Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a59cbdde-d760-43dc-b63c-1680804bab92/921db54c016559ed7c8b176132b8f5a6803fa3a0.mft
File:                     921db54c016559ed7c8b176132b8f5a6803fa3a0.mft (raw, json)
Hash identifier:          B7Qy7er7i3BoqrWmtrSoSK60VwKLyTrR2GNEB0jySTc=
Subject key identifier:   24:E0:DC:D7:EC:66:A6:2F:96:52:E7:66:D4:05:75:F1:29:C8:9C:B8
Authority key identifier: 3F:66:B6:1F:C3:A3:A1:BF:43:50:BE:C1:C8:B2:2B:67:18:C4:ED:1C
Certificate issuer:       /CN=921db54c016559ed7c8b176132b8f5a6803fa3a0
Certificate serial:       269929
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/921db54c016559ed7c8b176132b8f5a6803fa3a0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a59cbdde-d760-43dc-b63c-1680804bab92/921db54c016559ed7c8b176132b8f5a6803fa3a0.mft
Manifest number:          0DC6
Signing time:             Thu 28 Mar 2024 12:20:27 +0000
Manifest this update:     Thu 28 Mar 2024 11:20:06 +0000
Manifest next update:     Sun 31 Mar 2024 13:34:06 +0000
Files and hashes:         1: 921db54c016559ed7c8b176132b8f5a6803fa3a0.crl (hash: UYwg6A2NTVpdf60YJPuaLCjlyg9QBtaaUuf1Yh/wPnE=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/a59cbdde-d760-43dc-b63c-1680804bab92/921db54c016559ed7c8b176132b8f5a6803fa3a0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/a59cbdde-d760-43dc-b63c-1680804bab92/921db54c016559ed7c8b176132b8f5a6803fa3a0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/921db54c016559ed7c8b176132b8f5a6803fa3a0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2529577 (0x269929)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=921db54c016559ed7c8b176132b8f5a6803fa3a0
        Validity
            Not Before: Mar 28 11:20:06 2024 GMT
            Not After : Mar 31 13:34:06 2024 GMT
        Subject: CN=90dd8be43bbc2f59cdfe56ae7f828049a4514d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:02:3a:14:19:a8:c2:ff:c9:d3:9f:85:a1:c7:
                    88:42:12:47:8d:c3:98:06:bf:c5:5c:5f:b0:c7:aa:
                    0c:fc:96:a4:99:45:88:7a:65:12:f6:dd:5d:7c:72:
                    5e:53:bb:99:fa:91:36:49:97:6f:bb:01:c2:f4:01:
                    55:03:2f:44:6f:99:c1:0b:82:92:59:58:0a:7c:b3:
                    e6:8f:79:3e:c9:1c:8c:e3:0f:e5:af:d5:49:ed:b1:
                    1c:4f:d0:1b:9a:66:8b:bd:70:aa:d9:c1:d5:c9:47:
                    6d:3a:43:6a:38:39:c9:7e:94:4f:d1:61:9e:bf:9f:
                    c8:77:2e:61:f5:cb:a8:3a:ec:fd:8d:13:ff:3a:07:
                    fe:02:ba:ec:a7:6f:ed:2b:11:17:a9:63:e6:de:2b:
                    30:eb:45:5e:0c:97:be:40:c7:20:d6:02:81:a8:f2:
                    32:de:00:00:25:ec:65:6f:c2:45:8f:cc:6c:0e:ea:
                    68:ec:c7:8c:66:69:a4:93:3b:d8:c0:15:4c:68:fa:
                    14:74:d9:02:d2:d9:b3:93:26:92:29:f7:54:de:cc:
                    00:97:56:18:d6:9d:81:97:9c:ac:60:79:70:7b:cf:
                    36:21:64:5f:7f:5c:62:d0:f1:ee:40:dd:76:4d:14:
                    a4:8d:53:60:30:4a:cc:35:db:c5:8e:fa:bd:3e:a8:
                    19:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E0:DC:D7:EC:66:A6:2F:96:52:E7:66:D4:05:75:F1:29:C8:9C:B8
            X509v3 Authority Key Identifier:
                keyid:3F:66:B6:1F:C3:A3:A1:BF:43:50:BE:C1:C8:B2:2B:67:18:C4:ED:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/921db54c016559ed7c8b176132b8f5a6803fa3a0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a59cbdde-d760-43dc-b63c-1680804bab92/921db54c016559ed7c8b176132b8f5a6803fa3a0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a59cbdde-d760-43dc-b63c-1680804bab92/921db54c016559ed7c8b176132b8f5a6803fa3a0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:e8:67:d6:3c:7e:6d:8c:1e:3b:78:b7:57:1e:fb:9e:a3:02:
         27:a9:91:34:51:33:fb:bc:4f:b2:6a:dd:41:1c:93:26:f2:cb:
         07:39:c5:09:4b:9c:b3:24:89:db:a0:be:a2:9d:ce:ba:d0:76:
         18:4f:dd:2d:0b:5d:d7:f0:1f:2d:5d:77:73:16:37:2b:c6:8f:
         70:b7:7f:8b:b6:47:89:be:0a:3b:7d:f3:67:72:96:10:a2:2d:
         90:25:04:b9:38:a3:d1:6b:e1:58:01:15:74:14:6d:30:e8:7d:
         fc:20:14:be:fc:6a:83:91:7c:e6:15:69:9b:01:2d:fe:60:59:
         d5:73:44:ed:3b:db:8d:86:38:98:0e:4d:0f:fb:f4:01:2d:0d:
         2f:0b:3d:6f:49:b7:82:92:ad:bd:e8:d0:6d:93:9c:55:88:31:
         79:9b:e7:9a:ef:13:55:0f:d5:dc:c0:eb:92:30:33:cf:de:29:
         f9:28:99:65:e0:d3:ae:ab:bf:db:2e:56:b0:2f:c1:4a:d5:64:
         de:dc:66:31:41:b7:a6:86:fd:ed:b9:75:b5:6a:b0:2b:ee:33:
         8c:b0:0d:4e:15:34:13:d9:d4:d1:a6:62:68:03:12:57:e4:3a:
         9b:0b:95:54:85:de:78:cc:d2:d8:da:bf:11:64:cc:35:cb:f9:
         69:97:eb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 13:29:23 2024 by rpki-client on console-ams.rpki-client.org