Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21fbe07b-352d-4dad-a763-e458524c159b/8e9cf41123ed6894a352817e4249195f52cfe85e.mft
File:                     8e9cf41123ed6894a352817e4249195f52cfe85e.mft (raw, json)
Hash identifier:          y2llGN7UPMxz8RzD57KAybM1uuQIAiK8T9k/EnP27A4=
Subject key identifier:   09:7D:98:19:C3:A9:67:41:C4:61:64:CE:CB:BD:A8:C8:1F:DE:28:80
Authority key identifier: B1:EB:E3:06:23:F7:F0:5D:51:4C:29:EA:72:46:CC:D0:F8:30:E7:BA
Certificate issuer:       /CN=8e9cf41123ed6894a352817e4249195f52cfe85e
Certificate serial:       15AC4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e9cf41123ed6894a352817e4249195f52cfe85e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/21fbe07b-352d-4dad-a763-e458524c159b/8e9cf41123ed6894a352817e4249195f52cfe85e.mft
Manifest number:          0B2C
Signing time:             Sat 24 Feb 2024 21:20:17 +0000
Manifest this update:     Sat 24 Feb 2024 20:19:38 +0000
Manifest next update:     Tue 27 Feb 2024 22:59:38 +0000
Files and hashes:         1: 163c126f4a5e850ef009e34220a45de257be625e.roa (hash: XrGTE7EuDoPs81j2ZFsqr/FR9uXTtHECIbeYqBR63Q0=)
                          2: 31c4c1d3d545cd97238935be27c035a7450c279e.roa (hash: GpFUMlz4b48QuHKvS806Xe8zdtPzmEZ6L0JdQ4MxPXg=)
                          3: 8e9cf41123ed6894a352817e4249195f52cfe85e.crl (hash: 4UD8tuWhd9N9qppCpfzej9RxfhfG/7tEC6/wZLPBkNk=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/21fbe07b-352d-4dad-a763-e458524c159b/8e9cf41123ed6894a352817e4249195f52cfe85e.crl
                          rsync://repository.lacnic.net/rpki/lacnic/21fbe07b-352d-4dad-a763-e458524c159b/8e9cf41123ed6894a352817e4249195f52cfe85e.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e9cf41123ed6894a352817e4249195f52cfe85e.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Feb 2024 21:42:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1420362 (0x15ac4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e9cf41123ed6894a352817e4249195f52cfe85e
        Validity
            Not Before: Feb 24 20:19:38 2024 GMT
            Not After : Feb 27 22:59:38 2024 GMT
        Subject: CN=6e7d37d771960201f9c7566b386989308fcecd4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5a:1c:ef:71:95:79:28:bd:75:3c:df:7f:2b:
                    27:8b:9c:e0:19:aa:2a:7a:9a:48:0b:d0:09:92:f9:
                    3e:45:f3:3d:e3:82:82:03:b7:80:2b:7f:8e:21:d7:
                    09:90:e8:52:9c:9d:dc:46:f0:2e:a8:65:a7:53:b8:
                    82:44:48:e4:aa:48:fd:9c:da:0a:c6:71:f4:2b:f9:
                    86:37:34:7d:74:57:e6:3c:4c:2a:84:20:50:fe:ce:
                    dc:d7:b4:8b:cc:b5:86:fb:56:91:06:82:9e:3b:e6:
                    7d:e0:22:42:05:9f:48:45:40:50:10:8f:62:29:07:
                    93:c6:0f:1b:2b:78:1f:8a:49:a4:78:11:eb:f1:b3:
                    de:3d:de:aa:ae:c3:f7:a0:1e:26:29:3a:07:28:35:
                    d9:48:61:bc:19:64:a0:eb:da:51:c8:da:22:1c:2d:
                    cb:67:21:9a:00:2d:cc:ed:bd:b0:90:6f:90:7d:54:
                    d8:81:41:ad:98:5b:a4:2c:21:5b:7c:dd:eb:bc:6c:
                    5c:20:64:f1:da:0e:00:d9:17:0d:07:ab:7a:8b:84:
                    c0:36:5c:b6:52:f1:a1:3d:4c:86:97:b5:7c:07:90:
                    6f:45:0e:cc:fb:05:41:98:38:72:a5:7d:98:9c:79:
                    75:c5:60:24:c9:37:c4:10:01:63:41:8f:27:e1:cb:
                    b7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7D:98:19:C3:A9:67:41:C4:61:64:CE:CB:BD:A8:C8:1F:DE:28:80
            X509v3 Authority Key Identifier:
                keyid:B1:EB:E3:06:23:F7:F0:5D:51:4C:29:EA:72:46:CC:D0:F8:30:E7:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e9cf41123ed6894a352817e4249195f52cfe85e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21fbe07b-352d-4dad-a763-e458524c159b/8e9cf41123ed6894a352817e4249195f52cfe85e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/21fbe07b-352d-4dad-a763-e458524c159b/8e9cf41123ed6894a352817e4249195f52cfe85e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:9f:92:96:b8:ed:35:58:eb:98:3e:6c:25:d2:bb:16:38:4f:
         4f:60:1a:0d:04:79:4e:ff:d1:86:b0:2f:de:5b:ed:2a:d8:a2:
         51:e6:a1:73:64:66:4a:e9:48:6a:5e:bf:59:ff:a8:e3:8a:7a:
         1b:74:97:a4:b0:67:3f:a6:b3:36:e5:f0:84:9a:bb:0a:c2:80:
         84:c3:dc:d7:1d:6f:37:09:cc:c8:cd:c6:29:b2:08:08:9e:3b:
         8d:c5:ca:23:57:0a:55:6b:65:2b:84:06:47:6b:0c:14:12:a8:
         e9:3e:41:0b:c6:c4:97:b0:fa:14:92:ee:75:1d:fd:b2:83:26:
         fe:8c:53:73:64:ba:fd:44:ee:de:de:28:32:4d:92:2a:a0:46:
         4e:80:0a:b1:8d:cf:07:fb:69:6b:5d:ac:f3:64:60:c0:67:26:
         a4:c6:00:4d:f6:57:8b:46:2a:bd:ba:03:01:38:9f:74:aa:98:
         42:89:50:e0:77:82:0d:d1:ae:ce:4f:77:00:49:18:70:db:d6:
         4a:32:c4:de:1b:f8:ee:be:b0:20:c8:bb:e5:42:6b:2b:d2:c9:
         7a:5d:74:08:8e:a5:41:fa:34:90:62:dd:51:55:09:c3:98:1e:
         df:c4:e2:aa:ab:5f:20:67:0d:5c:f9:7d:b5:49:66:9b:fa:d1:
         08:83:f0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 24 22:36:24 2024 by rpki-client on console-ams.rpki-client.org