Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a21629f4-49b0-4d37-938c-e0954f8e592d/bbd84c8e3afcfa400f02dbac0e0457a4e37fbb47.mft
File:                     bbd84c8e3afcfa400f02dbac0e0457a4e37fbb47.mft (raw, json)
Hash identifier:          0Ubz9bmWLF1p2kH00bpcTCDYY7HaGmwhc98eaqcM6SY=
Subject key identifier:   44:BB:7A:B3:4C:86:8A:66:0A:27:5B:4E:89:91:BA:BA:11:D0:A6:28
Authority key identifier: 35:8F:E7:D8:15:F0:73:4D:A9:F3:E0:E8:34:7E:9C:3C:A5:58:9A:2C
Certificate issuer:       /CN=bbd84c8e3afcfa400f02dbac0e0457a4e37fbb47
Certificate serial:       05F6DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bbd84c8e3afcfa400f02dbac0e0457a4e37fbb47.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a21629f4-49b0-4d37-938c-e0954f8e592d/bbd84c8e3afcfa400f02dbac0e0457a4e37fbb47.mft
Manifest number:          0311
Signing time:             Sat 02 Mar 2024 06:20:39 +0000
Manifest this update:     Sat 02 Mar 2024 05:19:49 +0000
Manifest next update:     Tue 05 Mar 2024 06:46:49 +0000
Files and hashes:         1: bbd84c8e3afcfa400f02dbac0e0457a4e37fbb47.crl (hash: q+98PrNcKDp6i/qsgUKojpOtt5oV68wK9Jirh/GdLcM=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/a21629f4-49b0-4d37-938c-e0954f8e592d/bbd84c8e3afcfa400f02dbac0e0457a4e37fbb47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/a21629f4-49b0-4d37-938c-e0954f8e592d/bbd84c8e3afcfa400f02dbac0e0457a4e37fbb47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bbd84c8e3afcfa400f02dbac0e0457a4e37fbb47.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Mar 2024 04:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390876 (0x5f6dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbd84c8e3afcfa400f02dbac0e0457a4e37fbb47
        Validity
            Not Before: Mar  2 05:19:49 2024 GMT
            Not After : Mar  5 06:46:49 2024 GMT
        Subject: CN=c32efed251a8ef192e938a7ef687bbd60c2285ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:71:2f:72:ee:32:d2:70:98:67:fb:20:2f:18:
                    20:75:ce:bf:d7:cf:a7:c8:c2:11:09:ca:1e:cf:75:
                    ed:1c:1e:61:7e:2f:48:dc:d8:e5:87:39:04:11:74:
                    5f:be:be:5e:de:dc:99:80:71:b8:5b:37:53:20:21:
                    20:ad:69:c4:d0:84:91:9a:69:71:76:8f:e4:a5:8e:
                    07:a1:20:4d:72:c8:e4:32:5c:12:69:02:6d:4e:1c:
                    9b:22:dc:39:54:86:84:c6:e6:c8:ac:56:7a:7a:a2:
                    78:4b:57:13:a5:4a:37:8d:d0:a1:7a:c1:80:21:28:
                    0c:19:45:6a:2e:1c:9c:ef:3d:f7:20:a4:7a:38:8a:
                    e3:ae:e4:c3:6b:2b:47:f3:d3:d7:9e:13:9d:6b:e3:
                    43:6c:7f:13:f3:2a:e2:a9:fe:9f:de:5a:64:96:18:
                    f8:b0:9a:d3:93:d0:0a:f3:22:ce:88:f3:76:02:60:
                    2b:4c:d7:5c:11:f9:4d:5f:81:09:84:64:ac:05:89:
                    e9:18:d6:08:29:59:48:f2:8c:f7:ee:e3:e8:d1:74:
                    2c:31:72:aa:64:5e:52:ea:61:f8:9d:6f:15:c3:9f:
                    b0:d9:15:e3:09:b2:26:d3:83:73:f8:e0:c0:a7:d7:
                    dc:2d:94:9e:0e:67:e7:c3:94:4d:59:4f:3b:ad:a4:
                    c2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BB:7A:B3:4C:86:8A:66:0A:27:5B:4E:89:91:BA:BA:11:D0:A6:28
            X509v3 Authority Key Identifier:
                keyid:35:8F:E7:D8:15:F0:73:4D:A9:F3:E0:E8:34:7E:9C:3C:A5:58:9A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bbd84c8e3afcfa400f02dbac0e0457a4e37fbb47.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a21629f4-49b0-4d37-938c-e0954f8e592d/bbd84c8e3afcfa400f02dbac0e0457a4e37fbb47.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a21629f4-49b0-4d37-938c-e0954f8e592d/bbd84c8e3afcfa400f02dbac0e0457a4e37fbb47.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:3a:d1:d6:6a:c2:86:3e:cc:e5:e0:da:ce:c4:7d:e4:57:d5:
         a0:d5:2f:f1:45:90:6e:c3:3a:12:9c:5e:a5:34:70:0d:1c:55:
         d6:99:02:79:9d:0e:55:a8:10:06:0e:84:5f:7e:29:e5:3a:bc:
         7f:81:f8:f0:a6:c2:03:a9:65:11:24:3c:4d:da:7d:6b:ef:88:
         95:cd:08:f0:31:5d:2b:37:e4:de:5e:b1:34:56:09:12:77:5a:
         bb:08:1f:ec:8b:7d:92:ac:6f:bb:93:df:77:7a:2f:a6:5b:cd:
         28:1d:ef:ac:ad:9b:cc:ee:04:ff:3c:89:6f:0a:d0:f7:66:41:
         5e:57:41:16:50:b5:93:f4:7a:61:5f:64:19:ee:d5:9e:c3:c8:
         44:10:21:8f:6a:07:08:5e:6b:a3:9a:34:9f:c0:e3:e7:2e:2a:
         e3:67:4b:ff:09:a9:40:f7:9d:31:51:92:33:26:1c:00:a3:36:
         1f:1d:30:e1:61:86:e1:05:6b:70:b2:22:fc:d0:75:a1:68:92:
         1c:36:89:f6:e1:3e:99:9a:77:ba:0d:5f:99:41:c1:62:e6:3c:
         4a:79:ed:85:5a:07:5f:62:4d:44:0e:5a:a6:36:46:76:d9:40:
         1e:4b:bd:bc:55:68:94:04:3a:68:24:43:2e:9b:15:79:d3:d5:
         4c:72:57:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 2 07:00:20 2024 by rpki-client on console-fra.rpki-client.org