Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa855932-6cb5-4198-ad3e-4764f1acf9b4/254bebd96f7e069ee36566fd9821930de6b2d7ad.mft
File:                     254bebd96f7e069ee36566fd9821930de6b2d7ad.mft (raw, json)
Hash identifier:          cq8Cs/qoeld4iDw0WPQTZAj7nYxwZc3N5t4fYbZXOLc=
Subject key identifier:   A8:90:A9:B1:5D:3F:F3:87:7E:10:12:41:F0:8E:EF:37:E5:92:0A:DE
Authority key identifier: 03:01:12:9D:7B:CF:62:23:9E:7F:58:1D:D6:C9:E5:76:F2:0F:6F:5A
Certificate issuer:       /CN=254bebd96f7e069ee36566fd9821930de6b2d7ad
Certificate serial:       287B19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/254bebd96f7e069ee36566fd9821930de6b2d7ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa855932-6cb5-4198-ad3e-4764f1acf9b4/254bebd96f7e069ee36566fd9821930de6b2d7ad.mft
Manifest number:          0DB1
Signing time:             Fri 29 Mar 2024 02:20:27 +0000
Manifest this update:     Fri 29 Mar 2024 01:20:08 +0000
Manifest next update:     Mon 01 Apr 2024 02:35:08 +0000
Files and hashes:         1: 254bebd96f7e069ee36566fd9821930de6b2d7ad.crl (hash: RlD3Ptha7hC6WaIgkBaQm+8WD9Ed4czHXXPSYEwShK0=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/aa855932-6cb5-4198-ad3e-4764f1acf9b4/254bebd96f7e069ee36566fd9821930de6b2d7ad.crl
                          rsync://repository.lacnic.net/rpki/lacnic/aa855932-6cb5-4198-ad3e-4764f1acf9b4/254bebd96f7e069ee36566fd9821930de6b2d7ad.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/254bebd96f7e069ee36566fd9821930de6b2d7ad.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2652953 (0x287b19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=254bebd96f7e069ee36566fd9821930de6b2d7ad
        Validity
            Not Before: Mar 29 01:20:08 2024 GMT
            Not After : Apr  1 02:35:08 2024 GMT
        Subject: CN=a00c6767fee1acff3fcfa950798bf2e1213c6e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6f:e2:bd:86:cb:c2:9a:0e:65:6a:4e:53:12:
                    a3:72:30:4c:4b:85:a6:5c:5c:47:d2:b0:08:ca:8b:
                    33:f2:76:97:3d:7c:e5:7c:10:ff:38:5a:3c:4f:40:
                    38:25:c7:e5:0f:b9:18:3d:c2:fe:c6:96:c5:60:59:
                    60:cd:eb:4b:83:68:8f:d4:63:a2:5a:31:a6:ae:a0:
                    bb:05:04:1b:a6:4a:c2:d6:71:81:e4:4e:ed:1b:f4:
                    57:c9:e0:e1:5e:a6:df:ac:0a:c6:0f:87:99:41:7a:
                    8b:fe:6b:7f:94:c0:e4:b7:19:c5:04:e0:4d:4e:08:
                    5b:d8:e7:c4:ee:42:bd:66:ac:0c:71:5c:30:c8:9b:
                    4e:08:a7:7e:e3:58:ad:31:c8:e5:cd:0a:7c:47:20:
                    69:8c:19:e4:1e:d8:9c:0a:70:f1:eb:00:e8:e2:7e:
                    5b:02:14:70:98:06:40:fa:a5:a4:f8:32:79:ce:e8:
                    73:08:63:5e:0b:0a:90:bd:a7:5d:57:a7:62:7d:d0:
                    17:a8:c4:0a:12:e3:36:40:19:bf:02:72:71:98:09:
                    ba:d5:4e:14:fb:f9:18:0a:20:8d:93:02:09:72:e8:
                    29:cd:ab:1c:c9:cf:2a:41:e7:e0:82:ee:81:7f:5e:
                    da:41:69:26:72:17:2a:79:b3:9d:68:d9:9c:d5:c1:
                    d3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:90:A9:B1:5D:3F:F3:87:7E:10:12:41:F0:8E:EF:37:E5:92:0A:DE
            X509v3 Authority Key Identifier:
                keyid:03:01:12:9D:7B:CF:62:23:9E:7F:58:1D:D6:C9:E5:76:F2:0F:6F:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/254bebd96f7e069ee36566fd9821930de6b2d7ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa855932-6cb5-4198-ad3e-4764f1acf9b4/254bebd96f7e069ee36566fd9821930de6b2d7ad.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa855932-6cb5-4198-ad3e-4764f1acf9b4/254bebd96f7e069ee36566fd9821930de6b2d7ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:79:8e:8e:e2:0d:8e:9e:e0:00:61:a2:1f:18:aa:27:18:48:
         5a:0c:11:4f:41:b4:ef:05:d5:f5:18:95:1a:5f:3e:0b:7c:be:
         a6:8d:0c:08:30:66:1b:07:95:40:e5:86:7c:66:87:a3:93:93:
         b5:1d:c4:06:3a:40:6a:0d:b7:c9:d7:cc:90:a8:0d:8d:af:4e:
         5e:da:12:67:3b:f8:6f:b8:e4:f0:90:cc:0e:9b:f9:8b:af:ce:
         39:5c:cd:fd:88:90:33:d4:e0:f3:ab:6f:60:f7:c0:6e:e7:b4:
         73:cf:39:9a:7d:d7:78:94:64:c0:0c:1c:b4:1e:ec:2a:02:12:
         7f:dd:02:2b:eb:5f:1a:55:c2:f7:7c:f2:8a:18:9c:b9:89:f7:
         60:3b:55:cd:e8:a8:84:01:c2:50:47:6b:a5:d6:4d:4a:10:51:
         de:67:7c:81:13:16:ae:73:fe:b3:88:8e:68:b8:d4:a8:68:6d:
         a1:1f:d0:6b:c5:1b:f9:1c:03:76:f1:56:4f:1a:5a:49:a0:c5:
         dc:97:7f:8e:98:e7:30:0f:49:28:1d:67:54:88:7c:63:3d:79:
         a5:31:ae:8e:e9:38:8a:de:24:1f:1c:9e:5c:34:f0:f0:ab:10:
         89:92:35:3f:c6:b3:99:5f:0d:38:57:f0:4e:84:eb:96:34:ec:
         54:d1:77:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 03:23:56 2024 by rpki-client on console-ams.rpki-client.org