Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
File:                     2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft (raw, json)
Hash identifier:          KDWmSzCfsbKRjOJSo+HozOhKamia2EOvWtLb8m6c6MQ=
Subject key identifier:   77:E7:56:96:8C:89:B7:C3:09:50:68:C3:E2:2D:B2:AE:2A:DF:D0:0E
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Certificate issuer:       /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial:       372BA9CBB9202267BF4A7162A98AE98359B0F790
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
Manifest number:          88
Signing time:             Wed 20 Nov 2024 07:25:15 +0000
Manifest this update:     Wed 20 Nov 2024 07:20:15 +0000
Manifest next update:     Mon 25 Nov 2024 14:18:15 +0000
Files and hashes:         1: 3139312e39372e37362e302f32322d3232203d3e20323633323039.roa (hash: +DOyhpfSqvDV1OccFHR9VsoKJUpyDFyv853VMB6l6mo=)
                          2: 3139312e39372e37382e302f32332d3233203d3e20323633323039.roa (hash: cFpohEMmWWaUtx1IMH4C3Cm17p4DlO/rkQumkBY6Nqs=)
                          3: 3139312e39372e37332e302f32342d3234203d3e20323633323039.roa (hash: Fg0Fx232NEUeZriNyuJpvwrqi0e0Oc9hrYLlDYYUFVE=)
                          4: 3139312e39372e37372e302f32342d3234203d3e20323633323039.roa (hash: CIiOwVwWztqivBB/qhmNwHpQG+n7foUlBe/Tb+EOnmQ=)
                          5: 3139312e39372e37392e302f32342d3234203d3e20323633323039.roa (hash: dQ12X4A0cit9DwF7NcTF7enNpsp990byj7cyymWUWgk=)
                          6: 3139312e39372e37322e302f32342d3234203d3e20323633323039.roa (hash: Rrs7+gIbHwPYlq3j6ZxSJe8gBfxtPLmkK/zus9QWXo4=)
                          7: 3139312e39372e37322e302f32332d3233203d3e20323633323039.roa (hash: G4YEuMoJa2Xu747MR5rS0/neXC4gEmby0wzcsS0uNZA=)
                          8: 3139312e39372e37302e302f32342d3234203d3e20323633323039.roa (hash: aVh2+y+fipYABqkZu0hLrsQ/T91IcxlT8iXqw6KB5Fo=)
                          9: 3139312e39372e37352e302f32342d3234203d3e20323633323039.roa (hash: 6SCiPe8pXbiLERCtD+hvCsHRWnVSKr/qiwFDEu8bQAw=)
                          10: 3139312e39372e37342e302f32332d3233203d3e20323633323039.roa (hash: xf76VQsUaZ24ltlxRrfiqjYBvMmqSjvc744URgH8Q3E=)
                          11: 3139312e39372e36382e302f32342d3234203d3e20323633323039.roa (hash: 9lL/fgRboF5TTHhDThQYB+o66G8xPoZqU8YUQAG4354=)
                          12: 3139312e39372e36392e302f32342d3234203d3e20323633323039.roa (hash: X345hArYG6zZSQMl3ivJutdiz40mIy9KIyG47AntmcU=)
                          13: 3139312e39372e37312e302f32342d3234203d3e20323633323039.roa (hash: 0k7Pj6XNc9hGsylhyg4jiY2mue5gicJVQYT43Yg3tJ4=)
                          14: 3139312e39372e37362e302f32342d3234203d3e20323633323039.roa (hash: daSvATCzU9tWWTAz2GEaMYlRmLPe+3CeKl1MmnLUTTg=)
                          15: 3139312e39372e37342e302f32342d3234203d3e20323633323039.roa (hash: Po6qEFUN36dsVs1K4GB+p6CYKDTT1XYiWineXouzbxs=)
                          16: 3139312e39372e37302e302f32332d3233203d3e20323633323039.roa (hash: UitmXKF3m63We9k+FWi1ET9m/HGu7WaDzGPqro0qY6k=)
                          17: 3139312e39372e37382e302f32342d3234203d3e20323633323039.roa (hash: xVTIs7sJe3A8gvpIz5pMFqrMIhVmk+BGisOhi5609NE=)
                          18: 3139312e39372e37362e302f32332d3233203d3e20323633323039.roa (hash: CV8jlQ1jGwdqjIqNk9gBaiQF/qgqYKehGLn2gAXtJXM=)
                          19: 3139312e39372e36382e302f32332d3233203d3e20323633323039.roa (hash: HccH5Kad/UTeV7Rw/JoHG2XU5typVttB7mwPN+E4LDc=)
