Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13ba32db-883c-437f-b12e-d90769fdd537/dd2f9307f01ba2e3cf422dd2c296db1290348332.mft
File:                     dd2f9307f01ba2e3cf422dd2c296db1290348332.mft (raw, json)
Hash identifier:          1ctVw6aJvLdO5AQMWYtHqR3HGxGC9HA7AQXQd0FKfgM=
Subject key identifier:   5E:01:C7:65:99:47:9D:8D:FC:71:43:3B:78:BD:0B:BB:A7:CF:4A:3E
Authority key identifier: AD:CE:FB:E2:BD:4F:7A:79:91:3B:15:E8:EF:3C:9F:AE:93:0C:1E:76
Certificate issuer:       /CN=dd2f9307f01ba2e3cf422dd2c296db1290348332
Certificate serial:       26A54D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd2f9307f01ba2e3cf422dd2c296db1290348332.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13ba32db-883c-437f-b12e-d90769fdd537/dd2f9307f01ba2e3cf422dd2c296db1290348332.mft
Manifest number:          0DAF
Signing time:             Fri 29 Mar 2024 02:20:19 +0000
Manifest this update:     Fri 29 Mar 2024 01:20:08 +0000
Manifest next update:     Mon 01 Apr 2024 03:32:08 +0000
Files and hashes:         1: dd2f9307f01ba2e3cf422dd2c296db1290348332.crl (hash: rzCGCp9N+FvSwqiD59MS8bWK2DOSbaG19Ueur4J2tQM=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13ba32db-883c-437f-b12e-d90769fdd537/dd2f9307f01ba2e3cf422dd2c296db1290348332.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13ba32db-883c-437f-b12e-d90769fdd537/dd2f9307f01ba2e3cf422dd2c296db1290348332.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd2f9307f01ba2e3cf422dd2c296db1290348332.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2532685 (0x26a54d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd2f9307f01ba2e3cf422dd2c296db1290348332
        Validity
            Not Before: Mar 29 01:20:08 2024 GMT
            Not After : Apr  1 03:32:08 2024 GMT
        Subject: CN=9ccc00483fb3686aa66d60d23de1723645055cf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b6:7b:6d:0e:84:24:03:99:8e:c9:55:ff:70:
                    24:c8:de:ac:ad:be:ab:13:12:ae:e6:07:9d:92:cf:
                    2a:d9:19:bb:4f:5a:44:9d:91:83:c1:f1:ed:6a:d2:
                    78:9b:46:98:e1:8c:4d:41:45:f7:e5:9d:b7:0b:3b:
                    a9:62:93:66:94:bb:47:87:7c:64:cc:bc:8c:21:49:
                    69:7a:1b:53:18:19:72:72:38:12:a1:e8:a8:a1:1e:
                    12:b3:a8:a7:3a:af:c2:f6:94:d6:a1:9d:63:1b:ad:
                    7f:1d:57:45:80:16:9a:48:2b:4b:01:0f:72:4b:f4:
                    6a:74:cb:35:6e:90:80:c3:d6:d5:58:07:83:65:4f:
                    e3:58:41:79:02:81:18:15:f9:51:96:81:67:54:bd:
                    32:15:ee:22:c0:86:e7:2c:43:1c:81:83:bc:80:8f:
                    5b:3c:0a:c0:90:54:50:e7:be:72:c7:54:fd:6c:76:
                    9f:a6:26:e9:22:29:1c:27:99:02:57:06:f3:b7:94:
                    4e:67:b2:fb:e7:17:8a:b8:e5:07:d2:4f:15:3a:bc:
                    b4:fe:43:81:92:96:34:4a:d6:64:04:ea:cf:1f:62:
                    10:26:b9:d4:e5:e1:15:ff:de:f2:c7:c6:2b:79:f4:
                    34:82:ff:3c:e0:ba:fc:31:b7:af:24:1f:03:43:bc:
                    65:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:01:C7:65:99:47:9D:8D:FC:71:43:3B:78:BD:0B:BB:A7:CF:4A:3E
            X509v3 Authority Key Identifier:
