Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fa60c9d8-8ab0-4e4a-97c8-a25cd967a986/607fc82565ae5a4b66f47f984bbdb94c47122332.mft
File:                     607fc82565ae5a4b66f47f984bbdb94c47122332.mft (raw, json)
Hash identifier:          3XeEkvjhvPeOkkfeBQX3uMUozgVltw6gh8zBR9kUpuE=
Subject key identifier:   42:CC:BF:62:76:D2:4A:44:02:2B:9D:EE:2C:49:36:D0:B0:6B:9D:EE
Authority key identifier: 87:83:5D:5D:6F:E4:82:16:F9:60:AF:88:F7:61:B2:7A:3B:60:C1:7B
Certificate issuer:       /CN=607fc82565ae5a4b66f47f984bbdb94c47122332
Certificate serial:       1B0708
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/607fc82565ae5a4b66f47f984bbdb94c47122332.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fa60c9d8-8ab0-4e4a-97c8-a25cd967a986/607fc82565ae5a4b66f47f984bbdb94c47122332.mft
Manifest number:          0DBC
Signing time:             Thu 28 Mar 2024 14:21:19 +0000
Manifest this update:     Thu 28 Mar 2024 13:20:08 +0000
Manifest next update:     Sun 31 Mar 2024 16:04:08 +0000
Files and hashes:         1: 607fc82565ae5a4b66f47f984bbdb94c47122332.crl (hash: 8jrFQeIyL+B/+OPDGAMwKa56fFOzr+lt8ZdIL2jp/dU=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/fa60c9d8-8ab0-4e4a-97c8-a25cd967a986/607fc82565ae5a4b66f47f984bbdb94c47122332.crl
                          rsync://repository.lacnic.net/rpki/lacnic/fa60c9d8-8ab0-4e4a-97c8-a25cd967a986/607fc82565ae5a4b66f47f984bbdb94c47122332.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/607fc82565ae5a4b66f47f984bbdb94c47122332.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1771272 (0x1b0708)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=607fc82565ae5a4b66f47f984bbdb94c47122332
        Validity
            Not Before: Mar 28 13:20:08 2024 GMT
            Not After : Mar 31 16:04:08 2024 GMT
        Subject: CN=e8aa5104b07a10795327857e982d95f5daf50210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0f:31:a6:2e:94:93:38:98:65:7b:1b:5b:a3:
                    0a:86:3a:28:a3:93:ae:23:f7:22:0b:5a:62:fa:8e:
                    f5:52:fb:e5:1c:48:40:b4:2d:e7:b3:c8:d5:65:9b:
                    2f:e7:56:13:eb:b7:1f:6f:d5:f3:79:5c:5c:8f:57:
                    11:45:02:33:5f:07:3f:69:64:32:8e:6d:09:df:46:
                    a6:9f:8a:9e:b1:5d:54:b2:c1:ed:e7:ac:0e:c8:6c:
                    d0:0e:9c:6d:b7:7a:9d:a8:8a:38:98:02:e0:71:61:
                    51:0b:c9:b2:b0:70:8c:5b:25:58:64:05:20:5b:00:
                    f5:df:18:78:97:2b:e9:af:97:5d:ad:08:98:1d:08:
                    45:8c:f0:64:4e:66:90:a4:11:26:d6:a9:26:10:94:
                    18:d2:ff:cc:63:ae:b8:63:0e:b9:66:8e:1a:00:df:
                    36:9e:f0:b8:ea:6c:95:e7:59:47:c7:1a:b9:78:a5:
                    45:56:3c:ef:16:85:ea:e3:23:86:1d:e3:c9:4e:6a:
                    ee:60:6d:4c:60:f7:81:5b:03:61:83:44:d4:74:b8:
                    d3:03:41:fc:e6:4a:6a:25:f6:6b:63:73:50:f9:c4:
                    37:77:69:ca:f5:20:e1:af:d0:66:65:00:50:27:8c:
                    25:35:fc:c7:eb:06:d5:e1:f8:f1:c9:28:18:b4:61:
                    f8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:CC:BF:62:76:D2:4A:44:02:2B:9D:EE:2C:49:36:D0:B0:6B:9D:EE
            X509v3 Authority Key Identifier:
                keyid:87:83:5D:5D:6F:E4:82:16:F9:60:AF:88:F7:61:B2:7A:3B:60:C1:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/607fc82565ae5a4b66f47f984bbdb94c47122332.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fa60c9d8-8ab0-4e4a-97c8-a25cd967a986/607fc82565ae5a4b66f47f984bbdb94c47122332.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fa60c9d8-8ab0-4e4a-97c8-a25cd967a986/607fc82565ae5a4b66f47f984bbdb94c47122332.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:87:ec:80:03:9a:94:ab:90:37:e6:f6:e6:2f:db:e2:03:b1:
         56:3e:d2:c0:4a:16:27:85:d1:b1:ac:2b:b7:7c:23:6f:77:42:
         41:49:08:56:9e:75:bf:38:56:f4:a2:c0:b7:a6:18:d2:64:4a:
         5a:66:c7:85:c1:60:18:80:06:d1:0a:cf:6e:f5:fb:75:28:2e:
         d9:5e:f3:4e:18:1c:08:d6:5c:e4:53:bf:6c:c3:29:ed:be:a3:
         c0:2c:46:b0:a4:41:52:86:c1:55:8f:d8:86:7e:9d:cc:c6:f5:
         7d:87:e8:46:65:f8:13:6b:0d:d5:ac:83:84:6f:ed:be:0a:f6:
         bc:93:cb:1f:3e:80:56:0d:1b:a6:03:f0:fe:ad:1e:de:59:1f:
         86:3e:ff:c7:b8:74:51:20:34:f6:5e:d5:da:d9:eb:89:55:91:
         9c:b0:a8:ec:91:b9:06:34:1e:c5:bf:57:f4:c5:2b:fe:d0:99:
         f4:32:ed:9a:97:af:bd:fc:b1:5d:c5:bd:06:3a:51:09:e5:b3:
         bf:e6:75:1e:b4:d8:5e:09:9b:ec:90:30:18:f7:c3:0f:41:b3:
         7d:27:a6:a0:ac:85:66:37:d8:da:31:7a:3a:e4:dc:79:49:fd:
         cd:ae:ef:1a:27:b3:d8:69:06:9f:40:2d:b7:99:54:b2:57:a4:
         84:f9:b4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:44:01 2024 by rpki-client on console-fra.rpki-client.org