Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25ea30fa-f8e1-4749-bee6-b0d22c0ebddb/9cdbee5404c6b37387353abe6fc9a9bfff700800.mft
File:                     9cdbee5404c6b37387353abe6fc9a9bfff700800.mft (raw, json)
Hash identifier:          HmdylHDEaDorq0XJDY4k4dg5/S7pCfxRXRMBSfsDlPc=
Subject key identifier:   00:3A:C8:72:BE:BB:5C:E1:D6:2E:74:DD:A8:D2:CE:82:4E:92:9E:8E
Authority key identifier: D1:94:40:28:D7:7F:07:66:65:8B:C2:D3:F6:2C:78:F3:EF:B8:EA:64
Certificate issuer:       /CN=9cdbee5404c6b37387353abe6fc9a9bfff700800
Certificate serial:       0C46EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9cdbee5404c6b37387353abe6fc9a9bfff700800.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25ea30fa-f8e1-4749-bee6-b0d22c0ebddb/9cdbee5404c6b37387353abe6fc9a9bfff700800.mft
Manifest number:          063D
Signing time:             Tue 09 Jan 2024 12:19:38 +0000
Manifest this update:     Tue 09 Jan 2024 11:19:03 +0000
Manifest next update:     Fri 12 Jan 2024 13:54:03 +0000
Files and hashes:         1: 642933a1c52870d18a03910c31c775c35e5d9dfc.roa (hash: Gidunm4x6sONfHxBFvet0+JW9IN1NCnuBK97MLZqPjU=)
                          2: 9cdbee5404c6b37387353abe6fc9a9bfff700800.crl (hash: fPpjWwoSBMkZgGtz+o2Fg1765ONIklXfzwQ+uOBmSww=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25ea30fa-f8e1-4749-bee6-b0d22c0ebddb/9cdbee5404c6b37387353abe6fc9a9bfff700800.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25ea30fa-f8e1-4749-bee6-b0d22c0ebddb/9cdbee5404c6b37387353abe6fc9a9bfff700800.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9cdbee5404c6b37387353abe6fc9a9bfff700800.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 12 Jan 2024 11:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 804590 (0xc46ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdbee5404c6b37387353abe6fc9a9bfff700800
        Validity
            Not Before: Jan  9 11:19:03 2024 GMT
            Not After : Jan 12 13:54:03 2024 GMT
        Subject: CN=ec7872d12ce9b295842b00fe731e2d33236642b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e9:20:0c:8c:93:7d:0e:04:f3:d9:07:a8:14:
                    7c:d3:c1:39:eb:01:5b:cc:0b:1a:96:a6:91:2a:c9:
                    4d:cc:da:54:1d:1e:30:bb:8f:56:b6:30:93:b5:f9:
                    8c:85:26:7e:e9:e1:03:b5:0d:00:88:31:f3:3c:79:
                    30:66:3b:a1:d9:98:f3:90:aa:45:1d:26:8c:92:ac:
                    cb:4a:84:cb:18:67:cb:a9:87:9d:1f:ba:7a:53:93:
                    0d:4d:5e:79:13:21:d5:11:d5:3e:bf:6e:c7:cb:d0:
                    ea:01:39:df:b4:cd:b2:3d:63:48:6d:e1:9c:f5:ad:
                    83:8b:f7:55:92:46:b1:79:85:4e:f0:29:d9:18:44:
                    fa:95:0e:75:8b:8f:8c:6a:92:7b:3d:4c:d1:2c:65:
                    43:75:bb:52:fd:be:fe:7a:a7:8e:04:d9:a5:7d:1a:
                    ff:34:bd:f9:2e:0c:78:1f:28:1e:f8:07:39:cd:ff:
                    8a:58:d4:11:60:05:18:41:cb:54:2d:00:47:6f:d6:
                    fe:94:de:ef:1b:1b:ba:c1:97:17:8a:f6:8a:b5:bc:
                    01:23:40:c5:54:16:61:6e:90:13:5e:a7:42:8f:bd:
                    62:65:3c:e4:bf:1f:c9:93:4f:00:73:42:32:34:a5:
                    cd:ba:2b:8f:12:4b:f6:d2:0f:64:22:cd:4b:66:8f:
                    b6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3A:C8:72:BE:BB:5C:E1:D6:2E:74:DD:A8:D2:CE:82:4E:92:9E:8E
            X509v3 Authority Key Identifier:
                keyid:D1:94:40:28:D7:7F:07:66:65:8B:C2:D3:F6:2C:78:F3:EF:B8:EA:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9cdbee5404c6b37387353abe6fc9a9bfff700800.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25ea30fa-f8e1-4749-bee6-b0d22c0ebddb/9cdbee5404c6b37387353abe6fc9a9bfff700800.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25ea30fa-f8e1-4749-bee6-b0d22c0ebddb/9cdbee5404c6b37387353abe6fc9a9bfff700800.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:91:b9:1c:12:57:40:b9:84:0c:40:74:d6:cd:32:90:61:46:
         08:dc:9e:9f:4e:69:54:7a:d4:d8:07:17:fb:39:38:6e:35:97:
         f3:39:f5:b8:f5:39:28:e9:69:d6:21:4b:78:c4:51:d1:ff:37:
         c3:e0:c8:38:6e:20:bf:32:29:84:72:17:8b:90:2e:fe:48:fc:
         87:b0:a9:54:fe:fd:b7:2d:c5:2d:a1:54:0b:41:21:11:df:f0:
         75:ed:1f:bd:f4:8c:9c:e8:17:1b:0e:7d:53:d9:53:f6:f2:08:
         5e:0e:1a:ee:2b:a2:1f:79:39:e0:34:46:37:16:47:83:81:19:
         da:4d:9b:9b:fb:ab:8f:a4:ae:34:9d:9d:53:28:c6:b2:7e:94:
         23:85:cb:07:2c:8c:04:4d:4a:44:c5:db:63:b2:ed:3b:10:6c:
         6c:29:aa:5c:15:03:b5:b0:fc:93:10:ad:0e:96:95:de:44:ad:
         54:c0:d2:ce:46:a4:5b:63:2a:39:68:ac:6a:68:88:af:bd:f4:
         41:e4:15:4b:26:a1:9e:80:46:ed:0b:fd:33:44:8c:79:d0:20:
         9b:fc:72:3d:e7:5e:68:7a:9f:d4:80:f6:77:c6:0a:97:fd:dd:
         3a:ab:ef:1f:30:79:37:30:7f:7b:b2:83:8a:df:75:2e:c5:b5:
         e0:04:76:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:37 2024 by rpki-client on console.sobornost.net