Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/742A7E7E1B3A5D5AF5651EA91DE5F7FC8125FBCDB237BF0D5BD1AC541D58389B/0/A7CFF94DCCB1CF71C27C4C2F3A5B362B029C0723.mft
File:                     A7CFF94DCCB1CF71C27C4C2F3A5B362B029C0723.mft (raw, json)
Hash identifier:          sYV25OL3C7w3IYaOKrgMXys6JY+CYY7D5TBPTEJzAls=
Subject key identifier:   23:6E:3C:3F:4C:B3:A0:57:A2:F0:BA:43:9C:31:1E:D3:DC:09:78:0E
Authority key identifier: A7:CF:F9:4D:CC:B1:CF:71:C2:7C:4C:2F:3A:5B:36:2B:02:9C:07:23
Certificate issuer:       /CN=A7CFF94DCCB1CF71C27C4C2F3A5B362B029C0723
Certificate serial:       70A8C7E63C1018D1174EC55B8C372BE04E680D12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7CFF94DCCB1CF71C27C4C2F3A5B362B029C0723.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/742A7E7E1B3A5D5AF5651EA91DE5F7FC8125FBCDB237BF0D5BD1AC541D58389B/0/A7CFF94DCCB1CF71C27C4C2F3A5B362B029C0723.mft
Manifest number:          88
Signing time:             Wed 20 Nov 2024 22:28:51 +0000
Manifest this update:     Wed 20 Nov 2024 22:23:51 +0000
Manifest next update:     Mon 25 Nov 2024 03:53:51 +0000
Files and hashes:         1: A7CFF94DCCB1CF71C27C4C2F3A5B362B029C0723.crl (hash: RP2BJKgCq1kITV3i/qoT6r3Uz3R+IKKDZJ16Z+9Re/c=)
                          2: 34352e3137372e36382e302f32322d3234203d3e203238313030.roa (hash: wxOBuY8+kUW/nUNuck0Bzfvoae6WtSAm8+HE9nGFvcs=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/742A7E7E1B3A5D5AF5651EA91DE5F7FC8125FBCDB237BF0D5BD1AC541D58389B/0/A7CFF94DCCB1CF71C27C4C2F3A5B362B029C0723.crl
                          rsync://repository.lacnic.net/rpki/lacnic/742A7E7E1B3A5D5AF5651EA91DE5F7FC8125FBCDB237BF0D5BD1AC541D58389B/0/A7CFF94DCCB1CF71C27C4C2F3A5B362B029C0723.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7CFF94DCCB1CF71C27C4C2F3A5B362B029C0723.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a8:c7:e6:3c:10:18:d1:17:4e:c5:5b:8c:37:2b:e0:4e:68:0d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7CFF94DCCB1CF71C27C4C2F3A5B362B029C0723
        Validity
            Not Before: Nov 20 22:23:51 2024 GMT
            Not After : Nov 25 03:53:51 2024 GMT
        Subject: CN=236E3C3F4CB3A057A2F0BA439C311ED3DC09780E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ba:41:8b:2f:ed:40:1f:17:39:ea:a7:e3:e9:
                    40:47:fe:71:89:38:19:e4:a9:db:2b:22:8a:2f:1b:
                    1a:1a:44:7d:40:0c:ac:81:17:91:6a:9f:ee:c4:b6:
                    d3:de:31:63:85:5f:5c:0c:70:8c:5a:ab:23:98:53:
                    07:2b:30:ca:0f:0e:4f:e7:42:e9:d5:58:d5:bb:f4:
                    cf:46:2c:54:cc:9e:38:b1:90:bc:ec:f1:fb:69:f9:
                    1f:b2:cb:46:58:f1:b5:99:44:fa:a6:18:64:44:09:
                    a9:f9:98:23:7e:3f:77:78:ba:bc:22:a2:b0:87:ec:
                    bf:71:72:0d:95:b7:5c:0b:6b:f7:59:f2:25:a9:db:
                    12:35:27:4a:92:ed:0d:82:9b:f4:ff:13:32:23:51:
                    41:eb:97:78:2d:98:7e:16:fe:57:b9:46:35:ee:35:
                    ef:50:1c:3d:77:2f:cb:3d:49:57:eb:c6:72:7c:42:
                    66:a6:2a:ef:75:66:fc:58:45:76:1c:c2:c4:e5:9c:
                    35:9d:75:1f:ab:fa:04:f1:76:74:ef:2d:84:6c:02:
                    c7:da:e0:f0:6d:05:88:f1:1c:3f:58:c2:cc:58:dc:
                    a6:91:06:32:53:27:55:a2:74:22:87:d8:57:e1:32:
                    0d:8b:77:e6:77:10:59:99:17:df:8d:60:8f:41:1c:
                    48:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6E:3C:3F:4C:B3:A0:57:A2:F0:BA:43:9C:31:1E:D3:DC:09:78:0E
            X509v3 Authority Key Identifier:
                keyid:A7:CF:F9:4D:CC:B1:CF:71:C2:7C:4C:2F:3A:5B:36:2B:02:9C:07:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/742A7E7E1B3A5D5AF5651EA91DE5F7FC8125FBCDB237BF0D5BD1AC541D58389B/0/A7CFF94DCCB1CF71C27C4C2F3A5B362B029C0723.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7CFF94DCCB1CF71C27C4C2F3A5B362B029C0723.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/742A7E7E1B3A5D5AF5651EA91DE5F7FC8125FBCDB237BF0D5BD1AC541D58389B/0/A7CFF94DCCB1CF71C27C4C2F3A5B362B029C0723.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:cc:fe:ad:b2:04:86:95:c8:28:8c:a9:9e:4c:cc:0f:5e:dd:
         eb:e1:a5:1b:98:c9:3f:fb:e2:2f:3b:33:f2:c3:90:63:a6:76:
         50:4f:3e:a8:0d:cf:89:5b:60:7a:b8:54:79:69:d4:f7:e9:b8:
         66:ca:51:1d:78:bf:89:ad:31:d0:41:7a:c6:de:f8:b8:a1:c9:
         dc:ff:90:b6:0e:ad:c5:19:f4:42:9b:a6:d9:14:18:b8:38:f9:
         a6:72:ab:07:be:1c:c6:17:43:7c:fe:13:6f:86:a8:79:e0:10:
         07:33:31:94:ec:09:e4:c3:46:34:68:c1:7c:86:c1:ae:f6:4e:
         a5:98:dc:f7:b3:14:95:1d:29:8e:6e:45:16:81:ef:75:65:c1:
         00:85:b2:b1:b4:43:17:59:e0:24:7b:d4:12:1f:9a:e5:92:d1:
         eb:13:4e:98:3c:a8:f5:af:34:99:27:dc:ac:f7:43:67:57:4c:
         4c:6d:d0:aa:27:ca:72:38:b9:33:cd:5d:d2:f9:dd:90:29:5f:
         38:57:35:7e:b3:3b:ba:40:ce:6c:81:2b:38:bd:76:41:e4:3e:
         4a:4e:47:ac:76:6a:d4:4f:72:a1:50:be:b1:aa:44:bf:c5:74:
         18:d5:60:1c:af:a9:fd:91:b4:01:2f:c6:91:1c:22:3f:ec:52:
         e5:d9:ae:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:19 2024 by rpki-client on console-fra.rpki-client.org