Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.mft
File:                     3fef0d186e1a114e74266f0fa736fc6cd86f8af7.mft (raw, json)
Hash identifier:          H+X0SbDkN9a9pjOE3MMcjuISs45RRAxB6fk8bEtWFxw=
Subject key identifier:   26:02:0E:4C:9B:B6:DF:DF:70:D1:DA:EB:26:2B:05:C1:2E:92:1D:7F
Authority key identifier: FC:E7:E1:96:3C:2C:94:05:77:EB:FF:52:A6:33:15:F0:11:F9:93:79
Certificate issuer:       /CN=3fef0d186e1a114e74266f0fa736fc6cd86f8af7
Certificate serial:       29009B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.mft
Manifest number:          0DE8
Signing time:             Thu 28 Mar 2024 13:20:21 +0000
Manifest this update:     Thu 28 Mar 2024 12:20:08 +0000
Manifest next update:     Sun 31 Mar 2024 15:17:08 +0000
Files and hashes:         1: 3fef0d186e1a114e74266f0fa736fc6cd86f8af7.crl (hash: nrBY+qiellQ3wgs4/r6jZrewb0mwr1rOXIllL+mRg6o=)
                          2: 863e1793a392c88b2ea4f63cc95ce3d4e277d26d.roa (hash: WspSyNvyD6L1lDIV7Drnt8EK/JSkShMAsPoy8BlhFVA=)
                          3: 9c366147f458b4fb01b4050c28225fb12e5829b6.roa (hash: 2Y9xnyAKbDjNMNFjItB1mQgJSAOYjyL7K0kqrtBCWdU=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2687131 (0x29009b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fef0d186e1a114e74266f0fa736fc6cd86f8af7
        Validity
            Not Before: Mar 28 12:20:08 2024 GMT
            Not After : Mar 31 15:17:08 2024 GMT
        Subject: CN=0d3dac4a2e638612cbd680216bdf18731f64612c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ae:c1:13:36:f7:cb:e8:f1:06:10:51:71:33:
                    d9:65:73:ae:d2:89:1f:4c:6c:d5:e3:8b:3d:7e:8e:
                    ba:c4:a6:85:9e:86:96:a5:f4:4c:c3:8a:e6:4a:c4:
                    d0:ce:15:c7:09:eb:a2:1e:a2:d3:a3:8a:63:6c:ae:
                    02:2d:a3:31:78:d2:42:20:30:88:50:77:da:2d:80:
                    e3:94:2f:2d:26:fd:41:f2:95:70:99:8d:ab:a8:a2:
                    3c:28:0d:c6:f0:69:02:6e:44:bf:e7:f0:d0:5b:f7:
                    19:74:34:d1:0e:26:20:4d:69:45:7a:5c:ab:62:a3:
                    cd:c3:78:4f:ed:ba:e3:5c:9a:ea:da:0d:4f:5c:9e:
                    2b:9d:fe:e7:68:70:69:65:18:4e:78:51:80:09:04:
                    06:75:03:dc:c0:bb:9a:5b:f8:d8:5e:45:f2:66:d6:
                    9b:c7:11:f5:8b:49:ec:71:17:a6:f2:d6:20:ca:7b:
                    38:0c:84:2c:76:68:63:db:a9:1a:b5:ef:1b:1f:ce:
                    f5:2e:9a:a9:de:ec:7e:9b:6d:1f:a5:59:dd:36:79:
                    c3:3e:40:11:b2:b3:e0:9d:2b:bb:39:73:a8:b0:f2:
                    8a:90:7c:aa:6d:be:62:85:9c:24:ef:f0:bc:6d:1c:
                    0e:d0:00:d3:09:47:85:91:78:4e:a7:0b:69:22:f6:
                    80:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:02:0E:4C:9B:B6:DF:DF:70:D1:DA:EB:26:2B:05:C1:2E:92:1D:7F
            X509v3 Authority Key Identifier:
