Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e27c8ded-fabf-42f1-a452-28c5544083e4/3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7.mft
File:                     3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7.mft (raw, json)
Hash identifier:          GCiXM0+sf9htKmC6QPGfja2BqRK+AeszLvRhbquJdPM=
Subject key identifier:   57:50:0E:6E:D8:C2:00:07:84:90:FE:1A:E7:20:34:4C:81:55:81:F3
Authority key identifier: 54:07:E3:26:0E:37:3F:FA:85:65:42:62:04:BA:57:D5:22:12:FB:3E
Certificate issuer:       /CN=3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7
Certificate serial:       22880C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e27c8ded-fabf-42f1-a452-28c5544083e4/3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7.mft
Manifest number:          0D43
Signing time:             Fri 23 Feb 2024 19:19:51 +0000
Manifest this update:     Fri 23 Feb 2024 18:19:38 +0000
Manifest next update:     Mon 26 Feb 2024 21:19:38 +0000
Files and hashes:         1: 36c35bf017649ccc611c5aeaea4e311541ff9b03.roa (hash: DXZ0vYxt1cFzTtZHKcf/XSn16U2Dfv+v8ZbHm87l9DQ=)
                          2: 3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7.crl (hash: nCJtR2KQB3vc7q09sjjd/7zE0pZqGU7aDDTpZzxfc2I=)
                          3: f4b5a66ba62f41d067186e85189372597034d8c9.roa (hash: lvF6xW3b6+FwpYLOjbk4NVprIWjWKdBae4PdlFqd0WQ=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/e27c8ded-fabf-42f1-a452-28c5544083e4/3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/e27c8ded-fabf-42f1-a452-28c5544083e4/3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Feb 2024 16:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2263052 (0x22880c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7
        Validity
            Not Before: Feb 23 18:19:38 2024 GMT
            Not After : Feb 26 21:19:38 2024 GMT
        Subject: CN=e839cdb094fc5bea525f0404cf5f101762886830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:37:ea:8a:54:44:a3:78:92:64:46:76:70:30:
                    87:93:00:02:aa:7e:37:1a:c7:c2:73:a1:5f:b7:6e:
                    e2:32:1c:48:f2:7b:21:e9:e4:44:b0:d3:13:2a:20:
                    5c:26:d3:6a:8e:9b:ab:7d:34:59:ee:ae:ff:1b:ac:
                    25:f1:2d:ce:44:a2:34:35:df:f4:71:dd:b7:ef:2a:
                    77:71:db:13:f5:10:c9:f8:65:23:19:a5:ee:b6:e3:
                    a0:8f:a0:ae:2c:8e:0e:b2:3b:55:e9:e0:64:cd:ff:
                    83:07:8f:c4:38:e5:0c:3c:cb:10:76:fd:a6:45:cc:
                    18:84:a1:75:ed:26:8e:3c:f9:9c:34:19:3e:88:49:
                    54:11:61:b9:2d:95:18:e9:e2:8a:6f:08:67:f6:23:
                    28:a5:df:b4:f0:1a:02:3e:de:f2:d8:4d:0c:16:cd:
                    4e:a9:0f:ec:e0:8f:ff:09:e9:d3:29:48:1c:2b:8c:
                    dc:ea:7e:80:f9:ac:dd:f3:e4:c5:2c:36:3f:c0:47:
                    d6:59:25:61:2e:1e:77:45:27:f2:88:6c:13:cf:14:
                    53:c0:78:24:60:08:57:15:d5:5b:ad:49:4e:29:41:
                    fa:c2:50:76:3b:ec:5d:80:7b:10:c8:f6:2a:11:1f:
                    fc:06:50:6f:cf:5f:fb:5b:eb:8c:f2:f5:aa:46:44:
                    d6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:50:0E:6E:D8:C2:00:07:84:90:FE:1A:E7:20:34:4C:81:55:81:F3
            X509v3 Authority Key Identifier:
                keyid:54:07:E3:26:0E:37:3F:FA:85:65:42:62:04:BA:57:D5:22:12:FB:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e27c8ded-fabf-42f1-a452-28c5544083e4/3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e27c8ded-fabf-42f1-a452-28c5544083e4/3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:60:2b:f7:1f:5d:98:50:0d:a2:75:e1:10:0c:9d:1e:05:26:
         ea:df:88:bc:db:7a:db:2e:06:38:16:10:1f:9c:f2:09:4f:2e:
         ed:df:d5:74:63:ed:55:01:ea:31:18:71:97:84:14:f1:cd:0c:
         e4:0c:49:59:d9:15:5b:25:ce:9e:12:8d:d1:66:05:d8:0c:7c:
         4c:e9:ae:18:c5:83:81:c1:58:b3:61:86:b2:e6:d8:93:4b:22:
         ee:1c:38:86:c1:e6:a5:1d:df:00:19:28:b8:be:3b:13:23:2a:
         05:3b:44:9e:6e:4c:4d:5b:ef:0f:47:3b:17:3e:48:0d:a0:a2:
         25:db:f3:66:c2:f6:2b:94:bc:81:04:34:32:37:62:dd:08:6b:
         88:b4:ea:79:da:7b:4a:f3:48:9c:3b:c5:11:b6:ec:50:f0:29:
         0e:dc:52:fc:ca:fc:22:9b:aa:29:d0:6f:61:05:f7:86:45:a7:
         a4:47:71:3c:9f:fd:cf:75:fa:78:be:7a:22:7e:ea:93:00:02:
         04:cf:a3:a5:a0:a6:03:f0:e1:2f:45:a9:5b:81:cc:7c:a0:da:
         ca:fc:c4:1a:1f:8d:3f:b5:22:b3:d2:f3:eb:f9:f7:75:04:51:
         1e:20:78:6d:fd:f5:82:1f:99:81:7c:de:c0:1d:eb:2d:ea:91:
         1d:fc:82:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 20:10:06 2024 by rpki-client on console-ams.rpki-client.org