Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f0f902bc-375f-4a20-8a11-fddade1087e4/ef2e68f970c76de5428fef89a267a117e2763fcd.mft
File:                     ef2e68f970c76de5428fef89a267a117e2763fcd.mft (raw, json)
Hash identifier:          fWzTSrDmV2embluzfEH98z6fx4giT3709CxdzCNcnsA=
Subject key identifier:   DB:8A:B1:48:C5:14:84:9A:04:42:7F:78:E2:05:F0:C5:2B:EC:15:35
Authority key identifier: 5A:69:8B:B2:96:83:9D:70:63:82:99:6D:75:91:A7:D4:E0:6D:D7:1C
Certificate issuer:       /CN=ef2e68f970c76de5428fef89a267a117e2763fcd
Certificate serial:       2650A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef2e68f970c76de5428fef89a267a117e2763fcd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f0f902bc-375f-4a20-8a11-fddade1087e4/ef2e68f970c76de5428fef89a267a117e2763fcd.mft
Manifest number:          0DC2
Signing time:             Fri 29 Mar 2024 04:20:55 +0000
Manifest this update:     Fri 29 Mar 2024 03:20:09 +0000
Manifest next update:     Mon 01 Apr 2024 04:35:09 +0000
Files and hashes:         1: b6f011115372e4c241288ba7cbb91a21df4ee18f.roa (hash: tdm4GPVsq1r4EOXVMPO9A9t0bVOvrNxZ9qLNki+G3/E=)
                          2: e40da19db1722e0325f1d34c59ad6c0ba4c07782.roa (hash: 3Y4Gy0lQM4VDTl5F2KbvlI8+OoqXuwO6avoYkkSXggc=)
                          3: ef2e68f970c76de5428fef89a267a117e2763fcd.crl (hash: XXXN+uI39QHuQBLnuA5EHpwQZXq8acF5LumhWQyESgc=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/f0f902bc-375f-4a20-8a11-fddade1087e4/ef2e68f970c76de5428fef89a267a117e2763fcd.crl
                          rsync://repository.lacnic.net/rpki/lacnic/f0f902bc-375f-4a20-8a11-fddade1087e4/ef2e68f970c76de5428fef89a267a117e2763fcd.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef2e68f970c76de5428fef89a267a117e2763fcd.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 04:35:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2511013 (0x2650a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef2e68f970c76de5428fef89a267a117e2763fcd
        Validity
            Not Before: Mar 29 03:20:09 2024 GMT
            Not After : Apr  1 04:35:09 2024 GMT
        Subject: CN=cd73f78952cb03d7427986f7c37555e142c8b2f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8e:99:46:40:58:ab:70:83:5e:4d:f9:a4:36:
                    ce:8e:52:a6:bb:c2:a8:0d:c9:8c:ef:25:75:a5:98:
                    be:88:85:d8:c2:51:5d:c5:69:d8:11:6e:f4:ec:58:
                    b1:a9:a4:10:bf:7f:f8:b9:6b:eb:40:81:69:99:4b:
                    a0:50:61:a9:74:ee:a8:00:f0:1a:b8:78:db:00:e6:
                    5d:83:7a:72:e9:f1:8a:c7:c3:ad:65:23:52:e0:c3:
                    46:90:e1:dc:3f:8f:8c:ae:16:e1:45:47:a4:4e:ee:
                    da:ff:d2:9e:96:8b:59:fe:c8:20:cf:a8:49:3c:fe:
                    b6:3f:39:4e:1f:5a:f3:4b:69:ab:46:ec:47:cf:63:
                    08:16:85:02:76:ff:1c:fb:5a:80:38:ba:a1:a0:05:
                    eb:09:8f:bc:3e:fb:58:8a:1a:11:08:33:a1:b0:da:
                    3a:34:8b:e9:2e:9e:e9:bc:d6:8f:83:5a:8b:9a:d6:
                    58:87:ff:14:ea:0c:6d:d9:c6:22:fb:28:2c:65:8e:
                    50:16:6e:a5:7e:3f:62:00:74:87:e4:1f:ea:02:36:
                    cb:1b:c3:b1:1b:05:2d:5e:1e:ae:d6:40:1f:ea:44:
                    a1:2a:72:b7:cb:a7:dd:85:60:df:7b:60:0c:be:1c:
                    ba:fe:53:7f:e3:57:0d:a4:55:db:50:6b:d4:fe:b3:
                    09:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8A:B1:48:C5:14:84:9A:04:42:7F:78:E2:05:F0:C5:2B:EC:15:35
            X509v3 Authority Key Identifier:
                keyid:5A:69:8B:B2:96:83:9D:70:63:82:99:6D:75:91:A7:D4:E0:6D:D7:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef2e68f970c76de5428fef89a267a117e2763fcd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f0f902bc-375f-4a20-8a11-fddade1087e4/ef2e68f970c76de5428fef89a267a117e2763fcd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f0f902bc-375f-4a20-8a11-fddade1087e4/ef2e68f970c76de5428fef89a267a117e2763fcd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ad:ae:ca:c7:eb:33:26:66:88:8d:08:0e:92:c3:5f:d5:5c:
         aa:ed:78:ad:c3:d4:65:f7:fb:74:36:ee:27:2e:91:8b:82:2b:
         83:00:81:a2:20:22:c0:ca:35:a4:df:c6:cd:35:6c:5c:80:bd:
         ae:a5:88:24:af:6a:aa:ac:b0:25:8d:81:d1:63:ce:8b:45:d3:
         ec:5e:f7:87:b8:78:05:18:b4:1c:76:4d:e9:af:72:d3:99:8d:
         70:09:1c:f1:34:7a:70:36:c5:b0:f3:33:db:c6:15:fc:c2:7f:
         12:4c:bc:54:52:3f:ab:f5:88:3a:1a:24:fb:65:93:1e:6d:51:
         a2:c5:f4:b5:25:b4:e9:6b:08:aa:a1:33:72:96:02:e4:e3:af:
         da:aa:b8:3b:6d:74:55:01:6b:7c:29:16:ab:37:1e:2d:87:3f:
         42:e4:ac:58:0f:f4:6a:9a:52:4c:d2:54:aa:bc:f4:77:7e:26:
         c8:6a:01:67:ce:39:4e:76:1e:0f:7b:7c:67:fb:d8:62:dd:11:
         86:4e:8b:88:1e:9d:88:65:3b:12:71:39:69:fa:be:43:1b:4c:
         02:2b:2c:ca:7b:33:37:40:a3:37:cc:4e:60:ce:13:28:73:40:
         fd:4f:73:a6:59:93:23:f3:53:fd:b5:fa:23:c0:17:cd:76:b6:
         1e:4d:48:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:59:32 2024 by rpki-client on console-fra.rpki-client.org