Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c3cb121b-5c71-479e-a8cd-a34a7d769fde/40a89bc6ce1028b2fb8b3f3c58b22060364675c3.mft
File:                     40a89bc6ce1028b2fb8b3f3c58b22060364675c3.mft (raw, json)
Hash identifier:          FvBFB1p0vtEi3pPy2s6areoD5yqibzK8WC4SsIt8Aq4=
Subject key identifier:   52:65:F4:6E:B6:A4:AD:96:A7:67:76:73:89:A0:39:94:3C:D6:7B:BA
Authority key identifier: 07:E4:F5:CC:98:88:E6:E0:7E:A5:E1:DB:C6:D9:1E:58:B0:EA:69:45
Certificate issuer:       /CN=40a89bc6ce1028b2fb8b3f3c58b22060364675c3
Certificate serial:       27655F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40a89bc6ce1028b2fb8b3f3c58b22060364675c3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c3cb121b-5c71-479e-a8cd-a34a7d769fde/40a89bc6ce1028b2fb8b3f3c58b22060364675c3.mft
Manifest number:          0DC2
Signing time:             Fri 29 Mar 2024 01:20:59 +0000
Manifest this update:     Fri 29 Mar 2024 00:20:07 +0000
Manifest next update:     Mon 01 Apr 2024 02:14:07 +0000
Files and hashes:         1: 40a89bc6ce1028b2fb8b3f3c58b22060364675c3.crl (hash: eBbeJffr6dNdPsCV2dWEHHh94pulfXNrQv4R5FmQJSY=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/c3cb121b-5c71-479e-a8cd-a34a7d769fde/40a89bc6ce1028b2fb8b3f3c58b22060364675c3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/c3cb121b-5c71-479e-a8cd-a34a7d769fde/40a89bc6ce1028b2fb8b3f3c58b22060364675c3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40a89bc6ce1028b2fb8b3f3c58b22060364675c3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2581855 (0x27655f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40a89bc6ce1028b2fb8b3f3c58b22060364675c3
        Validity
            Not Before: Mar 29 00:20:07 2024 GMT
            Not After : Apr  1 02:14:07 2024 GMT
        Subject: CN=d3b759613d0cf09487dbb3d3822ba58944cdef9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f4:62:56:bd:73:dd:c0:c3:73:65:76:d9:a7:
                    62:15:f8:37:65:a1:43:b1:70:90:ae:8b:56:10:5e:
                    3d:fa:d4:1c:2b:70:cf:e6:35:84:52:8a:47:d1:1a:
                    82:92:f4:aa:a8:74:80:3a:0d:7d:be:de:21:c7:7a:
                    ec:12:eb:f9:69:48:f2:94:f2:29:cd:8f:ae:8b:a6:
                    3e:a3:09:e7:7f:03:6b:9c:08:3b:af:95:c9:f8:4e:
                    70:be:c6:90:54:cc:16:4a:dd:b1:4a:08:11:28:f3:
                    43:fe:73:51:b2:70:76:ce:9d:e5:a2:3b:af:ee:a1:
                    3e:93:ec:49:f2:82:0e:59:82:aa:2d:04:69:8e:c5:
                    db:8d:e9:d8:8f:d2:db:eb:09:50:a9:dc:b6:fb:32:
                    f2:f7:02:2b:e5:73:86:86:c1:d1:63:8b:58:f1:90:
                    1b:4a:0c:db:be:fd:7a:33:d6:e3:b3:1e:c8:ab:82:
                    cf:54:f6:10:3e:6b:c0:88:79:d6:40:26:5d:44:7d:
                    b9:fd:4a:e1:91:56:79:61:39:cc:4a:98:a7:0e:2f:
                    1a:b1:a8:b2:6f:9d:3e:fc:3c:4b:70:36:e5:fd:14:
                    43:2a:3b:fa:fc:a5:77:b8:f7:79:ad:8a:30:ab:ae:
                    b6:a0:13:51:e4:e2:28:df:88:9e:72:6e:a5:c6:f7:
                    6b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:65:F4:6E:B6:A4:AD:96:A7:67:76:73:89:A0:39:94:3C:D6:7B:BA
            X509v3 Authority Key Identifier:
