Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.mft
File:                     4CA91FFA6AE8A06F96A7F21B170F2E116200F977.mft (raw, json)
Hash identifier:          7DAWvt54iHH3Lc4hS//BU5fFJ3wMCvWySifsRLP4aOQ=
Subject key identifier:   00:97:5A:3A:35:DF:DD:18:50:D3:AE:2E:92:EA:90:5F:A8:F3:B2:8A
Authority key identifier: 4C:A9:1F:FA:6A:E8:A0:6F:96:A7:F2:1B:17:0F:2E:11:62:00:F9:77
Certificate issuer:       /CN=4CA91FFA6AE8A06F96A7F21B170F2E116200F977
Certificate serial:       33C1072308C9A6CBD9CAE474A1F7CABD027B4FC6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.mft
Manifest number:          85
Signing time:             Sat 23 Nov 2024 03:23:36 +0000
Manifest this update:     Sat 23 Nov 2024 03:18:36 +0000
Manifest next update:     Thu 28 Nov 2024 17:07:36 +0000
Files and hashes:         1: 323830333a376563303a383030303a3a2f33362d3336203d3e20323635363731.roa (hash: AOUdtsVv2maYZv2B51HFC1uIthQP+F6TWo0uEV3YVdw=)
                          2: 323830333a376563303a633030303a3a2f33362d3336203d3e20323635363731.roa (hash: 4QfxbeEH1udJEn8xBZib3HjJ+1VVND8FPXUqh3PvcGY=)
                          3: 323830333a376563303a343030303a3a2f33362d3336203d3e20323635363731.roa (hash: zddCNCCcu+rFoWA3P6+yVVCdkmxzOaPSGdnoKDWjlxQ=)
                          4: 4CA91FFA6AE8A06F96A7F21B170F2E116200F977.crl (hash: kyM4pGAzK46Ec/Xwc86UVBCh1mysdP7odcvJsTtgI44=)
                          5: 323830333a376563303a313030303a3a2f33362d3336203d3e20323635363731.roa (hash: /+zhBIfTztVPBLAfapQnBLIZ5akySy8YTtQ8V0bTiK0=)
                          6: 34352e352e36342e302f32322d3232203d3e20333934343734.roa (hash: r3QKyfXm7maBCxLRG/mMaFCu9PZp35e9Yv9nET1zS0o=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c1:07:23:08:c9:a6:cb:d9:ca:e4:74:a1:f7:ca:bd:02:7b:4f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CA91FFA6AE8A06F96A7F21B170F2E116200F977
        Validity
            Not Before: Nov 23 03:18:36 2024 GMT
            Not After : Nov 28 17:07:36 2024 GMT
        Subject: CN=00975A3A35DFDD1850D3AE2E92EA905FA8F3B28A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7d:ab:f6:45:94:ab:b9:d3:fd:46:12:5d:b8:
                    9e:44:72:47:4c:8e:c6:85:ce:62:8b:62:e8:0d:d6:
                    7e:35:7a:3d:aa:f1:be:f3:89:06:ff:6d:6e:0f:f2:
                    5d:72:8c:52:62:87:61:12:f6:eb:27:d2:d4:3d:15:
                    da:f8:4d:63:7a:01:fc:6b:ff:f2:3b:96:ce:62:af:
                    53:de:fe:30:e8:35:26:42:ff:9c:be:67:9d:40:db:
                    22:af:8e:09:02:ce:4f:14:d7:00:d0:ea:95:d5:41:
                    20:7f:94:86:83:10:c7:1b:c2:7e:9b:6a:8c:82:c8:
                    bb:e5:42:30:73:e0:2b:d5:24:4c:1c:97:9a:2b:07:
                    da:f8:3b:bb:23:cb:04:f6:cf:5d:48:12:6b:3f:d8:
                    56:e5:88:f0:1b:2e:06:51:80:dc:14:b9:ba:ba:20:
                    b9:dc:62:09:31:c6:cf:21:cd:f2:1f:52:78:5c:3b:
                    72:9b:21:0e:a6:74:bc:8f:ef:a5:56:82:42:76:d4:
                    84:0f:78:1c:c1:84:02:61:02:ec:d2:17:0a:4a:28:
                    47:ef:36:2e:0c:bc:56:b8:5a:7c:4e:15:97:31:32:
                    3a:d0:44:ec:e5:7d:89:5e:3a:5a:cd:81:a2:be:99:
