Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/16b44d2a0bda515371a4ded869185f017218c9f2.mft
File:                     16b44d2a0bda515371a4ded869185f017218c9f2.mft (raw, json)
Hash identifier:          YEdB7AushT2NEq/G0MRb+3srnXUqzkj7Wphf1S/q2qQ=
Subject key identifier:   5A:C3:EE:36:DB:A5:FB:14:8F:9E:C3:C6:0B:EE:C9:E0:B4:58:95:44
Authority key identifier: 8B:D4:A3:27:C7:20:6E:AB:E2:43:83:6B:43:71:C4:D1:F1:5F:A1:24
Certificate issuer:       /CN=16b44d2a0bda515371a4ded869185f017218c9f2
Certificate serial:       286F37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16b44d2a0bda515371a4ded869185f017218c9f2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/16b44d2a0bda515371a4ded869185f017218c9f2.mft
Manifest number:          0DAC
Signing time:             Fri 29 Mar 2024 08:21:37 +0000
Manifest this update:     Fri 29 Mar 2024 07:20:10 +0000
Manifest next update:     Mon 01 Apr 2024 09:58:10 +0000
Files and hashes:         1: 16b44d2a0bda515371a4ded869185f017218c9f2.crl (hash: wIMo94uPA9amQoAoJVIL1toTZXybdHcaYVdbrLpkrSg=)
                          2: 691e31c3b99d87dc8ac08cd09a2e8f2033767241.roa (hash: NatlVwx7BgVKnB6i+pumEEsY5L4ltWvQWjvJ6aJumpU=)
                          3: cc6fc8ae05acaddb7c016e45a3410be7d0213d18.roa (hash: GZN7HlbbVwDsm1w/2Ix8eiXKqxiJwLgzBj8Nvy0q3Q4=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/16b44d2a0bda515371a4ded869185f017218c9f2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/16b44d2a0bda515371a4ded869185f017218c9f2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16b44d2a0bda515371a4ded869185f017218c9f2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2649911 (0x286f37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16b44d2a0bda515371a4ded869185f017218c9f2
        Validity
            Not Before: Mar 29 07:20:10 2024 GMT
            Not After : Apr  1 09:58:10 2024 GMT
        Subject: CN=6e2bbc67af5a92d34f4aeb77b418fa46020bd434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e0:6b:bf:8f:9a:9a:e0:b3:5c:92:a1:2c:45:
                    43:8b:94:8c:5c:99:67:77:83:6f:6c:c3:2e:9c:43:
                    ff:cc:21:16:74:66:ad:39:bc:1f:d1:13:78:cf:6a:
                    11:08:62:cd:20:79:36:a9:0d:d5:db:14:6d:fc:c9:
                    a6:63:86:96:9a:48:7f:4c:7e:9b:ac:33:f1:12:e4:
                    67:ae:95:0e:97:5f:b6:c6:81:34:ed:2c:73:56:c1:
                    ec:41:b3:1e:d9:82:ed:1b:f7:d0:50:90:6e:01:2b:
                    90:c6:66:f4:68:c7:d9:93:d9:d6:d2:bf:12:9c:ce:
                    73:cd:d4:dc:3d:c2:b8:96:99:87:c3:e3:49:02:53:
                    70:82:3a:8f:1d:79:e3:80:5c:b7:6e:49:05:a2:b7:
                    68:dd:96:aa:b9:c7:6f:d6:3a:14:17:35:9a:16:1f:
                    f6:03:4f:22:52:41:6f:1d:30:b7:59:fe:b1:17:f2:
                    b8:c1:fe:05:31:c6:dc:9a:91:33:e0:1f:0b:7a:4b:
                    81:1a:d1:71:82:e3:3d:ec:29:dd:78:20:0f:e4:ce:
                    fe:b2:63:47:88:9e:f3:c4:5c:30:16:9a:bc:0d:ff:
                    fd:ec:1b:de:e4:2f:ee:0f:8f:fe:5e:33:d0:90:9a:
                    5c:3d:d1:5d:2d:1a:62:08:bd:34:9d:e5:c8:17:ce:
                    88:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C3:EE:36:DB:A5:FB:14:8F:9E:C3:C6:0B:EE:C9:E0:B4:58:95:44
            X509v3 Authority Key Identifier:
                keyid:8B:D4:A3:27:C7:20:6E:AB:E2:43:83:6B:43:71:C4:D1:F1:5F:A1:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16b44d2a0bda515371a4ded869185f017218c9f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/16b44d2a0bda515371a4ded869185f017218c9f2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/16b44d2a0bda515371a4ded869185f017218c9f2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:22:e7:30:b7:70:d7:18:91:f8:47:a0:8b:b6:25:98:51:db:
         89:84:7e:9a:d8:02:d2:7f:76:75:67:9d:aa:f2:dc:65:b1:68:
         e1:7e:0e:73:3c:00:d8:25:98:eb:6a:93:89:09:a5:b8:a0:ae:
         12:1c:ad:41:5a:8d:b2:9b:de:7c:13:87:bb:d7:56:33:a9:1e:
         5b:b0:54:2e:e9:0f:32:24:fc:a6:1c:0a:85:ec:ac:4a:b7:88:
         7f:9a:5f:c8:1d:30:45:e5:11:ad:d9:5a:54:ca:1e:f3:da:87:
         82:28:8f:c1:db:a6:5d:1d:b1:0d:ef:c1:9e:60:6d:c0:d9:fc:
         51:b9:98:0f:17:da:e5:b7:8e:a7:9b:00:de:4b:d1:a0:9e:18:
         14:90:d3:95:fc:20:8b:fc:cd:86:85:40:b1:56:62:3c:b7:16:
         f4:41:94:6b:e0:65:02:6d:58:79:c2:7f:d1:0d:cc:5b:85:7a:
         ff:52:a8:7f:11:7e:5b:a7:98:27:1a:31:31:f9:36:a9:ac:aa:
         6f:8a:b9:08:60:cd:85:70:fd:87:e1:3c:4a:d8:21:21:f0:9d:
         75:60:f4:7e:6a:38:3b:a7:a0:7c:e6:44:50:fd:7a:1d:13:32:
         dc:97:4a:9c:51:5d:11:21:7a:80:7b:ba:c1:26:58:e4:22:2f:
         7c:52:64:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 11:05:25 2024 by rpki-client on console-ams.rpki-client.org