Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/cfd77889f712db89177f6478b03af00c3bad37fa.mft
File:                     cfd77889f712db89177f6478b03af00c3bad37fa.mft (raw, json)
Hash identifier:          D2BEg3q2qWvIBj3vTFivlq04YahYgqOBrovpzUJ1aNY=
Subject key identifier:   2F:98:71:61:9F:CB:89:CA:20:AC:71:9E:C9:24:DE:52:1B:C0:57:EC
Authority key identifier: 3D:C1:E7:39:45:32:49:EB:46:4E:FB:06:E1:05:EB:4F:D9:FD:EB:82
Certificate issuer:       /CN=cfd77889f712db89177f6478b03af00c3bad37fa
Certificate serial:       220D49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfd77889f712db89177f6478b03af00c3bad37fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/cfd77889f712db89177f6478b03af00c3bad37fa.mft
Manifest number:          0DB7
Signing time:             Thu 28 Mar 2024 11:21:08 +0000
Manifest this update:     Thu 28 Mar 2024 10:20:10 +0000
Manifest next update:     Sun 31 Mar 2024 12:25:10 +0000
Files and hashes:         1: 12b9a2b97a21985dea9ee5ca11308eacccb565ca.roa (hash: iFgOKbF2+YcekdNwd1jcdTGfwmoKK350c6uVAS6Lh1Y=)
                          2: cfd77889f712db89177f6478b03af00c3bad37fa.crl (hash: 5Tg65eJ29Y5bbisF1mDbWWkYQy3Y1ok5Cm+uE4ddIbI=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/cfd77889f712db89177f6478b03af00c3bad37fa.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/cfd77889f712db89177f6478b03af00c3bad37fa.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfd77889f712db89177f6478b03af00c3bad37fa.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 11:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2231625 (0x220d49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfd77889f712db89177f6478b03af00c3bad37fa
        Validity
            Not Before: Mar 28 10:20:10 2024 GMT
            Not After : Mar 31 12:25:10 2024 GMT
        Subject: CN=654ce93e1e61616b8bd125b500c854fc8485c42e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4e:41:68:ca:48:98:8c:cf:e0:4e:6a:55:ac:
                    24:77:58:37:d5:3f:f6:bc:3a:ff:fe:d3:0a:75:35:
                    1c:a8:f7:1a:e7:25:40:33:d1:5c:7b:76:2b:01:7d:
                    96:c0:bc:c4:8d:77:ab:82:20:34:50:73:a8:d3:cb:
                    7f:7e:4f:61:3a:05:f7:e6:71:bb:09:f4:59:8b:34:
                    0c:83:d2:b5:1d:c7:85:10:7f:43:f8:18:e5:94:7d:
                    9f:e2:43:e4:00:ac:d5:7d:23:eb:b1:b8:ab:a8:19:
                    a1:34:ce:38:f3:b5:8d:71:ab:58:39:ec:d0:07:06:
                    b5:b1:ba:0c:8b:49:2e:44:5d:13:fb:c1:20:e0:91:
                    2d:83:ce:e1:42:9a:22:c5:80:6a:a1:56:8d:b5:96:
                    a4:43:35:d0:0c:4e:af:2b:2c:e2:8d:ed:41:62:b9:
                    13:ee:06:95:d7:ec:c2:dc:97:97:93:1f:de:47:ea:
                    d2:d8:95:ba:cf:ed:7e:c1:32:81:d4:57:8c:44:06:
                    b9:ea:fc:d6:3f:13:ee:3c:61:1f:a3:67:dd:94:d8:
                    14:14:de:56:58:bf:5b:00:85:d6:ed:ab:f3:e1:c9:
                    e1:e3:20:45:43:60:b3:02:ee:8d:a0:40:48:57:7a:
                    aa:6c:a4:d2:8f:87:ca:89:f7:a4:9f:50:6c:5b:df:
                    e3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:98:71:61:9F:CB:89:CA:20:AC:71:9E:C9:24:DE:52:1B:C0:57:EC
