Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4b18d4b9-6f7d-47da-bc32-f8b96b67e279/702a8ccc0bc2940e8862741717474a0961649f65.mft
File:                     702a8ccc0bc2940e8862741717474a0961649f65.mft (raw, json)
Hash identifier:          zRFtnLeEy3KnRYJRimTn/cNAQ+oeC51ovQAJB3GIHro=
Subject key identifier:   04:51:21:4D:55:F6:67:49:DA:3C:C5:E2:0D:59:95:43:D6:08:34:44
Authority key identifier: 2A:BE:3A:F9:99:D4:0C:CA:AC:54:7E:5C:BF:25:FA:51:AF:C5:C0:43
Certificate issuer:       /CN=702a8ccc0bc2940e8862741717474a0961649f65
Certificate serial:       28033A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/702a8ccc0bc2940e8862741717474a0961649f65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4b18d4b9-6f7d-47da-bc32-f8b96b67e279/702a8ccc0bc2940e8862741717474a0961649f65.mft
Manifest number:          0DD3
Signing time:             Thu 28 Mar 2024 08:21:18 +0000
Manifest this update:     Thu 28 Mar 2024 07:20:07 +0000
Manifest next update:     Sun 31 Mar 2024 09:35:07 +0000
Files and hashes:         1: 36311802db91a696bbb98a39e0320733651398f7.roa (hash: n9FvTgx8JMNBp5DwNGaUlTJ2TnUTyv6VC/ArOXgNgJE=)
                          2: 702a8ccc0bc2940e8862741717474a0961649f65.crl (hash: XAfxHbUdW2oSRmgP5NBUFYPow3mGNscCgezrRTob4As=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4b18d4b9-6f7d-47da-bc32-f8b96b67e279/702a8ccc0bc2940e8862741717474a0961649f65.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4b18d4b9-6f7d-47da-bc32-f8b96b67e279/702a8ccc0bc2940e8862741717474a0961649f65.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/702a8ccc0bc2940e8862741717474a0961649f65.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2622266 (0x28033a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=702a8ccc0bc2940e8862741717474a0961649f65
        Validity
            Not Before: Mar 28 07:20:07 2024 GMT
            Not After : Mar 31 09:35:07 2024 GMT
        Subject: CN=b9c514c0c0ff491fa8bc9c82c44e31e491cfaefa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7e:db:e9:ab:f1:ea:6a:19:84:b9:dd:e7:9b:
                    55:44:cd:e6:17:b6:86:a0:4f:2d:c2:78:44:6a:49:
                    14:e7:6d:86:bf:2d:04:bd:d1:48:32:31:21:5f:09:
                    f0:a1:c8:c8:a1:cc:4a:b5:c5:36:8c:7a:e6:eb:e4:
                    dc:24:6f:09:c6:c4:54:6b:ba:c5:b3:26:81:3b:90:
                    93:27:72:78:96:2f:87:77:b5:bb:2d:be:bd:eb:3e:
                    53:a3:43:a7:1d:78:ad:9f:7e:ee:a1:c8:7f:dc:be:
                    90:d8:4a:ba:a2:5d:58:59:86:b9:bb:67:49:81:9a:
                    a3:7c:45:98:67:46:71:f5:18:c5:6b:41:f6:33:ef:
                    05:46:aa:df:e3:70:ed:80:ce:a8:06:41:87:f8:7c:
                    e1:4d:69:52:ca:93:be:10:e3:fc:55:c8:b5:17:ad:
                    36:ec:a9:90:7f:1b:18:89:b2:8b:4e:15:4f:79:4a:
                    ac:cf:e1:17:05:cb:1b:ce:64:33:5e:3f:ea:f1:f4:
                    13:b0:df:c6:1c:7f:a5:71:b3:e6:e0:15:d6:74:49:
                    5f:45:7a:c1:0b:3f:46:75:36:db:fd:6a:92:8b:14:
                    fb:2e:54:cc:67:8b:98:6b:ea:49:b1:83:15:f7:58:
                    4e:ca:9b:16:48:7a:e2:ca:f8:31:d8:10:15:63:14:
                    7e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:51:21:4D:55:F6:67:49:DA:3C:C5:E2:0D:59:95:43:D6:08:34:44
            X509v3 Authority Key Identifier:
                keyid:2A:BE:3A:F9:99:D4:0C:CA:AC:54:7E:5C:BF:25:FA:51:AF:C5:C0:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/702a8ccc0bc2940e8862741717474a0961649f65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4b18d4b9-6f7d-47da-bc32-f8b96b67e279/702a8ccc0bc2940e8862741717474a0961649f65.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4b18d4b9-6f7d-47da-bc32-f8b96b67e279/702a8ccc0bc2940e8862741717474a0961649f65.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ec:f7:75:da:3d:90:1f:a5:30:e4:02:5a:06:ab:10:b0:be:
         b9:99:2a:23:e7:78:cd:e7:96:f4:28:47:26:fb:26:fe:c0:b5:
         71:5a:4c:33:cf:e9:3a:24:ae:dc:f2:e2:5c:cc:1a:03:34:9d:
         61:ce:b1:cd:f8:eb:30:34:0e:76:d6:11:5f:cd:02:1e:40:c5:
         68:21:e1:26:a3:6b:44:00:bb:17:ea:68:b3:58:27:62:30:bf:
         0d:df:e8:30:5f:62:23:ff:0c:6c:00:e6:3a:4e:02:22:16:67:
         59:cf:9e:e5:1c:a4:87:1c:70:ac:99:a7:9b:8c:7a:42:e3:4d:
         83:9b:f0:13:14:85:ad:c0:df:72:2c:98:13:77:30:1e:d3:06:
         c5:61:8f:63:8b:a7:9d:23:48:e4:05:23:c1:02:55:55:dd:5f:
         f7:40:0c:8e:cd:5a:1c:28:8f:50:e3:72:43:37:a4:e0:96:d7:
         13:3f:3b:da:5a:e9:b4:fa:7d:a7:46:4d:e6:6a:90:8f:82:cc:
         f4:7f:13:1e:56:79:aa:6c:0f:07:93:19:5d:9c:df:38:d3:07:
         19:92:c0:c4:db:8f:ed:ea:76:33:8c:2a:67:c9:fa:8b:b2:a7:
         58:40:b1:4d:91:47:a5:f5:a2:d8:6d:61:5f:94:99:04:20:9f:
         45:7a:29:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 11:17:43 2024 by rpki-client on console-fra.rpki-client.org