Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2ef228bb-6821-4166-a3e0-eab9b1d6d68b/b599ff6abed9cdb293d9edb880b956e9257dfdb1.mft
File:                     b599ff6abed9cdb293d9edb880b956e9257dfdb1.mft (raw, json)
Hash identifier:          VtVb3pZWV6hpE03q6qbheX/26nuIc3yjnysj92FDg1o=
Subject key identifier:   CD:69:25:48:8B:E2:C6:CE:A3:A1:0B:B8:1B:48:E8:E5:C5:4F:CB:96
Authority key identifier: 88:5B:11:D2:95:97:47:5A:A4:E4:9E:81:40:4C:78:1C:0E:23:26:6B
Certificate issuer:       /CN=b599ff6abed9cdb293d9edb880b956e9257dfdb1
Certificate serial:       067417
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b599ff6abed9cdb293d9edb880b956e9257dfdb1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2ef228bb-6821-4166-a3e0-eab9b1d6d68b/b599ff6abed9cdb293d9edb880b956e9257dfdb1.mft
Manifest number:          0348
Signing time:             Sat 02 Mar 2024 08:20:45 +0000
Manifest this update:     Sat 02 Mar 2024 07:19:48 +0000
Manifest next update:     Tue 05 Mar 2024 09:25:48 +0000
Files and hashes:         1: 49e4bda91f1be8212b535f3e75ee49d227eabeb3.roa (hash: vjZShG3zdrnnWn/sSBHgf3QjIqUEM4hbwkM3W3rD9TI=)
                          2: b599ff6abed9cdb293d9edb880b956e9257dfdb1.crl (hash: D4E6Q69d6SGY/IzT0JgZzJpQQ9gkYg8nDTk4DGv+Qd0=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2ef228bb-6821-4166-a3e0-eab9b1d6d68b/b599ff6abed9cdb293d9edb880b956e9257dfdb1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2ef228bb-6821-4166-a3e0-eab9b1d6d68b/b599ff6abed9cdb293d9edb880b956e9257dfdb1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b599ff6abed9cdb293d9edb880b956e9257dfdb1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Mar 2024 04:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 422935 (0x67417)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b599ff6abed9cdb293d9edb880b956e9257dfdb1
        Validity
            Not Before: Mar  2 07:19:48 2024 GMT
            Not After : Mar  5 09:25:48 2024 GMT
        Subject: CN=c0964d729c8aca78bb811f1cf04a6669615201d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:12:a6:9b:0f:92:16:5e:3c:e7:d5:dc:30:ea:
                    e7:b6:28:08:3a:d4:60:03:4f:57:9d:da:63:5d:ec:
                    3d:e1:bb:03:7d:05:21:5d:54:2d:a9:4b:1d:23:82:
                    83:f7:5d:3d:88:06:ff:b8:e0:66:27:19:58:fe:d0:
                    72:dd:32:15:cf:91:9c:2b:e0:10:43:ac:4b:69:16:
                    d9:a9:8d:4b:61:21:2f:7c:ce:90:43:56:3b:3b:45:
                    2f:5e:78:74:68:85:94:d7:83:e2:a4:e2:0f:48:49:
                    9f:59:76:bc:79:05:bb:f3:8a:6b:3c:9f:be:40:61:
                    57:a2:9f:28:78:20:e9:17:88:3b:67:ea:6f:4d:34:
                    b8:fd:b5:b2:92:56:07:4f:25:5c:06:af:17:87:65:
                    77:fa:84:c6:fe:2c:be:84:8d:4e:4c:55:68:f9:1e:
                    f0:c0:e8:97:90:62:6c:ae:55:6b:c1:a4:71:9c:dd:
                    98:d9:cf:90:60:bd:c6:27:35:b2:5c:24:9a:b5:46:
                    03:14:c6:f5:58:6c:7a:65:4f:bd:32:7a:56:7f:30:
                    b4:1e:bf:05:f5:fd:96:55:23:66:88:af:1f:fb:c0:
                    cc:92:77:c4:73:28:4f:ab:b7:00:48:6f:6b:46:c6:
                    68:9c:4b:3c:e0:72:4f:38:af:fd:36:e5:bb:c0:9a:
                    e8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:69:25:48:8B:E2:C6:CE:A3:A1:0B:B8:1B:48:E8:E5:C5:4F:CB:96
            X509v3 Authority Key Identifier:
                keyid:88:5B:11:D2:95:97:47:5A:A4:E4:9E:81:40:4C:78:1C:0E:23:26:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b599ff6abed9cdb293d9edb880b956e9257dfdb1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2ef228bb-6821-4166-a3e0-eab9b1d6d68b/b599ff6abed9cdb293d9edb880b956e9257dfdb1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2ef228bb-6821-4166-a3e0-eab9b1d6d68b/b599ff6abed9cdb293d9edb880b956e9257dfdb1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:b2:c3:d7:35:fb:77:b0:56:42:3d:5c:91:0f:f5:45:a6:f0:
         f2:37:dd:7a:07:b3:6b:29:7c:6d:e1:87:28:2e:4b:bb:b9:3c:
         53:f2:7d:42:53:8e:59:25:61:22:bb:b5:66:d1:61:65:59:99:
         41:9f:b9:d3:aa:b4:bd:66:25:ab:ef:ca:a5:8e:21:33:11:19:
         65:38:66:e9:51:e4:25:91:ab:82:83:1e:f5:97:24:c0:6f:ae:
         8a:77:71:07:1e:5c:13:82:41:c5:49:a6:d6:f7:0f:fe:f4:6a:
         91:ae:3a:80:93:bc:43:87:60:12:27:16:1c:58:26:5a:7c:9f:
         3b:aa:7f:e3:77:7b:e8:5d:b1:32:f7:67:4d:e6:eb:55:e6:27:
         13:93:6d:79:ed:7c:e4:db:80:f0:ba:8f:90:84:e2:e9:a0:2c:
         d5:b8:c9:11:1f:e0:29:09:d8:9f:63:eb:95:40:08:22:15:7d:
         54:1e:28:cb:6c:da:ec:5e:0e:fa:5c:52:a7:bb:9c:8c:e9:f8:
         fe:3e:a0:ef:62:51:a4:a7:44:0b:de:e9:36:5a:84:2d:11:53:
         ff:35:eb:d5:b8:e9:e9:88:b4:20:55:b8:de:71:d5:a8:ab:76:
         b0:1b:14:1f:29:0d:29:c8:1c:b4:f2:03:52:0f:87:1c:5e:9e:
         33:01:ac:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 2 09:13:59 2024 by rpki-client on console-ams.rpki-client.org