Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.mft
File:                     4CA91FFA6AE8A06F96A7F21B170F2E116200F977.mft (raw, json)
Hash identifier:          Lj2bZjFKMFKJyDGBIvjdkGQ5SLrwyLKAZzz0zvzCCB0=
Subject key identifier:   1C:2F:64:13:CE:B5:1A:97:57:7F:2D:82:3B:BF:39:71:40:3D:7F:54
Authority key identifier: 4C:A9:1F:FA:6A:E8:A0:6F:96:A7:F2:1B:17:0F:2E:11:62:00:F9:77
Certificate issuer:       /CN=4CA91FFA6AE8A06F96A7F21B170F2E116200F977
Certificate serial:       769242F01E6A5081DDF887B7F20171C73A6618DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.mft
Manifest number:          65
Signing time:             Mon 16 Sep 2024 09:18:49 +0000
Manifest this update:     Mon 16 Sep 2024 09:13:49 +0000
Manifest next update:     Sat 21 Sep 2024 02:51:49 +0000
Files and hashes:         1: 323830333a376563303a633030303a3a2f33362d3336203d3e20323635363731.roa (hash: 4QfxbeEH1udJEn8xBZib3HjJ+1VVND8FPXUqh3PvcGY=)
                          2: 4CA91FFA6AE8A06F96A7F21B170F2E116200F977.crl (hash: yFPBUOrERO2e+J1Kz7NfGZ16Bx3ysO/H/rDm9+VbEzw=)
                          3: 34352e352e36342e302f32322d3232203d3e20333934343734.roa (hash: r3QKyfXm7maBCxLRG/mMaFCu9PZp35e9Yv9nET1zS0o=)
                          4: 323830333a376563303a343030303a3a2f33362d3336203d3e20323635363731.roa (hash: zddCNCCcu+rFoWA3P6+yVVCdkmxzOaPSGdnoKDWjlxQ=)
                          5: 323830333a376563303a313030303a3a2f33362d3336203d3e20323635363731.roa (hash: /+zhBIfTztVPBLAfapQnBLIZ5akySy8YTtQ8V0bTiK0=)
                          6: 323830333a376563303a383030303a3a2f33362d3336203d3e20323635363731.roa (hash: AOUdtsVv2maYZv2B51HFC1uIthQP+F6TWo0uEV3YVdw=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Sep 2024 12:36:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:92:42:f0:1e:6a:50:81:dd:f8:87:b7:f2:01:71:c7:3a:66:18:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CA91FFA6AE8A06F96A7F21B170F2E116200F977
        Validity
            Not Before: Sep 16 09:13:49 2024 GMT
            Not After : Sep 21 02:51:49 2024 GMT
        Subject: CN=1C2F6413CEB51A97577F2D823BBF3971403D7F54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a1:b6:1a:2a:f3:01:27:68:35:14:6f:16:26:
                    52:ab:37:7d:ae:9c:0f:fd:5e:cb:4d:59:bb:71:84:
                    68:c7:56:2e:0c:74:db:a6:e1:f5:3c:0e:90:9d:3b:
                    27:0e:7a:43:25:f9:03:6d:e0:26:a1:f1:56:17:de:
                    9d:04:fd:cc:4a:42:41:2d:d7:dc:5d:25:db:ec:54:
                    d4:60:a1:ee:11:a1:12:0b:d8:e4:fc:5e:ff:31:08:
                    0b:12:7d:b0:d4:59:43:14:a8:a8:d7:5c:3f:dd:a6:
                    b6:52:0a:f5:97:54:8f:69:99:23:84:53:d9:1c:20:
                    17:21:17:de:9d:3c:bb:77:91:2b:39:45:51:2c:ea:
                    9e:2d:26:28:49:88:14:de:95:f7:76:ca:d3:b3:45:
                    7e:32:82:84:9e:07:8d:d4:be:79:49:89:7c:31:65:
                    db:67:cd:55:92:76:be:d5:38:b8:96:94:4e:32:f9:
                    30:07:0a:96:7f:04:46:3c:fc:17:46:eb:82:b8:92:
                    f2:d1:2c:ef:64:97:25:aa:f8:2c:65:40:bd:6f:b1:
                    f5:40:bf:ec:c4:46:f1:63:91:63:5c:9c:5c:1b:4b:
                    98:7a:af:6f:df:68:a1:2e:86:82:1d:bb:82:3d:45:
                    99:36:c2:c7:06:b1:1a:48:a8:e8:ad:9d:ef:34:02:
                    81:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:2F:64:13:CE:B5:1A:97:57:7F:2D:82:3B:BF:39:71:40:3D:7F:54
            X509v3 Authority Key Identifier:
                keyid:4C:A9:1F:FA:6A:E8:A0:6F:96:A7:F2:1B:17:0F:2E:11:62:00:F9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EBBE1579ABCBF2E8AC49DC7AD3D4D932EFFEF6A1824B416F289A8AF88097301/0/4CA91FFA6AE8A06F96A7F21B170F2E116200F977.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:7f:48:a4:fe:0b:03:7d:1a:6f:a9:52:4f:d1:3c:a3:0c:4d:
         bc:28:f9:7c:a7:64:7c:40:b9:7e:c5:8c:c9:c7:59:74:b2:87:
         ec:71:9f:57:a3:7e:43:92:25:bd:7d:03:e4:f1:a9:10:d4:e6:
         a5:93:50:4b:67:04:0c:23:12:56:7b:b4:ab:5f:f2:40:7c:6b:
         e0:dd:e2:d7:54:76:c6:02:cf:99:9e:68:f1:f9:94:24:87:ea:
         fd:b5:eb:7e:fc:e5:3b:6e:17:d5:90:e0:73:6a:36:af:92:48:
         42:ef:03:e3:e6:66:d0:f9:67:5a:e9:79:4c:c4:34:35:3c:d5:
         dc:52:5a:4a:24:ec:44:08:31:29:12:34:22:45:c1:6b:35:da:
         cd:e2:cf:7e:d6:64:a8:fb:52:fa:82:85:cd:4f:ad:c2:d1:0a:
         92:ef:33:dc:0f:2b:01:80:4b:98:ac:76:02:57:3c:23:cc:aa:
         3d:e5:0c:1d:1e:cd:2f:7b:42:c1:d0:76:f2:40:1f:c5:af:0c:
         08:58:b9:13:d4:6f:18:1d:1e:f9:e7:07:cd:1d:59:fd:85:44:
         7e:75:ea:16:7b:1f:13:99:d7:bb:0a:21:6f:c4:9d:8e:48:23:
         12:4d:69:65:01:ac:7d:86:8f:f1:4e:5d:af:a7:10:04:bd:b6:
         42:8f:ea:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 10:37:59 2024 by rpki-client on console-ams.rpki-client.org