                keyid:FC:E7:E1:96:3C:2C:94:05:77:EB:FF:52:A6:33:15:F0:11:F9:93:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:3f:5a:97:93:82:f8:fe:ae:22:0e:b6:08:72:54:87:05:af:
         49:a7:e4:08:f6:b0:03:3e:cc:3b:86:c9:1a:1a:0f:37:e0:0c:
         1d:48:0e:02:45:f6:04:8a:b4:47:ba:26:82:17:d0:0e:77:4a:
         1e:2b:d3:7b:fe:72:15:dc:af:bb:b4:39:18:48:0a:62:f3:90:
         ea:63:de:f5:03:97:8f:a4:b8:da:1a:72:97:d4:e7:ff:1f:35:
         4c:42:6e:cd:67:b1:3f:18:f8:0e:7e:15:cf:96:7a:3a:56:03:
         81:5b:94:1e:78:59:9b:2e:a3:11:ed:ae:fd:55:e8:c4:87:4a:
         82:a8:5d:ae:ba:dd:fe:53:6f:f0:9b:3d:69:1c:44:61:cb:37:
         5c:0b:92:c2:3d:75:4a:75:b6:95:67:6a:56:95:49:c4:f3:84:
         82:2f:3f:63:0a:03:c1:15:52:79:c6:92:b3:85:0f:94:bc:69:
         8b:e5:66:9f:0f:eb:53:5b:cd:65:ce:d0:bb:f9:f7:29:95:fe:
         77:6a:1b:49:f6:b2:e5:d0:d3:e4:c4:99:11:bf:40:5f:f0:68:
         0f:5b:f0:ff:cf:59:e9:f2:ca:2c:72:78:38:9f:3b:91:33:35:
         50:86:3a:21:72:42:eb:bc:93:c2:97:65:16:57:2a:ad:56:ab:
         ce:95:84:38
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDKQCbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNm
ZWYwZDE4NmUxYTExNGU3NDI2NmYwZmE3MzZmYzZjZDg2ZjhhZjcwHhcNMjQwMzI4
MTIyMDA4WhcNMjQwMzMxMTUxNzA4WjAzMTEwLwYDVQQDEygwZDNkYWM0YTJlNjM4
NjEyY2JkNjgwMjE2YmRmMTg3MzFmNjQ2MTJjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAha7BEzb3y+jxBhBRcTPZZXOu0okfTGzV44s9fo66xKaFnoaW
pfRMw4rmSsTQzhXHCeuiHqLTo4pjbK4CLaMxeNJCIDCIUHfaLYDjlC8tJv1B8pVw
mY2rqKI8KA3G8GkCbkS/5/DQW/cZdDTRDiYgTWlFelyrYqPNw3hP7brjXJrq2g1P
XJ4rnf7naHBpZRhOeFGACQQGdQPcwLuaW/jYXkXyZtabxxH1i0nscRem8tYgyns4
DIQsdmhj26kate8bH871Lpqp3ux+m20fpVndNnnDPkARsrPgnSu7OXOosPKKkHyq
bb5ihZwk7/C8bRwO0ADTCUeFkXhOpwtpIvaAzQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFCYCDkybtt/fcNHa6yYrBcEukh1/MB8GA1UdIwQYMBaAFPzn4ZY8LJQFd+v/
UqYzFfAR+ZN5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvM2ZlZjBk
MTg2ZTFhMTE0ZTc0MjY2ZjBmYTczNmZjNmNkODZmOGFmNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmNhZmU5MzAtMGNlZS00MjgyLWFmNzktNzJiMjUz
N2Q3ZWE5LzNmZWYwZDE4NmUxYTExNGU3NDI2NmYwZmE3MzZmYzZjZDg2ZjhhZjcu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iY2FmZTkzMC0wY2VlLTQyODItYWY3OS03MmIy
NTM3ZDdlYTkvM2ZlZjBkMTg2ZTFhMTE0ZTc0MjY2ZjBmYTczNmZjNmNkODZmOGFm
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAGg/WpeTgvj+riIOtghyVIcFr0mn5Aj2sAM+zDuGyRoaDzfg
DB1IDgJF9gSKtEe6JoIX0A53Sh4r03v+chXcr7u0ORhICmLzkOpj3vUDl4+kuNoa
cpfU5/8fNUxCbs1nsT8Y+A5+Fc+WejpWA4FblB54WZsuoxHtrv1V6MSHSoKoXa66
3f5Tb/CbPWkcRGHLN1wLksI9dUp1tpVnalaVScTzhIIvP2MKA8EVUnnGkrOFD5S8
aYvlZp8P61NbzWXO0Lv59ymV/ndqG0n2suXQ0+TEmRG/QF/waA9b8P/PWenyyixy
eDifO5EzNVCGOiFyQuu8k8KXZRZXKq1Wq86VhDg=
-----END CERTIFICATE-----
Generated at Thu Mar 28 16:04:21 2024 by rpki-client on console-ams.rpki-client.org