                keyid:AD:CE:FB:E2:BD:4F:7A:79:91:3B:15:E8:EF:3C:9F:AE:93:0C:1E:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd2f9307f01ba2e3cf422dd2c296db1290348332.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13ba32db-883c-437f-b12e-d90769fdd537/dd2f9307f01ba2e3cf422dd2c296db1290348332.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13ba32db-883c-437f-b12e-d90769fdd537/dd2f9307f01ba2e3cf422dd2c296db1290348332.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:0b:62:e4:81:75:16:b2:a0:1c:a1:2c:5a:fa:35:7a:e1:f8:
         10:23:88:92:55:e6:69:e5:4b:e1:87:b6:49:52:6f:09:3c:b8:
         b0:73:08:3e:08:91:4c:13:93:d4:73:40:56:10:18:ca:d9:6b:
         3b:45:7e:e0:a9:3b:e5:02:4d:f7:2a:e3:ba:80:f2:94:c0:43:
         ae:56:65:a3:2b:13:f6:70:9d:b7:8b:4c:2a:70:80:53:cf:9f:
         f6:a6:f7:05:38:fc:aa:1c:32:28:ff:69:fd:1f:be:f2:a0:9e:
         58:65:2f:8e:7d:d9:ba:6c:b2:8e:ae:d3:24:38:44:ff:6e:41:
         54:94:b0:31:6f:9d:df:e6:f6:86:d1:90:34:bd:a6:f4:16:93:
         28:a9:4a:d3:87:cd:8a:3f:3a:85:c2:3b:bf:2c:a9:34:6a:bf:
         8e:3c:ec:3e:12:c7:dc:eb:3d:a0:e2:03:fe:66:c8:61:31:11:
         d0:9d:db:5a:80:33:e3:bf:d3:49:ff:76:34:4c:05:75:b5:c4:
         db:45:c0:8f:4b:82:7e:20:dc:2c:fc:d9:e4:53:e3:12:ab:90:
         c1:06:09:e8:1b:17:c4:c1:14:7e:34:20:8a:c6:76:91:cd:e9:
         22:3a:e9:d4:97:1b:81:43:67:fd:09:a7:11:02:9f:6c:21:4a:
         85:10:94:ed
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDJqVNMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRk
MmY5MzA3ZjAxYmEyZTNjZjQyMmRkMmMyOTZkYjEyOTAzNDgzMzIwHhcNMjQwMzI5
MDEyMDA4WhcNMjQwNDAxMDMzMjA4WjAzMTEwLwYDVQQDEyg5Y2NjMDA0ODNmYjM2
ODZhYTY2ZDYwZDIzZGUxNzIzNjQ1MDU1Y2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAp7Z7bQ6EJAOZjslV/3AkyN6srb6rExKu5gedks8q2Rm7T1pE
nZGDwfHtatJ4m0aY4YxNQUX35Z23CzupYpNmlLtHh3xkzLyMIUlpehtTGBlycjgS
oeiooR4Ss6inOq/C9pTWoZ1jG61/HVdFgBaaSCtLAQ9yS/RqdMs1bpCAw9bVWAeD
ZU/jWEF5AoEYFflRloFnVL0yFe4iwIbnLEMcgYO8gI9bPArAkFRQ575yx1T9bHaf
pibpIikcJ5kCVwbzt5ROZ7L75xeKuOUH0k8VOry0/kOBkpY0StZkBOrPH2IQJrnU
5eEV/97yx8YrefQ0gv884Lr8MbevJB8DQ7xlwwIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFF4Bx2WZR52N/HFDO3i9C7unz0o+MB8GA1UdIwQYMBaAFK3O++K9T3p5kTsV
6O88n66TDB52MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGQyZjkz
MDdmMDFiYTJlM2NmNDIyZGQyYzI5NmRiMTI5MDM0ODMzMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTNiYTMyZGItODgzYy00MzdmLWIxMmUtZDkwNzY5
ZmRkNTM3L2RkMmY5MzA3ZjAxYmEyZTNjZjQyMmRkMmMyOTZkYjEyOTAzNDgzMzIu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xM2JhMzJkYi04ODNjLTQzN2YtYjEyZS1kOTA3
NjlmZGQ1MzcvZGQyZjkzMDdmMDFiYTJlM2NmNDIyZGQyYzI5NmRiMTI5MDM0ODMz
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAEsLYuSBdRayoByhLFr6NXrh+BAjiJJV5mnlS+GHtklSbwk8
uLBzCD4IkUwTk9RzQFYQGMrZaztFfuCpO+UCTfcq47qA8pTAQ65WZaMrE/ZwnbeL
TCpwgFPPn/am9wU4/KocMij/af0fvvKgnlhlL4592bpsso6u0yQ4RP9uQVSUsDFv
nd/m9obRkDS9pvQWkyipStOHzYo/OoXCO78sqTRqv4487D4Sx9zrPaDiA/5myGEx
EdCd21qAM+O/00n/djRMBXW1xNtFwI9Lgn4g3Cz82eRT4xKrkMEGCegbF8TBFH40
IIrGdpHN6SI66dSXG4FDZ/0JpxECn2whSoUQlO0=
-----END CERTIFICATE-----
Generated at Fri Mar 29 03:23:50 2024 by rpki-client on console-ams.rpki-client.org