                    51:98:a8:80:d3:3e:a8:71:2d:61:f5:be:e6:82:91:
                    5d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:97:5A:3A:35:DF:DD:18:50:D3:AE:2E:92:EA:90:5F:A8:F3:B2:8A
            X509v3 Authority Key Identifier:
                keyid:4C:A9:1F:FA:6A:E8:A0:6F:96:A7:F2:1B:17:0F:2E:11:62:00:F9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:58:a0:45:ee:83:e5:0d:c4:16:2f:8a:60:46:e6:ec:96:fe:
         79:b3:b6:ee:64:f3:6f:da:6e:72:8d:70:40:d1:52:11:ff:39:
         c7:ef:55:2d:fc:a8:a7:62:49:7f:b4:1b:39:6e:64:5a:71:65:
         3b:ed:8e:60:c2:a6:5a:94:43:e0:b2:5b:c8:11:9d:f1:c3:f8:
         b2:22:62:b0:2a:91:52:40:46:26:c0:62:16:d8:9a:93:34:85:
         3d:0a:a9:eb:a8:6f:5c:bf:3f:94:92:63:60:03:62:c8:d1:d5:
         a2:8d:7e:08:f8:e5:45:26:26:0f:ee:dc:ff:03:e4:61:37:29:
         ba:8a:70:7f:19:0d:07:08:ad:40:2d:6e:07:ba:ef:24:a9:8e:
         cf:76:e5:1f:4d:f7:11:f0:84:d1:4d:49:f9:08:83:77:29:22:
         7e:9b:22:3e:54:b6:a5:a8:76:8d:fe:c7:c8:b1:e5:5e:46:17:
         79:ee:33:b7:54:c8:d0:ac:49:69:ae:88:75:9c:84:24:ba:a1:
         61:f5:eb:3a:86:d9:18:df:bd:69:1b:27:81:ab:88:23:ec:54:
         a4:6f:99:04:94:f2:7e:ed:b5:73:23:8f:f7:23:45:63:8c:b2:
         80:85:a6:cf:2e:ae:44:46:4b:0d:01:ef:3c:22:50:ee:4f:f5:
         2e:b9:0a:d0
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUM8EHIwjJpsvZyuR0offKvQJ7T8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENBOTFGRkE2QUU4QTA2Rjk2QTdGMjFCMTcwRjJFMTE2
MjAwRjk3NzAeFw0yNDExMjMwMzE4MzZaFw0yNDExMjgxNzA3MzZaMDMxMTAvBgNV
BAMTKDAwOTc1QTNBMzVERkREMTg1MEQzQUUyRTkyRUE5MDVGQThGM0IyOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmfav2RZSrudP9RhJduJ5EckdM
jsaFzmKLYugN1n41ej2q8b7ziQb/bW4P8l1yjFJih2ES9usn0tQ9Fdr4TWN6Afxr
//I7ls5ir1Pe/jDoNSZC/5y+Z51A2yKvjgkCzk8U1wDQ6pXVQSB/lIaDEMcbwn6b
aoyCyLvlQjBz4CvVJEwcl5orB9r4O7sjywT2z11IEms/2FbliPAbLgZRgNwUubq6
ILncYgkxxs8hzfIfUnhcO3KbIQ6mdLyP76VWgkJ21IQPeBzBhAJhAuzSFwpKKEfv
Ni4MvFa4WnxOFZcxMjrQROzlfYleOlrNgaK+mVGYqIDTPqhxLWH1vuaCkV1ZAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUAJdaOjXf3RhQ064ukuqQX6jzsoowHwYDVR0j
BBgwFoAUTKkf+mrooG+Wp/IbFw8uEWIA+XcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RUJCRTE1NzlBQkNCRjJFOEFDNDlEQzdBRDNENEQ5MzJF
RkZFRjZBMTgyNEI0MTZGMjg5QThBRjg4MDk3MzAxLzAvNENBOTFGRkE2QUU4QTA2
Rjk2QTdGMjFCMTcwRjJFMTE2MjAwRjk3Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80Q0E5MUZGQTZBRThBMDZGOTZB
N0YyMUIxNzBGMkUxMTYyMDBGOTc3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUVCQkUxNTc5QUJDQkYyRThBQzQ5REM3QUQzRDREOTMyRUZGRUY2QTE4
MjRCNDE2RjI4OUE4QUY4ODA5NzMwMS8wLzRDQTkxRkZBNkFFOEEwNkY5NkE3RjIx
QjE3MEYyRTExNjIwMEY5NzcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBzWKBF7oPlDcQWL4pgRubslv55
s7buZPNv2m5yjXBA0VIR/znH71Ut/KinYkl/tBs5bmRacWU77Y5gwqZalEPgslvI
EZ3xw/iyImKwKpFSQEYmwGIW2JqTNIU9CqnrqG9cvz+UkmNgA2LI0dWijX4I+OVF
JiYP7tz/A+RhNym6inB/GQ0HCK1ALW4Huu8kqY7PduUfTfcR8ITRTUn5CIN3KSJ+
myI+VLalqHaN/sfIseVeRhd57jO3VMjQrElproh1nIQkuqFh9es6htkY371pGyeB
q4gj7FSkb5kElPJ+7bVzI4/3I0VjjLKAhabPLq5ERksNAe88IlDuT/UuuQrQ
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:04 2024 by rpki-client on console-ams.rpki-client.org