Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/33cc3bdd4edfc498d2c924783a40c9ff255120b8.mft
File:                     33cc3bdd4edfc498d2c924783a40c9ff255120b8.mft (raw, json)
Hash identifier:          Lu3i2MKo/0apSj6LJDRGHfmX6fn1RDTYjNZ0PLvcWK0=
Subject key identifier:   1D:08:F0:AD:B1:F6:7B:96:AA:9B:E6:B6:38:6E:3C:A1:70:6B:67:9A
Authority key identifier: D1:AA:7C:35:0C:32:75:1C:5D:77:2D:FB:C4:CD:8D:B3:57:CC:70:93
Certificate issuer:       /CN=33cc3bdd4edfc498d2c924783a40c9ff255120b8
Certificate serial:       28DA07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc3bdd4edfc498d2c924783a40c9ff255120b8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/33cc3bdd4edfc498d2c924783a40c9ff255120b8.mft
Manifest number:          0DEC
Signing time:             Fri 29 Mar 2024 07:20:41 +0000
Manifest this update:     Fri 29 Mar 2024 06:20:07 +0000
Manifest next update:     Mon 01 Apr 2024 09:27:07 +0000
Files and hashes:         1: 1c804dd68267f6f8206451247793521840ddfd68.roa (hash: qa+2FyeutgO3mgdGlhuNZZUN6/9bMO4vUrMtI1JGEYA=)
                          2: 33cc3bdd4edfc498d2c924783a40c9ff255120b8.crl (hash: L9S4XgRAkuOzpRJyiIrlY3B7y4I6G7SJNQ1vufsWcNo=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/33cc3bdd4edfc498d2c924783a40c9ff255120b8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/33cc3bdd4edfc498d2c924783a40c9ff255120b8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc3bdd4edfc498d2c924783a40c9ff255120b8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2677255 (0x28da07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33cc3bdd4edfc498d2c924783a40c9ff255120b8
        Validity
            Not Before: Mar 29 06:20:07 2024 GMT
            Not After : Apr  1 09:27:07 2024 GMT
        Subject: CN=0c6c0526edc6370941848addbbc04b9517f3ebdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0a:31:e7:f6:28:7c:d0:be:86:30:ac:af:b7:
                    fb:ca:73:31:f6:a8:ef:e5:e8:22:0f:d7:c9:cf:ad:
                    d5:bd:a8:58:ea:ec:2e:93:29:99:d4:85:3a:23:6d:
                    f6:ff:64:1e:be:7b:d8:80:4b:19:88:79:5d:f5:e9:
                    02:08:c3:c7:43:b1:ff:c0:da:7b:27:cd:84:f4:a1:
                    cb:79:7a:ec:fa:5d:4e:fa:b0:b4:0d:2e:fe:4e:78:
                    5b:1d:80:51:83:53:f9:04:cd:c4:1d:7f:b2:7b:02:
                    1c:d0:bd:e8:3c:25:b4:0a:be:ea:55:b6:66:6e:2f:
                    f9:89:89:0c:b7:55:ca:b1:36:9d:bf:33:5e:af:38:
                    1b:ec:9b:e4:ea:13:ab:16:9f:dd:7d:35:e6:67:37:
                    2d:c0:06:f7:98:37:0f:67:f2:c6:79:d9:1e:e2:5c:
                    0c:06:ec:65:99:d1:0e:a3:f0:77:e4:22:b9:43:5a:
                    89:98:f6:6c:56:79:93:a9:0b:0a:3f:23:7c:52:59:
                    a2:8f:d5:36:9b:27:49:ae:78:4d:a0:93:65:8c:96:
                    40:c1:94:f2:ff:6d:92:5f:5e:a4:15:f9:71:0f:1b:
                    0f:10:75:dd:6e:17:05:aa:d2:23:ff:9c:e8:e9:12:
                    8d:2f:b2:64:7f:ae:21:31:2f:25:4f:e8:93:8e:1f:
                    63:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:08:F0:AD:B1:F6:7B:96:AA:9B:E6:B6:38:6E:3C:A1:70:6B:67:9A
            X509v3 Authority Key Identifier:
                keyid:D1:AA:7C:35:0C:32:75:1C:5D:77:2D:FB:C4:CD:8D:B3:57:CC:70:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc3bdd4edfc498d2c924783a40c9ff255120b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/33cc3bdd4edfc498d2c924783a40c9ff255120b8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/33cc3bdd4edfc498d2c924783a40c9ff255120b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:02:a3:11:e2:70:51:20:c1:92:ab:b4:91:13:32:f6:25:a6:
         87:8d:21:63:a1:79:23:18:f6:f1:9c:37:54:38:24:41:ee:f5:
         8b:75:b5:29:53:43:fd:b6:9f:8a:2e:c3:d8:e1:45:16:88:bf:
         bf:5c:6c:cd:f5:1e:63:b7:d5:1b:00:69:03:05:19:f9:84:39:
         b3:21:ef:73:9e:7e:07:e8:6b:d4:90:94:5a:56:55:f7:44:14:
         6e:9e:28:bc:8b:7d:57:07:3f:d7:33:7d:30:15:6a:51:42:07:
         b9:85:7e:70:bc:3b:d3:0b:6a:00:7e:7f:d7:6b:26:2f:ec:25:
         e2:04:82:3c:22:50:26:f4:4e:50:f3:cd:9d:a6:e6:05:08:9e:
         28:00:e6:74:7f:85:b6:57:12:e0:06:d8:b7:b5:0e:ae:11:bc:
         7d:79:a1:22:14:c5:99:07:a2:b1:79:e0:f4:42:30:0a:6b:63:
         b5:46:24:07:7f:a8:eb:e2:b3:9b:ae:cc:7e:36:d4:44:a5:38:
         bd:5c:7d:80:e4:cf:4d:2d:2f:26:fc:0c:67:9e:ce:0c:83:74:
         ea:cd:8b:1c:4d:08:40:02:99:f9:4b:77:24:f9:5c:c8:70:d6:
         8f:73:98:14:d5:f9:2e:ae:d0:a7:19:06:df:8a:cb:ac:74:3c:
         f3:1f:46:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 08:39:24 2024 by rpki-client on console-ams.rpki-client.org