Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft
File:                     BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft (raw, json)
Hash identifier:          i2MKFe1bbIuGOvmC82vbMEWh3fzBcQGKvQQBG7CPDqs=
Subject key identifier:   9F:74:A8:36:A5:D2:C1:E9:3F:6D:2B:2E:CE:77:BA:4D:98:B5:B3:17
Authority key identifier: BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B
Certificate issuer:       /CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
Certificate serial:       02AA5624C2EB190199BA4C089546B619F23FC98B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft
Manifest number:          85
Signing time:             Thu 21 Nov 2024 10:00:17 +0000
Manifest this update:     Thu 21 Nov 2024 09:55:17 +0000
Manifest next update:     Tue 26 Nov 2024 09:28:17 +0000
Files and hashes:         1: 3230302e37342e3235322e302f32342d3234203d3e203238303530.roa (hash: ghCVkHFAPsKLaU6nF6UhAwCeHnhyaZgngXMe2pVWrDE=)
                          2: BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl (hash: 6z1vdDBXTRwat8xMUboc13MNJj5XmLW++JyadEgxMxA=)
                          3: 3230302e37342e3235352e302f32342d3234203d3e203238303530.roa (hash: aYN8H+JZzZszD2BEq+34wnWMBYQLU6J2laq0yzXl2U0=)
                          4: 323830333a323034303a3a2f33322d3332203d3e203238303530.roa (hash: kj39TwlGjyWspe3/nkff460Fj0wpAvdGXwG8usyNssY=)
                          5: 3230302e37342e3235342e302f32342d3234203d3e203238303530.roa (hash: mF7GdfR4pD6bL3BOa5X3lj6pfvyygF88viKXswQjw3E=)
                          6: 3230302e37342e3234382e302f32342d3234203d3e203238303530.roa (hash: 6QvDK5UYwiCpmxhcBSihRG2MkoSAhwnhwwp7lS8I1fk=)
                          7: 3230302e37342e3234392e302f32342d3234203d3e203238303530.roa (hash: XmJrlypqsMw3uZ4J6wRVLffITR5m23pcCif/+SSy7U8=)
                          8: 3230302e37342e3235302e302f32342d3234203d3e203238303530.roa (hash: T6XMyWurL6lj5HRObI2ZbaeHlEoFInB1NCGCuAr80wI=)
                          9: 3230302e37342e3235312e302f32342d3234203d3e203238303530.roa (hash: 0aUcL09y9PYr1gBSqjy1fP7YEFAZN4+Y6Kg+/Ejbl10=)
                          10: 3230302e37342e3235332e302f32342d3234203d3e203238303530.roa (hash: i3Vr+FlYvKisojbgs0ceJKX1DY9U5gH9/c4Tq/5ZhHM=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:aa:56:24:c2:eb:19:01:99:ba:4c:08:95:46:b6:19:f2:3f:c9:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
        Validity
            Not Before: Nov 21 09:55:17 2024 GMT
            Not After : Nov 26 09:28:17 2024 GMT
        Subject: CN=9F74A836A5D2C1E93F6D2B2ECE77BA4D98B5B317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b9:6e:b3:09:be:57:bf:0f:af:f7:d1:a9:6e:
                    79:e4:a8:53:df:e9:d5:64:df:22:df:cf:30:58:f5:
                    a6:77:78:5a:26:f6:ce:21:11:55:5e:fa:07:4f:42:
                    36:4b:4b:21:c0:7b:08:30:70:ec:10:63:6f:81:e6:
                    47:2a:08:8f:85:32:b1:f8:cf:9f:c0:ea:43:65:29:
                    19:f1:b2:7c:d2:a9:f3:d9:1f:85:83:a1:a3:f1:ef:
                    8a:0d:97:90:b8:c4:36:be:1b:f6:22:bb:e4:15:2f:
                    c7:82:e6:17:36:60:cd:d0:9f:79:28:5a:5b:46:5b:
                    e7:62:cb:a8:82:df:98:5a:fe:9f:61:e7:9f:5b:e5:
                    61:0c:e8:51:b5:62:c7:3f:3a:8d:82:b8:8a:af:31:
                    98:35:60:d9:d2:d7:ef:e1:8d:9c:a6:71:b4:c2:1a:
                    58:3d:ab:a3:08:26:1c:13:bc:83:66:51:4c:21:c8:
                    14:84:be:e7:b8:8b:91:20:1a:c5:94:4e:d5:17:72:
                    21:7f:dd:11:f7:b5:76:91:e6:6d:ef:56:d3:97:eb:
                    0d:0a:f4:7f:66:04:d6:a7:5e:6f:72:50:e0:20:56:
                    03:4a:6d:f4:be:24:d6:87:94:9d:70:f4:32:75:86:
                    24:57:a4:3e:34:44:24:4b:db:a3:93:ed:b1:b2:f3:
                    2f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:74:A8:36:A5:D2:C1:E9:3F:6D:2B:2E:CE:77:BA:4D:98:B5:B3:17
            X509v3 Authority Key Identifier:
                keyid:BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:1c:3b:3b:8f:07:72:ab:52:aa:9c:b5:27:c5:a7:b2:86:bb:
         1a:9b:62:07:c1:a3:c8:d0:30:92:03:f9:54:74:15:82:60:87:
         71:27:67:2c:4c:5c:b6:6f:90:ad:13:66:ae:82:84:cc:96:49:
         0c:c0:6d:45:6f:09:3b:d3:cf:56:50:84:f9:a2:10:74:cd:b2:
         fa:d3:8e:34:19:c7:ab:04:7d:1d:98:56:a1:14:30:c7:da:47:
         42:b4:54:14:a3:42:82:20:7c:9c:1b:17:9b:1a:41:6d:87:ba:
         d2:96:67:9f:f6:df:34:5a:97:e5:2e:29:38:86:64:4e:22:ca:
         50:a1:3c:c3:d4:52:a1:87:5b:96:b1:de:3b:d2:4d:cc:6c:16:
         81:82:5b:35:ef:9f:d8:58:50:3e:f8:df:21:bc:9f:a6:9e:d6:
         14:f8:70:9f:04:fb:12:8d:28:ec:76:bb:08:64:99:d2:5c:4e:
         03:f1:a9:c4:91:f6:ab:3f:e8:ae:b5:90:8a:95:d7:6a:fa:f8:
         97:72:09:0b:93:57:72:67:14:27:a2:50:d6:f1:ef:8d:78:63:
         bc:26:be:9b:eb:73:12:84:b5:4d:df:69:fe:4b:24:68:2e:84:
         69:3e:fc:73:73:19:36:f2:99:33:1b:72:77:3f:2a:ab:42:0c:
         2a:90:b7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:54 2024 by rpki-client on console-ams.rpki-client.org