Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/884fba2e-2589-4669-bf49-d3145db6442f/1ffa70be0f2939adf371127478487e627e9dcfa1.mft
File:                     1ffa70be0f2939adf371127478487e627e9dcfa1.mft (raw, json)
Hash identifier:          4j7l71HMzTNfJVNKvJt1ex3DvoXp7d+0ggvgpaCd5qw=
Subject key identifier:   B9:72:1D:2A:7E:FD:91:95:AA:CC:18:C3:25:1F:B2:7F:2C:7C:44:37
Authority key identifier: 22:F8:9D:17:C5:6F:25:00:F9:75:07:61:46:9D:A3:E5:47:51:1A:DB
Certificate issuer:       /CN=1ffa70be0f2939adf371127478487e627e9dcfa1
Certificate serial:       1F86A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ffa70be0f2939adf371127478487e627e9dcfa1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/884fba2e-2589-4669-bf49-d3145db6442f/1ffa70be0f2939adf371127478487e627e9dcfa1.mft
Manifest Number:          093D
Signing time:             Fri 31 Mar 2023 16:16:05 +0000
Manifest this update:     Fri 31 Mar 2023 15:15:45 +0000
Manifest next update:     Mon 03 Apr 2023 17:30:45 +0000
Files and hashes:         1: 1ffa70be0f2939adf371127478487e627e9dcfa1.crl (hash: x1pGmv+iT7bWZapp/1OE5E4YK330M7tycXU0vRdvMLE=)
                          2: 238e7605ce9b6c9b2b6dce543b4de1218880f85f.roa (hash: cNIQMr1T9tDdHV6u+YH+IRJgV+vC8R/5cx0VZgc66UE=)
                          3: 67b68a9aeddd1419bb042e6acb1cd8c2bed34281.roa (hash: F+FJdmujyMsL8M800xvuAOxeAK6ONfgNPSNsjmP0qUc=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/884fba2e-2589-4669-bf49-d3145db6442f/1ffa70be0f2939adf371127478487e627e9dcfa1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/884fba2e-2589-4669-bf49-d3145db6442f/1ffa70be0f2939adf371127478487e627e9dcfa1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ffa70be0f2939adf371127478487e627e9dcfa1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Apr 2023 16:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2066080 (0x1f86a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ffa70be0f2939adf371127478487e627e9dcfa1
        Validity
            Not Before: Mar 31 15:15:45 2023 GMT
            Not After : Apr  3 17:30:45 2023 GMT
        Subject: CN=fef42a35ceec5e3a38e4f0a05d979b602b972a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0f:dd:cf:a3:8b:cf:f9:3c:55:63:02:79:81:
                    44:b2:39:1b:05:58:cc:88:35:0b:55:c2:2b:9e:1d:
                    4b:38:64:fa:6b:45:76:3d:59:d0:69:29:8a:a3:70:
                    ca:59:9b:f6:88:68:6c:23:3c:2b:88:c8:d8:b8:aa:
                    f8:aa:02:8d:bf:21:af:48:5f:b6:06:73:16:75:d1:
                    bd:fb:e0:38:73:07:d7:57:a0:e0:3d:0a:34:4e:8f:
                    e3:15:0f:b8:8c:0f:e6:4a:b3:73:bf:b0:dd:34:bc:
                    c9:72:db:4e:eb:3f:b8:e7:0b:ca:bc:7c:f0:3f:5d:
                    d8:cc:c4:8c:31:55:0a:27:be:dc:1e:71:da:32:97:
                    ec:94:b2:20:b8:ab:e6:17:14:83:46:b1:5c:04:6e:
                    55:7e:2c:32:83:dc:1f:f4:c3:3f:a9:22:fd:a2:17:
                    9d:11:a9:bb:8e:2b:c4:22:a7:af:3a:83:dc:cd:28:
                    2a:a4:c1:81:d3:a7:88:9d:46:c0:2f:63:8b:a0:cc:
                    4d:00:32:19:d7:7b:98:b2:5e:e7:df:81:21:6e:bb:
                    3f:b8:17:03:f6:6d:3e:47:d2:2f:ad:35:79:53:23:
                    5c:cc:0b:34:89:20:c4:70:81:dc:92:b5:58:9e:95:
                    e5:5e:0f:ac:10:6b:d9:63:15:1f:2c:df:16:71:a6:
                    b4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B9:72:1D:2A:7E:FD:91:95:AA:CC:18:C3:25:1F:B2:7F:2C:7C:44:37
            X509v3 Authority Key Identifier: 
                keyid:22:F8:9D:17:C5:6F:25:00:F9:75:07:61:46:9D:A3:E5:47:51:1A:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ffa70be0f2939adf371127478487e627e9dcfa1.cer

            Subject Information Access: 
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/884fba2e-2589-4669-bf49-d3145db6442f/1ffa70be0f2939adf371127478487e627e9dcfa1.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/884fba2e-2589-4669-bf49-d3145db6442f/1ffa70be0f2939adf371127478487e627e9dcfa1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:ee:34:11:50:1d:12:2a:6c:6e:4a:16:5e:da:de:95:a3:ae:
         48:95:83:98:dd:c4:4e:ae:59:d3:cf:69:c1:95:83:e8:8f:b8:
         68:a5:2d:bc:aa:02:a8:14:cb:6e:ae:f8:1e:04:dd:3e:95:58:
         4d:06:e0:39:e1:50:21:95:a4:8f:cb:27:eb:29:51:fd:6a:fb:
         21:c0:41:32:a4:fa:1f:22:f9:7d:e7:fa:b1:de:25:6a:76:9a:
         6c:80:8c:61:36:c4:c9:6c:58:54:01:53:56:e7:ba:e0:a2:e7:
         f2:8f:28:7b:1e:42:a0:73:a8:75:cd:43:cc:00:29:1f:b3:7b:
         d2:52:f0:e3:87:5d:e7:a9:92:bd:77:a2:58:f4:5e:a7:6a:5a:
         9d:ae:97:68:8f:3c:f2:b6:83:9b:f2:24:de:79:de:e9:8f:00:
         79:c2:74:f6:1c:33:67:68:5e:7b:be:65:ee:39:ed:ca:03:dd:
         76:81:03:95:dc:7b:83:b8:f7:e8:0e:40:a6:a5:53:06:4d:fc:
         a5:af:77:c4:65:2e:db:36:b5:82:77:b9:eb:bb:cf:a7:c4:f8:
         1b:db:89:27:34:bb:c7:c7:6a:bc:8e:cf:2f:77:75:03:ca:a9:
         05:1b:10:65:f6:1f:fc:0c:3a:65:38:14:5c:ef:a4:de:47:db:
         b0:70:f8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 31 16:52:11 2023 by rpki-client on console-ams.rpki-client.org