Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a17a848e-6bd6-41f7-8406-7d6894c3591f/43dce57cdffb676b89eeb458cc86d9a67fbdd104.mft
File:                     43dce57cdffb676b89eeb458cc86d9a67fbdd104.mft (raw, json)
Hash identifier:          BuDDGHjsW1AZhC2F6CpvIieQ2jp87qfq8lERKwgAQV0=
Subject key identifier:   E8:BB:9E:0F:E4:0B:5C:12:FA:0F:50:7E:98:CE:DE:D6:56:ED:6F:DF
Authority key identifier: C6:3F:FA:90:62:DD:B5:47:59:52:B1:15:39:EE:64:BD:A9:B7:F9:D6
Certificate issuer:       /CN=43dce57cdffb676b89eeb458cc86d9a67fbdd104
Certificate serial:       27DE0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43dce57cdffb676b89eeb458cc86d9a67fbdd104.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a17a848e-6bd6-41f7-8406-7d6894c3591f/43dce57cdffb676b89eeb458cc86d9a67fbdd104.mft
Manifest number:          0DC9
Signing time:             Thu 28 Mar 2024 09:20:37 +0000
Manifest this update:     Thu 28 Mar 2024 08:20:08 +0000
Manifest next update:     Sun 31 Mar 2024 12:19:08 +0000
Files and hashes:         1: 02bf76588b89498894d771066fbae3374f338e4c.roa (hash: kSO1KAXPAGtKnhbTwOsnX30b+LHPyr9SyvNd+4XMcNg=)
                          2: 43dce57cdffb676b89eeb458cc86d9a67fbdd104.crl (hash: PURZbMPXu56D77VqByT/HZuGFnjVYDmmBQH/F4twiMM=)
                          3: 893ce56a3fe713ec973eaa106de41a216e4e724a.roa (hash: jjmXHiEs56kozhPoYSmrE11gJ9vPrtCrnSTpJjCvwjg=)
                          4: c842ac7a26d011112006429ef4e52c374b025c16.roa (hash: ba8HpbLHJZW/7n7905aFBRxtGKdXNSFRLxQxcNuv84E=)
                          5: ddf5c35cd88dba8599e5f0077217cc5c1a02e089.roa (hash: +blyHrnMzQq3Q2rRdeyiC6Tp2FgDN3T16f9Slvya87w=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/a17a848e-6bd6-41f7-8406-7d6894c3591f/43dce57cdffb676b89eeb458cc86d9a67fbdd104.crl
                          rsync://repository.lacnic.net/rpki/lacnic/a17a848e-6bd6-41f7-8406-7d6894c3591f/43dce57cdffb676b89eeb458cc86d9a67fbdd104.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43dce57cdffb676b89eeb458cc86d9a67fbdd104.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2612750 (0x27de0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43dce57cdffb676b89eeb458cc86d9a67fbdd104
        Validity
            Not Before: Mar 28 08:20:08 2024 GMT
            Not After : Mar 31 12:19:08 2024 GMT
        Subject: CN=916f3386acf9dbbe9148ea1ab10f113f662f82b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ed:83:9b:23:1e:ea:a9:ea:ef:48:ab:31:86:
                    8f:9a:da:07:3e:ab:e1:93:bd:6a:34:d4:b8:c0:a0:
                    72:fc:6b:fc:60:22:1c:2b:dc:a2:7d:6d:af:ed:cf:
                    ec:78:a6:99:92:3d:e8:80:d5:01:d6:25:b8:97:11:
                    92:38:c8:61:8c:68:63:04:de:fe:e6:af:e6:d2:bc:
                    7d:e9:7d:0e:78:49:a8:ad:00:9b:ba:21:55:e6:98:
                    e3:13:cb:3b:bb:d5:cb:c9:69:f5:b3:f7:fe:79:e2:
                    30:95:07:5a:3f:e8:df:8c:c7:b3:b6:fb:59:df:01:
                    0a:1a:a6:76:73:8f:45:5d:52:f7:36:c7:8c:50:04:
                    bd:01:63:b8:c7:b9:5f:c6:ee:64:d6:b8:5d:5d:6a:
                    1d:68:d8:1c:db:a5:54:21:0d:4f:0d:31:57:33:cf:
                    e0:dc:39:ef:0b:98:1a:88:16:5e:40:ad:46:f6:8c:
                    b9:61:f6:fc:9e:17:2e:56:3f:19:89:04:46:f4:c6:
                    54:01:b2:1b:ad:07:5b:9b:b6:8b:33:1c:31:49:64:
                    01:65:53:ef:cb:e5:b2:7a:b2:f0:1f:bb:80:6c:5e:
                    6c:27:8f:3f:53:d4:d8:b4:b7:05:90:56:08:78:64:
                    17:fe:ad:88:ef:5f:71:d0:72:e1:61:25:75:8e:40:
                    aa:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BB:9E:0F:E4:0B:5C:12:FA:0F:50:7E:98:CE:DE:D6:56:ED:6F:DF
            X509v3 Authority Key Identifier:
                keyid:C6:3F:FA:90:62:DD:B5:47:59:52:B1:15:39:EE:64:BD:A9:B7:F9:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43dce57cdffb676b89eeb458cc86d9a67fbdd104.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a17a848e-6bd6-41f7-8406-7d6894c3591f/43dce57cdffb676b89eeb458cc86d9a67fbdd104.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a17a848e-6bd6-41f7-8406-7d6894c3591f/43dce57cdffb676b89eeb458cc86d9a67fbdd104.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:82:c1:fb:95:d6:7e:2b:cb:cf:2c:bd:cf:bb:14:7e:e4:05:
         2b:e0:99:ca:d5:27:62:ac:9a:52:6d:c3:47:2a:f0:66:75:1d:
         70:2c:ea:85:c9:3c:93:71:34:ef:0f:45:1c:0c:27:24:c9:53:
         c5:8d:33:97:c7:f3:9e:00:04:ff:14:e3:a1:b8:60:df:a0:3a:
         6c:56:07:5f:d6:3f:48:43:6d:9c:b4:bf:ee:33:a9:ee:f1:12:
         86:05:c3:00:16:1a:ba:f9:ab:b5:df:8c:37:0f:cb:b7:c9:5f:
         af:6f:4c:1b:50:bf:7b:37:8f:49:e9:76:8c:56:be:e1:88:3b:
         17:7a:e4:2f:2c:14:32:6e:a7:06:22:36:b9:f0:dc:11:7a:af:
         b7:41:ca:c5:74:34:09:c6:a4:6d:33:6a:3e:09:18:d1:5a:78:
         4a:17:9e:c5:40:e8:59:ae:e3:79:24:fe:2e:da:32:25:b1:7c:
         e3:41:c5:6b:f5:42:ae:33:36:94:c5:de:c7:89:d5:69:9e:03:
         44:19:b7:d0:0a:ed:73:b6:46:e3:7c:9f:10:2b:20:03:48:8f:
         4b:17:72:00:44:31:67:e2:62:5d:e7:d1:3b:6a:ff:4e:c9:91:
         78:73:f8:c4:8c:f0:b1:cb:e1:d5:68:f6:41:5f:38:a0:51:05:
         e8:dc:44:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 11:17:56 2024 by rpki-client on console-fra.rpki-client.org