                          20: 2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl (hash: 4Tt4YrpiZHFEu31AbCIiet3jVe2OsM0b5Ajmd7e7rig=)
                          21: 3139312e39372e36382e302f32322d3232203d3e20323633323039.roa (hash: B/B+ln89mjOwyc0nAaGMDvhBqY7iG6LcqWQz7cRs5VQ=)
                          22: 3139312e39372e37322e302f32312d3231203d3e20323633323039.roa (hash: ToLstmC3WkXZ9HhoinGFWkn8s3nrQ8qZZfacLzNKSsc=)
                          23: 3139312e39372e37322e302f32322d3232203d3e20323633323039.roa (hash: R9qzv8qYrMSA6kiiSwaqkSkzVUXqCcVnyLJioEzILlI=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:2b:a9:cb:b9:20:22:67:bf:4a:71:62:a9:8a:e9:83:59:b0:f7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
        Validity
            Not Before: Nov 20 07:20:15 2024 GMT
            Not After : Nov 25 14:18:15 2024 GMT
        Subject: CN=77E756968C89B7C3095068C3E22DB2AE2ADFD00E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ed:b9:09:d3:7b:28:89:f6:7c:2e:40:03:c5:
                    2d:67:d3:ec:b2:24:84:b0:c1:01:f0:71:b8:86:1c:
                    5a:75:e5:f4:05:2b:a5:bf:79:d3:1f:cd:ab:91:d9:
                    6c:95:4d:3a:98:e4:e1:86:64:f9:a9:00:ca:9b:3e:
                    8e:06:fb:3d:03:52:90:32:11:0d:61:74:42:14:b2:
                    10:59:7c:96:75:d6:83:47:52:32:f0:36:46:16:d2:
                    27:d1:02:48:31:fe:d9:27:1f:e6:8c:de:2c:e9:9d:
                    f4:e2:91:cf:a4:00:81:52:a8:16:b7:7f:01:e2:80:
                    d8:f0:6a:ce:dc:eb:b7:65:14:40:df:19:b0:b9:d6:
                    6d:2b:07:07:04:f1:c9:2d:ad:0d:6f:25:c0:ba:c8:
                    23:ca:f5:43:7d:87:4b:50:02:e9:ac:98:45:25:95:
                    f6:1e:e1:35:14:e3:f3:53:2d:71:73:e7:74:08:12:
                    3b:b4:bd:a2:24:5d:87:bc:3d:8f:b7:bf:78:0f:5a:
                    de:3f:c8:ad:a7:e9:8c:b6:85:3a:70:6d:e1:8b:65:
                    4c:13:9e:84:07:a8:8d:4a:f4:14:89:23:2c:d0:5b:
                    3c:e8:8c:3c:bb:67:ab:fc:c8:a9:d2:f2:60:52:36:
                    10:b6:6a:ee:c7:60:08:ba:d3:0c:16:d3:f2:eb:c9:
                    34:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E7:56:96:8C:89:B7:C3:09:50:68:C3:E2:2D:B2:AE:2A:DF:D0:0E
            X509v3 Authority Key Identifier:
                keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:0c:1a:b3:8d:8b:c0:1b:b1:55:5d:93:f9:e0:7b:e5:97:64:
         57:7b:03:a2:c3:0c:80:34:bd:ef:fc:86:fe:a4:43:57:df:8b:
         93:a2:e9:e6:f9:a5:2b:aa:f6:ce:d8:85:26:e9:1d:73:93:43:
         cb:ca:74:12:8e:8c:82:ec:e1:37:90:d5:97:b2:79:ae:74:97:
         b5:c4:11:d4:af:06:37:7f:31:a5:d7:78:fc:21:29:11:b4:b2:
         54:77:99:dd:95:23:f1:3d:a2:3a:16:4c:13:92:20:be:74:c6:
         20:4b:b4:b2:24:9e:62:7c:26:cc:e0:8c:d4:3d:0f:fe:86:f3:
         0c:79:6b:d2:c9:0f:7e:52:17:3c:a9:fc:77:eb:a4:26:0d:c7:
         f4:99:f7:f0:23:46:cc:5f:07:c6:5c:4a:fb:09:57:c4:74:a5:
         d8:0b:06:ab:86:d8:fa:20:f4:95:b8:6b:d6:53:9c:4b:bd:28:
         f8:a5:f6:1b:26:7f:30:86:ca:66:d2:05:80:ae:06:2e:fd:4c:
         54:28:a3:98:db:0e:8e:70:b0:92:09:a0:a5:9f:ee:b8:f2:72:
         68:50:6f:00:cc:26:e1:6a:4e:53:09:39:f8:bb:0d:79:86:20:
         3d:e6:fb:cb:ed:ec:e2:d3:48:b4:8e:82:05:bd:ff:41:ac:de:
         32:5e:ee:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:07 2024 by rpki-client on console-ams.rpki-client.org