Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CADF8B4A8D6285A2033F1602337CAFB3C2DD94EDC2E5A25480033FEDFB776B2C/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.mft
File:                     9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.mft (raw, json)
Hash identifier:          VmLe+/E9KOSz1WQO47I798CCy7coNn57qLcl8fkLSmE=
Subject key identifier:   57:5C:3C:AE:B2:7A:3D:34:73:15:9E:B8:E5:A6:76:9B:A9:A2:79:50
Authority key identifier: 9C:A7:6F:67:F9:81:07:C2:D6:B3:F1:48:CA:6A:0F:F9:53:F7:4B:25
Certificate issuer:       /CN=9CA76F67F98107C2D6B3F148CA6A0FF953F74B25
Certificate serial:       131E9DD4F26BEB08F74D8DCDE8533D36C4C6B5BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CADF8B4A8D6285A2033F1602337CAFB3C2DD94EDC2E5A25480033FEDFB776B2C/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.mft
Manifest number:          85
Signing time:             Thu 21 Nov 2024 09:50:12 +0000
Manifest this update:     Thu 21 Nov 2024 09:45:12 +0000
Manifest next update:     Wed 27 Nov 2024 09:06:12 +0000
Files and hashes:         1: 3139302e38332e37322e302f32322d3234203d3e20323731383233.roa (hash: g0wgNZp5J8m13wTGxhIK2f2p74JyTmOABTAKdB1pgc8=)
                          2: 9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.crl (hash: ioJI7jGVmRk+2roHIZAy0uS51wEO98wuyLsdIT6xrno=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CADF8B4A8D6285A2033F1602337CAFB3C2DD94EDC2E5A25480033FEDFB776B2C/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CADF8B4A8D6285A2033F1602337CAFB3C2DD94EDC2E5A25480033FEDFB776B2C/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:1e:9d:d4:f2:6b:eb:08:f7:4d:8d:cd:e8:53:3d:36:c4:c6:b5:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CA76F67F98107C2D6B3F148CA6A0FF953F74B25
        Validity
            Not Before: Nov 21 09:45:12 2024 GMT
            Not After : Nov 27 09:06:12 2024 GMT
        Subject: CN=575C3CAEB27A3D3473159EB8E5A6769BA9A27950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:32:54:48:c9:d5:23:c5:95:7a:2b:bc:fd:d3:
                    06:62:3c:bb:02:ca:87:4b:8a:3f:0d:72:1a:3e:a4:
                    f9:65:de:56:fb:82:db:ea:3e:4a:3b:b0:26:0d:88:
                    23:48:44:a3:7d:fc:f3:83:cc:f0:41:8d:a3:4f:17:
                    36:7c:b1:81:b8:9f:c4:03:14:28:68:5f:69:f4:23:
                    74:d9:6e:57:56:72:be:56:ae:54:1b:58:7d:f1:65:
                    29:4f:aa:cf:2f:8c:6f:17:63:24:49:6f:25:8a:1b:
                    fe:d7:80:a5:d9:a1:2e:81:62:50:35:80:bc:10:eb:
                    68:94:73:07:5f:2c:a8:db:ea:b7:aa:90:56:26:c5:
                    89:28:e1:64:97:58:ec:d6:4d:0b:2f:45:42:25:fd:
                    b7:88:71:26:81:bd:3d:6a:07:28:fe:c9:aa:65:f7:
                    91:5b:50:e5:06:6c:3a:75:d8:b9:90:46:db:b6:f3:
                    fa:27:e8:c8:63:ac:be:49:49:06:61:a8:42:3b:fc:
                    d1:b3:c1:0e:63:3d:b7:a1:5b:13:e8:52:76:b1:20:
                    0b:05:15:f7:cf:22:31:99:81:5a:18:75:51:ef:8d:
                    c1:a0:96:51:f9:4e:90:e9:72:f3:7b:ad:f9:21:a2:
                    dd:37:ec:1a:f2:34:a5:39:58:62:45:1b:12:5c:f0:
                    1c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5C:3C:AE:B2:7A:3D:34:73:15:9E:B8:E5:A6:76:9B:A9:A2:79:50
            X509v3 Authority Key Identifier:
                keyid:9C:A7:6F:67:F9:81:07:C2:D6:B3:F1:48:CA:6A:0F:F9:53:F7:4B:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CADF8B4A8D6285A2033F1602337CAFB3C2DD94EDC2E5A25480033FEDFB776B2C/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CADF8B4A8D6285A2033F1602337CAFB3C2DD94EDC2E5A25480033FEDFB776B2C/0/9CA76F67F98107C2D6B3F148CA6A0FF953F74B25.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:8d:23:df:b4:dd:23:ea:1c:39:12:0f:42:21:04:cc:9d:62:
         3e:75:f0:41:71:7a:9b:7c:c5:72:72:2f:91:2f:b8:fe:bc:67:
         b2:75:c1:79:89:7f:c2:a4:84:28:a4:06:14:6a:a4:cd:3b:ab:
         86:2d:56:66:1e:73:56:5b:54:24:be:62:a7:e8:74:dd:64:a4:
         1c:ac:c0:f8:76:e8:08:e3:80:4b:9e:85:89:11:7c:8d:ce:7a:
         23:d8:7a:ec:e2:98:6f:49:dc:e3:a0:d2:2f:63:1a:53:06:d2:
         3c:3c:34:70:09:f5:e7:18:80:ec:3b:16:b1:3f:c6:5a:62:e8:
         da:53:1e:90:fe:65:e0:63:50:26:95:0d:dc:28:ce:6e:58:04:
         6f:59:27:66:ba:d9:ad:7e:91:d3:1f:d2:11:d8:41:09:0b:f3:
         44:86:95:93:ba:86:d9:3e:a5:45:2a:b2:8f:b9:dd:d1:a0:77:
         57:2f:4a:46:69:41:42:b6:2f:78:bf:93:78:b6:0b:c0:db:17:
         70:80:c5:22:5e:5b:fc:54:8f:b9:ce:e5:c8:f2:2e:36:9f:42:
         68:ea:0e:fa:fb:e4:b7:57:86:29:9e:fc:ff:b3:da:6a:44:47:
         63:39:c3:c4:6c:82:b6:ad:15:3a:83:9f:7e:6b:09:1b:f6:8d:
         87:19:c4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org