Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09a9b685-397d-4d4f-8734-6e8fb9651f21/8a34b88edc7711ba98c357c0cd7c26b4d31bbe13.mft
File:                     8a34b88edc7711ba98c357c0cd7c26b4d31bbe13.mft (raw, json)
Hash identifier:          4aKEPQ9xXuavchUwHEnLZxfT1fGAIiuVxHwJI1LRgrs=
Subject key identifier:   26:AB:F8:BC:15:66:68:1B:E3:D8:82:3F:7D:11:4D:1E:C3:0D:6F:24
Authority key identifier: AC:7D:06:CC:8D:9C:83:2B:CF:18:0B:CB:6C:01:5E:C2:4A:6D:A7:8F
Certificate issuer:       /CN=8a34b88edc7711ba98c357c0cd7c26b4d31bbe13
Certificate serial:       299E66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a34b88edc7711ba98c357c0cd7c26b4d31bbe13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09a9b685-397d-4d4f-8734-6e8fb9651f21/8a34b88edc7711ba98c357c0cd7c26b4d31bbe13.mft
Manifest number:          0DF5
Signing time:             Thu 28 Mar 2024 14:20:40 +0000
Manifest this update:     Thu 28 Mar 2024 13:20:08 +0000
Manifest next update:     Sun 31 Mar 2024 15:20:08 +0000
Files and hashes:         1: 1a53cdebdd3468183aec6de41a7db3d5d30106f6.roa (hash: 2Gf8T9+Bh9mSfc9ltNOVtaIVq4Owxa2SGb9hjiFHHM0=)
                          2: 2f8efeb82c51e90c06ec7bc1c5a4ad198a5ef38e.roa (hash: e6ZzMa+CCHHOOH+L101QM0BEht21YNjKlkLt3R4U5Fo=)
                          3: 8a34b88edc7711ba98c357c0cd7c26b4d31bbe13.crl (hash: kvk/Rj2jLni+pq0NNt+kYfFT1NVWx2+T6684fnfLXXg=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/09a9b685-397d-4d4f-8734-6e8fb9651f21/8a34b88edc7711ba98c357c0cd7c26b4d31bbe13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/09a9b685-397d-4d4f-8734-6e8fb9651f21/8a34b88edc7711ba98c357c0cd7c26b4d31bbe13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a34b88edc7711ba98c357c0cd7c26b4d31bbe13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2727526 (0x299e66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a34b88edc7711ba98c357c0cd7c26b4d31bbe13
        Validity
            Not Before: Mar 28 13:20:08 2024 GMT
            Not After : Mar 31 15:20:08 2024 GMT
        Subject: CN=64ac0510ef7518fd40c53ab2b6dc7dc281cc5365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:91:56:99:a2:2d:b9:3e:c3:ef:c1:ef:e0:3b:
                    9b:52:17:c3:89:7e:8e:98:f1:b1:b3:51:41:57:d8:
                    b9:cd:72:fa:7f:00:78:86:a7:7f:99:aa:89:59:eb:
                    31:90:dc:59:96:8f:6d:3a:ae:6e:28:5a:60:a3:f4:
                    6c:36:52:5a:ea:cb:94:22:c6:25:00:72:6a:a5:64:
                    16:ba:d0:0c:96:80:27:26:5a:90:b1:2e:97:e6:8a:
                    3b:21:cc:1f:6a:54:d8:d6:42:af:73:50:01:98:8a:
                    45:8e:e2:0a:10:ce:15:49:34:4e:6b:0b:23:6f:30:
                    88:d2:14:aa:04:86:e2:56:52:16:4d:44:99:8b:88:
                    2d:57:fa:14:d6:1b:51:46:86:5a:31:44:71:65:07:
                    5e:f3:90:1a:e1:58:74:51:22:ff:6e:dd:85:0d:73:
                    05:89:f1:e6:4e:41:2d:65:e8:12:8a:12:ac:ec:e2:
                    98:f4:75:da:2c:43:1c:b5:f5:b0:6f:b4:d9:e7:83:
                    d6:55:3c:c0:c8:15:87:d1:c1:72:e7:97:73:6f:ef:
                    1a:a7:b7:dc:8f:03:24:61:c5:44:0e:5e:62:0c:72:
                    89:e2:c6:22:e4:c3:ce:7c:dd:24:79:1d:72:ed:ea:
                    b4:1a:80:2d:56:e7:95:2e:5a:3c:e2:bf:98:64:d0:
                    03:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AB:F8:BC:15:66:68:1B:E3:D8:82:3F:7D:11:4D:1E:C3:0D:6F:24
            X509v3 Authority Key Identifier:
                keyid:AC:7D:06:CC:8D:9C:83:2B:CF:18:0B:CB:6C:01:5E:C2:4A:6D:A7:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a34b88edc7711ba98c357c0cd7c26b4d31bbe13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09a9b685-397d-4d4f-8734-6e8fb9651f21/8a34b88edc7711ba98c357c0cd7c26b4d31bbe13.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09a9b685-397d-4d4f-8734-6e8fb9651f21/8a34b88edc7711ba98c357c0cd7c26b4d31bbe13.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:f6:88:db:62:d5:96:55:5c:e6:e3:ad:0f:f6:c3:04:ca:6c:
         d5:86:a4:60:20:95:01:fa:8d:0d:92:bb:b4:d0:9e:93:20:5d:
         84:fc:5b:e4:d6:28:d7:d0:d4:24:71:fd:7e:eb:19:b7:7a:25:
         3f:33:53:95:33:8f:51:21:57:bd:23:e1:ad:1d:31:90:26:0c:
         2f:ff:6e:f4:f0:62:a7:ad:e1:d1:a9:4d:b9:32:e3:f2:cc:5a:
         62:41:ee:d3:e4:88:75:49:72:18:a9:d4:da:38:64:19:de:30:
         4c:21:1e:de:b3:93:0a:d5:e8:4d:e4:51:83:4a:d6:c1:c9:26:
         27:14:b8:93:77:7b:ec:09:d0:40:bf:03:3c:f7:c5:11:bb:b5:
         77:17:f4:0a:c2:c6:ef:d7:13:52:f7:06:79:f1:63:46:a5:c9:
         a1:b3:91:8a:b9:dc:5e:80:f8:b4:4d:de:cc:70:41:0c:3f:b2:
         1a:f5:b0:50:b6:ea:ee:9f:8b:73:1d:7b:2d:67:17:ae:32:60:
         80:f8:04:16:29:75:6f:87:c4:a6:66:54:29:ce:3b:56:a7:e4:
         bb:c4:c0:08:d9:cc:e4:16:2e:03:0e:5c:b2:7a:5d:fe:27:d7:
         e7:e3:cc:cb:e8:2a:c3:02:6d:5a:9b:d6:fe:d2:0e:9f:d1:8a:
         98:dd:67:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:42:19 2024 by rpki-client on console-fra.rpki-client.org