Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02687a4b-2ac2-4d3f-9d0b-96286a0b6a4b/4f17752f3d0b4b3bb5cf630e65f8e199604e5f75.mft
File:                     4f17752f3d0b4b3bb5cf630e65f8e199604e5f75.mft (raw, json)
Hash identifier:          W+0OBipGHq5IPWQadSrhRImNOS8suYonBmsMuHemt+o=
Subject key identifier:   7F:4B:A6:9A:F5:9E:48:34:4B:14:8A:AA:54:19:09:99:0E:92:6E:53
Authority key identifier: 37:F3:58:E7:A7:C1:E7:AC:EA:05:0A:F6:8E:17:FB:3C:2E:57:85:59
Certificate issuer:       /CN=4f17752f3d0b4b3bb5cf630e65f8e199604e5f75
Certificate serial:       194C9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f17752f3d0b4b3bb5cf630e65f8e199604e5f75.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02687a4b-2ac2-4d3f-9d0b-96286a0b6a4b/4f17752f3d0b4b3bb5cf630e65f8e199604e5f75.mft
Manifest Number:          0948
Signing time:             Thu 30 Mar 2023 15:15:51 +0000
Manifest this update:     Thu 30 Mar 2023 14:15:44 +0000
Manifest next update:     Sun 02 Apr 2023 16:19:44 +0000
Files and hashes:         1: 10994a0e1c649ac992a9bd9a082e0bd7769006a9.roa (hash: DWdBej9Zvo9mLVNS27i463rM/430d/7rEHGwYxZuv5I=)
                          2: 4a48828bb79b45beb8fbc5c89290bbe50000b3b4.roa (hash: /SGETWgIv3REmcXUsbyPCDkP0blDCVUv1HG2Hoa7Oy0=)
                          3: 4f17752f3d0b4b3bb5cf630e65f8e199604e5f75.crl (hash: ktX9e+mWOFxYuYothu43Ocj61sY559pOxb01qtUEXAY=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/02687a4b-2ac2-4d3f-9d0b-96286a0b6a4b/4f17752f3d0b4b3bb5cf630e65f8e199604e5f75.crl
                          rsync://repository.lacnic.net/rpki/lacnic/02687a4b-2ac2-4d3f-9d0b-96286a0b6a4b/4f17752f3d0b4b3bb5cf630e65f8e199604e5f75.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f17752f3d0b4b3bb5cf630e65f8e199604e5f75.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Apr 2023 08:27:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1658013 (0x194c9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f17752f3d0b4b3bb5cf630e65f8e199604e5f75
        Validity
            Not Before: Mar 30 14:15:44 2023 GMT
            Not After : Apr  2 16:19:44 2023 GMT
        Subject: CN=638715f814754f68077c3c52b896849198ef9f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:14:4d:79:2b:e4:d8:d8:24:e9:9d:95:05:55:
                    57:11:24:12:0c:90:52:bd:de:ad:f5:23:c9:67:b5:
                    cf:9b:5f:11:5d:42:e0:64:7f:38:a1:21:ca:e2:8b:
                    28:db:0f:70:6e:a5:7b:b1:62:20:79:af:52:e7:23:
                    d8:00:a7:59:bf:5f:d6:92:b6:8d:32:10:fc:09:29:
                    30:50:54:52:30:12:ce:17:f2:2c:18:97:4c:14:6d:
                    81:21:cd:12:cf:d7:1a:46:56:03:5b:87:15:a5:72:
                    37:71:8a:08:c3:66:c8:0e:e5:04:2d:87:37:c0:ee:
                    be:dc:b1:0d:e0:a3:20:76:48:1f:d5:f0:1f:9f:5d:
                    13:e4:81:b4:8b:0a:44:d5:6a:e2:22:48:65:7b:fc:
                    74:95:28:5f:c8:de:f3:2a:6a:c6:59:2e:5b:8d:75:
                    0d:e4:90:35:1b:cc:c0:51:c3:b6:25:41:66:d4:7d:
                    d3:77:e0:38:3d:bb:1e:2c:3d:cf:5c:68:5b:b9:0a:
                    1c:84:70:03:f4:44:f8:22:5c:fc:c5:ad:b3:82:9d:
                    e4:9a:e9:7c:74:18:e8:6f:ff:b9:a5:8d:a2:e9:73:
                    04:b2:00:10:77:f2:4d:6b:84:26:10:7e:58:df:97:
                    cc:17:88:30:1c:cf:0e:bd:ff:48:86:5f:39:db:54:
                    0c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7F:4B:A6:9A:F5:9E:48:34:4B:14:8A:AA:54:19:09:99:0E:92:6E:53
            X509v3 Authority Key Identifier: 
                keyid:37:F3:58:E7:A7:C1:E7:AC:EA:05:0A:F6:8E:17:FB:3C:2E:57:85:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f17752f3d0b4b3bb5cf630e65f8e199604e5f75.cer

            Subject Information Access: 
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02687a4b-2ac2-4d3f-9d0b-96286a0b6a4b/4f17752f3d0b4b3bb5cf630e65f8e199604e5f75.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02687a4b-2ac2-4d3f-9d0b-96286a0b6a4b/4f17752f3d0b4b3bb5cf630e65f8e199604e5f75.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:6a:84:fc:cb:69:34:f6:89:67:b8:df:38:7a:86:c3:86:7f:
         7e:1c:3d:91:63:3e:b7:ee:7d:fe:35:8f:b6:df:f3:b6:58:01:
         27:c8:89:1f:3b:3b:f5:d6:e3:6f:c3:82:4a:10:d9:c0:88:ac:
         5e:16:d7:79:1f:cc:06:1d:e4:cd:60:b7:32:24:6f:6a:68:f0:
         a2:b0:73:dd:29:a3:a2:94:64:09:5c:92:a3:84:d6:e1:bc:95:
         8c:cb:ae:5e:65:e7:eb:ec:d1:a0:c6:e8:3d:b6:7d:43:57:ec:
         2a:c2:28:aa:f6:ff:70:35:70:80:40:9a:cb:2b:3e:bd:9d:a9:
         75:79:ef:1e:30:82:22:10:d4:ce:51:3e:de:bd:fa:33:4e:52:
         65:a4:c5:da:77:96:0b:cf:7c:86:1b:8b:e1:bc:2d:c0:c5:bc:
         c4:8a:c3:43:fb:98:4b:18:47:ef:1e:95:b9:57:f8:68:54:b2:
         a3:02:4b:fe:1f:98:b5:bb:52:fd:54:3f:09:e1:88:fd:96:2f:
         09:a7:15:f9:b5:a0:f3:08:1e:a1:57:d3:99:82:b1:01:c9:69:
         c3:b9:1a:2b:84:c3:2f:7a:01:f9:c6:af:46:d9:e6:bf:0f:c8:
         82:7d:05:f9:7e:22:ed:46:f8:24:a4:7f:f9:1a:01:80:ac:a0:
         c2:9e:e8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 30 15:44:10 2023 by rpki-client on console-fra.rpki-client.org