Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/870dedec-9599-47b2-97d9-4cd84082719b/33d1fe563540701dba61e3a607b7a5d21144eed7.mft
File:                     33d1fe563540701dba61e3a607b7a5d21144eed7.mft (raw, json)
Hash identifier:          pbjbXFlbFjrBI3nW0OMMPPiH5+dICJuNdH9lY2jxvHI=
Subject key identifier:   D3:83:D9:35:A5:A0:45:E9:65:52:91:37:0D:DE:38:7E:3D:B5:B2:DE
Authority key identifier: FE:6D:A3:F1:F6:67:C8:6D:41:A7:39:AA:A9:12:FE:86:5C:1E:FC:83
Certificate issuer:       /CN=33d1fe563540701dba61e3a607b7a5d21144eed7
Certificate serial:       02E687
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d1fe563540701dba61e3a607b7a5d21144eed7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/870dedec-9599-47b2-97d9-4cd84082719b/33d1fe563540701dba61e3a607b7a5d21144eed7.mft
Manifest number:          016D
Signing time:             Sat 02 Mar 2024 11:21:16 +0000
Manifest this update:     Sat 02 Mar 2024 10:19:53 +0000
Manifest next update:     Tue 05 Mar 2024 13:40:53 +0000
Files and hashes:         1: 33d1fe563540701dba61e3a607b7a5d21144eed7.crl (hash: JHhx73bv7/ZSXBYW22DiPu1FMyVmQ2a74NkjPywj2H4=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/870dedec-9599-47b2-97d9-4cd84082719b/33d1fe563540701dba61e3a607b7a5d21144eed7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/870dedec-9599-47b2-97d9-4cd84082719b/33d1fe563540701dba61e3a607b7a5d21144eed7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d1fe563540701dba61e3a607b7a5d21144eed7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Mar 2024 04:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190087 (0x2e687)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33d1fe563540701dba61e3a607b7a5d21144eed7
        Validity
            Not Before: Mar  2 10:19:53 2024 GMT
            Not After : Mar  5 13:40:53 2024 GMT
        Subject: CN=af97410646a07f32cacc22f01752a6c44fd2ed06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:60:0a:26:1e:f2:b4:f6:8a:3e:40:88:8f:3f:
                    7d:0d:51:a2:84:61:c6:7a:75:ff:3e:73:c3:99:40:
                    97:d6:fb:07:1a:c7:92:f6:30:9d:84:23:4b:8a:3f:
                    e5:e4:74:43:94:10:e8:fc:5b:34:2a:43:a8:f4:93:
                    c3:ae:a8:65:63:b5:79:91:50:1c:92:01:2c:c8:23:
                    f5:b9:b6:4e:d5:fe:15:af:95:97:cb:0b:27:83:14:
                    5b:a6:b4:af:db:68:86:3e:09:99:40:5a:dc:34:ad:
                    63:0a:7e:d2:2d:3d:c3:d6:f5:7a:0e:2f:a7:4d:69:
                    fa:d1:14:98:9c:b7:e4:4e:9b:49:c0:07:c1:a4:2b:
                    d4:5a:cf:77:48:8b:db:4b:70:cc:38:f0:68:b6:24:
                    df:64:28:d8:bd:24:71:81:dd:fe:4c:e1:ab:3a:b9:
                    b2:4c:f3:50:56:f3:f8:9f:26:8c:f7:18:18:bf:a3:
                    9e:e1:9d:d0:a8:e9:26:a6:71:e1:61:d5:3c:57:31:
                    f3:5b:eb:6f:99:91:21:93:60:39:61:9a:e5:7e:62:
                    3f:2f:6e:31:bd:e5:dd:52:52:a6:94:eb:24:fe:06:
                    1b:3f:5d:4c:37:57:06:b0:79:4b:90:77:36:b3:aa:
                    5c:c1:66:ab:51:a2:39:82:5b:c3:c7:63:86:3d:c9:
                    27:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:83:D9:35:A5:A0:45:E9:65:52:91:37:0D:DE:38:7E:3D:B5:B2:DE
