Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40d7b666-0cfd-4a87-91d7-928fd8af877c/bd8889eb5168a4d99330c533c75e35a55c7dbde8.mft
File:                     bd8889eb5168a4d99330c533c75e35a55c7dbde8.mft (raw, json)
Hash identifier:          EZ+XSa/j3OmgM8JBELthqgEbG3pRa1v2mhPift00fpo=
Subject key identifier:   23:3F:83:CF:ED:E9:38:5D:DF:77:C1:55:20:87:DB:51:1D:2C:45:E1
Authority key identifier: D6:1A:34:51:50:78:5F:1D:FB:A3:DE:8D:BC:60:8D:3B:DF:78:1C:90
Certificate issuer:       /CN=bd8889eb5168a4d99330c533c75e35a55c7dbde8
Certificate serial:       0EC639
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd8889eb5168a4d99330c533c75e35a55c7dbde8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/40d7b666-0cfd-4a87-91d7-928fd8af877c/bd8889eb5168a4d99330c533c75e35a55c7dbde8.mft
Manifest number:          0797
Signing time:             Thu 28 Mar 2024 08:20:38 +0000
Manifest this update:     Thu 28 Mar 2024 07:20:07 +0000
Manifest next update:     Sun 31 Mar 2024 10:20:07 +0000
Files and hashes:         1: 4786bfe9ac1356a671e3817f3a16f369c5277e1a.roa (hash: 3Gmx7/ox7ZfLM2nOCQZWnlrtFPh7ZyXD22HkuK+xxd4=)
                          2: bd8889eb5168a4d99330c533c75e35a55c7dbde8.crl (hash: w7PKdF0faGO70rapvMINw2lhEBU1fUoWHJiPZAThqQo=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/40d7b666-0cfd-4a87-91d7-928fd8af877c/bd8889eb5168a4d99330c533c75e35a55c7dbde8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/40d7b666-0cfd-4a87-91d7-928fd8af877c/bd8889eb5168a4d99330c533c75e35a55c7dbde8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd8889eb5168a4d99330c533c75e35a55c7dbde8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 968249 (0xec639)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd8889eb5168a4d99330c533c75e35a55c7dbde8
        Validity
            Not Before: Mar 28 07:20:07 2024 GMT
            Not After : Mar 31 10:20:07 2024 GMT
        Subject: CN=74a6bbb771628b76c795d5161540e33bfc41a90d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:80:9f:a7:2d:eb:38:c0:b9:30:1d:a0:71:3f:
                    7a:f9:14:97:03:0d:f3:fc:50:eb:34:16:67:77:fe:
                    8b:21:50:d4:a4:00:d3:d5:b2:dd:c7:6a:94:02:b0:
                    a4:b8:5b:fb:f2:ed:26:54:a9:41:7c:02:31:54:b2:
                    5e:7b:f5:31:3c:77:4f:2d:e4:2f:4f:cc:01:43:81:
                    8b:08:b8:69:63:d9:2e:5a:ec:60:28:14:1b:f0:5f:
                    81:6b:d1:9f:1a:1c:49:6d:ad:54:c9:33:4b:a9:18:
                    11:c0:3f:b9:6d:14:c5:e2:70:10:b0:79:1a:71:ae:
                    1e:88:90:c2:fd:fe:e3:4a:8d:63:3e:ee:40:e9:50:
                    aa:f0:ef:62:62:3b:74:e7:57:ce:97:23:fd:be:b9:
                    55:7f:b7:43:c8:ec:38:c9:f1:b1:ac:aa:ae:38:2e:
                    fb:77:4c:04:81:b7:e6:55:4a:32:b3:3e:93:66:89:
                    f6:a6:7a:35:cd:d2:85:7d:88:9d:82:3a:12:e4:46:
                    f3:20:6c:7f:b4:00:62:a9:2e:a4:2e:f8:89:b8:28:
                    43:bc:a0:b1:1a:ef:10:f4:85:c7:a8:51:1a:5d:ac:
                    25:a3:6d:7f:3e:2f:45:9f:12:02:ee:39:81:f3:5c:
                    f4:22:5c:64:2b:4d:9a:1e:9e:e3:54:fc:7f:0c:98:
                    e3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3F:83:CF:ED:E9:38:5D:DF:77:C1:55:20:87:DB:51:1D:2C:45:E1
