Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb0c55a9-4af6-45c9-8249-d878d24e5e32/4ae50a1688a42b708c8e50cedee53ca7debfc796.mft
File:                     4ae50a1688a42b708c8e50cedee53ca7debfc796.mft (raw, json)
Hash identifier:          RHhWFwPMmjpzLbvTXHpw3Gk8axwYw/shvBu9jlHf09g=
Subject key identifier:   20:2A:E3:F3:D8:94:A4:49:9F:CB:D7:7D:6E:3E:96:8B:A5:01:A8:89
Authority key identifier: 73:B6:D3:4D:66:F3:3D:4F:60:12:97:F0:A3:32:47:F8:56:32:11:9E
Certificate issuer:       /CN=4ae50a1688a42b708c8e50cedee53ca7debfc796
Certificate serial:       15B1B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ae50a1688a42b708c8e50cedee53ca7debfc796.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bb0c55a9-4af6-45c9-8249-d878d24e5e32/4ae50a1688a42b708c8e50cedee53ca7debfc796.mft
Manifest number:          0B21
Signing time:             Thu 28 Mar 2024 14:20:55 +0000
Manifest this update:     Thu 28 Mar 2024 13:20:08 +0000
Manifest next update:     Sun 31 Mar 2024 16:56:08 +0000
Files and hashes:         1: 4ae50a1688a42b708c8e50cedee53ca7debfc796.crl (hash: rTNmgGKl4uWdsCDg/2fgU9gVajq3HGbbBNxRNysl5QU=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/bb0c55a9-4af6-45c9-8249-d878d24e5e32/4ae50a1688a42b708c8e50cedee53ca7debfc796.crl
                          rsync://repository.lacnic.net/rpki/lacnic/bb0c55a9-4af6-45c9-8249-d878d24e5e32/4ae50a1688a42b708c8e50cedee53ca7debfc796.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ae50a1688a42b708c8e50cedee53ca7debfc796.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1421750 (0x15b1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ae50a1688a42b708c8e50cedee53ca7debfc796
        Validity
            Not Before: Mar 28 13:20:08 2024 GMT
            Not After : Mar 31 16:56:08 2024 GMT
        Subject: CN=9b9a8b81c7753211f0b8d661a4e5bd7b8be1492b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cd:62:2d:65:56:2b:11:46:b4:26:a9:e8:78:
                    77:04:26:69:e9:b1:09:f5:ba:0c:1b:b8:57:ad:93:
                    e6:83:48:0d:02:02:91:44:76:0e:b3:96:19:c8:2a:
                    27:ec:22:fc:c2:56:de:7e:c7:b0:8a:5b:23:94:3d:
                    90:a2:71:1f:6a:6a:81:ae:dc:55:94:d0:54:06:1d:
                    e1:9a:22:9c:b8:30:59:2d:57:d5:1b:b8:d9:eb:14:
                    12:b7:85:db:48:18:7c:ef:a6:28:c0:40:7d:8a:1b:
                    c4:ab:a0:07:2c:d7:44:0f:31:ac:cc:1e:bc:ba:ab:
                    78:32:0c:36:57:2f:ab:b0:5c:05:80:4e:82:06:8b:
                    46:f7:13:4e:c4:f7:6c:33:3c:7a:b2:98:33:0e:45:
                    29:c5:c3:81:11:07:d3:85:2a:e2:f4:46:8c:6c:ef:
                    c4:a6:89:37:06:87:e6:d1:ec:4b:b5:23:d8:33:94:
                    5e:b0:e2:e5:bf:8d:bb:3e:72:5b:cb:c9:25:17:47:
                    75:99:78:4c:69:79:28:cf:b1:e0:32:50:d9:25:d4:
                    e2:cb:ce:0b:39:83:2b:ea:c2:e4:29:d9:37:7d:25:
                    ca:69:b2:fa:60:ab:3e:ea:d2:e5:df:d3:79:bc:10:
                    a5:7e:ca:52:8b:25:07:46:32:be:b6:81:58:ff:ec:
                    53:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:2A:E3:F3:D8:94:A4:49:9F:CB:D7:7D:6E:3E:96:8B:A5:01:A8:89
            X509v3 Authority Key Identifier:
                keyid:73:B6:D3:4D:66:F3:3D:4F:60:12:97:F0:A3:32:47:F8:56:32:11:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ae50a1688a42b708c8e50cedee53ca7debfc796.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb0c55a9-4af6-45c9-8249-d878d24e5e32/4ae50a1688a42b708c8e50cedee53ca7debfc796.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bb0c55a9-4af6-45c9-8249-d878d24e5e32/4ae50a1688a42b708c8e50cedee53ca7debfc796.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:7c:ff:79:65:03:54:75:53:1e:ca:28:b6:f1:78:86:f5:b8:
         b4:19:be:7f:78:18:15:70:00:6f:9b:8b:07:df:26:19:b3:4b:
         bd:96:ef:d8:d5:91:d0:2e:44:24:0f:72:3b:cc:14:66:3e:a0:
         aa:9c:57:44:6a:9f:7a:57:1d:f4:e0:09:b7:0d:c5:72:7f:6a:
         0d:28:31:28:df:30:43:f1:9d:7f:1f:63:98:e5:21:b0:04:27:
         09:43:63:3c:e5:bc:18:54:9f:e9:a8:ba:4e:d3:85:db:04:3f:
         ab:21:af:1b:66:48:0d:a3:1d:2b:e9:d5:0c:39:50:61:e3:67:
         1b:f0:97:b3:6e:27:16:35:53:0f:5d:d9:9c:7d:bc:1d:b6:a4:
         c8:16:6e:93:d5:cf:5c:ec:e2:ed:73:6e:ca:70:31:d4:57:48:
         15:25:e8:c4:25:1e:d7:23:ea:b3:d4:9d:c1:42:b5:b1:04:b1:
         6b:d8:3f:0b:76:71:f9:88:7b:56:3f:c8:4b:cb:d3:2c:1d:00:
         d7:7a:04:60:34:70:4a:1d:3b:df:3b:c0:53:04:8e:04:10:f8:
         52:0f:19:ca:ac:01:a6:bb:a6:af:61:39:7e:5f:74:9b:b8:37:
         b2:2c:eb:63:bc:07:31:45:fe:1b:b1:fb:fa:e0:75:25:30:87:
         2e:3d:8b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:04:21 2024 by rpki-client on console-ams.rpki-client.org