Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/032604e2-6c8b-4e21-aeee-7e7355ea5d31/0acc31e6f5c1c4c0194c90c5d2c00abcecd60ce7.mft
File:                     0acc31e6f5c1c4c0194c90c5d2c00abcecd60ce7.mft (raw, json)
Hash identifier:          m4W1FuDDoBH1kQV+9eG4x363agwRDncLXp9vN9UQvxU=
Subject key identifier:   CA:D7:73:F2:3F:4B:06:A8:1D:F3:75:6D:AE:65:00:D4:39:67:87:06
Authority key identifier: 9A:38:AD:43:17:F1:E2:46:3E:04:C5:B2:FE:51:67:81:E8:79:88:DE
Certificate issuer:       /CN=0acc31e6f5c1c4c0194c90c5d2c00abcecd60ce7
Certificate serial:       2251EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0acc31e6f5c1c4c0194c90c5d2c00abcecd60ce7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/032604e2-6c8b-4e21-aeee-7e7355ea5d31/0acc31e6f5c1c4c0194c90c5d2c00abcecd60ce7.mft
Manifest number:          0DCE
Signing time:             Fri 29 Mar 2024 06:20:32 +0000
Manifest this update:     Fri 29 Mar 2024 05:20:07 +0000
Manifest next update:     Mon 01 Apr 2024 08:22:07 +0000
Files and hashes:         1: 0015aaa7773480879bf7ad3f5262b3270303faff.roa (hash: f9P/jM06+oIOpFvpO8cGot8v6qrXMuq5iK+MVgWFxUA=)
                          2: 0acc31e6f5c1c4c0194c90c5d2c00abcecd60ce7.crl (hash: +5qx2dSkufqKjQjUr9sN83xzqTDqm7vkvxkS6wOVGF0=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/032604e2-6c8b-4e21-aeee-7e7355ea5d31/0acc31e6f5c1c4c0194c90c5d2c00abcecd60ce7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/032604e2-6c8b-4e21-aeee-7e7355ea5d31/0acc31e6f5c1c4c0194c90c5d2c00abcecd60ce7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0acc31e6f5c1c4c0194c90c5d2c00abcecd60ce7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2249195 (0x2251eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0acc31e6f5c1c4c0194c90c5d2c00abcecd60ce7
        Validity
            Not Before: Mar 29 05:20:07 2024 GMT
            Not After : Apr  1 08:22:07 2024 GMT
        Subject: CN=06d86cebf2b15046727ccf8669358838d454f6ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ff:99:f0:57:9a:2f:0b:f8:a0:03:e7:ad:e4:
                    05:1b:bb:cd:29:07:0c:65:f7:1b:19:da:75:39:0c:
                    be:14:1f:1d:58:31:00:fc:ff:ad:1e:1d:51:f2:e4:
                    8e:de:69:f4:62:7d:63:bd:cf:1e:f2:0f:30:22:01:
                    29:74:c9:d8:26:e9:8c:c8:c1:a4:af:e3:39:d8:ee:
                    28:74:8a:66:b1:07:1c:1f:50:ca:24:3b:a9:9c:a1:
                    6a:bc:80:70:22:73:9a:b1:c6:4c:09:8e:99:e0:07:
                    89:db:0e:fa:86:ac:61:8e:8f:9c:8f:77:56:14:a6:
                    4a:33:6d:b8:af:64:d3:42:c3:90:05:d8:cd:35:c8:
                    90:11:52:b5:20:62:07:ad:aa:12:9a:01:0f:2d:43:
                    b9:47:bf:7f:23:26:c4:00:d7:58:ae:f8:1e:fe:e4:
                    96:c5:48:fb:69:f5:45:00:8c:43:ba:13:9e:a7:3b:
                    7e:6d:bd:68:b1:e5:81:a7:fd:74:12:e4:9a:b7:7d:
                    e2:5e:5c:42:20:a9:c4:d6:05:24:75:b2:50:5e:f9:
                    87:83:2c:30:d2:7c:27:37:22:63:e8:d9:4d:da:9d:
                    05:5b:22:e4:0f:a4:20:78:a7:95:e5:2b:b8:ef:1d:
                    6d:56:54:54:e3:c0:a9:4c:0c:23:11:4e:1b:41:00:
                    a8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D7:73:F2:3F:4B:06:A8:1D:F3:75:6D:AE:65:00:D4:39:67:87:06
