:ca:
81:85:18:11:c0:e0:d9:16:52:11:0b:f9:61:ac:c4:83:96:bf:
54:61:23:5d:10:0f:da:54:a8:93:76:04:67:1f:e4:30:c6:50:
78:4d:0f:2e:3e:21:12:df:95:bd:9c:f3:89:f2:f3:68:7c:35:
ea:9e:7b:ff:4d:c1:37:fa:96:14:05:bb:af:4a:df:3d:e4:21:
ab:93:f7:aa:1e:fc:33:a7:13:46:42:10:66:40:66:c2:21:a5:
03:b7:2c:95:23:a6:6d:dd:5c:86:69:07:08:2f:5e:40:a4:83:
b2:4e:ed:14:97:53:78:2d:75:83:2c:8b:58:66:5e:25:fd:64:
c3:b1:5b:27:4b:69:3b:9d:1c:9c:0c:a3:45:d4:10:44:7d:5f:
51:dc:00:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:01:04 2025 by rpki-client