Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ffcbc5b5-407c-47ce-bbf6-e5b74efb621e/cab3be7719f0409d38136bae8f08bd4828355b0f.mft
File:                     cab3be7719f0409d38136bae8f08bd4828355b0f.mft (raw, json)
Hash identifier:          AYjZaAxzPR+mVrJNuiz39i4T5HReMzb7g+Zcbr3omlY=
Subject key identifier:   32:5B:30:28:73:72:E2:45:6C:AA:AC:41:EC:F8:27:87:7E:1D:17:7E
Authority key identifier: AF:3D:06:BA:C7:3D:14:29:3A:79:F4:90:8D:B5:1C:52:AC:2A:48:AD
Certificate issuer:       /CN=cab3be7719f0409d38136bae8f08bd4828355b0f
Certificate serial:       281F33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cab3be7719f0409d38136bae8f08bd4828355b0f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ffcbc5b5-407c-47ce-bbf6-e5b74efb621e/cab3be7719f0409d38136bae8f08bd4828355b0f.mft
Manifest number:          0D9F
Signing time:             Fri 29 Mar 2024 02:20:27 +0000
Manifest this update:     Fri 29 Mar 2024 01:20:08 +0000
Manifest next update:     Mon 01 Apr 2024 03:09:08 +0000
Files and hashes:         1: cab3be7719f0409d38136bae8f08bd4828355b0f.crl (hash: Sjn7ZPUX1KxWsG58EKAtDmtj/cER6rqlTK4DVPFdsKU=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ffcbc5b5-407c-47ce-bbf6-e5b74efb621e/cab3be7719f0409d38136bae8f08bd4828355b0f.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ffcbc5b5-407c-47ce-bbf6-e5b74efb621e/cab3be7719f0409d38136bae8f08bd4828355b0f.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cab3be7719f0409d38136bae8f08bd4828355b0f.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2629427 (0x281f33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cab3be7719f0409d38136bae8f08bd4828355b0f
        Validity
            Not Before: Mar 29 01:20:08 2024 GMT
            Not After : Apr  1 03:09:08 2024 GMT
        Subject: CN=ce235e2f4fc48b4b8901dd0a1e05b1645a2e6fc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8f:73:29:37:85:77:e2:64:2b:b3:7f:95:a8:
                    4b:41:42:f2:14:e6:48:62:92:2d:9d:b9:f6:af:04:
                    63:8c:ad:28:a3:83:0e:f9:6f:ee:7c:0d:0e:3b:24:
                    71:f7:a8:2f:0c:d7:72:ad:d9:66:ff:42:cc:0c:57:
                    fd:a1:ea:c5:78:74:73:e5:67:51:51:b5:b4:13:00:
                    45:42:18:4b:83:23:04:e3:10:89:ef:a2:b1:6f:84:
                    f0:86:c7:4b:b5:9a:91:b9:fb:0c:51:9c:1f:b9:9d:
                    ca:0a:cf:ed:b3:d2:e6:96:7c:09:9e:42:f4:38:9d:
                    08:3f:e5:58:14:98:d6:d9:c2:68:01:21:21:b4:24:
                    07:a1:1d:93:79:b0:74:72:59:2d:eb:df:bc:20:4d:
                    01:86:ba:9d:37:2e:a1:aa:59:ed:01:11:97:2d:36:
                    79:44:57:0b:87:79:6f:f8:42:11:9b:51:76:db:4d:
                    f9:47:8c:38:10:c6:f7:8c:d9:e9:05:4f:e9:a8:5c:
                    04:72:63:a6:25:64:4c:37:e3:54:36:ad:e5:0d:4c:
                    89:ce:e9:b2:f0:0b:3a:bd:c1:4d:23:93:91:2e:52:
                    a8:19:25:b3:73:17:3c:c0:c8:ad:7d:57:50:db:06:
                    7c:c1:cc:1d:28:b3:5a:1c:fe:97:89:29:d4:0a:12:
                    8b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5B:30:28:73:72:E2:45:6C:AA:AC:41:EC:F8:27:87:7E:1D:17:7E
            X509v3 Authority Key Identifier:
                keyid:AF:3D:06:BA:C7:3D:14:29:3A:79:F4:90:8D:B5:1C:52:AC:2A:48:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cab3be7719f0409d38136bae8f08bd4828355b0f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ffcbc5b5-407c-47ce-bbf6-e5b74efb621e/cab3be7719f0409d38136bae8f08bd4828355b0f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ffcbc5b5-407c-47ce-bbf6-e5b74efb621e/cab3be7719f0409d38136bae8f08bd4828355b0f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:51:ca:66:a4:6b:66:e4:20:01:d5:d6:61:d0:de:3a:95:19:
         55:60:3e:41:bc:bd:cc:76:63:5b:01:95:73:3a:fc:c1:42:2b:
         9b:c1:27:0b:dc:a1:04:cd:a4:92:65:b6:16:47:11:1d:d9:73:
         f3:bc:58:b3:a0:37:76:1c:98:6c:63:5e:62:2b:38:31:1a:35:
         f3:84:12:d6:f0:f8:7b:21:c8:1b:1e:0f:3b:96:e4:a0:05:7b:
         f7:98:3a:23:88:8c:d4:11:ed:d6:91:f0:be:59:a9:0b:49:16:
         f8:ee:1a:e3:7a:81:8e:c7:a0:ef:e6:e8:55:43:6d:72:da:fc:
         86:88:e7:0d:8b:af:f5:e9:9a:6d:9d:9b:4e:47:a2:b8:28:2e:
         56:a9:46:a6:de:01:6f:36:04:aa:16:f9:17:9e:1b:80:48:50:
         a3:1c:44:be:f5:a3:3e:91:8f:d4:6a:c3:d7:d3:08:93:34:cb:
         0e:4c:c4:99:64:87:e4:15:a1:6c:ae:ac:66:30:5e:f2:d7:9d:
         f0:fb:d7:0a:4e:76:d9:e4:e2:7d:20:2a:ad:3f:19:7b:6a:64:
         9d:fb:98:83:d4:13:72:02:1a:c3:02:6b:fd:7e:39:3c:f0:d3:
         2e:17:30:aa:be:34:d9:93:0f:fd:ed:5c:de:38:36:b8:a6:bb:
         2f:94:d0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 03:42:44 2024 by rpki-client on console-fra.rpki-client.org