Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e27c8ded-fabf-42f1-a452-28c5544083e4/3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7.mft
File:                     3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7.mft (raw, json)
Hash identifier:          t8xwUIWkC45IafqOswD0dKBCHsIKa2t/EHftdOSKI6s=
Subject key identifier:   15:CA:52:9B:9F:0E:D2:A6:A9:47:67:9C:DA:2B:DC:EF:63:82:9F:74
Authority key identifier: 54:07:E3:26:0E:37:3F:FA:85:65:42:62:04:BA:57:D5:22:12:FB:3E
Certificate issuer:       /CN=3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7
Certificate serial:       23632C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e27c8ded-fabf-42f1-a452-28c5544083e4/3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7.mft
Manifest number:          0DB5
Signing time:             Fri 29 Mar 2024 05:20:21 +0000
Manifest this update:     Fri 29 Mar 2024 04:20:08 +0000
Manifest next update:     Mon 01 Apr 2024 06:45:08 +0000
Files and hashes:         1: 36c35bf017649ccc611c5aeaea4e311541ff9b03.roa (hash: DXZ0vYxt1cFzTtZHKcf/XSn16U2Dfv+v8ZbHm87l9DQ=)
                          2: 3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7.crl (hash: vuMsM/wgNIJNim6tbYZrTHngJZ6ntJvlLLIuSzMMTbI=)
                          3: f4b5a66ba62f41d067186e85189372597034d8c9.roa (hash: lvF6xW3b6+FwpYLOjbk4NVprIWjWKdBae4PdlFqd0WQ=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/e27c8ded-fabf-42f1-a452-28c5544083e4/3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/e27c8ded-fabf-42f1-a452-28c5544083e4/3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2319148 (0x23632c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7
        Validity
            Not Before: Mar 29 04:20:08 2024 GMT
            Not After : Apr  1 06:45:08 2024 GMT
        Subject: CN=a42a52280f1e311d4f71ef7254b08021f15c9754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4c:bf:a1:60:93:b9:00:41:7c:8a:1b:d6:bf:
                    d0:9e:01:8c:6d:a8:cb:45:9e:a9:10:4e:c2:ae:ff:
                    b0:ca:96:6b:45:db:37:81:53:eb:b5:29:b3:e0:e4:
                    71:aa:94:9b:df:12:e5:a9:5d:cc:fe:33:ec:06:9b:
                    4a:19:66:5b:c5:78:05:54:b7:75:3d:6a:42:ec:6c:
                    92:36:18:ad:c9:26:b7:73:1e:5e:e0:c4:d2:ca:b2:
                    9e:cf:32:19:fb:3e:62:56:28:07:ae:3b:0c:a8:e7:
                    4a:13:26:bf:b3:a0:84:e5:ba:66:8e:d8:a0:79:a3:
                    5f:0e:6e:5a:b1:9e:a9:ca:6c:2b:f0:0b:d8:2d:92:
                    36:d1:78:f6:09:d7:27:73:22:cf:60:e0:c7:ce:ba:
                    e1:ec:b9:36:e3:df:b5:62:c9:ee:11:28:22:0a:7a:
                    ae:5f:10:17:49:c7:5d:cc:b6:19:a2:a3:fb:91:cb:
                    c9:1b:39:f2:bb:48:21:f8:9b:30:ef:c7:81:09:3b:
                    b6:9e:ea:97:06:33:96:57:fa:2a:ff:92:04:ec:f6:
                    36:df:43:93:19:f7:ad:70:95:c5:75:65:a8:17:92:
                    d7:c5:1f:c0:49:0b:7e:d5:75:71:ce:6b:b2:19:e1:
                    ea:43:0b:a7:31:42:ef:0c:26:0e:d4:ee:e7:cb:6a:
                    ca:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CA:52:9B:9F:0E:D2:A6:A9:47:67:9C:DA:2B:DC:EF:63:82:9F:74
            X509v3 Authority Key Identifier:
                keyid:54:07:E3:26:0E:37:3F:FA:85:65:42:62:04:BA:57:D5:22:12:FB:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e27c8ded-fabf-42f1-a452-28c5544083e4/3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e27c8ded-fabf-42f1-a452-28c5544083e4/3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:2e:79:88:aa:5d:67:61:67:48:a9:86:95:c0:0a:97:e2:d7:
         7b:4b:73:d2:24:f6:a7:8c:8f:93:ce:a9:50:5b:65:ef:eb:7d:
         80:a8:bd:6c:04:43:cd:74:62:bf:4a:ee:3d:53:26:60:fe:e8:
         9f:3a:fa:7a:27:fe:28:a4:84:d5:0e:4f:86:e3:b0:06:f4:6d:
         40:09:8f:47:48:d8:37:0f:1a:f5:52:bf:55:88:f1:98:ad:0a:
         7c:43:79:c1:4b:62:64:f8:54:16:43:c9:e5:4b:9e:6d:72:a9:
         ab:03:df:ea:e8:5b:67:45:2e:ee:b5:d7:cb:95:67:a1:52:fb:
         9a:04:de:88:cd:82:15:43:2c:5e:14:2d:3b:a1:66:f0:ea:3b:
         cb:b7:85:9b:6f:5c:35:9c:4d:d2:e6:f4:7a:ea:8b:02:0e:88:
         4b:a4:aa:cc:fa:0d:2d:cb:8a:34:9f:ae:05:ea:cf:52:d1:f6:
         92:3a:35:f7:18:03:77:94:f9:2f:7b:69:c7:71:36:ff:7f:b3:
         35:1c:c0:b1:d5:a8:cc:86:b3:bc:d0:f7:82:a8:3b:ce:19:34:
         f7:06:3b:c7:5b:7a:aa:c7:37:b9:4f:46:75:48:49:ee:8b:2a:
         58:4c:c9:3a:35:b7:67:f7:a0:77:2f:a7:c0:f9:8a:a7:ce:7b:
         22:75:7c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 06:25:37 2024 by rpki-client on console-ams.rpki-client.org