Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.mft
File:                     FF591A13316346A2BCEF07F6DF8D44DD0250F841.mft (raw, json)
Hash identifier:          2ETJw/Zp1WY82MVhJ+Tmh3JBi4PwmshIwQZkW/f+oCE=
Subject key identifier:   0C:39:1F:9C:27:D7:CC:EF:89:CD:B4:07:60:C1:C2:60:3D:F9:D5:C3
Authority key identifier: FF:59:1A:13:31:63:46:A2:BC:EF:07:F6:DF:8D:44:DD:02:50:F8:41
Certificate issuer:       /CN=FF591A13316346A2BCEF07F6DF8D44DD0250F841
Certificate serial:       174F47D6F1F4A8118A4936E3E677B53A0847F16F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.mft
Manifest number:          24
Signing time:             Wed 23 Oct 2024 14:31:42 +0000
Manifest this update:     Wed 23 Oct 2024 14:26:42 +0000
Manifest next update:     Mon 28 Oct 2024 03:43:42 +0000
Files and hashes:         1: 3230302e302e39302e302f32332d3234203d3e203238333934.roa (hash: d1UNmP/OOdosLv1EQMSl0ATm5Pnk2rJOS1AXVWTV6yk=)
                          2: 323830363a3231373a3a2f33322d3438203d3e203238333934.roa (hash: eRr4RZr56ER4QmifiqzejzC0TjvrGUOaP5ufGGjrXEc=)
                          3: FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl (hash: XIcd26Y8pk4FlVwjv3SsdHa922ff5AVSLkZ8Z1TmhcU=)
                          4: 3133382e3235352e36302e302f32322d3234203d3e203238333934.roa (hash: cPN7+j0qv4LQ/177DtmCovXMjfVafK/0vlO0Z5p4dAA=)
                          5: 3230302e302e39322e302f32332d3234203d3e203238333934.roa (hash: UYh12AxgwNfwODLNrsBuhjlwk47B6PbFKvgEKCxnanc=)
                          6: 3137302e3234352e3138382e302f32322d3234203d3e203238333934.roa (hash: o25gR1kXDST3MjJrQmZdrLuK32MoTUEhQ6hze/SLoaw=)
                          7: 323830363a3231373a3a2f33322d3332203d3e203238333934.roa (hash: xjfpSH6SpNb2QkVSVvVwlY4WPfLTWs6CB/odpZFviRI=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:4f:47:d6:f1:f4:a8:11:8a:49:36:e3:e6:77:b5:3a:08:47:f1:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF591A13316346A2BCEF07F6DF8D44DD0250F841
        Validity
            Not Before: Oct 23 14:26:42 2024 GMT
            Not After : Oct 28 03:43:42 2024 GMT
        Subject: CN=0C391F9C27D7CCEF89CDB40760C1C2603DF9D5C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:45:d8:0e:00:02:5f:94:31:3b:c7:72:b6:5e:
                    2f:dc:88:9d:0d:60:2a:57:0b:99:c4:29:95:9a:6d:
                    d2:78:c8:af:a7:40:0a:83:4b:81:d8:ca:fe:14:96:
                    64:a9:33:fc:7a:76:51:be:4a:d3:e1:89:71:4c:54:
                    cd:65:dc:b1:9b:f1:b5:18:62:10:37:da:24:4e:83:
                    4f:ff:5c:03:26:d8:5c:1b:a5:43:f7:0a:86:32:c5:
                    ca:a4:a0:5b:9d:cd:d9:22:91:49:e3:b4:eb:fb:78:
                    71:8f:82:52:55:69:92:ae:85:df:bf:e3:41:f4:23:
                    af:5d:27:6f:5d:f3:9a:8e:e8:a0:64:11:10:86:5c:
                    d9:69:87:8c:af:33:37:ff:19:3d:49:15:21:f5:51:
                    e3:53:5d:c0:3d:55:b9:1c:d1:dd:c7:4f:4e:c9:94:
                    c1:ba:14:2d:ed:67:91:d5:d1:56:b7:3b:ec:22:fa:
                    84:5a:e5:1d:57:3e:ae:c0:cd:82:21:d3:cb:69:cb:
                    2f:c8:e6:c4:84:4d:23:5c:e6:3e:29:0c:d7:86:f3:
                    3e:30:b4:4d:4a:51:e7:4d:e8:08:ee:c5:4b:15:4b:
                    5b:0e:ef:ac:83:ed:83:d7:2f:c1:f6:56:c0:5b:f0:
                    c7:19:73:a7:c2:9f:b6:5e:75:a2:12:af:3c:3d:4e:
                    fe:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:39:1F:9C:27:D7:CC:EF:89:CD:B4:07:60:C1:C2:60:3D:F9:D5:C3
            X509v3 Authority Key Identifier:
                keyid:FF:59:1A:13:31:63:46:A2:BC:EF:07:F6:DF:8D:44:DD:02:50:F8:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:3b:6f:73:f5:b5:6a:7b:9c:78:fb:c6:c0:b3:bc:08:d9:1d:
         7a:58:fb:0e:85:bf:61:cc:df:ff:94:6b:18:a6:90:a8:90:23:
         ba:8b:c3:25:43:4e:05:89:e5:40:8e:cc:d3:17:7a:33:34:1b:
         a7:60:03:a7:5a:a7:62:bd:80:12:40:d6:fc:de:be:6a:13:29:
         6b:9a:b4:88:f2:d0:59:ee:63:7f:88:96:2f:1b:9f:38:8c:a8:
         e3:56:9c:f1:ae:b3:3c:a7:3e:53:36:18:2e:66:c6:d9:95:be:
         16:4e:fb:95:3f:da:ce:01:ef:a6:ac:66:69:1b:ca:2b:a1:2e:
         35:ba:0e:5c:e8:55:de:5c:5d:35:f2:46:71:e3:28:35:44:57:
         26:59:08:d7:c7:61:ac:f2:5d:63:06:5a:b0:99:ee:ed:dc:a9:
         1b:a5:a6:d0:62:38:6f:95:06:b8:e0:bd:6e:67:d1:4d:21:b4:
         29:1d:ae:91:a9:9b:93:4a:0d:f4:51:33:8d:bf:85:dc:56:4c:
         8b:43:73:22:3c:37:47:04:89:d4:1b:0f:d9:af:da:8f:19:4a:
         ec:ef:ce:95:94:b7:61:a1:c5:bf:b4:77:11:a2:f4:07:79:4a:
         27:58:2b:bf:94:47:99:c3:0d:ca:b0:e5:5a:9c:1d:95:a8:bf:
         b0:00:63:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 17:33:29 2024 by rpki-client on console-ams.rpki-client.org