Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.mft
File:                     CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.mft (raw, json)
Hash identifier:          2iKogk1Llh3sKi7Et0Vc/WWGG9ZoHgU1jYt2qvMnUIs=
Subject key identifier:   67:5E:C2:3A:5B:79:64:83:70:87:19:BB:2F:AB:57:18:25:61:EE:01
Authority key identifier: CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F
Certificate issuer:       /CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
Certificate serial:       4D72FB966783BEB72F8CD42A5B1AF9D3631C9CB9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.mft
Manifest number:          26
Signing time:             Thu 16 May 2024 12:10:24 +0000
Manifest this update:     Thu 16 May 2024 12:05:24 +0000
Manifest next update:     Wed 22 May 2024 03:37:24 +0000
Files and hashes:         1: 3137302e38332e3231362e302f32322d3234203d3e20323634383531.roa (hash: +xAJLHGVLj38HivmWjhIPxZ0v4Xheb0bOpt8sfeOEjQ=)
                          2: 323830333a623263303a3a2f33322d3438203d3e203139313639.roa (hash: H0KgH9j5v0EK3o00Jb7NFggfgy2HuflZpf2sQK4dJi0=)
                          3: 3137302e38332e3231362e302f32322d3234203d3e203139313639.roa (hash: beGDAEyL1KCZQvz1nK0hWgwYE38WyUEwDtCY3usicsE=)
                          4: 323830333a623263303a3a2f33322d3438203d3e203237393437.roa (hash: OBWia7y+SjYt4dCFMprMoz8p818A91L5ItEKQ7BhJCY=)
                          5: 3137302e38332e3231362e302f32322d3234203d3e2033353439.roa (hash: Kvn+F+sktqofRttfsXk35C8EyQ7/ngXFe6kLjPfLTxo=)
                          6: 323830333a623263303a3a2f33322d3430203d3e2033353439.roa (hash: DZD7UDAPp6LfQFwbYcj21UsSGZR6YRzsQaB/Hk3VZVk=)
                          7: 323830333a623263303a3a2f33322d3438203d3e203232373234.roa (hash: P6L9t01LdPmoAlOrmbqHU5ge1JK35fXuNNAXPFzjaoc=)
                          8: 323830333a623263303a3a2f33322d3438203d3e20323634383531.roa (hash: IdCWgS9BDioSrHlomfXwd2UzHwbcDhQKABrMOCeGzIo=)
                          9: 3137302e38332e3231362e302f32322d3234203d3e203237383535.roa (hash: yeOl9Hhp1npsbc6Oci3JucrlWSsd+qbBDFrhLUaS9/s=)
                          10: 323830333a623263303a3a2f33322d3438203d3e203132393536.roa (hash: 5Z403KrAwU0I2+tYqJ0NFgre2ZHu5iNpWMTHZ12xdk4=)
                          11: 3137302e38332e3231362e302f32322d3234203d3e203237393437.roa (hash: OT5c/VgjyS4hKdg/3ozIXc9qh0VBRQ7xbPBA8C/SIxA=)
                          12: CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl (hash: TF0vuA2RO3aPvlzfl0Lw65ddnQAd0TBtvFTXfDTBPEw=)
                          13: 323830333a623263303a3a2f33322d3438203d3e203237383535.roa (hash: 7DOZQr24G7e0unwF1vzgDOUQztBisokbqBswRiQdx/o=)
                          14: 3137302e38332e3231362e302f32322d3234203d3e203232373234.roa (hash: pNCv4dlGabJqM3Zl3z06KJJ8qz/ljWMQiyJvRuGXazA=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:72:fb:96:67:83:be:b7:2f:8c:d4:2a:5b:1a:f9:d3:63:1c:9c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
        Validity
            Not Before: May 16 12:05:24 2024 GMT
            Not After : May 22 03:37:24 2024 GMT
        Subject: CN=675EC23A5B796483708719BB2FAB57182561EE01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d5:3c:c7:bc:da:7f:a4:91:7f:e8:6f:75:e6:
                    62:28:aa:eb:80:6d:08:cd:e9:f5:a5:10:ba:cf:69:
                    e7:24:ab:08:9e:d3:c1:81:7f:33:a7:52:a2:bc:77:
                    34:9a:24:de:0a:95:97:fe:cb:77:b3:f4:dd:a9:f1:
                    c2:9e:0a:38:cb:7d:c8:47:45:36:ef:84:25:4a:81:
                    5e:7b:36:ce:7f:a4:97:98:f6:19:f5:cd:28:15:28:
                    af:b7:77:27:a0:93:e7:4f:fc:31:9d:a0:83:47:51:
                    d1:84:59:a6:e6:d7:a0:f0:37:ed:bb:32:13:9d:e7:
                    5c:c0:a3:12:12:6b:74:ab:12:2e:bb:f6:c8:63:5c:
                    f7:b5:5b:6f:7b:b8:21:2f:1c:a1:c7:b8:26:c1:b3:
                    f4:0d:ec:f8:37:62:f0:45:5b:22:68:a9:87:63:db:
                    28:33:c3:cd:e9:7e:8b:d8:cb:ae:b6:c4:48:3f:a6:
                    5b:a1:4f:73:09:af:c0:c2:33:5c:47:bc:0d:70:02:
                    5f:2b:4b:b3:38:e5:b0:36:6d:4d:2b:85:45:7c:63:
                    b5:cd:32:04:d4:73:0e:41:c1:d8:c7:c6:a0:7b:01:
                    cf:f7:f1:b9:9a:67:3c:3b:95:d0:a2:80:97:76:e5:
                    31:f3:6e:ea:b6:7a:d7:c5:4d:4b:06:ad:cf:2b:5f:
                    d3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5E:C2:3A:5B:79:64:83:70:87:19:BB:2F:AB:57:18:25:61:EE:01
            X509v3 Authority Key Identifier:
                keyid:CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:73:df:cf:db:22:63:ce:bf:04:df:05:b7:c3:35:40:c3:c3:
         87:f1:24:b0:d7:93:fd:51:f9:14:72:24:95:3e:95:8b:98:0c:
         f8:5d:d3:36:d8:17:9b:d1:74:bc:ca:8c:5e:9b:ae:87:a4:18:
         cb:2e:51:16:78:47:e8:2a:33:95:79:c7:68:0f:d9:30:c3:27:
         61:e3:1d:0e:1b:a7:30:65:cb:b9:76:c7:27:4d:d3:2e:3a:e2:
         6e:b3:9a:8f:55:a9:d8:d4:a4:6e:0e:72:f9:66:73:cc:f1:b4:
         cb:b9:00:08:b4:63:e7:06:d5:99:59:e2:22:32:44:ab:c8:e9:
         0e:e6:49:4b:f9:43:fe:15:e2:5c:8a:f9:cb:13:be:f2:ed:89:
         fd:a4:8d:91:b4:18:c3:1d:39:b4:43:b4:42:51:46:59:23:73:
         3b:82:56:7d:d4:af:56:96:00:7f:1b:fc:05:60:4a:6b:93:ee:
         75:4d:20:49:7a:23:76:87:c4:93:ca:de:24:4e:35:c1:93:2f:
         97:67:df:16:a0:b0:56:bb:85:ac:89:4e:e4:e9:24:9e:27:1a:
         5d:33:77:b7:b5:12:1d:e3:ab:fe:e3:b6:30:cf:70:e8:0c:ca:
         72:9f:73:77:f5:bf:11:36:25:20:10:ca:18:2a:75:dd:0e:64:
         03:20:85:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 14:04:43 2024 by rpki-client on console-fra.rpki-client.org