            X509v3 Authority Key Identifier:
                keyid:9A:38:AD:43:17:F1:E2:46:3E:04:C5:B2:FE:51:67:81:E8:79:88:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0acc31e6f5c1c4c0194c90c5d2c00abcecd60ce7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/032604e2-6c8b-4e21-aeee-7e7355ea5d31/0acc31e6f5c1c4c0194c90c5d2c00abcecd60ce7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/032604e2-6c8b-4e21-aeee-7e7355ea5d31/0acc31e6f5c1c4c0194c90c5d2c00abcecd60ce7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:b9:b1:ee:b7:d1:7e:5d:cc:5d:1b:20:f3:46:59:fd:e5:b7:
         58:e8:46:1f:32:24:01:ad:da:fe:6f:48:7d:76:b0:86:3c:bf:
         f2:10:e7:0f:ce:2f:92:20:c1:03:1c:77:c4:31:68:e5:40:61:
         da:00:7a:91:43:3f:57:4b:16:83:de:af:2a:02:93:76:21:5f:
         05:3b:16:90:a0:fb:8b:00:54:c7:db:1f:4f:42:32:4e:c3:2e:
         78:c4:f6:e8:aa:fe:14:e0:0b:42:12:9d:d4:ea:88:d2:06:f3:
         9e:44:bb:db:ea:cf:e6:61:3d:6b:a2:be:97:5c:98:3f:33:d4:
         2d:1a:f2:85:8f:06:85:f5:9a:da:eb:c1:1f:7e:e3:e6:85:9f:
         cc:4c:d4:57:16:89:46:bb:a2:20:cf:61:4b:55:37:df:d4:d3:
         22:1e:61:1b:eb:ac:d8:e0:66:45:3a:52:7d:37:c0:af:e4:5f:
         32:76:7e:b5:4b:cf:80:f8:ed:dd:84:3c:ae:4c:11:a4:fd:0d:
         6f:9d:ef:77:fd:55:bc:b9:32:c8:f9:34:38:64:d0:d6:68:8d:
         85:93:e7:87:9c:c4:f1:1d:e3:04:0a:2a:6f:ac:c3:b7:b0:be:
         3b:e8:e7:82:1f:89:54:76:e4:4b:4c:9e:e7:93:21:61:e1:44:
         80:ae:2e:99
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDIlHrMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBh
Y2MzMWU2ZjVjMWM0YzAxOTRjOTBjNWQyYzAwYWJjZWNkNjBjZTcwHhcNMjQwMzI5
MDUyMDA3WhcNMjQwNDAxMDgyMjA3WjAzMTEwLwYDVQQDEygwNmQ4NmNlYmYyYjE1
MDQ2NzI3Y2NmODY2OTM1ODgzOGQ0NTRmNmFiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqv+Z8FeaLwv4oAPnreQFG7vNKQcMZfcbGdp1OQy+FB8dWDEA
/P+tHh1R8uSO3mn0Yn1jvc8e8g8wIgEpdMnYJumMyMGkr+M52O4odIpmsQccH1DK
JDupnKFqvIBwInOascZMCY6Z4AeJ2w76hqxhjo+cj3dWFKZKM224r2TTQsOQBdjN
NciQEVK1IGIHraoSmgEPLUO5R79/IybEANdYrvge/uSWxUj7afVFAIxDuhOepzt+
bb1oseWBp/10EuSat33iXlxCIKnE1gUkdbJQXvmHgyww0nwnNyJj6NlN2p0FWyLk
D6QgeKeV5Su47x1tVlRU48CpTAwjEU4bQQCoBQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFMrXc/I/SwaoHfN1ba5lANQ5Z4cGMB8GA1UdIwQYMBaAFJo4rUMX8eJGPgTF
sv5RZ4HoeYjeMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGFjYzMx
ZTZmNWMxYzRjMDE5NGM5MGM1ZDJjMDBhYmNlY2Q2MGNlNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDMyNjA0ZTItNmM4Yi00ZTIxLWFlZWUtN2U3MzU1
ZWE1ZDMxLzBhY2MzMWU2ZjVjMWM0YzAxOTRjOTBjNWQyYzAwYWJjZWNkNjBjZTcu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMzI2MDRlMi02YzhiLTRlMjEtYWVlZS03ZTcz
NTVlYTVkMzEvMGFjYzMxZTZmNWMxYzRjMDE5NGM5MGM1ZDJjMDBhYmNlY2Q2MGNl
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAFK5se630X5dzF0bIPNGWf3lt1joRh8yJAGt2v5vSH12sIY8
v/IQ5w/OL5IgwQMcd8QxaOVAYdoAepFDP1dLFoPeryoCk3YhXwU7FpCg+4sAVMfb
H09CMk7DLnjE9uiq/hTgC0ISndTqiNIG855Eu9vqz+ZhPWuivpdcmD8z1C0a8oWP
BoX1mtrrwR9+4+aFn8xM1FcWiUa7oiDPYUtVN9/U0yIeYRvrrNjgZkU6Un03wK/k
XzJ2frVLz4D47d2EPK5MEaT9DW+d73f9Vby5Msj5NDhk0NZojYWT54ecxPEd4wQK
Km+sw7ewvjvo54IfiVR25EtMnueTIWHhRICuLpk=
-----END CERTIFICATE-----
Generated at Fri Mar 29 07:06:32 2024 by rpki-client on console-ams.rpki-client.org