Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4b152099-c1a1-44f6-9856-7daaeb3fd59e/cef9aa9384c1285b595d5d1c9bba5d693217df5c.mft
File:                     cef9aa9384c1285b595d5d1c9bba5d693217df5c.mft (raw, json)
Hash identifier:          Lk4YlkvQFCJec/PtXbSjF/n/xPWwpSxfjA9V3xhkx7g=
Subject key identifier:   53:A8:DE:E3:80:F7:E1:01:B2:B5:B3:09:3F:FE:6D:B3:0B:60:67:88
Authority key identifier: D8:5F:CD:C2:99:4C:C0:F3:B5:2F:B3:B0:3E:11:C9:F3:49:0D:83:A0
Certificate issuer:       /CN=cef9aa9384c1285b595d5d1c9bba5d693217df5c
Certificate serial:       28DEA9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cef9aa9384c1285b595d5d1c9bba5d693217df5c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4b152099-c1a1-44f6-9856-7daaeb3fd59e/cef9aa9384c1285b595d5d1c9bba5d693217df5c.mft
Manifest number:          0DD6
Signing time:             Thu 28 Mar 2024 14:20:52 +0000
Manifest this update:     Thu 28 Mar 2024 13:20:08 +0000
Manifest next update:     Sun 31 Mar 2024 14:38:08 +0000
Files and hashes:         1: 742ebc6816c96bb3570554d10b51f96025d430e0.roa (hash: QXVIcLVs/r2kX+e+eJWR7A9REXCxSx2ph+xS7FGWrrA=)
                          2: 9ec494bb8fbc57cfea14073560e5c8817788fd56.roa (hash: VxcH06pUqhL+bNOe+SJ0ox+P0vIGYHUU7rILPS1DvOA=)
                          3: cef9aa9384c1285b595d5d1c9bba5d693217df5c.crl (hash: R8Tq0403EQ66O0gj9J2JGdAKvHRBZJglmUl2YAlr3c4=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4b152099-c1a1-44f6-9856-7daaeb3fd59e/cef9aa9384c1285b595d5d1c9bba5d693217df5c.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4b152099-c1a1-44f6-9856-7daaeb3fd59e/cef9aa9384c1285b595d5d1c9bba5d693217df5c.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cef9aa9384c1285b595d5d1c9bba5d693217df5c.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2678441 (0x28dea9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef9aa9384c1285b595d5d1c9bba5d693217df5c
        Validity
            Not Before: Mar 28 13:20:08 2024 GMT
            Not After : Mar 31 14:38:08 2024 GMT
        Subject: CN=f20b6e98a1ef19a0243a36c1e1507cd175d35266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:09:1b:5d:10:4b:a6:87:a9:09:75:d5:56:47:
                    80:47:a9:70:42:07:2b:6b:76:16:6e:0f:a6:af:f1:
                    f1:1f:a6:ae:1e:a3:3f:6e:6c:fd:da:28:f3:2d:49:
                    0e:f5:05:b9:e7:99:09:9b:db:a1:47:82:0d:5e:37:
                    2b:ce:1c:e1:92:f4:e9:d8:80:13:5e:18:f0:45:ba:
                    44:de:e2:c7:3c:0a:40:1a:36:4b:3b:f0:c6:fb:39:
                    25:fe:70:53:ec:4d:d9:7e:27:4c:a7:8e:48:f8:d2:
                    c4:c2:9b:cc:8a:82:3f:64:9e:18:e1:6c:d4:28:ff:
                    ef:87:0d:88:dd:85:81:51:6b:62:11:d6:c0:ef:45:
                    c2:9c:8b:d6:39:55:ad:3a:65:dc:bc:70:0f:d5:d9:
                    4a:7d:d4:b8:78:bc:05:79:c3:26:2b:7d:35:46:4d:
                    e2:37:36:bf:f4:69:cb:19:d2:e6:c1:3a:83:c7:fd:
                    cd:02:07:3c:98:ce:fc:2d:54:25:f1:71:b5:c8:0e:
                    48:ca:f2:04:ec:46:39:b4:7d:a0:1a:8d:e2:b1:fc:
                    7e:a2:ae:e0:5f:d5:2c:fb:15:6e:0e:50:96:19:82:
                    cd:b1:d0:00:25:db:63:b3:f7:10:a8:74:bb:23:02:
                    25:55:d4:91:31:a0:ad:1a:62:df:b0:7b:28:d0:af:
                    11:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A8:DE:E3:80:F7:E1:01:B2:B5:B3:09:3F:FE:6D:B3:0B:60:67:88
            X509v3 Authority Key Identifier:
                keyid:D8:5F:CD:C2:99:4C:C0:F3:B5:2F:B3:B0:3E:11:C9:F3:49:0D:83:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cef9aa9384c1285b595d5d1c9bba5d693217df5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4b152099-c1a1-44f6-9856-7daaeb3fd59e/cef9aa9384c1285b595d5d1c9bba5d693217df5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4b152099-c1a1-44f6-9856-7daaeb3fd59e/cef9aa9384c1285b595d5d1c9bba5d693217df5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:6d:b6:70:0a:5d:32:f2:39:eb:80:61:dd:3f:db:cd:f5:64:
         a0:ac:88:36:3a:18:50:50:3d:04:d1:f0:e2:18:76:90:a1:4f:
         92:b0:f7:c9:90:52:12:3c:30:9e:59:99:57:0e:fe:c6:f2:3e:
         0a:cd:2e:1f:8d:75:e1:b9:4e:a9:5e:ac:f6:91:83:68:06:c5:
         52:d4:95:ef:77:d5:61:32:fb:10:42:3c:a4:51:aa:48:53:c0:
         d0:20:43:01:a6:83:63:43:32:9b:25:61:7f:9a:c5:96:be:43:
         c6:f4:99:5c:0c:79:86:9c:45:b5:06:2a:45:b9:e5:c8:77:74:
         2c:3e:7e:59:e9:51:32:62:09:cb:1f:b2:b7:26:af:0e:b1:83:
         85:2d:ad:4e:16:dd:5f:c2:7e:bc:6e:d7:1e:e9:39:d6:1f:37:
         82:f0:30:ec:ea:fe:22:53:62:da:16:75:d2:fb:90:1c:53:b0:
         e4:6c:0e:30:d1:29:04:65:c4:22:bf:db:8f:64:68:11:61:6b:
         52:dc:c6:57:13:71:aa:3b:18:b1:7f:50:9e:ed:ed:34:e2:06:
         d4:9f:41:d7:17:7a:ee:72:1a:fc:c2:49:12:e2:b4:0c:89:d6:
         61:03:17:b9:73:5f:85:6e:24:7c:d4:8d:22:6a:95:c9:ff:7c:
         b0:0a:73:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:43:47 2024 by rpki-client on console-fra.rpki-client.org