Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/70A87649CC75CDC794211B8E207C30E9F6E4978A6DDD1956CEB008CD0BD42770/0/B2D8C7D34091682F466A6A7FBDBFD94F5AFC346E.mft
File:                     B2D8C7D34091682F466A6A7FBDBFD94F5AFC346E.mft (raw, json)
Hash identifier:          NQGgOsluCIzTNStSnRmGAoEpxHYDQe+mz0ZPQjk8d/A=
Subject key identifier:   1F:A7:27:5E:64:14:94:23:1F:A7:A2:7B:40:32:9B:52:43:5E:CA:C9
Authority key identifier: B2:D8:C7:D3:40:91:68:2F:46:6A:6A:7F:BD:BF:D9:4F:5A:FC:34:6E
Certificate issuer:       /CN=B2D8C7D34091682F466A6A7FBDBFD94F5AFC346E
Certificate serial:       33CB57E791EA57D6CECDBBF4EC4D01858DB362A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2D8C7D34091682F466A6A7FBDBFD94F5AFC346E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/70A87649CC75CDC794211B8E207C30E9F6E4978A6DDD1956CEB008CD0BD42770/0/B2D8C7D34091682F466A6A7FBDBFD94F5AFC346E.mft
Manifest number:          80
Signing time:             Wed 20 Nov 2024 18:31:30 +0000
Manifest this update:     Wed 20 Nov 2024 18:26:30 +0000
Manifest next update:     Tue 26 Nov 2024 15:10:30 +0000
Files and hashes:         1: 3230302e342e31362e302f32302d3332203d3e2038303236.roa (hash: eCmYbNM5sc0Lj6dH+VnW7PQ3Ktqn54VkObC2eOUSIBs=)
                          2: B2D8C7D34091682F466A6A7FBDBFD94F5AFC346E.crl (hash: H9BWNdtHMfJBwswReftf+EoG+vTNRfu2iYUPVXkbhUw=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/70A87649CC75CDC794211B8E207C30E9F6E4978A6DDD1956CEB008CD0BD42770/0/B2D8C7D34091682F466A6A7FBDBFD94F5AFC346E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/70A87649CC75CDC794211B8E207C30E9F6E4978A6DDD1956CEB008CD0BD42770/0/B2D8C7D34091682F466A6A7FBDBFD94F5AFC346E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2D8C7D34091682F466A6A7FBDBFD94F5AFC346E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:cb:57:e7:91:ea:57:d6:ce:cd:bb:f4:ec:4d:01:85:8d:b3:62:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2D8C7D34091682F466A6A7FBDBFD94F5AFC346E
        Validity
            Not Before: Nov 20 18:26:30 2024 GMT
            Not After : Nov 26 15:10:30 2024 GMT
        Subject: CN=1FA7275E641494231FA7A27B40329B52435ECAC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9b:ea:1d:c2:4d:79:53:8c:ce:ba:ca:c7:76:
                    72:a8:cd:a6:ff:b3:57:80:3e:9d:90:b5:1e:e3:fb:
                    47:52:47:f6:e8:8c:4e:d8:51:1a:ce:69:5d:ea:2d:
                    3c:4b:41:41:5a:ee:32:3b:b2:f4:40:3b:27:4f:3e:
                    24:e4:59:ab:2c:fb:7d:37:1d:91:f6:8d:1b:dd:b6:
                    53:5f:5b:4e:ec:02:ee:f6:11:35:ab:99:ba:50:c4:
                    28:a0:35:b7:3c:7c:fd:5b:97:90:02:19:b8:c3:f0:
                    d4:e1:71:53:97:99:d5:87:83:25:e2:86:fe:60:12:
                    12:81:16:0e:16:b3:20:da:4e:67:84:02:12:34:54:
                    85:f0:f0:8b:97:56:f5:db:2c:65:81:4d:98:fe:9c:
                    57:b5:ab:af:6a:1b:01:9b:bd:57:a9:01:a6:08:a8:
                    39:9a:45:8d:08:92:1a:81:49:d2:02:57:b0:ec:a5:
                    c2:92:5f:14:84:b4:0d:36:cf:c9:f0:fb:5d:c7:61:
                    cd:99:51:b0:0a:30:b7:a4:df:9d:54:3c:3c:2e:6c:
                    3c:03:da:a5:6a:3a:48:c3:f0:19:92:5c:56:f2:37:
                    4e:f5:d6:03:ad:bb:d6:79:10:89:9d:a8:71:ff:33:
                    12:3b:b6:8b:4e:c5:2b:3f:0f:9c:26:de:6a:79:29:
                    d3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A7:27:5E:64:14:94:23:1F:A7:A2:7B:40:32:9B:52:43:5E:CA:C9
            X509v3 Authority Key Identifier:
                keyid:B2:D8:C7:D3:40:91:68:2F:46:6A:6A:7F:BD:BF:D9:4F:5A:FC:34:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/70A87649CC75CDC794211B8E207C30E9F6E4978A6DDD1956CEB008CD0BD42770/0/B2D8C7D34091682F466A6A7FBDBFD94F5AFC346E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2D8C7D34091682F466A6A7FBDBFD94F5AFC346E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/70A87649CC75CDC794211B8E207C30E9F6E4978A6DDD1956CEB008CD0BD42770/0/B2D8C7D34091682F466A6A7FBDBFD94F5AFC346E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:c9:81:49:9f:52:aa:73:09:cb:a7:9e:06:ee:cc:2b:a2:f1:
         b3:3e:92:5b:01:b1:66:a2:4a:e2:0c:c2:ee:dc:b3:5e:50:d5:
         c4:f1:eb:22:8c:99:4e:11:bf:fa:a4:63:35:0e:4f:5d:18:39:
         6a:dd:bf:a3:e5:e4:a9:26:8f:84:10:91:18:e7:7d:00:02:26:
         d2:b4:34:60:28:b5:90:4c:b3:2c:d9:9a:ca:4a:4c:e0:fa:ee:
         7a:39:e1:48:37:da:2d:68:0f:e6:92:6c:17:50:2a:c4:f9:9d:
         4f:15:5f:d4:ea:2d:8d:23:b5:12:eb:87:19:93:34:97:28:28:
         13:48:e5:ac:a8:c7:64:9c:bf:28:35:65:b3:ca:5f:14:50:90:
         ac:0f:6e:4b:64:33:c3:59:4d:ac:64:92:26:f6:29:1b:a2:82:
         cc:df:48:b9:9d:91:44:11:eb:62:ca:7a:40:23:f9:21:0b:d2:
         65:3a:bb:9a:8e:a7:b1:ab:a9:32:f9:bb:59:9d:a2:bf:9b:94:
         69:5d:cc:cf:9b:a1:0b:76:ea:db:e7:83:ec:cf:d6:8f:1e:2c:
         53:86:82:7b:f7:e9:4e:da:5f:bf:9f:a2:2b:28:c3:74:0a:e6:
         eb:03:a9:a5:cb:97:18:0b:fb:70:8e:5e:2e:60:45:d2:88:37:
         a7:cc:70:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:17 2024 by rpki-client on console-ams.rpki-client.org