Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61f10a77-bf40-4414-bd27-1137e5de28f6/1a218671f562f7bf310bd8da78423d60e1395e66.mft
File:                     1a218671f562f7bf310bd8da78423d60e1395e66.mft (raw, json)
Hash identifier:          RQzfbGlZ5kTW8pGyWErVTsdGb/2a/cbGguDRCq02d34=
Subject key identifier:   45:D3:47:CC:AF:D0:D2:F3:60:C9:8F:0D:6F:EF:05:ED:D8:A9:28:AF
Authority key identifier: 5F:84:68:E0:0B:3D:D5:A0:33:0B:6F:78:57:2A:6D:5D:05:B7:EA:27
Certificate issuer:       /CN=1a218671f562f7bf310bd8da78423d60e1395e66
Certificate serial:       0FA1BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a218671f562f7bf310bd8da78423d60e1395e66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61f10a77-bf40-4414-bd27-1137e5de28f6/1a218671f562f7bf310bd8da78423d60e1395e66.mft
Manifest number:          07D8
Signing time:             Sat 24 Feb 2024 09:19:54 +0000
Manifest this update:     Sat 24 Feb 2024 08:19:39 +0000
Manifest next update:     Tue 27 Feb 2024 10:52:39 +0000
Files and hashes:         1: 1a218671f562f7bf310bd8da78423d60e1395e66.crl (hash: kAaYqMT3FV2kZJc0RVz1vX+sZaD7YDEi9mCpVrMXOH8=)
                          2: 2be68fbcd66700364eb08737ae89d5f47f3d530e.roa (hash: 2ZHJojelCtTYHkP9DoNvd3HQ4+kbQJpt7xSudxFMaRM=)
                          3: 920e042bf744feba8186986353fdbd1364d257ac.roa (hash: 3s8jwwIGOoyRa+Z2kkVLLqHw63zcscEqCtq3whBmXsw=)
                          4: 93ff4f78212a8823eb8064f5674a522afdf89407.roa (hash: 0f992N0QCp/m58pcmQOSnSeLODLlizhiQ1RtSSMbSYM=)
                          5: 98ebf041ac5c9c7a264bfb8f1d2c1d332f1b40da.roa (hash: ibgy0qBlEXMF1W8OT1pJUQFXx2b/gdVSSTO1ByImYio=)
                          6: f18db2ff66c82fb9e3fcd48ed5ad7e56a3a0a5d9.roa (hash: XYdTHZM1tuighLxmmfW3Py5X71H6HdzAEE+lLR2k4Ho=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61f10a77-bf40-4414-bd27-1137e5de28f6/1a218671f562f7bf310bd8da78423d60e1395e66.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61f10a77-bf40-4414-bd27-1137e5de28f6/1a218671f562f7bf310bd8da78423d60e1395e66.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a218671f562f7bf310bd8da78423d60e1395e66.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Feb 2024 10:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1024445 (0xfa1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a218671f562f7bf310bd8da78423d60e1395e66
        Validity
            Not Before: Feb 24 08:19:39 2024 GMT
            Not After : Feb 27 10:52:39 2024 GMT
        Subject: CN=5eaa772b7acab1e60f1d8ac88f12a25df1eb76af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d8:4a:d9:b3:5b:0b:21:60:2c:1a:3e:4b:49:
                    77:25:02:aa:e6:9f:5a:ad:81:18:c7:40:08:c2:f9:
                    59:2b:d0:2f:30:6e:d0:f2:f1:6e:7f:bb:5b:15:4d:
                    3f:78:ee:8f:19:e8:23:19:5e:6a:92:78:0f:4a:28:
                    a1:b2:cd:bb:f4:79:2b:35:27:8c:72:23:fb:e0:c9:
                    4e:36:18:3e:0b:85:7a:25:84:9f:5a:42:12:43:4d:
                    0a:e9:5d:bd:c3:24:3c:af:6c:60:c7:0e:73:6a:f5:
                    40:c7:b0:b4:80:e3:8a:90:f1:b2:b8:19:be:aa:39:
                    8b:68:f6:4f:26:b3:b8:7a:38:d4:dd:73:90:1f:dd:
                    bc:e8:73:8e:f5:77:6d:01:8b:7a:1c:19:6e:d6:ff:
                    11:78:93:0d:a1:88:13:df:0c:02:5d:d3:6f:94:3b:
                    a7:7d:ba:a5:d6:f1:22:1f:e2:12:72:ae:e5:2d:c7:
                    3a:fa:1a:ec:9e:b8:51:b9:da:c8:96:99:2c:c3:68:
                    58:b0:60:77:7f:76:34:34:f9:81:9e:31:ef:44:a3:
                    f4:88:f3:08:ca:7f:0d:75:1f:7b:1d:bd:b2:0e:9f:
                    39:1e:fe:70:2c:19:e1:e4:57:10:90:e1:a1:f3:6f:
                    66:10:ce:ed:6c:4f:4f:a2:29:3a:48:85:51:5c:ce:
                    97:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D3:47:CC:AF:D0:D2:F3:60:C9:8F:0D:6F:EF:05:ED:D8:A9:28:AF
            X509v3 Authority Key Identifier:
                keyid:5F:84:68:E0:0B:3D:D5:A0:33:0B:6F:78:57:2A:6D:5D:05:B7:EA:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a218671f562f7bf310bd8da78423d60e1395e66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61f10a77-bf40-4414-bd27-1137e5de28f6/1a218671f562f7bf310bd8da78423d60e1395e66.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61f10a77-bf40-4414-bd27-1137e5de28f6/1a218671f562f7bf310bd8da78423d60e1395e66.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:9f:09:c3:53:0a:53:92:f2:b2:1a:1b:dd:05:49:df:53:96:
         a2:57:ea:99:ae:1b:7e:e3:1f:71:50:fe:a8:37:79:c0:f1:cd:
         37:2b:03:ee:dc:03:4e:62:43:48:ed:7a:d9:a4:d4:47:d8:8e:
         d4:a4:4c:df:e3:29:2f:0b:bd:0b:8b:22:b9:b9:31:01:44:47:
         af:d5:fa:9f:70:67:0a:e5:6a:0e:f4:cb:08:b6:88:37:99:7b:
         4f:13:bc:a6:eb:b3:a4:c1:fa:f7:fa:21:b3:da:98:6b:92:9d:
         97:73:d4:40:40:1e:a0:7e:fd:21:40:fd:12:1d:90:5b:fe:e6:
         54:b3:88:dc:76:69:49:8d:05:c9:e4:d4:36:85:ed:49:b1:72:
         77:c8:17:15:07:91:0d:a3:c8:75:a7:5a:0a:40:35:e3:93:a0:
         a9:a0:0a:c2:67:7c:df:f6:61:ee:0a:22:a7:44:6e:2b:f0:6e:
         d1:8a:04:ad:bc:9c:b3:f5:e9:95:d1:9f:ee:84:32:72:42:5c:
         8a:8f:17:27:6b:45:3f:8f:4a:82:eb:35:3a:71:d3:4c:21:f4:
         9c:50:06:95:82:82:59:86:8b:7b:af:8f:04:8b:f6:55:0a:f7:
         40:10:51:05:fe:f8:46:05:a1:f4:d9:9e:65:7a:3e:8f:41:90:
         da:5a:0a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 24 12:30:22 2024 by rpki-client on console-fra.rpki-client.org