Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a5d2f7c5-bc77-42cf-b396-8ccd420cbd22/9f9dc2154e840976233f64f504c9d8d731a03332.mft
File:                     9f9dc2154e840976233f64f504c9d8d731a03332.mft (raw, json)
Hash identifier:          e82gMX1800C9CO1uVoB4oIYcM11keZjtLyHKm0Nb+vc=
Subject key identifier:   CB:5A:35:8C:A6:A4:99:89:8A:25:E7:E5:3B:30:AC:61:74:44:0C:90
Authority key identifier: 64:66:54:B6:88:A1:D8:DC:59:B4:74:D5:A0:B4:A7:50:29:3A:EA:70
Certificate issuer:       /CN=9f9dc2154e840976233f64f504c9d8d731a03332
Certificate serial:       1E4D8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f9dc2154e840976233f64f504c9d8d731a03332.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a5d2f7c5-bc77-42cf-b396-8ccd420cbd22/9f9dc2154e840976233f64f504c9d8d731a03332.mft
Manifest number:          0DB2
Signing time:             Fri 29 Mar 2024 00:21:27 +0000
Manifest this update:     Thu 28 Mar 2024 23:20:10 +0000
Manifest next update:     Mon 01 Apr 2024 02:11:10 +0000
Files and hashes:         1: 9f9dc2154e840976233f64f504c9d8d731a03332.crl (hash: 9EG947fe7dP+mdIX2wWdtMgChnVI3x6rFUUl1NRy0BQ=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/a5d2f7c5-bc77-42cf-b396-8ccd420cbd22/9f9dc2154e840976233f64f504c9d8d731a03332.crl
                          rsync://repository.lacnic.net/rpki/lacnic/a5d2f7c5-bc77-42cf-b396-8ccd420cbd22/9f9dc2154e840976233f64f504c9d8d731a03332.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f9dc2154e840976233f64f504c9d8d731a03332.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1985935 (0x1e4d8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f9dc2154e840976233f64f504c9d8d731a03332
        Validity
            Not Before: Mar 28 23:20:10 2024 GMT
            Not After : Apr  1 02:11:10 2024 GMT
        Subject: CN=a8a1107e9eee61cd349dd9870d50a50213a0a104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:28:6c:51:ab:33:6e:e6:f9:ca:d6:84:45:14:
                    1c:54:4d:58:06:a9:d4:26:9f:92:2e:ad:94:14:63:
                    e8:5a:31:53:92:1a:84:e7:e5:94:d3:15:56:a8:08:
                    2f:d6:64:47:63:76:ff:25:d5:bf:ff:41:90:fc:18:
                    27:2c:23:d4:ca:d2:57:30:9b:4d:29:c8:5c:c1:f8:
                    49:1b:8f:a2:89:da:bc:57:be:15:c1:1e:8e:68:7d:
                    88:41:b5:2d:08:95:33:25:7e:3b:0b:8f:fd:e1:50:
                    c1:49:d3:bd:9c:0c:f5:3d:d3:bf:e3:a0:a1:3f:1c:
                    e8:5d:fd:28:d4:55:7e:82:cf:95:00:78:e7:f3:06:
                    73:11:64:c6:3c:32:c9:8f:18:7b:17:52:f9:0d:3b:
                    63:5b:e4:3e:2d:a9:e9:2a:72:44:94:fb:94:62:06:
                    19:80:5e:2c:91:8d:7f:a8:b2:ea:f4:98:41:7d:92:
                    f1:0a:ff:21:d5:11:a7:39:6b:09:28:ac:15:bc:5f:
                    f4:1f:44:d0:6d:21:cf:ab:45:f9:4a:56:1d:7c:c4:
                    f7:52:64:d2:84:dd:5c:ff:d8:90:86:76:aa:39:ce:
                    63:dc:94:f7:dc:bd:30:54:7b:06:2e:a9:13:69:b3:
                    11:83:02:91:ae:3c:81:3f:9d:68:01:67:45:31:dd:
                    cc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:5A:35:8C:A6:A4:99:89:8A:25:E7:E5:3B:30:AC:61:74:44:0C:90
            X509v3 Authority Key Identifier:
