Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/b237ad19586522bd4228c8593de2f297c35868d7.mft
File:                     b237ad19586522bd4228c8593de2f297c35868d7.mft (raw, json)
Hash identifier:          4/VkVPFNrftA0cKbxQnNkRwNmZ6KZyKgcGjyXZNThBA=
Subject key identifier:   04:29:59:40:B0:B3:A3:28:5B:5F:98:8B:FD:5F:F7:BA:16:34:B3:BC
Authority key identifier: EC:AE:37:59:E1:EF:9E:77:59:63:74:A0:E6:B1:4F:FC:9D:13:33:3F
Certificate issuer:       /CN=b237ad19586522bd4228c8593de2f297c35868d7
Certificate serial:       219B2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b237ad19586522bd4228c8593de2f297c35868d7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/b237ad19586522bd4228c8593de2f297c35868d7.mft
Manifest number:          0DC2
Signing time:             Fri 29 Mar 2024 03:20:23 +0000
Manifest this update:     Fri 29 Mar 2024 02:20:08 +0000
Manifest next update:     Mon 01 Apr 2024 04:23:08 +0000
Files and hashes:         1: 17f2cf85b12ca5507f74820640185e7d85a03a50.roa (hash: FamgKSYNodU+YiyVRcbsiIZ3KMylFY5h/De/tlHufno=)
                          2: 51daa4bf95f76bd5a1660e2f89159b25864a7396.roa (hash: KBsxL4Xtl8SosLhoujJbYhTQMjj02YYWHnNiLKwa/+I=)
                          3: 5cc085b83a274d560b7fdf91fb7193cda1ddc018.roa (hash: JiZuyYHCOk16qefe3cFQMfeDROPSqYV1h0aUPdbj/BE=)
                          4: b237ad19586522bd4228c8593de2f297c35868d7.crl (hash: WPdZeoRD/KXzjdxPYvofclnDj4z0t4femK9bT9LzaU8=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/b237ad19586522bd4228c8593de2f297c35868d7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/b237ad19586522bd4228c8593de2f297c35868d7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b237ad19586522bd4228c8593de2f297c35868d7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2202410 (0x219b2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b237ad19586522bd4228c8593de2f297c35868d7
        Validity
            Not Before: Mar 29 02:20:08 2024 GMT
            Not After : Apr  1 04:23:08 2024 GMT
        Subject: CN=564cac94917cb4b752f04f6030a994b001a42792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4d:a0:73:1c:ef:eb:c3:fd:63:2d:72:d9:dc:
                    56:71:9b:8e:5b:1e:e1:2b:62:d4:eb:cb:74:0a:62:
                    23:49:0d:d9:68:64:03:49:73:fe:fb:44:56:99:13:
                    49:9f:a5:c2:c9:be:91:be:c7:40:ae:92:ab:36:4e:
                    59:67:48:66:1a:ee:0a:ca:a8:3e:6c:e5:6c:dd:af:
                    3e:67:ee:08:af:e1:ee:ac:1f:79:9c:59:59:2c:02:
                    89:d6:cb:b8:c1:26:c0:25:fd:70:20:ca:59:09:6b:
                    ef:1b:5f:20:63:19:e3:13:84:c2:a8:5a:c8:4f:44:
                    ac:0f:6a:9c:ee:dc:64:ba:a5:a1:f2:ed:35:d3:db:
                    9e:e2:b2:70:92:49:ee:4a:e9:53:61:77:57:8b:b5:
                    56:5b:ad:19:0f:52:f2:fe:e6:37:67:e7:a8:5d:5e:
                    4c:82:d5:b0:07:d3:ee:32:50:49:49:1f:e6:bd:4c:
                    ee:af:b5:87:bb:5d:66:3c:b3:d2:f7:49:e8:40:c6:
                    cc:f4:a5:b3:76:dd:d7:88:87:45:48:e3:b1:06:d4:
                    bb:f9:58:ea:03:59:0a:62:47:a4:8f:54:ab:a2:1b:
                    a8:27:56:82:67:b4:86:35:f6:b2:37:85:c8:bc:e6:
                    c4:07:17:b6:c6:29:b2:69:71:c0:25:3f:65:65:07:
