Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.mft
File:                     D81AA43DF031E03121B10374C05B52BBB17ACBEA.mft (raw, json)
Hash identifier:          yUbn/EffAd9RpvbxoyI2uC4a4Nq2lZjhBWt0q92RJaY=
Subject key identifier:   AE:7B:FD:4F:B7:0C:5E:BE:68:6C:87:89:EB:9D:0C:EA:01:42:19:6F
Authority key identifier: D8:1A:A4:3D:F0:31:E0:31:21:B1:03:74:C0:5B:52:BB:B1:7A:CB:EA
Certificate issuer:       /CN=D81AA43DF031E03121B10374C05B52BBB17ACBEA
Certificate serial:       715982DFA43C949FCFAB94447803171AD53E022D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.mft
Manifest number:          2A
Signing time:             Mon 27 May 2024 17:13:42 +0000
Manifest this update:     Mon 27 May 2024 17:08:42 +0000
Manifest next update:     Sat 01 Jun 2024 08:22:42 +0000
Files and hashes:         1: 34352e3233382e3137362e302f32342d3234203d3e203634313339.roa (hash: p9SLenuzakPtjjRO6hQPhlesS0Ez0Mgzu+Gc6EVXdlQ=)
                          2: 3133382e302e3132322e302f32332d3234203d3e20323635373033.roa (hash: +5mbiIRnjUZOTcADr9/9I1U68CyAA3siqXT4Z88z1vw=)
                          3: 3133382e302e3132322e302f32332d3234203d3e20323636383436.roa (hash: mCLNuN7qBiok4+ROXQ7S1iDeTcFtmagOfrc+W/p9T4I=)
                          4: D81AA43DF031E03121B10374C05B52BBB17ACBEA.crl (hash: XUl+18KD9EacDX3pJu2zb0Y05CGZsTv8NXZtt1zZQWI=)
                          5: 3133382e302e3132332e302f32342d3234203d3e203634313339.roa (hash: 8K1cgyiTzH7iAwE0MD841sSyL/ZuOivSLJVFBL0tozM=)
                          6: 34352e3233382e3137362e302f32332d3234203d3e20323635373033.roa (hash: NWPMbii7LiH1xUAC32a/Xhp7y4+bDCCP82nyOohnv1Q=)
                          7: 34352e3233382e3137362e302f32332d3234203d3e20323636383436.roa (hash: 9PkTep/37MChhCLwdLiHpNMnj4KbQ6+wzFfGrItWqas=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Jun 2024 05:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:59:82:df:a4:3c:94:9f:cf:ab:94:44:78:03:17:1a:d5:3e:02:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D81AA43DF031E03121B10374C05B52BBB17ACBEA
        Validity
            Not Before: May 27 17:08:42 2024 GMT
            Not After : Jun  1 08:22:42 2024 GMT
        Subject: CN=AE7BFD4FB70C5EBE686C8789EB9D0CEA0142196F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b2:dc:9a:c4:9b:ac:30:8c:c5:5b:62:75:e0:
                    7a:3d:75:5d:23:f9:02:ca:dc:22:53:58:8b:f2:b8:
                    48:c0:cb:b7:ec:e1:0e:d2:2c:65:f8:60:f4:0a:1d:
                    5a:e0:46:bb:ff:e8:c0:3a:7b:54:92:12:84:9f:e7:
                    3c:15:44:34:f2:d8:92:14:74:2e:61:32:c5:ba:f6:
                    de:ca:9e:e4:36:db:76:c5:a0:8f:94:8f:53:9b:96:
                    62:55:80:55:73:88:9c:8a:5a:a0:2d:61:2f:67:0e:
                    96:fd:13:10:af:e6:3e:c6:ac:d2:74:24:08:f7:61:
                    cc:9a:a4:7c:e2:c8:af:2c:df:0a:08:16:c1:c6:a6:
                    f5:3c:f8:55:77:d3:55:f1:2c:7b:53:aa:4d:1f:b8:
                    f4:04:7d:7d:d2:8d:d2:5f:11:ff:80:93:3b:67:3a:
                    8b:e0:16:c7:e8:53:eb:6b:93:43:40:b3:bc:e9:70:
                    64:68:12:29:85:e0:bf:5a:79:72:f2:f3:9b:3e:a5:
                    20:67:59:c1:eb:a7:a7:ec:87:25:9a:cf:a7:c2:74:
                    95:33:4b:f3:fe:3f:7d:3d:21:79:f7:1f:a5:4a:10:
                    d2:95:eb:55:00:20:18:df:c8:fe:4c:d6:aa:dc:41:
                    db:29:ce:65:d1:77:66:47:7b:8e:1f:69:2c:40:1a:
                    46:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7B:FD:4F:B7:0C:5E:BE:68:6C:87:89:EB:9D:0C:EA:01:42:19:6F
            X509v3 Authority Key Identifier:
                keyid:D8:1A:A4:3D:F0:31:E0:31:21:B1:03:74:C0:5B:52:BB:B1:7A:CB:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:53:56:c1:d2:fd:8c:e8:62:4c:63:93:ff:d5:72:47:52:9b:
         37:ca:33:60:a2:5b:0b:35:8b:c9:da:50:fd:33:36:ae:8c:b2:
         ad:bc:d6:28:fc:c1:1d:63:ed:90:39:16:82:e0:28:06:92:39:
         7f:67:fd:42:a3:22:f1:88:3b:38:64:72:f7:23:58:f1:1c:05:
         0b:dd:74:fd:71:f5:74:39:41:89:95:44:31:2d:aa:24:fa:70:
         5b:4a:2a:f1:ff:bb:a1:ba:aa:4b:26:4c:d7:d7:7b:ef:11:a9:
         4f:13:f8:34:ff:28:cf:c0:0d:e6:ff:8d:fa:2a:ae:28:2a:3e:
         15:a2:0b:db:76:c3:ab:6d:05:56:a2:01:e9:d7:fa:0f:79:fb:
         ee:4b:2c:f5:36:f9:c0:da:0f:bc:ac:7c:8a:4c:d7:19:0e:f6:
         2b:cd:75:6f:7e:28:c9:ba:01:97:ac:73:45:0b:a4:25:ef:c2:
         3e:2e:fb:9f:61:23:b0:fd:a2:14:c4:28:f4:af:07:c0:61:cb:
         e7:d6:6f:de:35:52:3d:4c:19:81:f6:ec:20:6f:9e:0d:98:39:
         d8:10:05:34:9f:1b:29:d3:0c:45:c5:f9:7f:4e:f4:22:3c:ff:
         36:50:bb:2c:9a:be:25:79:a0:c0:84:c9:08:31:8d:6b:83:fe:
         8e:31:0a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 19:33:10 2024 by rpki-client on console-fra.rpki-client.org