Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02efd32a-664b-4770-a500-8fc74a5992ad/40dd355863a64b49aaea56a333a078f4104009ff.mft
File:                     40dd355863a64b49aaea56a333a078f4104009ff.mft (raw, json)
Hash identifier:          NzrQLo31UM6rXkIkcUjRULavNYd+U8DZ6S14d1opraM=
Subject key identifier:   39:E4:6D:2E:BF:A3:69:9C:BF:F0:64:64:98:87:66:C0:52:DD:56:46
Authority key identifier: 30:03:EB:ED:04:79:DB:CE:DD:0A:60:F8:33:AC:52:69:51:5B:A7:78
Certificate issuer:       /CN=40dd355863a64b49aaea56a333a078f4104009ff
Certificate serial:       19491C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40dd355863a64b49aaea56a333a078f4104009ff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02efd32a-664b-4770-a500-8fc74a5992ad/40dd355863a64b49aaea56a333a078f4104009ff.mft
Manifest number:          0D25
Signing time:             Fri 29 Mar 2024 08:21:15 +0000
Manifest this update:     Fri 29 Mar 2024 07:20:10 +0000
Manifest next update:     Mon 01 Apr 2024 10:06:10 +0000
Files and hashes:         1: 0362be8444d2168bcee78e27218aa78d70716d8d.roa (hash: p2RmqdZQ8Kykw1A3rK4qcdrPxP1+N002bvEWjn+qeV4=)
                          2: 40dd355863a64b49aaea56a333a078f4104009ff.crl (hash: 4qg365b0u8QghToQQvcR0nLzHVBWmjQXKyS5BmFnY1k=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/02efd32a-664b-4770-a500-8fc74a5992ad/40dd355863a64b49aaea56a333a078f4104009ff.crl
                          rsync://repository.lacnic.net/rpki/lacnic/02efd32a-664b-4770-a500-8fc74a5992ad/40dd355863a64b49aaea56a333a078f4104009ff.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40dd355863a64b49aaea56a333a078f4104009ff.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1657116 (0x19491c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40dd355863a64b49aaea56a333a078f4104009ff
        Validity
            Not Before: Mar 29 07:20:10 2024 GMT
            Not After : Apr  1 10:06:10 2024 GMT
        Subject: CN=b8bf058e9ccae4744b7a959bf362daeefcd6b386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:27:00:88:7a:d2:9e:42:8c:dc:47:b4:75:67:
                    14:20:28:af:10:c5:0a:9a:3e:11:7b:70:ed:88:fb:
                    6e:80:8a:03:33:81:d3:e1:be:ec:c5:82:12:45:bd:
                    3c:48:40:21:3b:23:87:2e:4a:43:35:df:53:e3:02:
                    4e:a5:5e:31:0b:de:75:18:a3:ce:dc:5f:8b:90:90:
                    01:78:c8:72:d0:17:64:52:99:df:71:c7:f3:f8:e9:
                    53:44:37:9b:c9:2f:e9:f9:32:2b:b8:e6:8c:8a:e9:
                    52:57:3e:31:e6:65:a8:e6:6e:93:f6:29:a9:98:8d:
                    9d:b8:24:02:5f:5c:52:36:2e:15:fe:9c:61:ab:c0:
                    2c:3c:8f:c6:38:44:4b:82:c5:4a:7b:23:83:5d:be:
                    43:3c:83:9f:5f:cc:bc:35:3d:6e:da:4a:d3:5e:bf:
                    81:a7:7f:91:84:d3:08:43:d6:3e:49:77:9c:d9:3d:
                    a5:5b:c5:54:23:ea:8e:3d:12:e6:9c:d5:b5:96:2f:
                    2c:d2:07:bf:d5:4d:53:24:5c:82:43:40:0b:ee:bc:
                    5d:d6:3f:f5:cf:67:08:66:ff:19:c8:76:2e:b7:b8:
                    e3:25:62:79:16:52:cf:12:0b:01:90:c2:ab:a0:04:
                    98:a9:e0:23:76:b1:65:8e:40:78:a5:6d:56:94:39:
                    6e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E4:6D:2E:BF:A3:69:9C:BF:F0:64:64:98:87:66:C0:52:DD:56:46
            X509v3 Authority Key Identifier:
                keyid:30:03:EB:ED:04:79:DB:CE:DD:0A:60:F8:33:AC:52:69:51:5B:A7:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40dd355863a64b49aaea56a333a078f4104009ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02efd32a-664b-4770-a500-8fc74a5992ad/40dd355863a64b49aaea56a333a078f4104009ff.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02efd32a-664b-4770-a500-8fc74a5992ad/40dd355863a64b49aaea56a333a078f4104009ff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:72:91:9c:68:68:f1:40:d8:a3:a3:32:4f:96:2d:4d:4f:77:
         0e:97:98:b4:9b:e1:bd:37:46:31:9a:80:b1:8a:7a:d4:fc:6f:
         2a:d6:46:5c:8c:ea:6f:0c:42:78:24:35:d8:16:46:c9:80:f5:
         c4:6d:5f:3b:41:a3:af:d1:6d:82:2a:2a:60:d6:64:cb:ca:2f:
         81:eb:c9:a5:76:5c:b9:26:d4:68:06:e1:6b:be:9e:d1:19:d0:
         de:33:7c:27:d6:c5:64:9b:ba:9c:d1:4d:04:31:42:f9:8d:f6:
         43:70:9c:bd:aa:1d:e4:d8:24:12:76:2e:30:22:be:45:78:aa:
         38:e2:5b:3d:61:e2:62:e7:21:e3:36:11:ef:c8:76:34:b7:b3:
         02:07:90:ce:71:96:e1:69:b3:0c:21:22:53:1e:52:69:4d:aa:
         28:9e:f0:ba:47:eb:02:ad:fb:ce:a6:97:7b:04:33:82:c5:1d:
         9f:ea:56:d6:88:a5:ef:e4:a5:c2:4d:a5:10:95:3d:ef:db:9a:
         9f:d1:50:67:c3:7a:48:7b:f9:b1:69:e1:93:2f:02:92:c5:eb:
         13:5d:bc:65:49:36:30:0f:19:9e:7f:6c:65:44:af:66:aa:71:
         ed:33:6d:f1:01:76:a0:f4:77:9a:98:45:bb:3e:42:02:a7:69:
         58:0b:96:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 11:04:55 2024 by rpki-client on console-ams.rpki-client.org