Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ca0d7d8-e4bf-40ab-9a7e-61f5d254f9c9/c8a7a1242e172a41c94834befa2ea1e8179abf68.mft
File:                     c8a7a1242e172a41c94834befa2ea1e8179abf68.mft (raw, json)
Hash identifier:          9+SR1U9FTMraJ4mdPURYdnqeflWM800HQdEsuH/54Ow=
Subject key identifier:   59:27:15:6B:9B:6F:04:E0:8A:A4:6E:FD:D1:FA:25:D4:48:ED:AC:F3
Authority key identifier: 71:AB:D1:81:99:7C:89:D2:3A:C0:59:67:7A:C9:5C:DD:10:12:39:76
Certificate issuer:       /CN=c8a7a1242e172a41c94834befa2ea1e8179abf68
Certificate serial:       1F6FCB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8a7a1242e172a41c94834befa2ea1e8179abf68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ca0d7d8-e4bf-40ab-9a7e-61f5d254f9c9/c8a7a1242e172a41c94834befa2ea1e8179abf68.mft
Manifest Number:          0921
Signing time:             Thu 23 Mar 2023 01:15:53 +0000
Manifest this update:     Thu 23 Mar 2023 00:15:37 +0000
Manifest next update:     Sun 26 Mar 2023 04:13:37 +0000
Files and hashes:         1: b2e0399111fd6d40156c9ce206fb94401688cfd1.roa (hash: rGGvIMr93DGLRsuRu4zywBS9Rswg1Ivknd0XTNaptdU=)
                          2: c336abdf09df7a23037938226582a6bf65d0ac8b.roa (hash: DvQ4yFgzirGJe9d87lBNQiDCrIhcSkgTkM/fBVOda/A=)
                          3: c8a7a1242e172a41c94834befa2ea1e8179abf68.crl (hash: TVQG84DHYwXjGdl5htqFWrKjU+r6wH+rahoE7yPb+nY=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0ca0d7d8-e4bf-40ab-9a7e-61f5d254f9c9/c8a7a1242e172a41c94834befa2ea1e8179abf68.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0ca0d7d8-e4bf-40ab-9a7e-61f5d254f9c9/c8a7a1242e172a41c94834befa2ea1e8179abf68.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8a7a1242e172a41c94834befa2ea1e8179abf68.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Mar 2023 22:56:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2060235 (0x1f6fcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8a7a1242e172a41c94834befa2ea1e8179abf68
        Validity
            Not Before: Mar 23 00:15:37 2023 GMT
            Not After : Mar 26 04:13:37 2023 GMT
        Subject: CN=af4e48a8459c31bb85071d77af676cac3b434313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:99:06:f4:e3:6c:9d:b6:72:1a:d6:50:25:3c:
                    90:be:1f:e5:cf:bb:eb:a9:dc:c1:d9:2a:0a:c0:55:
                    7b:bb:39:7a:90:f4:dd:a2:db:b4:4a:7d:a5:4c:4e:
                    d1:84:4a:0b:5f:61:d4:8d:33:d4:b0:5d:f3:f7:fd:
                    6b:9e:11:ad:46:77:17:54:fe:aa:1b:00:55:c3:14:
                    7e:0c:50:70:c4:9a:a0:40:fb:fc:02:cf:0a:e5:ab:
                    0e:0c:99:c0:ab:79:0e:74:ee:28:26:d6:dd:31:d0:
                    e8:c7:d9:05:1e:74:90:08:1c:c2:73:bf:f8:2c:12:
                    30:23:05:1c:74:2c:0b:b7:65:08:5e:65:fa:c0:22:
                    fd:1d:a7:f6:c9:d0:d7:75:97:1a:bc:a5:eb:d2:5d:
                    8c:1c:4d:5d:65:e7:b6:ab:f1:48:21:5c:15:6e:72:
                    68:b7:63:70:e9:e5:c3:de:2e:8f:5d:3e:2c:c5:19:
                    d3:9e:56:bc:9b:16:1e:b4:34:7e:19:ea:5c:29:4d:
                    34:9a:cc:4f:e0:dd:80:6a:b5:ca:89:7a:62:bf:f3:
                    20:f2:1b:c7:e9:2a:a5:dd:4e:ce:20:15:d5:91:82:
                    fc:3e:3d:5c:a9:74:b6:c5:84:7f:ef:c9:9e:da:e5:
                    b1:22:c6:c0:02:cf:d2:4a:0c:39:16:c8:46:c0:6a:
                    70:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                59:27:15:6B:9B:6F:04:E0:8A:A4:6E:FD:D1:FA:25:D4:48:ED:AC:F3
            X509v3 Authority Key Identifier: 
                keyid:71:AB:D1:81:99:7C:89:D2:3A:C0:59:67:7A:C9:5C:DD:10:12:39:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8a7a1242e172a41c94834befa2ea1e8179abf68.cer

            Subject Information Access: 
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ca0d7d8-e4bf-40ab-9a7e-61f5d254f9c9/c8a7a1242e172a41c94834befa2ea1e8179abf68.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ca0d7d8-e4bf-40ab-9a7e-61f5d254f9c9/c8a7a1242e172a41c94834befa2ea1e8179abf68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:42:64:a9:87:a1:70:34:d1:1a:f0:4c:bd:d0:96:ba:64:bc:
         97:74:e5:15:b0:47:c9:aa:1f:f7:b7:c2:73:05:7e:8b:54:d9:
         51:40:85:54:85:8e:53:c6:98:7c:3d:0a:53:5c:61:af:29:75:
         12:da:cd:b7:22:90:ab:4b:b0:a5:de:ba:42:d0:89:bc:27:48:
         45:9b:0f:e4:91:bc:d7:a3:da:96:fb:0a:83:92:dc:e7:0a:20:
         e8:51:5a:f4:d1:cc:ca:ec:20:7e:f6:e8:54:2f:b4:6a:b3:e4:
         9b:ca:c9:42:61:4d:bf:f2:3f:59:98:7f:36:e1:b0:f2:94:0e:
         34:ad:60:a5:57:1e:13:a8:7c:7e:9f:35:33:db:99:41:53:87:
         44:3f:6d:9f:b4:e2:6a:2e:f3:56:98:8b:99:8a:7c:36:c7:40:
         93:b6:15:39:ea:d4:bc:3e:0c:f1:1e:bc:78:0b:0b:3d:45:78:
         3c:97:35:9e:ec:78:e2:64:6a:73:41:f4:f5:09:e9:ad:e0:03:
         31:18:e6:12:49:6d:85:78:9b:1f:10:3c:95:09:b9:f8:b7:41:
         59:db:9a:91:52:8f:46:aa:0f:0e:f3:f6:1f:03:cb:eb:1f:7f:
         37:04:38:90:13:c8:4e:06:c7:6b:e9:6c:52:27:fb:60:dd:e9:
         ba:be:4b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 23 01:43:11 2023 by rpki-client on console-fra.rpki-client.org