Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1c53acc4-1d81-4721-b0ff-0924a0c8e1e5/9d0eefbeed1a04984bf835792198e2b00880f6fa.mft
File:                     9d0eefbeed1a04984bf835792198e2b00880f6fa.mft (raw, json)
Hash identifier:          w/+xpXGYLgFzYFJMAvF7JR3ZhEu5b7o40qXJgmpp/G8=
Subject key identifier:   5F:9F:C6:31:E3:5C:D1:A0:F0:5E:66:57:8D:36:D6:68:8B:89:10:9B
Authority key identifier: 1B:01:3A:65:56:04:09:45:78:68:41:59:4A:C4:1D:78:42:4D:7C:70
Certificate issuer:       /CN=9d0eefbeed1a04984bf835792198e2b00880f6fa
Certificate serial:       1CB59A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d0eefbeed1a04984bf835792198e2b00880f6fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1c53acc4-1d81-4721-b0ff-0924a0c8e1e5/9d0eefbeed1a04984bf835792198e2b00880f6fa.mft
Manifest number:          0DD3
Signing time:             Thu 28 Mar 2024 15:21:11 +0000
Manifest this update:     Thu 28 Mar 2024 14:20:15 +0000
Manifest next update:     Sun 31 Mar 2024 17:08:15 +0000
Files and hashes:         1: 9cc977feb2997a9ae59c40d3f4db71f7b82175e7.roa (hash: 4klH9zB3JIvICEJiqEGEu7q9qx4RVBit8IRiZAM7bNs=)
                          2: 9d0eefbeed1a04984bf835792198e2b00880f6fa.crl (hash: 3PjpTeuGkJpRuRj+dBiwUCxuvQvVq0dI53an1DI6ch8=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1c53acc4-1d81-4721-b0ff-0924a0c8e1e5/9d0eefbeed1a04984bf835792198e2b00880f6fa.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1c53acc4-1d81-4721-b0ff-0924a0c8e1e5/9d0eefbeed1a04984bf835792198e2b00880f6fa.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d0eefbeed1a04984bf835792198e2b00880f6fa.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1881498 (0x1cb59a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d0eefbeed1a04984bf835792198e2b00880f6fa
        Validity
            Not Before: Mar 28 14:20:15 2024 GMT
            Not After : Mar 31 17:08:15 2024 GMT
        Subject: CN=dbdf7c069b6af334846e4e79a5c251e675ed8321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9c:db:ff:8b:de:c4:7d:b9:ef:b5:ae:88:c0:
                    5d:03:66:45:8e:cc:04:82:23:59:79:88:22:84:31:
                    2b:a7:a2:d5:64:92:a2:0a:74:31:7a:f4:55:b9:a3:
                    d7:52:eb:86:2e:94:96:fa:ed:56:7f:9f:28:8d:20:
                    9a:a8:29:80:ed:c2:1f:a0:47:7c:cc:f7:98:49:1c:
                    18:a1:45:a3:d8:76:87:5f:14:07:87:42:2e:87:7b:
                    83:f4:c6:25:84:9a:f9:85:6c:25:aa:b6:8e:cc:57:
                    7a:13:45:94:1d:b8:9b:ca:81:28:43:a1:cc:6e:ea:
                    30:8c:7c:23:49:7c:1d:bf:08:d2:d5:30:1f:fa:22:
                    69:f3:ee:d8:1e:0d:03:c6:d2:28:4e:b2:2a:5b:8b:
                    d7:ab:57:a0:ff:b8:78:7d:71:c4:02:c2:b4:11:3f:
                    f8:65:83:6b:ca:6b:21:92:9e:a4:78:53:7f:f3:d5:
                    b4:cb:5a:98:fb:05:2c:a8:c6:c7:58:f4:f6:09:ac:
                    57:04:ed:bc:e2:f1:08:58:e5:76:30:b4:b5:09:ad:
                    fb:9b:8f:01:92:94:43:d4:83:d6:4f:33:8d:e4:70:
                    e8:3d:df:af:80:b6:44:5e:d2:f8:97:15:f0:78:de:
                    d7:d3:b5:9f:c3:8e:cb:bf:01:bf:15:ca:f8:dc:9e:
                    2a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9F:C6:31:E3:5C:D1:A0:F0:5E:66:57:8D:36:D6:68:8B:89:10:9B
            X509v3 Authority Key Identifier:
                keyid:1B:01:3A:65:56:04:09:45:78:68:41:59:4A:C4:1D:78:42:4D:7C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d0eefbeed1a04984bf835792198e2b00880f6fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1c53acc4-1d81-4721-b0ff-0924a0c8e1e5/9d0eefbeed1a04984bf835792198e2b00880f6fa.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1c53acc4-1d81-4721-b0ff-0924a0c8e1e5/9d0eefbeed1a04984bf835792198e2b00880f6fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:93:d4:45:6f:89:5d:0d:4e:a1:b2:89:3b:5a:00:40:c4:2f:
         5b:ae:cf:ab:e0:12:f0:5b:02:5f:1c:61:a5:27:3b:e2:56:c0:
         b1:ba:c6:0c:4d:a6:21:91:2e:2b:0f:1a:55:0c:9f:69:52:a8:
         02:cd:7a:91:e1:21:bf:1e:30:0a:39:bc:b1:70:33:ea:fe:4d:
         a3:e1:d2:a5:4a:3b:6d:85:5d:8a:f0:26:c6:53:dd:2c:7f:19:
         af:e3:01:6e:d2:b0:f1:73:5f:b8:90:64:4f:e2:e0:b1:c8:a8:
         2f:9c:33:e9:f7:36:38:c6:a8:d6:d2:88:12:c6:46:b7:23:e3:
         8b:15:2e:6c:46:50:4c:10:13:8c:8d:dc:5e:7a:be:be:69:cf:
         a9:52:6f:b1:69:6d:68:67:61:5a:81:0b:16:01:9c:b8:0e:be:
         27:16:2d:18:41:30:2f:50:6b:ed:49:93:8f:ad:bf:c9:57:47:
         34:b3:8a:7b:d3:74:bd:d5:41:85:b2:b5:49:9a:a2:99:50:84:
         07:79:e7:57:f8:64:f9:87:6c:18:ce:8d:2d:50:59:91:e9:2e:
         21:ac:cc:c9:c8:b5:3a:34:0c:2c:d1:45:3c:43:a6:93:c4:8f:
         4c:9a:07:c8:43:fc:40:71:ca:16:92:59:a1:fe:e5:10:de:d2:
         10:85:6c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:02:49 2024 by rpki-client on console-ams.rpki-client.org