            X509v3 Authority Key Identifier:
                keyid:FE:6D:A3:F1:F6:67:C8:6D:41:A7:39:AA:A9:12:FE:86:5C:1E:FC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d1fe563540701dba61e3a607b7a5d21144eed7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/870dedec-9599-47b2-97d9-4cd84082719b/33d1fe563540701dba61e3a607b7a5d21144eed7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/870dedec-9599-47b2-97d9-4cd84082719b/33d1fe563540701dba61e3a607b7a5d21144eed7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:40:c0:b6:af:b5:79:c5:bc:fc:fe:98:a6:07:17:19:48:49:
         68:11:1a:6b:fb:71:67:03:bc:7e:c7:7c:74:49:89:e2:87:0c:
         a0:ea:17:50:4a:ab:63:33:ab:13:86:bc:e1:ea:6e:5b:ef:37:
         06:24:cf:c2:71:3d:7c:6a:78:3e:37:7b:60:53:d0:29:ed:67:
         94:6e:08:8b:4a:81:7e:cd:fc:f9:f1:47:54:4d:a5:e5:77:db:
         a6:56:9f:be:14:04:2a:ba:6d:88:05:0d:0e:e5:cd:e6:c1:ba:
         68:d4:d4:4c:8e:be:aa:1e:9a:ec:1b:0c:2a:cf:1a:f3:de:e7:
         02:c3:7f:10:21:7e:25:ac:92:6a:5d:02:38:08:8e:00:6a:66:
         2d:a1:a8:13:a9:36:2d:88:01:2d:cf:a1:6a:34:7e:ea:5d:21:
         50:2c:6d:1d:d9:91:da:a2:dc:87:3a:dc:ac:c2:ac:75:c1:6f:
         46:01:86:46:e9:74:1a:af:ac:69:28:ae:0d:98:a0:6b:67:46:
         75:3a:8d:77:f1:bd:90:94:62:37:a8:9f:9a:dc:c1:68:eb:f5:
         e3:0b:10:27:a2:58:da:c8:1c:31:3d:d3:00:cb:03:ca:cd:11:
         58:9a:61:ba:66:fa:c7:c2:61:a2:69:7d:58:4c:71:01:fc:d5:
         e3:e4:8f:ff
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDAuaHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
ZDFmZTU2MzU0MDcwMWRiYTYxZTNhNjA3YjdhNWQyMTE0NGVlZDcwHhcNMjQwMzAy
MTAxOTUzWhcNMjQwMzA1MTM0MDUzWjAzMTEwLwYDVQQDEyhhZjk3NDEwNjQ2YTA3
ZjMyY2FjYzIyZjAxNzUyYTZjNDRmZDJlZDA2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvGAKJh7ytPaKPkCIjz99DVGihGHGenX/PnPDmUCX1vsHGseS
9jCdhCNLij/l5HRDlBDo/Fs0KkOo9JPDrqhlY7V5kVAckgEsyCP1ubZO1f4Vr5WX
ywsngxRbprSv22iGPgmZQFrcNK1jCn7SLT3D1vV6Di+nTWn60RSYnLfkTptJwAfB
pCvUWs93SIvbS3DMOPBotiTfZCjYvSRxgd3+TOGrOrmyTPNQVvP4nyaM9xgYv6Oe
4Z3QqOkmpnHhYdU8VzHzW+tvmZEhk2A5YZrlfmI/L24xveXdUlKmlOsk/gYbP11M
N1cGsHlLkHc2s6pcwWarUaI5glvDx2OGPcknZQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFNOD2TWloEXpZVKRNw3eOH49tbLeMB8GA1UdIwQYMBaAFP5to/H2Z8htQac5
qqkS/oZcHvyDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzNkMWZl
NTYzNTQwNzAxZGJhNjFlM2E2MDdiN2E1ZDIxMTQ0ZWVkNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODcwZGVkZWMtOTU5OS00N2IyLTk3ZDktNGNkODQw
ODI3MTliLzMzZDFmZTU2MzU0MDcwMWRiYTYxZTNhNjA3YjdhNWQyMTE0NGVlZDcu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NzBkZWRlYy05NTk5LTQ3YjItOTdkOS00Y2Q4
NDA4MjcxOWIvMzNkMWZlNTYzNTQwNzAxZGJhNjFlM2E2MDdiN2E1ZDIxMTQ0ZWVk
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAGBAwLavtXnFvPz+mKYHFxlISWgRGmv7cWcDvH7HfHRJieKH
DKDqF1BKq2MzqxOGvOHqblvvNwYkz8JxPXxqeD43e2BT0CntZ5RuCItKgX7N/Pnx
R1RNpeV326ZWn74UBCq6bYgFDQ7lzebBumjU1EyOvqoemuwbDCrPGvPe5wLDfxAh
fiWskmpdAjgIjgBqZi2hqBOpNi2IAS3PoWo0fupdIVAsbR3Zkdqi3Ic63KzCrHXB
b0YBhkbpdBqvrGkorg2YoGtnRnU6jXfxvZCUYjeon5rcwWjr9eMLECeiWNrIHDE9
0wDLA8rNEViaYbpm+sfCYaJpfVhMcQH81ePkj/8=
-----END CERTIFICATE-----
Generated at Sat Mar 2 12:08:58 2024 by rpki-client on console-ams.rpki-client.org