                    8e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:29:59:40:B0:B3:A3:28:5B:5F:98:8B:FD:5F:F7:BA:16:34:B3:BC
            X509v3 Authority Key Identifier:
                keyid:EC:AE:37:59:E1:EF:9E:77:59:63:74:A0:E6:B1:4F:FC:9D:13:33:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b237ad19586522bd4228c8593de2f297c35868d7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/b237ad19586522bd4228c8593de2f297c35868d7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/b237ad19586522bd4228c8593de2f297c35868d7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:e3:d4:57:58:ab:c4:f8:bd:1c:46:49:58:8d:6f:62:6c:f6:
         c1:83:af:bd:5c:80:2f:c3:c1:36:cd:94:ef:39:95:a9:2a:58:
         da:bb:9c:37:68:5a:00:72:4f:0e:87:91:8e:e6:9d:f5:90:6b:
         fe:19:6b:37:38:b7:e6:c7:20:a1:ce:9e:e3:12:54:83:ab:bc:
         ae:52:1f:f7:e9:2c:b6:da:db:5f:06:00:5f:7b:38:c2:6e:a7:
         f1:ef:f2:62:f2:2d:3d:a1:0e:8f:71:bf:00:00:f3:dc:ef:70:
         c3:32:f5:3b:36:e4:83:ca:f5:29:4e:d4:49:ac:52:79:6c:46:
         da:3c:49:00:fc:00:c0:70:d3:56:9f:c6:05:47:00:e4:3b:bb:
         c1:17:f5:a3:b0:e2:47:94:1c:08:d4:f3:4b:16:58:c4:e8:ca:
         7f:fd:b4:a2:26:57:da:3c:d4:84:9d:f6:56:71:36:65:a3:e7:
         53:3c:9e:7d:6d:20:75:4a:8d:2e:60:79:41:b4:19:9a:48:ee:
         03:5d:bc:e8:9f:5f:c6:e5:07:de:44:71:58:76:a8:a5:cf:c4:
         aa:25:c5:0f:5b:89:72:6e:47:4b:dc:a3:cc:f0:8d:4e:66:ce:
         28:13:8e:2c:fc:8f:59:d8:dd:41:b8:f4:87:81:6d:69:52:14:
         d0:f1:b6:92
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDIZsqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIy
MzdhZDE5NTg2NTIyYmQ0MjI4Yzg1OTNkZTJmMjk3YzM1ODY4ZDcwHhcNMjQwMzI5
MDIyMDA4WhcNMjQwNDAxMDQyMzA4WjAzMTEwLwYDVQQDEyg1NjRjYWM5NDkxN2Ni
NGI3NTJmMDRmNjAzMGE5OTRiMDAxYTQyNzkyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo02gcxzv68P9Yy1y2dxWcZuOWx7hK2LU68t0CmIjSQ3ZaGQD
SXP++0RWmRNJn6XCyb6RvsdArpKrNk5ZZ0hmGu4Kyqg+bOVs3a8+Z+4Ir+HurB95
nFlZLAKJ1su4wSbAJf1wIMpZCWvvG18gYxnjE4TCqFrIT0SsD2qc7txkuqWh8u01
09ue4rJwkknuSulTYXdXi7VWW60ZD1Ly/uY3Z+eoXV5MgtWwB9PuMlBJSR/mvUzu
r7WHu11mPLPS90noQMbM9KWzdt3XiIdFSOOxBtS7+VjqA1kKYkekj1SrohuoJ1aC
Z7SGNfayN4XIvObEBxe2ximyaXHAJT9lZQeO5QIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFAQpWUCws6MoW1+Yi/1f97oWNLO8MB8GA1UdIwQYMBaAFOyuN1nh7553WWN0
oOaxT/ydEzM/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjIzN2Fk
MTk1ODY1MjJiZDQyMjhjODU5M2RlMmYyOTdjMzU4NjhkNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDIxOWQ1ZTgtNTNiNy00ZjFjLTk2YzEtZTk3MTcy
M2E2ZmFiL2IyMzdhZDE5NTg2NTIyYmQ0MjI4Yzg1OTNkZTJmMjk3YzM1ODY4ZDcu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80MjE5ZDVlOC01M2I3LTRmMWMtOTZjMS1lOTcx
NzIzYTZmYWIvYjIzN2FkMTk1ODY1MjJiZDQyMjhjODU5M2RlMmYyOTdjMzU4Njhk
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAGjj1FdYq8T4vRxGSViNb2Js9sGDr71cgC/DwTbNlO85lakq
WNq7nDdoWgByTw6HkY7mnfWQa/4Zazc4t+bHIKHOnuMSVIOrvK5SH/fpLLba218G
AF97OMJup/Hv8mLyLT2hDo9xvwAA89zvcMMy9Ts25IPK9SlO1EmsUnlsRto8SQD8
AMBw01afxgVHAOQ7u8EX9aOw4keUHAjU80sWWMToyn/9tKImV9o81ISd9lZxNmWj
51M8nn1tIHVKjS5geUG0GZpI7gNdvOifX8blB95EcVh2qKXPxKolxQ9biXJuR0vc
o8zwjU5mzigTjiz8j1nY3UG49IeBbWlSFNDxtpI=
-----END CERTIFICATE-----
Generated at Fri Mar 29 04:03:25 2024 by rpki-client on console-ams.rpki-client.org