Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.mft
File:                     FF591A13316346A2BCEF07F6DF8D44DD0250F841.mft (raw, json)
Hash identifier:          YRB2IuGV786+MurjGXAoNaUnLOpdDEg7Fu4ZukVTj24=
Subject key identifier:   38:4D:E6:7E:2E:70:25:28:41:FA:CB:AB:A2:6A:79:95:7C:3F:31:93
Authority key identifier: FF:59:1A:13:31:63:46:A2:BC:EF:07:F6:DF:8D:44:DD:02:50:F8:41
Certificate issuer:       /CN=FF591A13316346A2BCEF07F6DF8D44DD0250F841
Certificate serial:       2DA27C2AD3B570873C0F8CF5A34B482B74967D88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.mft
Manifest number:          33
Signing time:             Thu 21 Nov 2024 06:08:02 +0000
Manifest this update:     Thu 21 Nov 2024 06:03:02 +0000
Manifest next update:     Mon 25 Nov 2024 15:36:02 +0000
Files and hashes:         1: 3230302e302e39302e302f32332d3234203d3e203238333934.roa (hash: d1UNmP/OOdosLv1EQMSl0ATm5Pnk2rJOS1AXVWTV6yk=)
                          2: FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl (hash: JvxKq01RiBIgchnJ6Y+jODv3ktxWRyBAhUCWYyp4hto=)
                          3: 3137302e3234352e3138382e302f32322d3234203d3e203238333934.roa (hash: o25gR1kXDST3MjJrQmZdrLuK32MoTUEhQ6hze/SLoaw=)
                          4: 3133382e3235352e36302e302f32322d3234203d3e203238333934.roa (hash: cPN7+j0qv4LQ/177DtmCovXMjfVafK/0vlO0Z5p4dAA=)
                          5: 3230302e302e39322e302f32332d3234203d3e203238333934.roa (hash: UYh12AxgwNfwODLNrsBuhjlwk47B6PbFKvgEKCxnanc=)
                          6: 323830363a3231373a3a2f33322d3438203d3e203238333934.roa (hash: eRr4RZr56ER4QmifiqzejzC0TjvrGUOaP5ufGGjrXEc=)
                          7: 323830363a3231373a3a2f33322d3332203d3e203238333934.roa (hash: xjfpSH6SpNb2QkVSVvVwlY4WPfLTWs6CB/odpZFviRI=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a2:7c:2a:d3:b5:70:87:3c:0f:8c:f5:a3:4b:48:2b:74:96:7d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF591A13316346A2BCEF07F6DF8D44DD0250F841
        Validity
            Not Before: Nov 21 06:03:02 2024 GMT
            Not After : Nov 25 15:36:02 2024 GMT
        Subject: CN=384DE67E2E70252841FACBABA26A79957C3F3193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9d:61:fe:48:d4:c0:4d:26:0e:1c:45:f5:5a:
                    0a:2e:b5:e8:07:8b:0e:60:e0:d9:d4:28:8e:e2:c4:
                    e3:e7:0e:67:a6:0f:3a:b2:1f:b3:d7:50:a0:08:2e:
                    cf:62:70:7d:fc:22:63:be:de:12:37:30:9c:94:c2:
                    38:d9:60:55:66:cf:a0:a0:79:8a:88:ed:e9:8e:47:
                    20:0f:71:81:4e:31:48:de:19:4f:cd:18:29:30:3d:
                    16:d3:8d:2c:92:29:db:5c:69:0a:db:91:eb:f5:4b:
                    02:4f:f2:93:0f:e4:b2:bc:6f:dd:c9:ee:c0:09:92:
                    a6:28:28:0d:06:09:90:bc:c9:41:76:24:86:71:ea:
                    74:bd:98:ec:1b:20:a1:91:0d:70:9f:f7:d7:38:d9:
                    a0:9b:1a:5e:e4:da:86:63:a9:ac:ee:73:d2:d9:0a:
                    7d:07:f7:6c:10:6a:29:c2:2e:e9:8e:3f:e3:85:5c:
                    6d:6b:7c:2c:46:6a:2a:2c:42:af:57:fa:f2:e8:66:
                    3a:a7:0c:74:3c:d6:36:5d:b7:9d:32:e7:6a:8d:47:
                    40:0d:61:72:cc:35:42:99:0e:c3:1f:1f:ca:53:a9:
