Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5904b48b-4b94-4e8a-9025-994f127418b8/1e28a8bfa4f7bec1f0e19ebe12ca4fc6523966d3.mft
File:                     1e28a8bfa4f7bec1f0e19ebe12ca4fc6523966d3.mft (raw, json)
Hash identifier:          QWDSwP8jo10/MrkuGQR/DlAUHXJG6NVy3TH2Z2Uie9g=
Subject key identifier:   40:A0:2E:6B:3B:E3:82:4B:43:1B:AD:6A:2F:0F:EB:EE:D8:10:E9:5A
Authority key identifier: 77:3F:DE:C8:BC:51:BC:08:67:40:7B:91:27:5A:F5:DF:36:2D:4B:48
Certificate issuer:       /CN=1e28a8bfa4f7bec1f0e19ebe12ca4fc6523966d3
Certificate serial:       157A2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e28a8bfa4f7bec1f0e19ebe12ca4fc6523966d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5904b48b-4b94-4e8a-9025-994f127418b8/1e28a8bfa4f7bec1f0e19ebe12ca4fc6523966d3.mft
Manifest number:          0AF0
Signing time:             Sat 02 Mar 2024 06:20:36 +0000
Manifest this update:     Sat 02 Mar 2024 05:19:49 +0000
Manifest next update:     Tue 05 Mar 2024 09:01:49 +0000
Files and hashes:         1: 1e28a8bfa4f7bec1f0e19ebe12ca4fc6523966d3.crl (hash: luxVJdJyvZAOaAVwRCv2PnhgVXi/4uLsWieYwFFXgqI=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5904b48b-4b94-4e8a-9025-994f127418b8/1e28a8bfa4f7bec1f0e19ebe12ca4fc6523966d3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5904b48b-4b94-4e8a-9025-994f127418b8/1e28a8bfa4f7bec1f0e19ebe12ca4fc6523966d3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e28a8bfa4f7bec1f0e19ebe12ca4fc6523966d3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Mar 2024 04:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1407535 (0x157a2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e28a8bfa4f7bec1f0e19ebe12ca4fc6523966d3
        Validity
            Not Before: Mar  2 05:19:49 2024 GMT
            Not After : Mar  5 09:01:49 2024 GMT
        Subject: CN=da7dcd59ed2e7208762a787f3270316ee4ad9d1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ef:3a:3a:a7:f5:a6:af:4f:4c:e7:da:d3:87:
                    b8:72:e6:23:f4:2f:f1:c2:63:4e:6f:37:c7:0a:84:
                    fe:8f:85:b1:f1:0d:a6:7f:0a:b5:a9:59:52:49:41:
                    73:09:00:1c:50:82:85:ab:a3:bd:c6:57:42:56:9c:
                    83:23:ef:21:d3:eb:29:89:c5:f6:7f:29:cc:fe:e0:
                    c8:8d:ac:ce:be:fb:43:e6:48:a7:85:cc:c9:58:90:
                    8a:22:c6:07:27:9d:69:f5:2d:fa:4f:01:6d:85:53:
                    32:60:0b:33:3c:9d:00:ac:a8:74:0b:b7:a6:dc:ab:
                    bc:ec:11:6e:ce:12:19:ae:1d:3e:52:83:19:78:b3:
                    01:20:c7:09:65:04:92:cf:3f:b8:6e:9d:22:cf:07:
                    55:c7:96:4e:ee:e1:e3:3f:f0:3b:a8:67:73:7b:17:
                    e5:7a:a6:57:19:46:84:13:6b:c7:b7:68:8a:20:c1:
                    59:94:58:e4:da:90:85:83:af:66:53:8f:42:1e:40:
                    a3:50:3e:9c:dc:24:13:ed:57:c0:6a:15:e8:74:46:
                    68:52:e7:b0:50:b9:b8:e2:4d:c6:15:04:e3:2b:ac:
                    94:f2:e0:fa:df:de:b3:9a:d6:7b:26:1a:f0:52:61:
                    a0:96:24:1f:f4:36:6b:10:34:d3:f4:51:58:71:71:
                    51:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A0:2E:6B:3B:E3:82:4B:43:1B:AD:6A:2F:0F:EB:EE:D8:10:E9:5A
            X509v3 Authority Key Identifier:
                keyid:77:3F:DE:C8:BC:51:BC:08:67:40:7B:91:27:5A:F5:DF:36:2D:4B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e28a8bfa4f7bec1f0e19ebe12ca4fc6523966d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5904b48b-4b94-4e8a-9025-994f127418b8/1e28a8bfa4f7bec1f0e19ebe12ca4fc6523966d3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5904b48b-4b94-4e8a-9025-994f127418b8/1e28a8bfa4f7bec1f0e19ebe12ca4fc6523966d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:45:33:71:90:c2:f8:e5:16:23:27:6b:02:90:c3:da:77:8c:
         ba:d2:62:0e:7d:0b:07:74:1f:01:14:c5:8a:f3:32:ab:75:eb:
         d8:b6:18:1d:b0:7e:b7:75:a2:c8:05:46:c3:57:19:de:61:68:
         74:63:5c:e7:ef:e8:e3:65:d7:29:10:91:9c:76:85:d2:b2:9b:
         8e:91:97:4f:4b:47:eb:50:ec:9f:3e:21:e9:c1:db:e5:5d:f0:
         ae:b2:46:51:f3:3f:6e:7d:4c:5d:14:8b:6c:51:f6:d6:1d:26:
         4b:21:6c:94:71:3c:66:0a:91:71:2c:85:61:de:b8:59:c7:d3:
         87:fe:3e:13:cd:c8:95:80:86:9a:a7:d9:7f:7b:aa:83:40:ed:
         4d:d0:76:62:80:84:61:36:a1:b6:97:cc:0d:b1:4a:10:29:7c:
         fc:ee:de:7f:03:aa:2a:63:9e:d6:51:1e:a6:70:14:a9:e0:26:
         74:ea:8d:38:47:a5:09:c8:28:21:83:a9:60:a6:85:ae:8f:4d:
         9e:58:8e:cf:1d:cf:0c:da:10:8d:ff:83:14:96:37:f7:98:26:
         0c:ed:e3:d2:18:09:97:cd:1c:5d:65:c3:69:9f:4d:7b:53:fc:
         ee:ad:29:b2:e0:b1:f0:53:f6:91:3b:5a:71:3f:5c:d2:3a:c6:
         68:04:d8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 2 07:51:40 2024 by rpki-client on console-ams.rpki-client.org