                keyid:64:66:54:B6:88:A1:D8:DC:59:B4:74:D5:A0:B4:A7:50:29:3A:EA:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f9dc2154e840976233f64f504c9d8d731a03332.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a5d2f7c5-bc77-42cf-b396-8ccd420cbd22/9f9dc2154e840976233f64f504c9d8d731a03332.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a5d2f7c5-bc77-42cf-b396-8ccd420cbd22/9f9dc2154e840976233f64f504c9d8d731a03332.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:59:4f:8f:13:be:30:5b:01:3e:54:71:de:43:81:f0:53:05:
         5b:27:49:18:28:b6:04:59:b3:da:08:bc:d1:11:d8:06:1b:2d:
         ba:5b:ac:79:0e:53:b6:fe:94:19:90:c9:3d:24:de:9e:ad:f6:
         ab:b9:51:7a:8f:19:0d:a7:86:06:9e:49:61:98:74:8b:40:9a:
         b6:92:42:76:3c:84:22:43:74:e0:6b:4a:c9:2e:af:e3:27:d5:
         85:51:69:be:53:8f:cd:23:b2:51:7f:ac:67:2a:56:40:fe:87:
         40:73:10:9a:53:8c:56:67:c0:4a:32:b7:bd:c4:0d:19:77:1e:
         b2:40:1d:a5:70:5f:e9:de:5a:0d:7a:24:13:d5:11:18:67:bb:
         a4:4b:25:8e:ae:71:ea:55:e6:cc:61:f8:15:9a:0c:b6:9b:7e:
         f7:4a:9d:0b:c1:ec:1a:16:3c:6d:a5:0d:ab:ea:68:f4:06:3d:
         aa:6a:a3:db:cc:6f:dc:79:8f:45:00:9f:e1:84:4b:24:96:45:
         15:fd:37:2a:25:dc:29:e0:8b:14:06:4b:1e:4c:0f:5e:06:37:
         e9:37:4c:ea:5a:6b:eb:11:19:cf:4d:8d:0d:aa:28:11:99:55:
         66:0c:0e:43:77:f6:d0:c2:23:0b:2f:17:74:36:29:68:e7:2b:
         63:b0:e0:66
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDHk2PMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlm
OWRjMjE1NGU4NDA5NzYyMzNmNjRmNTA0YzlkOGQ3MzFhMDMzMzIwHhcNMjQwMzI4
MjMyMDEwWhcNMjQwNDAxMDIxMTEwWjAzMTEwLwYDVQQDEyhhOGExMTA3ZTllZWU2
MWNkMzQ5ZGQ5ODcwZDUwYTUwMjEzYTBhMTA0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1ShsUaszbub5ytaERRQcVE1YBqnUJp+SLq2UFGPoWjFTkhqE
5+WU0xVWqAgv1mRHY3b/JdW//0GQ/BgnLCPUytJXMJtNKchcwfhJG4+iidq8V74V
wR6OaH2IQbUtCJUzJX47C4/94VDBSdO9nAz1PdO/46ChPxzoXf0o1FV+gs+VAHjn
8wZzEWTGPDLJjxh7F1L5DTtjW+Q+LanpKnJElPuUYgYZgF4skY1/qLLq9JhBfZLx
Cv8h1RGnOWsJKKwVvF/0H0TQbSHPq0X5SlYdfMT3UmTShN1c/9iQhnaqOc5j3JT3
3L0wVHsGLqkTabMRgwKRrjyBP51oAWdFMd3MUwIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFMtaNYympJmJiiXn5TswrGF0RAyQMB8GA1UdIwQYMBaAFGRmVLaIodjcWbR0
1aC0p1ApOupwMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWY5ZGMy
MTU0ZTg0MDk3NjIzM2Y2NGY1MDRjOWQ4ZDczMWEwMzMzMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTVkMmY3YzUtYmM3Ny00MmNmLWIzOTYtOGNjZDQy
MGNiZDIyLzlmOWRjMjE1NGU4NDA5NzYyMzNmNjRmNTA0YzlkOGQ3MzFhMDMzMzIu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hNWQyZjdjNS1iYzc3LTQyY2YtYjM5Ni04Y2Nk
NDIwY2JkMjIvOWY5ZGMyMTU0ZTg0MDk3NjIzM2Y2NGY1MDRjOWQ4ZDczMWEwMzMz
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAGhZT48TvjBbAT5Ucd5DgfBTBVsnSRgotgRZs9oIvNER2AYb
LbpbrHkOU7b+lBmQyT0k3p6t9qu5UXqPGQ2nhgaeSWGYdItAmraSQnY8hCJDdOBr
Sskur+Mn1YVRab5Tj80jslF/rGcqVkD+h0BzEJpTjFZnwEoyt73EDRl3HrJAHaVw
X+neWg16JBPVERhnu6RLJY6ucepV5sxh+BWaDLabfvdKnQvB7BoWPG2lDavqaPQG
Papqo9vMb9x5j0UAn+GESySWRRX9Nyol3CngixQGSx5MD14GN+k3TOpaa+sRGc9N
jQ2qKBGZVWYMDkN39tDCIwsvF3Q2KWjnK2Ow4GY=
-----END CERTIFICATE-----
Generated at Fri Mar 29 02:14:22 2024 by rpki-client on console-ams.rpki-client.org