Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9414bd3c-f731-4163-83e8-1e4ca45f8f42/885ec1383761477d3b9bf40e2f34d45bf0564fce.mft
File:                     885ec1383761477d3b9bf40e2f34d45bf0564fce.mft (raw, json)
Hash identifier:          wzCrlKp1NfyuKYBHUWSxT9SQsbtln0QVJLwwNtFby+E=
Subject key identifier:   0F:E5:0D:1E:87:6E:45:72:AC:B3:83:AF:7A:A2:6D:6C:CE:91:8C:01
Authority key identifier: 55:B3:DA:B6:8A:58:15:C0:66:56:35:3E:E6:2F:E8:11:E0:FD:17:01
Certificate issuer:       /CN=885ec1383761477d3b9bf40e2f34d45bf0564fce
Certificate serial:       077214
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/885ec1383761477d3b9bf40e2f34d45bf0564fce.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9414bd3c-f731-4163-83e8-1e4ca45f8f42/885ec1383761477d3b9bf40e2f34d45bf0564fce.mft
Manifest number:          03DC
Signing time:             Thu 29 Feb 2024 20:20:20 +0000
Manifest this update:     Thu 29 Feb 2024 19:20:10 +0000
Manifest next update:     Sun 03 Mar 2024 21:38:10 +0000
Files and hashes:         1: 885ec1383761477d3b9bf40e2f34d45bf0564fce.crl (hash: dToHJOpgUssIXAWs8+Spi6Z8xk/ajDQN7oFSDW9ljIA=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9414bd3c-f731-4163-83e8-1e4ca45f8f42/885ec1383761477d3b9bf40e2f34d45bf0564fce.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9414bd3c-f731-4163-83e8-1e4ca45f8f42/885ec1383761477d3b9bf40e2f34d45bf0564fce.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/885ec1383761477d3b9bf40e2f34d45bf0564fce.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 03 Mar 2024 20:45:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 487956 (0x77214)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=885ec1383761477d3b9bf40e2f34d45bf0564fce
        Validity
            Not Before: Feb 29 19:20:10 2024 GMT
            Not After : Mar  3 21:38:10 2024 GMT
        Subject: CN=0ff6dca284af1af1f90865d7c3cb2b8f49f7cf3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ec:b9:20:63:07:4e:81:cf:3d:68:a9:f5:a6:
                    7a:53:b5:e1:85:9a:30:38:e2:01:17:2a:17:da:4e:
                    2c:bf:9e:7b:29:fc:52:fd:7d:66:46:21:fe:46:a4:
                    4c:01:42:5b:94:b2:1f:0f:fe:b9:f9:ae:d5:da:cf:
                    18:65:ab:59:25:0e:ed:ff:be:8b:f0:c2:c7:b1:b1:
                    5c:a5:9e:87:3c:ca:c7:27:98:3e:54:e8:e3:7a:79:
                    d8:8e:af:99:7b:bf:72:bd:fb:17:b3:28:b2:b2:a7:
                    63:0e:eb:dd:af:15:18:9c:93:34:2d:22:a7:a1:12:
                    16:3e:19:02:2f:a3:e2:5a:9b:c0:d4:df:3d:4c:7d:
                    18:70:0e:35:6e:15:4a:5a:8d:8d:bc:f7:3b:16:a8:
                    b2:1a:81:2b:dc:fa:c8:5f:35:2d:de:28:01:27:f5:
                    33:57:b8:58:c8:2a:12:31:0a:55:3d:69:f8:19:58:
                    16:54:74:b4:90:ce:95:5f:82:c6:93:6e:be:a5:fb:
                    11:0b:d1:b3:f3:cd:b9:35:6f:64:99:5f:3f:2d:19:
                    a2:fd:00:9f:2f:fa:af:51:16:24:04:0c:ce:4c:ef:
                    3c:f3:06:44:68:1f:21:31:70:0a:35:59:b9:b2:c8:
                    02:0c:3b:b9:d4:12:8d:df:0b:56:47:ac:bf:1e:c2:
                    19:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E5:0D:1E:87:6E:45:72:AC:B3:83:AF:7A:A2:6D:6C:CE:91:8C:01
            X509v3 Authority Key Identifier:
                keyid:55:B3:DA:B6:8A:58:15:C0:66:56:35:3E:E6:2F:E8:11:E0:FD:17:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/885ec1383761477d3b9bf40e2f34d45bf0564fce.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9414bd3c-f731-4163-83e8-1e4ca45f8f42/885ec1383761477d3b9bf40e2f34d45bf0564fce.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9414bd3c-f731-4163-83e8-1e4ca45f8f42/885ec1383761477d3b9bf40e2f34d45bf0564fce.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:cd:60:17:25:d3:14:6a:49:fa:ad:79:75:36:d8:ac:0e:f7:
         5d:e3:16:51:4e:2c:ee:92:33:3c:31:51:b0:ec:07:50:51:7d:
         01:d1:7f:ab:5e:1e:a2:a4:6e:9d:b8:cf:d7:64:8a:d2:f4:c5:
         80:48:67:a9:82:51:2b:6e:b4:05:00:09:db:ae:83:3f:0d:e1:
         09:88:80:92:9f:96:1b:f8:2d:f1:10:b9:87:a4:a3:62:23:52:
         f6:51:2e:c1:1f:c3:c8:b0:bf:ca:58:aa:f5:09:20:f6:81:77:
         73:30:eb:05:d2:64:54:8d:eb:99:a0:52:df:1e:7e:84:f6:dc:
         9e:72:75:65:f7:28:00:af:dc:c6:61:f1:88:31:c7:89:80:d9:
         96:d1:da:1d:fe:9d:2e:b5:c6:2b:2b:a6:d4:4e:c5:67:9c:39:
         6c:cf:50:70:fd:09:7f:21:2c:1a:47:a1:c1:53:16:b7:80:0a:
         ac:49:ab:a9:88:4e:ae:b5:ad:3e:ee:72:72:8d:8d:4e:ed:0c:
         8d:f4:35:a6:37:4f:bd:d6:50:00:c5:d5:09:1e:8f:5f:f5:ec:
         da:58:ee:33:b9:b7:4d:1e:79:98:7b:bf:be:48:35:2b:38:ff:
         45:38:73:c0:21:d9:f6:a8:7c:5c:ea:b0:55:1b:a9:e6:df:9f:
         c9:e9:99:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 22:23:19 2024 by rpki-client on console-ams.rpki-client.org