Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52cc5428-2f92-488f-bced-d60fa88ea2e2/fa838a953551009c19f610b9c5f2d235fe909d9f.mft
File:                     fa838a953551009c19f610b9c5f2d235fe909d9f.mft (raw, json)
Hash identifier:          msAq+x1rOYOb61c0ym51u8edXJRaVoJrgwrwGuxeRQo=
Subject key identifier:   3C:EE:E6:C0:9E:14:38:B0:AD:AD:D6:F0:65:4C:42:F5:26:3A:25:72
Authority key identifier: A8:AD:8A:2E:54:33:BB:B4:DA:91:3B:AD:7E:38:D2:59:A9:56:4D:F9
Certificate issuer:       /CN=fa838a953551009c19f610b9c5f2d235fe909d9f
Certificate serial:       22735B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa838a953551009c19f610b9c5f2d235fe909d9f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52cc5428-2f92-488f-bced-d60fa88ea2e2/fa838a953551009c19f610b9c5f2d235fe909d9f.mft
Manifest number:          0DDA
Signing time:             Thu 28 Mar 2024 14:21:27 +0000
Manifest this update:     Thu 28 Mar 2024 13:20:08 +0000
Manifest next update:     Sun 31 Mar 2024 15:22:08 +0000
Files and hashes:         1: c4b285286e319f6484a57d2e56b314c25d46267c.roa (hash: NDY9ik3N0/AqGi1DtRT0FvEdevszj4frNqwZs9JFuo4=)
                          2: fa838a953551009c19f610b9c5f2d235fe909d9f.crl (hash: qIyqWnn79jj5cUoPK4AWZeRHi7l2E83Hl0eDmUhC3o8=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52cc5428-2f92-488f-bced-d60fa88ea2e2/fa838a953551009c19f610b9c5f2d235fe909d9f.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52cc5428-2f92-488f-bced-d60fa88ea2e2/fa838a953551009c19f610b9c5f2d235fe909d9f.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa838a953551009c19f610b9c5f2d235fe909d9f.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2257755 (0x22735b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa838a953551009c19f610b9c5f2d235fe909d9f
        Validity
            Not Before: Mar 28 13:20:08 2024 GMT
            Not After : Mar 31 15:22:08 2024 GMT
        Subject: CN=0a39cb36c9c9fb4f78ed4ac7d6891ef3ed375364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:61:95:91:b6:24:cb:f5:27:dc:46:fb:d9:a7:
                    e1:41:88:47:6a:4b:6a:71:b7:01:90:ff:c4:ef:86:
                    a5:a6:63:3d:b6:c4:4e:29:92:80:03:56:59:9b:70:
                    c2:0c:92:ce:4e:8f:6a:8b:32:46:c1:71:79:da:7f:
                    17:8c:61:75:46:ff:1f:a2:3b:e3:58:8f:fc:09:c1:
                    f9:f1:48:47:86:ea:99:8b:b7:e5:55:30:f3:53:b3:
                    d5:88:12:e4:1f:6d:b8:5d:e0:45:32:66:99:07:24:
                    13:c1:b4:26:65:93:07:7d:e8:d7:c3:85:f6:25:77:
                    05:d8:06:02:c4:27:b7:42:be:9c:67:c6:b7:49:4a:
                    cc:52:c1:44:e7:3b:9d:a7:20:28:a0:aa:ef:d9:38:
                    3c:4b:e0:b2:de:d8:0f:80:52:00:91:c0:e2:25:0a:
                    43:d1:81:15:29:a2:b7:e8:9a:b1:7a:19:9d:4f:64:
                    bc:7a:3e:d6:27:04:53:59:60:36:0c:e0:29:2f:f9:
                    cb:f0:ff:70:02:00:4f:03:93:b5:fd:be:36:66:fb:
                    1f:ab:30:5a:92:f2:df:13:61:f4:b1:86:60:4f:12:
                    d7:a6:5d:45:06:4f:a0:f6:23:3b:39:2f:ba:a3:5a:
                    9e:4e:e4:98:83:67:b7:33:be:aa:4a:aa:5e:8d:a8:
                    62:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:EE:E6:C0:9E:14:38:B0:AD:AD:D6:F0:65:4C:42:F5:26:3A:25:72
            X509v3 Authority Key Identifier:
                keyid:A8:AD:8A:2E:54:33:BB:B4:DA:91:3B:AD:7E:38:D2:59:A9:56:4D:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa838a953551009c19f610b9c5f2d235fe909d9f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52cc5428-2f92-488f-bced-d60fa88ea2e2/fa838a953551009c19f610b9c5f2d235fe909d9f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52cc5428-2f92-488f-bced-d60fa88ea2e2/fa838a953551009c19f610b9c5f2d235fe909d9f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:9f:8f:ed:16:e3:43:73:bf:d4:b2:ca:c5:b5:8f:e1:f7:73:
         4e:87:18:43:b6:d0:75:48:92:63:05:41:99:1c:0e:c1:a1:05:
         e0:3b:fc:d0:6f:4e:d9:68:0d:66:74:cb:2d:71:fc:20:99:89:
         2d:a3:ff:3e:c2:95:19:ca:84:4f:0a:9f:d1:87:06:de:c1:65:
         7a:fa:37:b0:c4:11:db:65:c0:60:b0:82:84:26:1a:a1:f1:15:
         31:7d:d9:7f:30:b9:52:c0:da:35:f3:f5:84:4d:49:b2:f4:8b:
         64:26:b3:54:ed:99:14:e7:68:6f:d6:1e:66:39:13:cd:f9:59:
         8b:14:61:93:ef:5f:ac:b0:56:d1:bb:91:04:40:95:e6:da:4e:
         c5:a8:62:1b:1e:52:d9:7d:bb:49:71:9d:70:18:5f:d1:ec:49:
         fa:43:50:9d:71:c5:16:84:85:03:c1:a7:92:68:da:53:6c:43:
         95:15:ed:44:87:12:f5:f6:2c:c7:79:5d:00:87:29:4d:da:12:
         f0:10:fc:a0:1a:5e:31:f0:d1:3f:4b:19:7b:8b:01:40:9a:84:
         a9:b7:78:0f:66:57:24:b8:81:17:b7:02:9a:65:73:e5:db:61:
         99:a6:71:a0:51:56:d8:f1:0b:7c:c2:09:b9:44:49:b0:2b:b7:
         d9:6f:d1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:43:48 2024 by rpki-client on console-fra.rpki-client.org