Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c457f7a-7c51-49e7-9598-8710f1b5e749/dba2d4475bfb2b85f06dce9699918d5f9c2d2510.mft
File:                     dba2d4475bfb2b85f06dce9699918d5f9c2d2510.mft (raw, json)
Hash identifier:          TLmKJsNxnDTQ0UxoYC4uBxeJhcEwirbapy+8gKa0w2o=
Subject key identifier:   60:F5:A1:B6:94:E2:87:FF:1E:52:66:91:A7:3B:D5:F1:A1:59:89:AE
Authority key identifier: F1:71:B2:BB:34:ED:0B:65:29:C4:30:65:1F:09:46:4D:2C:6D:60:30
Certificate issuer:       /CN=dba2d4475bfb2b85f06dce9699918d5f9c2d2510
Certificate serial:       21DA73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dba2d4475bfb2b85f06dce9699918d5f9c2d2510.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c457f7a-7c51-49e7-9598-8710f1b5e749/dba2d4475bfb2b85f06dce9699918d5f9c2d2510.mft
Manifest number:          0DE0
Signing time:             Fri 29 Mar 2024 04:21:22 +0000
Manifest this update:     Fri 29 Mar 2024 03:20:09 +0000
Manifest next update:     Mon 01 Apr 2024 06:39:09 +0000
Files and hashes:         1: dba2d4475bfb2b85f06dce9699918d5f9c2d2510.crl (hash: Ws/dHX6/oN14Ouy1w7rYb1+TA0G7FyCysHfLfJnaCnE=)
                          2: f09ea539795c155531d156b0290e82028844eb70.roa (hash: iHWrWMaikF/WkDt1biocOcCvmc4n7OXfVSBWFC36brs=)
                          3: f7a949732675d07fb9dc9e4c2f74d4750b6cfc14.roa (hash: ChIQ8CqU6fClR+Gq1iE6Lh4mneMlwggbmWj4ajnXVT0=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7c457f7a-7c51-49e7-9598-8710f1b5e749/dba2d4475bfb2b85f06dce9699918d5f9c2d2510.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7c457f7a-7c51-49e7-9598-8710f1b5e749/dba2d4475bfb2b85f06dce9699918d5f9c2d2510.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dba2d4475bfb2b85f06dce9699918d5f9c2d2510.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 04:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2218611 (0x21da73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dba2d4475bfb2b85f06dce9699918d5f9c2d2510
        Validity
            Not Before: Mar 29 03:20:09 2024 GMT
            Not After : Apr  1 06:39:09 2024 GMT
        Subject: CN=81919ca637de1e7264dce58d5dcfbe945d30ef24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:96:29:ce:7b:e0:ec:ab:82:cc:74:cf:a5:28:
                    47:df:20:cc:de:01:44:31:d4:36:f8:49:9f:0b:95:
                    49:29:c6:62:ab:4a:a2:07:17:de:6c:aa:89:a0:4d:
                    d2:66:6c:aa:e9:6c:57:b7:3d:ef:6d:d2:4c:95:24:
                    69:24:e9:5b:45:8d:9b:33:00:3f:0f:22:47:d7:98:
                    b1:05:76:5d:16:ad:4c:31:43:19:73:47:98:dd:d4:
                    bd:39:11:17:6f:b5:6d:cf:0d:52:f1:11:bd:fb:5b:
                    d0:13:c4:19:14:76:a4:37:3f:43:79:6d:41:fb:9c:
                    47:84:89:e8:86:44:2e:28:97:28:8d:bb:e4:8d:3d:
                    80:d9:eb:65:5d:9d:8c:45:98:e3:e3:17:77:f7:7e:
                    f3:fc:bb:35:c7:84:e7:d6:35:fa:16:25:51:4f:9a:
                    10:c0:2a:d3:eb:34:35:cb:b4:2b:e8:82:a0:20:7d:
                    51:4e:b9:8b:f3:a7:8b:73:bc:44:b8:a1:f2:8a:ea:
                    84:0e:67:8b:1f:47:1e:ac:49:02:48:02:ae:da:6c:
                    a5:a8:2b:ec:d6:d6:13:db:ea:ac:72:63:db:6c:80:
                    09:5d:af:25:6a:ce:f9:5e:17:5f:c6:9d:24:b6:15:
                    02:21:60:a5:8b:0a:6f:7e:36:aa:e1:9c:df:c3:8d:
                    00:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F5:A1:B6:94:E2:87:FF:1E:52:66:91:A7:3B:D5:F1:A1:59:89:AE
            X509v3 Authority Key Identifier:
                keyid:F1:71:B2:BB:34:ED:0B:65:29:C4:30:65:1F:09:46:4D:2C:6D:60:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dba2d4475bfb2b85f06dce9699918d5f9c2d2510.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c457f7a-7c51-49e7-9598-8710f1b5e749/dba2d4475bfb2b85f06dce9699918d5f9c2d2510.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c457f7a-7c51-49e7-9598-8710f1b5e749/dba2d4475bfb2b85f06dce9699918d5f9c2d2510.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:90:b9:83:3b:a3:fe:82:33:98:3b:d5:7a:d6:9e:9a:e1:97:
         b8:6b:46:8d:76:2f:ca:75:40:7a:8f:6b:32:a9:22:aa:2c:2b:
         d4:c1:34:6e:d3:98:15:96:82:18:1e:14:74:e8:00:c4:d1:a3:
         b8:e2:6e:fe:98:41:ac:be:8c:e0:cc:19:01:54:c3:69:4f:2c:
         59:89:31:16:88:41:a2:fd:da:29:ab:99:ac:c7:4d:25:b3:57:
         e5:72:a5:2e:82:d3:65:90:1d:79:ac:e6:80:a5:bf:da:dc:6c:
         9d:cd:7f:47:f8:48:0d:33:07:e9:fd:87:64:49:56:36:6f:d3:
         80:a1:81:51:d0:1a:f1:5b:33:fa:d6:57:15:79:75:90:5a:93:
         21:94:a8:92:b4:a6:d3:2b:71:35:08:bc:44:88:4f:41:a0:e6:
         8f:b3:fb:e3:41:79:81:2f:b0:68:57:fc:76:42:ed:43:8e:41:
         97:da:73:5e:d1:9d:d0:24:23:9a:a1:d1:98:10:b0:68:cd:5c:
         00:48:f5:e0:d5:c5:e0:f2:7b:08:cc:2e:a6:42:37:aa:5f:4c:
         81:af:5e:c6:4d:f4:37:d1:24:ea:1f:c4:58:5b:e3:26:4e:6e:
         c8:8d:fa:03:b8:69:ab:21:c6:f3:cb:f1:14:ee:0b:7b:88:11:
         16:08:fb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:45:43 2024 by rpki-client on console-ams.rpki-client.org