Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2a46bd40-ca58-4686-9086-0a5c44b29d55/642dbba8f3f8833b1d7a408b1ea952eb0b091111.mft
File:                     642dbba8f3f8833b1d7a408b1ea952eb0b091111.mft (raw, json)
Hash identifier:          BsL1gBq9K/g4AndGPSim1Cj++w253ur/JPSGT+isFFs=
Subject key identifier:   86:70:58:10:D3:E5:19:35:3C:19:7F:AD:64:0B:EB:15:D5:88:8B:BC
Authority key identifier: 07:30:2A:03:E7:88:6A:FE:6B:0F:C8:5D:D0:EF:E7:D2:05:8C:C3:4E
Certificate issuer:       /CN=642dbba8f3f8833b1d7a408b1ea952eb0b091111
Certificate serial:       27DE5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/642dbba8f3f8833b1d7a408b1ea952eb0b091111.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2a46bd40-ca58-4686-9086-0a5c44b29d55/642dbba8f3f8833b1d7a408b1ea952eb0b091111.mft
Manifest number:          0DB2
Signing time:             Thu 28 Mar 2024 13:20:44 +0000
Manifest this update:     Thu 28 Mar 2024 12:20:08 +0000
Manifest next update:     Sun 31 Mar 2024 14:05:08 +0000
Files and hashes:         1: 642dbba8f3f8833b1d7a408b1ea952eb0b091111.crl (hash: rqQ+qDxOrModiw+cY3UNF59eUfOXwbJiaAI67nhyYxE=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2a46bd40-ca58-4686-9086-0a5c44b29d55/642dbba8f3f8833b1d7a408b1ea952eb0b091111.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2a46bd40-ca58-4686-9086-0a5c44b29d55/642dbba8f3f8833b1d7a408b1ea952eb0b091111.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/642dbba8f3f8833b1d7a408b1ea952eb0b091111.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2612829 (0x27de5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642dbba8f3f8833b1d7a408b1ea952eb0b091111
        Validity
            Not Before: Mar 28 12:20:08 2024 GMT
            Not After : Mar 31 14:05:08 2024 GMT
        Subject: CN=9a292c5342e179655e827411f4b53aef98507335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9b:5d:31:ea:0f:c6:c5:c4:76:c0:3b:c9:00:
                    4b:3e:84:37:89:73:55:ab:b5:0a:9d:21:e6:01:db:
                    dc:76:72:f8:4b:bb:63:b4:90:18:f6:62:21:11:64:
                    32:d7:c6:9c:b5:12:a1:4c:4b:b9:4e:ef:0c:49:8c:
                    95:35:76:29:b7:80:42:fb:5d:bf:82:7c:81:08:34:
                    0a:69:f5:20:38:70:c6:d6:83:14:a7:9c:eb:a2:e5:
                    3c:8b:ca:74:94:f6:60:22:15:3c:37:02:e7:1e:f4:
                    0e:cc:51:ae:4e:8e:de:f9:b5:2c:e7:24:fb:7b:cf:
                    86:f9:46:23:79:4c:ad:c4:6a:35:17:dc:4b:f5:d1:
                    80:1a:26:0c:9d:ef:21:85:61:1e:d7:7a:e3:c6:4f:
                    dc:e8:12:e8:4f:70:59:fe:8f:7f:90:c9:be:be:30:
                    87:3c:cc:67:c5:bf:b0:d3:f1:53:8d:42:7a:d9:d2:
                    02:12:dc:38:c5:55:1b:23:a5:90:b9:b1:30:e5:67:
                    14:0b:4e:4b:54:cf:6f:20:65:45:dd:ae:1c:28:10:
                    74:3d:f5:ad:24:8c:9e:fd:bd:be:56:dd:4d:1c:79:
                    3c:97:64:5c:0e:34:85:36:dc:69:0a:f4:06:eb:e4:
                    7a:96:97:b7:2d:d7:86:c4:ab:18:a3:95:06:38:e8:
                    6c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:70:58:10:D3:E5:19:35:3C:19:7F:AD:64:0B:EB:15:D5:88:8B:BC
            X509v3 Authority Key Identifier:
                keyid:07:30:2A:03:E7:88:6A:FE:6B:0F:C8:5D:D0:EF:E7:D2:05:8C:C3:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/642dbba8f3f8833b1d7a408b1ea952eb0b091111.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2a46bd40-ca58-4686-9086-0a5c44b29d55/642dbba8f3f8833b1d7a408b1ea952eb0b091111.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2a46bd40-ca58-4686-9086-0a5c44b29d55/642dbba8f3f8833b1d7a408b1ea952eb0b091111.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:17:2d:dc:4b:dd:8a:43:44:97:67:f8:9b:ef:c4:ed:ba:5e:
         b9:81:54:65:a0:26:67:9c:8f:33:4b:ef:56:c0:29:fd:3e:a9:
         df:7c:b1:e5:8b:03:26:c2:b3:3a:9c:fa:e9:d2:66:81:4e:1b:
         25:f6:ae:6e:dd:08:70:84:cb:f9:16:a7:77:cd:97:3f:b5:a5:
         bb:11:f9:90:42:bb:7a:00:e6:7d:c1:fe:15:15:89:07:24:d4:
         81:8c:ca:e0:d0:79:2f:84:b6:32:06:f1:de:dd:a7:24:da:f2:
         e3:fe:98:3a:14:ba:79:e7:4c:b7:47:9a:fb:eb:27:f4:d3:78:
         4b:ee:55:c8:d8:ec:d6:99:b5:24:c7:60:bb:93:90:e1:68:4c:
         0f:0f:50:b2:9b:27:a5:41:a3:3b:31:b6:78:64:91:94:9a:87:
         fb:3a:3e:c8:05:39:81:3c:c6:50:81:82:58:3b:9b:61:c3:f5:
         f4:3d:65:35:61:f5:ef:bd:a4:b5:ec:2b:a6:58:d6:7a:33:b9:
         27:8c:dc:63:5c:5d:94:60:db:97:e7:20:35:c7:f0:c0:6c:27:
         ef:ae:01:42:d5:6c:ca:7f:75:28:77:b4:d2:fb:58:77:64:d5:
         5c:62:0a:e2:8c:ae:72:5b:0e:fe:d3:c0:9f:fc:3c:ee:01:a9:
         7a:11:01:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 14:01:12 2024 by rpki-client on console-fra.rpki-client.org