Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/72da0870-fe02-46b1-a014-f672145f944a/b3495e150d297a57bdd9c70a5c6b12197ca76f3c.mft
File:                     b3495e150d297a57bdd9c70a5c6b12197ca76f3c.mft (raw, json)
Hash identifier:          TCzPspiIonhzBKK+nEZ/CELGARwK4v14lTZEqK3O2wg=
Subject key identifier:   A1:F8:59:C1:26:A6:C4:5D:3A:E3:74:21:C1:07:2A:C2:8B:B9:84:C2
Authority key identifier: 22:CA:9A:30:9C:FC:9B:FB:1A:68:10:92:BF:45:91:AC:6A:02:DC:FC
Certificate issuer:       /CN=b3495e150d297a57bdd9c70a5c6b12197ca76f3c
Certificate serial:       289B27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3495e150d297a57bdd9c70a5c6b12197ca76f3c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/72da0870-fe02-46b1-a014-f672145f944a/b3495e150d297a57bdd9c70a5c6b12197ca76f3c.mft
Manifest number:          0DC3
Signing time:             Thu 28 Mar 2024 07:20:44 +0000
Manifest this update:     Thu 28 Mar 2024 06:20:08 +0000
Manifest next update:     Sun 31 Mar 2024 10:13:08 +0000
Files and hashes:         1: b3495e150d297a57bdd9c70a5c6b12197ca76f3c.crl (hash: dR69bd+EeXfXCGH+oM0qiKaumnlPP+b2lZVG0sgC0fM=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/72da0870-fe02-46b1-a014-f672145f944a/b3495e150d297a57bdd9c70a5c6b12197ca76f3c.crl
                          rsync://repository.lacnic.net/rpki/lacnic/72da0870-fe02-46b1-a014-f672145f944a/b3495e150d297a57bdd9c70a5c6b12197ca76f3c.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3495e150d297a57bdd9c70a5c6b12197ca76f3c.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2661159 (0x289b27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3495e150d297a57bdd9c70a5c6b12197ca76f3c
        Validity
            Not Before: Mar 28 06:20:08 2024 GMT
            Not After : Mar 31 10:13:08 2024 GMT
        Subject: CN=eee2b97ce1a0f1117a564ffe0234448c144e6900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:44:e1:f5:4f:ba:7f:58:af:6b:6c:74:6e:f1:
                    38:bc:2a:01:d5:10:f8:ba:54:79:ce:1e:08:0b:53:
                    5c:ce:e5:f3:a6:6e:95:ed:48:e6:a1:5d:1d:27:6e:
                    3c:13:ac:9b:39:4f:a3:c7:aa:b8:45:e3:2f:f9:e7:
                    7f:35:d7:58:7a:31:3c:6a:6c:8a:ed:fb:fb:b3:06:
                    7b:95:91:82:0b:20:59:4c:05:14:d9:6e:56:be:53:
                    c6:c4:72:4c:ed:b6:56:26:37:22:6d:04:b6:70:de:
                    68:67:d0:a5:95:92:30:55:20:c5:49:91:03:ca:9a:
                    93:61:5e:5b:45:61:0c:ed:75:c5:12:d4:3b:78:d2:
                    68:90:51:39:74:42:7d:d0:c1:d5:33:1d:e1:7c:bf:
                    77:08:95:d7:a2:c8:1a:b3:7c:b7:67:62:28:0c:96:
                    b8:28:44:c4:78:ba:8f:09:34:8a:45:09:ec:bd:6f:
                    90:73:2c:a6:bc:ba:2d:94:23:f4:77:5f:59:24:08:
                    3f:69:e1:4f:1e:78:3e:ca:6c:4f:a6:4d:e2:02:2b:
                    33:7d:81:fe:e7:45:e9:ca:09:7c:32:7b:a0:f7:61:
                    11:7c:e4:a0:f4:d3:ab:75:2d:8a:f1:e4:4a:e2:bc:
                    29:db:b9:27:20:d1:d8:17:f2:0a:90:80:00:c9:cb:
                    70:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F8:59:C1:26:A6:C4:5D:3A:E3:74:21:C1:07:2A:C2:8B:B9:84:C2
            X509v3 Authority Key Identifier:
                keyid:22:CA:9A:30:9C:FC:9B:FB:1A:68:10:92:BF:45:91:AC:6A:02:DC:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3495e150d297a57bdd9c70a5c6b12197ca76f3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/72da0870-fe02-46b1-a014-f672145f944a/b3495e150d297a57bdd9c70a5c6b12197ca76f3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/72da0870-fe02-46b1-a014-f672145f944a/b3495e150d297a57bdd9c70a5c6b12197ca76f3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:8f:29:81:27:8a:88:d7:60:5f:49:fe:94:d6:84:93:7d:61:
         55:13:60:27:bf:12:9e:a9:2a:b4:d4:92:64:49:b1:ec:56:92:
         02:1d:85:27:96:8d:a0:7b:25:12:3c:8c:a7:35:35:da:75:09:
         7d:3d:68:c1:d3:6f:3b:fa:29:a5:58:cd:35:54:57:fa:a8:89:
         2a:a5:b9:6d:43:f7:ab:db:2a:9b:c5:cd:47:68:56:cf:fd:45:
         80:ef:18:a0:dd:3b:e4:77:ba:88:4e:1e:8b:2e:aa:73:70:5e:
         5c:e5:f8:5e:bb:03:91:e7:19:ff:2c:db:d3:c5:9b:5d:52:f8:
         5f:61:aa:70:ec:ad:32:fd:73:38:ee:cf:d6:08:a6:b2:61:67:
         9c:f5:0d:c2:8a:1b:74:80:ed:e6:23:80:ce:d2:e7:55:8a:bf:
         5d:93:04:ce:06:7c:7f:9a:68:ab:66:d2:a3:ff:b1:3d:bf:de:
         42:44:d2:0c:14:cc:9b:b3:2e:e8:2c:c9:f4:8d:bf:c7:9b:95:
         39:6e:64:8c:f0:b3:aa:64:c8:6d:7a:be:24:8a:33:1b:dd:64:
         16:29:bf:16:c0:9b:4b:54:70:45:d3:7a:3b:d7:5e:97:8a:8b:
         a0:56:67:e7:10:a7:35:06:62:0a:5b:d0:f1:bd:0f:cf:63:76:
         a4:e3:69:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:12:22 2024 by rpki-client on console-ams.rpki-client.org