Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.mft
File:                     B4E0934934FFEC12162EAFD5716D0AF920DC63AD.mft (raw, json)
Hash identifier:          aYxAun49rvqXh7Z2D4FDmKuAbAJAVxc5XZWrjMh7qnE=
Subject key identifier:   4A:10:88:D7:41:2F:DE:57:91:56:A2:25:2C:2A:35:5E:ED:37:65:92
Authority key identifier: B4:E0:93:49:34:FF:EC:12:16:2E:AF:D5:71:6D:0A:F9:20:DC:63:AD
Certificate issuer:       /CN=B4E0934934FFEC12162EAFD5716D0AF920DC63AD
Certificate serial:       645125382CD7632B1D1F1D6759DC1141B4CA4EED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.mft
Manifest number:          8B
Signing time:             Thu 21 Nov 2024 11:11:00 +0000
Manifest this update:     Thu 21 Nov 2024 11:06:00 +0000
Manifest next update:     Tue 26 Nov 2024 20:17:00 +0000
Files and hashes:         1: 3137372e39332e3134322e302f32342d3234203d3e20323730313630.roa (hash: pxAQvi8n3UUCFeFI4glbVuQX0ihkp2ty34TAQgk9yTo=)
                          2: B4E0934934FFEC12162EAFD5716D0AF920DC63AD.crl (hash: LQ/7lsDRL6skaxYW//r8Cpcwy4iQKeIxNH8K3jaaDYc=)
                          3: 323830363a3365373a323030303a3a2f33362d3336203d3e20323730313630.roa (hash: PDrxvQtyJkyGdi37iFJoa9uJCfV52rQveFoFD7t2ajs=)
                          4: 323830363a3365373a333030303a3a2f33362d3336203d3e20323730313630.roa (hash: kEc0GIzevaXGRpXuGbO6BYwihcpFI6zrjIQ1nEWc+h4=)
                          5: 323830363a3365373a343030303a3a2f33362d3336203d3e20323730313630.roa (hash: FFiOhkg5GtC04F1mbpRc2dlMLOMmEDYTIaEvRxACyVE=)
                          6: 323830363a3365373a313030303a3a2f33362d3336203d3e20323730313630.roa (hash: 1jL+pXfbVaPdv01VJre+Qjnf6OuPOIG5gOKHGFrr4pw=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:51:25:38:2c:d7:63:2b:1d:1f:1d:67:59:dc:11:41:b4:ca:4e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4E0934934FFEC12162EAFD5716D0AF920DC63AD
        Validity
            Not Before: Nov 21 11:06:00 2024 GMT
            Not After : Nov 26 20:17:00 2024 GMT
        Subject: CN=4A1088D7412FDE579156A2252C2A355EED376592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:80:a8:e5:eb:1a:6e:24:9d:84:7e:73:83:8e:
                    41:6b:98:04:95:0a:cc:da:e6:66:b9:90:ee:a1:87:
                    69:2c:0b:51:5e:97:3b:c0:0b:b2:22:c5:77:f0:ad:
                    52:9e:08:b3:63:ff:1e:db:41:97:28:d7:6b:a7:ac:
                    37:14:07:0f:17:a9:bc:40:b8:c4:1c:01:ee:a9:b2:
                    2b:e0:15:4e:64:f6:97:36:da:c4:d0:3e:66:78:40:
                    c0:71:a9:1c:24:5b:17:16:0b:bc:24:65:a6:73:fc:
                    24:89:cc:5a:19:c6:32:13:ba:bd:70:a9:e1:6f:05:
                    ae:43:06:a1:cd:6a:06:b9:9e:a6:0d:e5:80:45:f8:
                    65:d6:4d:4c:9b:0d:4f:40:db:11:f7:13:e0:ff:f6:
                    8d:bf:20:60:a8:db:17:f7:69:cf:da:e3:c5:09:4d:
                    3c:2d:1b:31:83:e0:af:9e:1c:7a:2a:b6:e6:a9:b2:
                    37:7c:aa:d5:f9:bc:6f:57:6c:cc:c2:2b:b1:2b:5c:
                    8e:44:df:cf:5c:be:34:a9:b1:a5:9e:fb:ed:e4:95:
                    25:ec:c3:91:56:2a:46:9e:c5:52:67:9f:09:ba:f4:
                    c4:f7:0d:56:d1:ba:78:2a:a5:ec:74:ad:95:89:23:
                    b1:7a:cf:a6:5d:c9:5c:7b:3b:be:87:ba:15:f9:7f:
                    12:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:10:88:D7:41:2F:DE:57:91:56:A2:25:2C:2A:35:5E:ED:37:65:92
            X509v3 Authority Key Identifier:
                keyid:B4:E0:93:49:34:FF:EC:12:16:2E:AF:D5:71:6D:0A:F9:20:DC:63:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:9b:8e:c2:0a:b2:e0:f6:a2:0d:d0:b2:8f:51:45:9d:a7:b3:
         b5:39:c3:7d:b9:91:e5:92:a7:24:74:86:7c:df:97:12:c1:6c:
         3d:ea:64:cc:5c:06:6d:8a:11:bc:a9:9d:27:ac:bd:ef:10:de:
         77:42:63:ca:24:71:d1:56:9c:84:c4:aa:9a:a5:f0:b0:74:14:
         31:99:13:25:17:18:97:46:6f:bd:e4:d7:ea:8e:24:ee:4f:80:
         80:df:67:50:d2:1e:c0:c3:0d:4b:c5:5d:3e:6f:a7:d4:82:b2:
         63:46:de:79:cd:31:d0:bf:64:8e:b4:df:e4:72:23:8f:59:27:
         2a:ab:8e:fe:46:56:a9:f0:7e:0a:e5:cf:4a:77:4b:b4:1e:77:
         b7:6e:18:0e:7f:6e:28:97:05:91:21:c1:d0:5e:0d:18:f5:a0:
         3b:c9:70:9b:e4:73:3a:81:35:2c:d6:96:ea:93:21:7c:e0:ff:
         f1:8e:96:28:3c:24:6d:03:76:ba:be:43:67:2e:98:16:af:b9:
         b5:76:51:7f:34:b1:44:2f:9b:17:05:71:ba:6f:53:e5:22:fd:
         0c:cd:3c:3c:2e:be:52:4b:06:a7:85:d5:b0:e6:5d:9f:9c:cd:
         49:aa:b4:0d:7a:27:8a:66:b3:46:79:18:9a:8c:93:98:eb:f7:
         1f:d3:63:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:05 2024 by rpki-client on console-fra.rpki-client.org