Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/26561d0e-7d25-4924-8ad4-4c3fa45d6329/d31e9a71271a98fb6f60776ee08cb771f256bb33.mft
File:                     d31e9a71271a98fb6f60776ee08cb771f256bb33.mft (raw, json)
Hash identifier:          nS3xI2PuasGxuKRXeihbmd27r821lDIxFQEweN3L/Mk=
Subject key identifier:   D5:60:0A:01:40:E2:D2:39:67:C2:E2:69:D2:AC:C1:4B:37:46:B0:7A
Authority key identifier: A4:03:4B:B3:25:8C:80:E2:F3:F1:99:43:DB:D7:A8:D4:ED:64:FC:A3
Certificate issuer:       /CN=d31e9a71271a98fb6f60776ee08cb771f256bb33
Certificate serial:       28805F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d31e9a71271a98fb6f60776ee08cb771f256bb33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/26561d0e-7d25-4924-8ad4-4c3fa45d6329/d31e9a71271a98fb6f60776ee08cb771f256bb33.mft
Manifest number:          0DD0
Signing time:             Thu 28 Mar 2024 17:21:34 +0000
Manifest this update:     Thu 28 Mar 2024 16:20:17 +0000
Manifest next update:     Sun 31 Mar 2024 18:30:17 +0000
Files and hashes:         1: b4035237e0f90319b76de4d3a5e216d9f1bacef1.roa (hash: ZiZ9FUZhnPCcoBaSdEf4jgOLscjnsK32gy1UCPz6KVM=)
                          2: d31e9a71271a98fb6f60776ee08cb771f256bb33.crl (hash: pdyte0/56bPKZbWzTELCxr5kQvtZ9e6s9G6Y8QWlJsg=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/26561d0e-7d25-4924-8ad4-4c3fa45d6329/d31e9a71271a98fb6f60776ee08cb771f256bb33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/26561d0e-7d25-4924-8ad4-4c3fa45d6329/d31e9a71271a98fb6f60776ee08cb771f256bb33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d31e9a71271a98fb6f60776ee08cb771f256bb33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2654303 (0x28805f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d31e9a71271a98fb6f60776ee08cb771f256bb33
        Validity
            Not Before: Mar 28 16:20:17 2024 GMT
            Not After : Mar 31 18:30:17 2024 GMT
        Subject: CN=3d64ae09284a2893bbebb124951868e69e61c71f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ec:32:46:da:b7:2d:0e:69:56:60:08:b1:dd:
                    d9:5e:5d:60:26:7f:3f:24:a4:4c:0f:ff:8a:56:ed:
                    51:bb:21:cf:fe:22:a3:2b:f1:c9:fe:d0:f9:0f:28:
                    c5:39:fe:08:35:90:ef:97:4d:4c:08:ee:82:b6:59:
                    41:28:af:81:b3:af:a3:8a:45:50:e0:f6:16:07:a8:
                    4b:46:ae:b2:15:5f:6b:64:e6:2e:99:4c:81:ac:ab:
                    28:61:90:fb:b5:a1:b7:d5:c3:65:f4:8f:af:9c:24:
                    86:8f:c9:ae:d6:79:a2:93:65:c6:2b:d9:7b:e3:d0:
                    a4:da:1c:80:fc:a0:99:63:60:da:02:ae:d9:a4:d8:
                    b9:0f:38:fe:46:27:08:7f:68:f5:69:47:e8:11:25:
                    f3:35:88:26:03:c1:e3:e3:8d:ea:29:0f:f9:19:1c:
                    b8:f9:36:ed:7a:0a:33:e3:90:82:c2:6b:67:1b:d1:
                    39:24:a6:73:eb:39:38:ea:66:2c:58:0c:d8:f7:a5:
                    de:4c:61:b1:54:2c:87:35:1f:3a:cd:23:a2:a9:2f:
                    07:f1:e8:41:24:80:df:a7:6c:07:41:be:a1:d1:0b:
                    df:e8:24:6e:3f:e4:3e:0e:a3:66:b4:9d:e2:f9:81:
                    15:f7:12:6d:f9:47:45:dd:ce:c5:49:16:da:df:c7:
                    79:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:60:0A:01:40:E2:D2:39:67:C2:E2:69:D2:AC:C1:4B:37:46:B0:7A
            X509v3 Authority Key Identifier:
                keyid:A4:03:4B:B3:25:8C:80:E2:F3:F1:99:43:DB:D7:A8:D4:ED:64:FC:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d31e9a71271a98fb6f60776ee08cb771f256bb33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/26561d0e-7d25-4924-8ad4-4c3fa45d6329/d31e9a71271a98fb6f60776ee08cb771f256bb33.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/26561d0e-7d25-4924-8ad4-4c3fa45d6329/d31e9a71271a98fb6f60776ee08cb771f256bb33.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:85:4b:8e:a1:b6:85:69:db:ee:ec:a3:25:46:fb:b1:14:c2:
         48:31:61:d8:52:fd:f9:bf:a8:f3:ec:36:ce:c4:5e:96:7f:d7:
         8d:dc:76:15:0d:16:41:34:f4:16:f0:63:aa:24:68:69:74:aa:
         e0:a8:2d:42:8c:bb:dc:74:20:45:b7:ad:05:ac:ed:7f:f8:1b:
         60:d6:c7:76:b2:03:5b:a2:91:82:70:cd:b6:6f:16:3c:ce:2f:
         71:f4:a5:ea:88:b5:8b:f5:30:06:25:33:f8:18:d2:9f:4f:8d:
         23:69:96:93:f0:b1:01:02:11:21:de:ff:47:f5:2b:bc:d8:3f:
         f5:0e:b9:c1:3b:fa:3a:e4:2e:b0:66:de:c4:b1:26:2a:66:ff:
         2e:93:71:db:ed:49:50:68:c0:65:3c:48:5a:13:5c:9b:f4:51:
         b6:5a:9c:49:56:c7:77:b9:44:29:1a:05:e2:81:b2:4f:bc:ec:
         0d:da:9d:73:28:a8:96:a0:d9:0e:07:7c:5b:06:bb:d1:12:3d:
         5c:6c:db:23:fb:85:67:57:41:14:26:6d:08:40:0c:c5:b7:3f:
         8d:6c:8c:8f:81:50:3a:58:62:60:3c:dc:bb:77:e7:10:a9:68:
         c3:f2:7b:1f:b9:40:53:a9:ba:37:d4:8f:5e:14:31:41:f8:9e:
         90:71:bd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 19:38:58 2024 by rpki-client on console-fra.rpki-client.org