Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.mft
File:                     3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.mft (raw, json)
Hash identifier:          tn5UNmUmGEI1UcMktNRESRqld/QVCCgIk89k5JdIdvA=
Subject key identifier:   8E:7A:E2:07:0E:FE:51:59:A5:F1:2F:A8:86:50:76:B5:6C:98:87:4D
Authority key identifier: C5:95:24:B5:C8:D5:68:1E:4A:E5:E7:6A:72:31:62:8B:87:82:41:88
Certificate issuer:       /CN=3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8
Certificate serial:       1FE5D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.mft
Manifest Number:          0922
Signing time:             Wed 22 Mar 2023 17:15:56 +0000
Manifest this update:     Wed 22 Mar 2023 16:15:34 +0000
Manifest next update:     Sat 25 Mar 2023 17:20:34 +0000
Files and hashes:         1: 3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.crl (hash: qfvBkYOfgLu48+WGyTznaGvrYrYAeG+5g3ILgMGb4c0=)
                          2: 4437a4cfaaaff91b6cd2508fabb3fca008e46236.roa (hash: byxP/a01m6fYRGEwzoB7mILZIRN61kebfnHSM7vDgq4=)
                          3: 5d48de03fca37e0f751db33df4d4e7b75b123c95.roa (hash: vxHF1XJgTLIus70672tvYCeNsQ1FEseHnTg4U1bqaAE=)
                          4: 9ac269df9f67f6c3917c77152fb6247fc85b755f.roa (hash: 6fEr4Oy0AjH8l/l9vGTdIUWleTL0SbJNil+Qf7HNAks=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Mar 2023 13:59:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2090449 (0x1fe5d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8
        Validity
            Not Before: Mar 22 16:15:34 2023 GMT
            Not After : Mar 25 17:20:34 2023 GMT
        Subject: CN=a3a8d904ee964d3982e0f7fb071dae0b8e5d7dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a9:25:4f:dc:83:be:71:d2:97:2f:01:dc:0b:
                    6d:7d:4f:76:32:80:dc:e2:25:ee:5b:0f:cd:bd:aa:
                    ea:3c:e1:8b:d8:6d:63:f8:a4:60:82:48:2b:85:93:
                    5f:28:40:40:a8:25:f4:15:b4:15:08:0c:0b:14:04:
                    6b:e6:35:fc:3a:2d:d6:92:1c:6e:1f:fb:0e:eb:7a:
                    23:8d:68:9f:60:91:2d:d2:fd:30:d7:61:65:00:ff:
                    9e:33:82:b4:c3:b5:ce:e7:9c:ec:90:11:9e:d3:9c:
                    15:54:07:7e:94:69:66:89:aa:c3:b9:a5:0b:55:d9:
                    62:27:55:3c:a8:aa:f0:8f:23:ae:28:c9:16:2f:64:
                    6b:24:12:d0:7d:21:ba:7e:81:99:bb:fc:54:78:28:
                    41:d3:04:94:a4:7d:3b:cb:b4:9e:0f:f0:92:96:25:
                    e4:4c:5f:d8:96:b9:f7:cd:ad:14:a3:e6:36:f5:8d:
                    d4:c6:17:69:2b:a8:f2:ab:96:35:b7:8d:8f:1e:51:
                    69:4a:6e:73:f6:2f:45:03:c9:18:94:f4:33:5e:6d:
                    0c:1e:fa:59:5a:d8:e6:0b:b3:72:dd:af:02:62:19:
                    3e:18:87:de:ce:32:cf:56:da:8b:53:4c:3a:52:b5:
                    99:ae:8d:82:87:6a:f8:07:a7:3b:7d:9d:67:e9:b2:
                    9d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                8E:7A:E2:07:0E:FE:51:59:A5:F1:2F:A8:86:50:76:B5:6C:98:87:4D
            X509v3 Authority Key Identifier: 
                keyid:C5:95:24:B5:C8:D5:68:1E:4A:E5:E7:6A:72:31:62:8B:87:82:41:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.cer

            Subject Information Access: 
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:e3:69:10:ee:34:1e:5c:ea:f5:25:a6:6f:3e:22:dd:75:b0:
         81:9e:0c:b6:d3:f5:cf:b6:2c:b5:9d:e1:7e:90:29:da:53:87:
         db:67:bd:70:57:cc:0b:07:e8:12:74:98:34:3e:21:8e:b7:8a:
         fa:0b:28:e8:7b:29:8e:46:7f:d7:c5:3e:ef:82:9d:06:3a:88:
         08:73:5d:d1:e1:24:e8:90:f1:d7:e5:68:bc:1f:b0:af:32:ff:
         f0:3a:e2:5a:25:3b:3d:0b:08:aa:f5:95:5f:45:de:1c:f4:b5:
         f7:a0:e0:a7:cd:72:dc:87:c9:43:03:af:98:ef:e9:7f:b9:b8:
         72:6f:a5:f0:de:1f:ea:a8:12:e0:5e:cb:25:06:36:f9:50:75:
         fa:b7:27:2e:e2:9b:d5:e3:b5:f2:93:33:23:53:9d:d1:65:f0:
         7b:e8:9c:0a:bc:b3:8b:50:ed:72:51:fc:a6:0a:0a:cb:84:2a:
         39:91:03:3d:a4:0f:db:9a:f5:a2:11:fd:ab:88:6e:83:c5:94:
         6c:8a:f5:14:c0:87:72:9f:2c:47:a6:a3:cd:de:8d:3c:d3:57:
         a5:43:96:76:ba:17:10:4f:91:a5:c7:92:14:04:bb:00:c9:ba:
         03:22:c7:ef:de:22:fd:41:42:cd:e5:f3:36:1c:df:5e:42:d1:
         f0:71:c4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 22 17:49:13 2023 by rpki-client on console-ams.rpki-client.org