            X509v3 Authority Key Identifier:
                keyid:D6:1A:34:51:50:78:5F:1D:FB:A3:DE:8D:BC:60:8D:3B:DF:78:1C:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd8889eb5168a4d99330c533c75e35a55c7dbde8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40d7b666-0cfd-4a87-91d7-928fd8af877c/bd8889eb5168a4d99330c533c75e35a55c7dbde8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/40d7b666-0cfd-4a87-91d7-928fd8af877c/bd8889eb5168a4d99330c533c75e35a55c7dbde8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:9c:ef:84:4b:9f:59:a6:8d:19:45:08:c4:3d:25:eb:f5:ef:
         63:dd:70:11:36:3c:6a:05:cc:20:72:99:01:99:39:84:86:7c:
         eb:99:0e:0b:b6:25:9b:6f:5b:bf:32:ad:5d:35:c5:10:af:ed:
         92:e9:d1:16:7b:fa:ae:9f:49:ad:be:28:57:55:b1:30:f1:2e:
         ba:11:7e:eb:06:2f:ea:02:53:fc:46:f8:5c:58:10:16:5d:f0:
         79:4a:9e:45:4c:eb:97:ef:bb:c4:ad:e9:4c:e8:a3:ec:67:e9:
         4a:a1:0a:94:62:5d:89:6e:54:a0:24:1a:4e:e4:04:63:2d:14:
         b6:d6:5e:34:bf:9a:5a:41:e8:f5:f3:6f:fe:26:c5:c6:eb:5c:
         df:63:82:cb:d7:3c:81:9f:56:7c:26:d0:d0:a3:23:a7:de:6c:
         ad:a9:91:e2:54:47:ad:fe:a7:ee:41:31:3e:0b:ce:17:7b:f1:
         6d:07:03:f0:10:94:83:4c:5c:4c:05:17:e2:d4:7f:a5:b0:5c:
         b2:7f:56:6f:4c:8c:b3:74:35:9d:52:4c:ca:db:2c:5d:79:60:
         9f:ff:2b:60:98:26:27:7a:82:54:4f:58:09:ac:6f:8b:a3:1b:
         8e:fb:c5:99:35:6e:44:a4:05:94:5b:ff:8a:9b:95:cc:49:37:
         4d:af:6f:bc
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDDsY5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJk
ODg4OWViNTE2OGE0ZDk5MzMwYzUzM2M3NWUzNWE1NWM3ZGJkZTgwHhcNMjQwMzI4
MDcyMDA3WhcNMjQwMzMxMTAyMDA3WjAzMTEwLwYDVQQDEyg3NGE2YmJiNzcxNjI4
Yjc2Yzc5NWQ1MTYxNTQwZTMzYmZjNDFhOTBkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmYCfpy3rOMC5MB2gcT96+RSXAw3z/FDrNBZnd/6LIVDUpADT
1bLdx2qUArCkuFv78u0mVKlBfAIxVLJee/UxPHdPLeQvT8wBQ4GLCLhpY9kuWuxg
KBQb8F+Ba9GfGhxJba1UyTNLqRgRwD+5bRTF4nAQsHkaca4eiJDC/f7jSo1jPu5A
6VCq8O9iYjt051fOlyP9vrlVf7dDyOw4yfGxrKquOC77d0wEgbfmVUoysz6TZon2
pno1zdKFfYidgjoS5EbzIGx/tABiqS6kLviJuChDvKCxGu8Q9IXHqFEaXawlo21/
Pi9FnxIC7jmB81z0IlxkK02aHp7jVPx/DJjjgQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFCM/g8/t6Thd33fBVSCH21EdLEXhMB8GA1UdIwQYMBaAFNYaNFFQeF8d+6Pe
jbxgjTvfeByQMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmQ4ODg5
ZWI1MTY4YTRkOTkzMzBjNTMzYzc1ZTM1YTU1YzdkYmRlOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDBkN2I2NjYtMGNmZC00YTg3LTkxZDctOTI4ZmQ4
YWY4NzdjL2JkODg4OWViNTE2OGE0ZDk5MzMwYzUzM2M3NWUzNWE1NWM3ZGJkZTgu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80MGQ3YjY2Ni0wY2ZkLTRhODctOTFkNy05Mjhm
ZDhhZjg3N2MvYmQ4ODg5ZWI1MTY4YTRkOTkzMzBjNTMzYzc1ZTM1YTU1YzdkYmRl
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAD2c74RLn1mmjRlFCMQ9Jev172PdcBE2PGoFzCBymQGZOYSG
fOuZDgu2JZtvW78yrV01xRCv7ZLp0RZ7+q6fSa2+KFdVsTDxLroRfusGL+oCU/xG
+FxYEBZd8HlKnkVM65fvu8St6Uzoo+xn6UqhCpRiXYluVKAkGk7kBGMtFLbWXjS/
mlpB6PXzb/4mxcbrXN9jgsvXPIGfVnwm0NCjI6febK2pkeJUR63+p+5BMT4Lzhd7
8W0HA/AQlINMXEwFF+LUf6WwXLJ/Vm9MjLN0NZ1STMrbLF15YJ//K2CYJid6glRP
WAmsb4ujG477xZk1bkSkBZRb/4qblcxJN02vb7w=
-----END CERTIFICATE-----
Generated at Thu Mar 28 10:47:03 2024 by rpki-client on console-ams.rpki-client.org