Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3690df96-de7e-488e-ac1e-e296d6f17a11/7fa6f3db8d0c6e7c34a090038461e357bad000ef.mft
File:                     7fa6f3db8d0c6e7c34a090038461e357bad000ef.mft (raw, json)
Hash identifier:          AMvpfsjtKBdOc1n43uEdNJtNAJcskL7+6lMd0+A7D0M=
Subject key identifier:   5D:DA:87:D8:FF:F4:13:01:B9:B4:B2:6C:1A:FA:E7:9A:47:E4:9E:50
Authority key identifier: A4:F7:B4:FA:AF:D4:B3:16:91:89:F1:56:B5:21:06:53:74:47:80:07
Certificate issuer:       /CN=7fa6f3db8d0c6e7c34a090038461e357bad000ef
Certificate serial:       27B15E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fa6f3db8d0c6e7c34a090038461e357bad000ef.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3690df96-de7e-488e-ac1e-e296d6f17a11/7fa6f3db8d0c6e7c34a090038461e357bad000ef.mft
Manifest number:          0D67
Signing time:             Sat 02 Mar 2024 12:20:16 +0000
Manifest this update:     Sat 02 Mar 2024 11:19:49 +0000
Manifest next update:     Tue 05 Mar 2024 12:30:49 +0000
Files and hashes:         1: 7fa6f3db8d0c6e7c34a090038461e357bad000ef.crl (hash: 8TPzwb1NnQXtNu0KxLi0WSn8JElMD7gyq8vfqDhWl8k=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3690df96-de7e-488e-ac1e-e296d6f17a11/7fa6f3db8d0c6e7c34a090038461e357bad000ef.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3690df96-de7e-488e-ac1e-e296d6f17a11/7fa6f3db8d0c6e7c34a090038461e357bad000ef.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fa6f3db8d0c6e7c34a090038461e357bad000ef.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Mar 2024 12:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2601310 (0x27b15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fa6f3db8d0c6e7c34a090038461e357bad000ef
        Validity
            Not Before: Mar  2 11:19:49 2024 GMT
            Not After : Mar  5 12:30:49 2024 GMT
        Subject: CN=eacedcd9039fda90f6daff249130192461bdc71b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:46:34:6d:bc:b6:fa:e9:8c:5b:e0:29:76:1f:
                    c3:c5:d4:5e:51:2b:81:62:29:f9:28:3b:20:e5:9d:
                    bc:36:79:54:c6:69:6f:b4:ff:a9:87:af:e4:62:78:
                    ce:11:f2:30:3e:8d:46:7d:f6:83:e1:37:6f:b2:8f:
                    b2:92:8d:7f:f8:48:e0:0d:51:18:f4:00:cf:10:4a:
                    88:24:5a:37:0f:4d:9d:42:bb:56:66:48:f1:06:4f:
                    02:94:2d:6d:9c:9c:a7:53:b0:75:79:f3:e8:79:ea:
                    cb:59:ca:81:b1:52:37:13:56:02:dc:7a:8d:f0:a2:
                    6a:29:ec:02:ae:1b:13:94:ad:62:8e:0b:3f:71:38:
                    28:ac:34:f2:26:b0:78:74:97:c3:6c:58:ea:91:b7:
                    ec:b3:cc:32:7c:88:55:84:8b:97:dd:5e:12:d7:ef:
                    f5:26:22:89:75:75:67:20:f0:53:c7:23:33:eb:63:
                    65:dd:6e:cd:ae:84:2c:32:39:ee:f0:d8:3e:13:6d:
                    d7:77:6b:51:f6:c3:ae:a9:6f:37:d8:3a:42:be:f3:
                    32:49:1b:91:8e:4c:59:a1:f5:a5:69:ed:40:05:5d:
                    59:7f:8c:c9:68:5e:24:c3:70:1e:5f:00:78:c2:4e:
                    44:cc:30:35:84:d5:e6:90:ea:d2:d3:fb:f0:f4:8b:
                    37:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:DA:87:D8:FF:F4:13:01:B9:B4:B2:6C:1A:FA:E7:9A:47:E4:9E:50