                keyid:07:E4:F5:CC:98:88:E6:E0:7E:A5:E1:DB:C6:D9:1E:58:B0:EA:69:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40a89bc6ce1028b2fb8b3f3c58b22060364675c3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c3cb121b-5c71-479e-a8cd-a34a7d769fde/40a89bc6ce1028b2fb8b3f3c58b22060364675c3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c3cb121b-5c71-479e-a8cd-a34a7d769fde/40a89bc6ce1028b2fb8b3f3c58b22060364675c3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:25:ac:c8:b2:07:a5:f2:8c:bb:53:c8:be:43:26:c5:8b:91:
         58:d5:31:c2:c5:c0:82:87:c6:e0:80:a3:89:5d:7d:ef:90:40:
         7e:c8:e5:9a:af:47:60:19:66:61:f6:38:0f:59:ad:c6:5a:22:
         d2:42:12:a6:dc:64:11:05:4f:aa:73:38:7c:be:fc:72:5b:06:
         d1:ea:4c:00:c4:48:6d:78:a4:a1:9a:e5:c9:7f:36:2c:40:69:
         0b:bb:87:db:08:03:1c:f1:62:2e:b5:3a:0a:62:8e:08:b4:ff:
         fc:f1:63:d7:c0:e9:1b:a0:9a:57:f7:e5:fe:0b:4e:7f:db:86:
         e9:fe:f9:82:ae:75:bb:cc:7a:eb:b4:8b:3f:ff:79:bf:94:e3:
         0c:a2:05:94:39:f0:f7:bf:df:e3:ed:00:d0:a1:86:df:04:5e:
         1f:ad:8a:c8:31:78:64:59:93:f2:7a:2c:36:9e:d9:cb:8b:10:
         b5:6e:7e:13:67:0b:fa:c5:51:f8:cd:92:31:fe:e4:e5:62:dd:
         e9:26:4f:93:63:f4:f5:b1:52:43:f1:25:af:72:dc:2b:86:5b:
         70:c0:ea:a6:84:7b:0b:51:a2:d3:e6:9f:9d:88:17:11:bd:3d:
         5f:ca:86:59:21:39:58:00:b5:b8:bf:d0:1b:d8:1b:d1:e2:76:
         39:4b:2d:32
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDJ2VfMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQw
YTg5YmM2Y2UxMDI4YjJmYjhiM2YzYzU4YjIyMDYwMzY0Njc1YzMwHhcNMjQwMzI5
MDAyMDA3WhcNMjQwNDAxMDIxNDA3WjAzMTEwLwYDVQQDEyhkM2I3NTk2MTNkMGNm
MDk0ODdkYmIzZDM4MjJiYTU4OTQ0Y2RlZjljMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAu/RiVr1z3cDDc2V22adiFfg3ZaFDsXCQrotWEF49+tQcK3DP
5jWEUopH0RqCkvSqqHSAOg19vt4hx3rsEuv5aUjylPIpzY+ui6Y+ownnfwNrnAg7
r5XJ+E5wvsaQVMwWSt2xSggRKPND/nNRsnB2zp3lojuv7qE+k+xJ8oIOWYKqLQRp
jsXbjenYj9Lb6wlQqdy2+zLy9wIr5XOGhsHRY4tY8ZAbSgzbvv16M9bjsx7Iq4LP
VPYQPmvAiHnWQCZdRH25/UrhkVZ5YTnMSpinDi8asaiyb50+/DxLcDbl/RRDKjv6
/KV3uPd5rYowq662oBNR5OIo34iecm6lxvdr4wIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFFJl9G62pK2Wp2d2c4mgOZQ81nu6MB8GA1UdIwQYMBaAFAfk9cyYiObgfqXh
28bZHliw6mlFMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDBhODli
YzZjZTEwMjhiMmZiOGIzZjNjNThiMjIwNjAzNjQ2NzVjMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzNjYjEyMWItNWM3MS00NzllLWE4Y2QtYTM0YTdk
NzY5ZmRlLzQwYTg5YmM2Y2UxMDI4YjJmYjhiM2YzYzU4YjIyMDYwMzY0Njc1YzMu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jM2NiMTIxYi01YzcxLTQ3OWUtYThjZC1hMzRh
N2Q3NjlmZGUvNDBhODliYzZjZTEwMjhiMmZiOGIzZjNjNThiMjIwNjAzNjQ2NzVj
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAGElrMiyB6XyjLtTyL5DJsWLkVjVMcLFwIKHxuCAo4ldfe+Q
QH7I5ZqvR2AZZmH2OA9ZrcZaItJCEqbcZBEFT6pzOHy+/HJbBtHqTADESG14pKGa
5cl/NixAaQu7h9sIAxzxYi61Ogpijgi0//zxY9fA6Rugmlf35f4LTn/bhun++YKu
dbvMeuu0iz//eb+U4wyiBZQ58Pe/3+PtANChht8EXh+tisgxeGRZk/J6LDae2cuL
ELVufhNnC/rFUfjNkjH+5OVi3ekmT5Nj9PWxUkPxJa9y3CuGW3DA6qaEewtRotPm
n52IFxG9PV/KhlkhOVgAtbi/0BvYG9HidjlLLTI=
-----END CERTIFICATE-----
Generated at Fri Mar 29 02:14:25 2024 by rpki-client on console-ams.rpki-client.org