                    6e:67:ca:da:bb:49:b4:84:a7:bb:8d:db:17:49:02:
                    dd:46:fe:4d:47:70:6b:c0:3d:be:69:ce:f4:06:82:
                    0d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4D:E6:7E:2E:70:25:28:41:FA:CB:AB:A2:6A:79:95:7C:3F:31:93
            X509v3 Authority Key Identifier:
                keyid:FF:59:1A:13:31:63:46:A2:BC:EF:07:F6:DF:8D:44:DD:02:50:F8:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:1d:fd:ee:f7:b9:24:e9:c6:86:15:cb:c8:00:22:90:28:01:
         f8:35:44:49:84:07:fa:ee:e8:c2:69:2f:e1:12:2f:11:59:9d:
         36:d6:02:31:d8:f9:5b:3b:01:ca:11:45:50:78:4e:47:0a:e7:
         fe:55:3f:2b:f1:b8:72:26:62:81:01:d3:5a:4c:86:26:6f:68:
         85:5c:e1:25:4d:0d:73:25:6d:1d:2b:da:e7:a2:eb:82:20:b6:
         96:a6:ad:b0:76:c6:b7:c1:26:de:e9:2b:9d:f5:a3:46:74:d4:
         7a:6b:70:bb:53:cf:8d:92:df:87:20:fb:c8:4c:14:7d:1d:c5:
         b0:d1:e3:09:1c:a3:17:3e:5c:3b:c8:6b:00:29:53:4c:5a:10:
         50:82:23:70:7e:f4:0d:f3:fb:dc:d0:0e:7d:d0:a6:6d:31:6a:
         d8:eb:12:9f:59:7b:27:c7:f4:23:f2:8c:5d:0f:b1:e2:2a:45:
         5f:9a:14:84:31:37:ea:0d:95:4f:71:84:0b:2e:92:f0:94:80:
         bb:86:d6:9c:d7:8a:a0:06:50:4c:4b:75:99:b5:ca:98:ee:d8:
         5a:55:db:f8:69:79:23:53:c8:7e:87:2b:03:6e:5d:65:06:18:
         cb:f4:78:44:8d:31:b3:4d:e9:f1:04:df:65:6b:f2:90:78:a6:
         9d:06:eb:6d
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIULaJ8KtO1cIc8D4z1o0tIK3SWfYgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY1OTFBMTMzMTYzNDZBMkJDRUYwN0Y2REY4RDQ0REQw
MjUwRjg0MTAeFw0yNDExMjEwNjAzMDJaFw0yNDExMjUxNTM2MDJaMDMxMTAvBgNV
BAMTKDM4NERFNjdFMkU3MDI1Mjg0MUZBQ0JBQkEyNkE3OTk1N0MzRjMxOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJnWH+SNTATSYOHEX1WgoutegH
iw5g4NnUKI7ixOPnDmemDzqyH7PXUKAILs9icH38ImO+3hI3MJyUwjjZYFVmz6Cg
eYqI7emORyAPcYFOMUjeGU/NGCkwPRbTjSySKdtcaQrbkev1SwJP8pMP5LK8b93J
7sAJkqYoKA0GCZC8yUF2JIZx6nS9mOwbIKGRDXCf99c42aCbGl7k2oZjqazuc9LZ
Cn0H92wQainCLumOP+OFXG1rfCxGaiosQq9X+vLoZjqnDHQ81jZdt50y52qNR0AN
YXLMNUKZDsMfH8pTqW5nytq7SbSEp7uN2xdJAt1G/k1HcGvAPb5pzvQGgg0nAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUOE3mfi5wJShB+suromp5lXw/MZMwHwYDVR0j
BBgwFoAU/1kaEzFjRqK87wf2341E3QJQ+EEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80Qzk1MkRDMEFDRkZGOTA4QzZGQTE0QzhBN0FBRThCNjMz
MUIzMERBRTA0MTBGMTQ4RTk0Q0YxQjQ3QTgzMkQ5LzAvRkY1OTFBMTMzMTYzNDZB
MkJDRUYwN0Y2REY4RDQ0REQwMjUwRjg0MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRjU5MUExMzMxNjM0NkEyQkNF
RjA3RjZERjhENDRERDAyNTBGODQxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEM5NTJEQzBBQ0ZGRjkwOEM2RkExNEM4QTdBQUU4QjYzMzFCMzBEQUUw
NDEwRjE0OEU5NENGMUI0N0E4MzJEOS8wL0ZGNTkxQTEzMzE2MzQ2QTJCQ0VGMDdG
NkRGOEQ0NEREMDI1MEY4NDEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCBHf3u97kk6caGFcvIACKQKAH4
NURJhAf67ujCaS/hEi8RWZ021gIx2PlbOwHKEUVQeE5HCuf+VT8r8bhyJmKBAdNa
TIYmb2iFXOElTQ1zJW0dK9rnouuCILaWpq2wdsa3wSbe6Sud9aNGdNR6a3C7U8+N
kt+HIPvITBR9HcWw0eMJHKMXPlw7yGsAKVNMWhBQgiNwfvQN8/vc0A590KZtMWrY
6xKfWXsnx/Qj8oxdD7HiKkVfmhSEMTfqDZVPcYQLLpLwlIC7htac14qgBlBMS3WZ
tcqY7thaVdv4aXkjU8h+hysDbl1lBhjL9HhEjTGzTenxBN9la/KQeKadButt
-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org