            X509v3 Authority Key Identifier:
                keyid:A4:F7:B4:FA:AF:D4:B3:16:91:89:F1:56:B5:21:06:53:74:47:80:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fa6f3db8d0c6e7c34a090038461e357bad000ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3690df96-de7e-488e-ac1e-e296d6f17a11/7fa6f3db8d0c6e7c34a090038461e357bad000ef.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3690df96-de7e-488e-ac1e-e296d6f17a11/7fa6f3db8d0c6e7c34a090038461e357bad000ef.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:41:39:62:47:94:2a:41:97:e7:08:e9:85:69:e4:12:2d:41:
         35:d2:a5:bd:47:4b:5c:20:ce:1b:06:34:6d:ce:9b:51:0c:7d:
         c3:c0:85:08:8d:61:45:ee:6c:66:fb:8b:59:ef:68:2f:e3:7e:
         ee:10:53:14:7e:b7:d8:d0:5e:89:1b:33:5f:39:3f:59:c9:87:
         52:fb:3b:c2:84:35:1e:f8:74:56:a0:aa:d9:19:cd:16:83:ce:
         e6:6d:a3:16:6e:4a:19:02:25:f8:33:f2:3e:ea:2f:4b:70:c5:
         c9:01:85:77:19:52:17:8c:61:54:e8:d2:22:2b:d1:3f:e5:21:
         1a:99:58:f6:6f:67:69:07:a5:6a:80:fa:6c:8c:89:ed:f3:3c:
         09:76:0e:af:fa:92:d9:ed:1c:b1:51:38:48:6b:52:d7:95:17:
         ac:16:ae:4d:48:82:d2:14:2f:80:30:32:8a:79:e2:c9:9d:50:
         ba:b3:7f:dd:c5:d2:16:f7:a7:2e:74:7b:4b:31:98:0c:d3:22:
         e2:c5:69:0d:02:10:c1:f5:0c:40:17:ba:d1:30:bb:1f:b0:0e:
         34:72:20:e2:09:9a:ad:6a:fc:1a:59:4b:d2:a3:5d:9f:e3:5c:
         1d:e8:cf:35:88:9f:ac:52:7e:35:65:8f:e3:6d:ec:6e:f3:88:
         ef:d0:7f:60
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDJ7FeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdm
YTZmM2RiOGQwYzZlN2MzNGEwOTAwMzg0NjFlMzU3YmFkMDAwZWYwHhcNMjQwMzAy
MTExOTQ5WhcNMjQwMzA1MTIzMDQ5WjAzMTEwLwYDVQQDEyhlYWNlZGNkOTAzOWZk
YTkwZjZkYWZmMjQ5MTMwMTkyNDYxYmRjNzFiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0kY0bby2+umMW+Apdh/DxdReUSuBYin5KDsg5Z28NnlUxmlv
tP+ph6/kYnjOEfIwPo1GffaD4Tdvso+yko1/+EjgDVEY9ADPEEqIJFo3D02dQrtW
ZkjxBk8ClC1tnJynU7B1efPoeerLWcqBsVI3E1YC3HqN8KJqKewCrhsTlK1ijgs/
cTgorDTyJrB4dJfDbFjqkbfss8wyfIhVhIuX3V4S1+/1JiKJdXVnIPBTxyMz62Nl
3W7NroQsMjnu8Ng+E23Xd2tR9sOuqW832DpCvvMySRuRjkxZofWlae1ABV1Zf4zJ
aF4kw3AeXwB4wk5EzDA1hNXmkOrS0/vw9Is3jQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFF3ah9j/9BMBubSybBr655pH5J5QMB8GA1UdIwQYMBaAFKT3tPqv1LMWkYnx
VrUhBlN0R4AHMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2ZhNmYz
ZGI4ZDBjNmU3YzM0YTA5MDAzODQ2MWUzNTdiYWQwMDBlZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzY5MGRmOTYtZGU3ZS00ODhlLWFjMWUtZTI5NmQ2
ZjE3YTExLzdmYTZmM2RiOGQwYzZlN2MzNGEwOTAwMzg0NjFlMzU3YmFkMDAwZWYu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zNjkwZGY5Ni1kZTdlLTQ4OGUtYWMxZS1lMjk2
ZDZmMTdhMTEvN2ZhNmYzZGI4ZDBjNmU3YzM0YTA5MDAzODQ2MWUzNTdiYWQwMDBl
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBADhBOWJHlCpBl+cI6YVp5BItQTXSpb1HS1wgzhsGNG3Om1EM
fcPAhQiNYUXubGb7i1nvaC/jfu4QUxR+t9jQXokbM185P1nJh1L7O8KENR74dFag
qtkZzRaDzuZtoxZuShkCJfgz8j7qL0twxckBhXcZUheMYVTo0iIr0T/lIRqZWPZv
Z2kHpWqA+myMie3zPAl2Dq/6ktntHLFROEhrUteVF6wWrk1IgtIUL4AwMop54smd
ULqzf93F0hb3py50e0sxmAzTIuLFaQ0CEMH1DEAXutEwux+wDjRyIOIJmq1q/BpZ
S9KjXZ/jXB3ozzWIn6xSfjVlj+Nt7G7ziO/Qf2A=
-----END CERTIFICATE-----
Generated at Sat Mar 2 13:12:21 2024 by rpki-client on console-fra.rpki-client.org