            X509v3 Authority Key Identifier:
                keyid:3D:C1:E7:39:45:32:49:EB:46:4E:FB:06:E1:05:EB:4F:D9:FD:EB:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfd77889f712db89177f6478b03af00c3bad37fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/cfd77889f712db89177f6478b03af00c3bad37fa.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ed6ec47-467f-4a56-9803-faa959e4e8f9/cfd77889f712db89177f6478b03af00c3bad37fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:6b:81:a9:9c:26:fc:37:d3:82:87:81:2b:e0:04:8a:08:46:
         66:32:ad:0a:ae:01:49:1a:fc:f8:1f:00:3f:aa:87:cf:b2:4f:
         06:60:94:8d:75:1b:46:0d:14:63:3b:d0:2d:bf:56:2f:6f:9a:
         10:04:8e:e5:bf:58:f6:c7:f7:a5:47:e6:9a:cd:5a:db:b7:1a:
         78:f8:11:01:28:01:4e:08:e8:e9:23:2a:f9:16:a9:de:9d:01:
         0b:4e:e3:fb:d2:c8:bc:e7:d9:07:14:9d:9a:a1:64:9c:93:5b:
         fb:e4:de:4d:2f:d6:93:ef:9a:89:39:a7:3b:89:e7:2e:fe:e5:
         8e:48:30:3f:55:70:16:45:4c:d4:b8:9e:4d:b0:a5:42:29:81:
         7f:db:ae:a8:a7:c0:42:6e:42:8e:34:4d:85:87:59:da:de:85:
         be:b1:15:ac:72:55:25:dd:97:b8:d1:f5:fc:52:b3:2b:dc:2a:
         32:1d:c5:00:7b:cf:e7:7a:bf:09:43:83:89:85:68:d0:ed:5f:
         0a:33:8e:b8:47:3d:bc:a7:8c:2b:af:75:76:3d:0c:2e:0c:cd:
         ca:8d:94:73:2a:dc:22:50:c9:d3:50:01:79:41:c4:b5:75:58:
         66:20:27:4f:8a:33:ab:f0:ab:88:d3:88:42:48:50:ba:f1:38:
         b8:2b:a2:41
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDIg1JMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
ZDc3ODg5ZjcxMmRiODkxNzdmNjQ3OGIwM2FmMDBjM2JhZDM3ZmEwHhcNMjQwMzI4
MTAyMDEwWhcNMjQwMzMxMTIyNTEwWjAzMTEwLwYDVQQDEyg2NTRjZTkzZTFlNjE2
MTZiOGJkMTI1YjUwMGM4NTRmYzg0ODVjNDJlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwU5BaMpImIzP4E5qVawkd1g31T/2vDr//tMKdTUcqPca5yVA
M9Fce3YrAX2WwLzEjXergiA0UHOo08t/fk9hOgX35nG7CfRZizQMg9K1HceFEH9D
+BjllH2f4kPkAKzVfSPrsbirqBmhNM4487WNcatYOezQBwa1sboMi0kuRF0T+8Eg
4JEtg87hQpoixYBqoVaNtZakQzXQDE6vKyzije1BYrkT7gaV1+zC3JeXkx/eR+rS
2JW6z+1+wTKB1FeMRAa56vzWPxPuPGEfo2fdlNgUFN5WWL9bAIXW7avz4cnh4yBF
Q2CzAu6NoEBIV3qqbKTSj4fKifekn1BsW9/jRQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFC+YcWGfy4nKIKxxnskk3lIbwFfsMB8GA1UdIwQYMBaAFD3B5zlFMknrRk77
BuEF60/Z/euCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ZkNzc4
ODlmNzEyZGI4OTE3N2Y2NDc4YjAzYWYwMGMzYmFkMzdmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVkNmVjNDctNDY3Zi00YTU2LTk4MDMtZmFhOTU5
ZTRlOGY5L2NmZDc3ODg5ZjcxMmRiODkxNzdmNjQ3OGIwM2FmMDBjM2JhZDM3ZmEu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWQ2ZWM0Ny00NjdmLTRhNTYtOTgwMy1mYWE5
NTllNGU4ZjkvY2ZkNzc4ODlmNzEyZGI4OTE3N2Y2NDc4YjAzYWYwMGMzYmFkMzdm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBADRrgamcJvw304KHgSvgBIoIRmYyrQquAUka/PgfAD+qh8+y
TwZglI11G0YNFGM70C2/Vi9vmhAEjuW/WPbH96VH5prNWtu3Gnj4EQEoAU4I6Okj
KvkWqd6dAQtO4/vSyLzn2QcUnZqhZJyTW/vk3k0v1pPvmok5pzuJ5y7+5Y5IMD9V
cBZFTNS4nk2wpUIpgX/brqinwEJuQo40TYWHWdrehb6xFaxyVSXdl7jR9fxSsyvc
KjIdxQB7z+d6vwlDg4mFaNDtXwozjrhHPbynjCuvdXY9DC4MzcqNlHMq3CJQydNQ
AXlBxLV1WGYgJ0+KM6vwq4jTiEJIULrxOLgrokE=
-----END CERTIFICATE-----
Generated at Thu Mar 28 13:27:49 2024 by rpki-client on console-ams.rpki-client.org