Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0040B6D98C8FC62E4F905B39B9DF76CC2EB749047E0AA77992F9653B1AC3790/0/99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.mft
File:                     99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.mft (raw, json)
Hash identifier:          HuOHL+IExxXS/1okeFIvx+hOUFmbRoP3FRbkBbc/4aE=
Subject key identifier:   2A:FC:D0:5E:A5:2B:56:22:CB:56:AB:09:0E:A5:0C:F1:29:89:7B:05
Authority key identifier: 99:D2:8F:03:5C:FB:F2:9F:CC:EA:3B:81:80:0F:0A:FA:AB:00:72:2A
Certificate issuer:       /CN=99D28F035CFBF29FCCEA3B81800F0AFAAB00722A
Certificate serial:       72265F868586309FF74AF89C8898928EB9543402
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0040B6D98C8FC62E4F905B39B9DF76CC2EB749047E0AA77992F9653B1AC3790/0/99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.mft
Manifest number:          85
Signing time:             Wed 20 Nov 2024 08:10:35 +0000
Manifest this update:     Wed 20 Nov 2024 08:05:35 +0000
Manifest next update:     Mon 25 Nov 2024 23:32:35 +0000
Files and hashes:         1: 323830333a646531303a3a2f33322d3332203d3e20323731393738.roa (hash: RyMz7jnNQKrcVGz28/3tYgKXi/MPrDzXJRowLwwqYKs=)
                          2: 99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.crl (hash: rJyJylTquxG4BOQPVn/+ryWdAnE3e/3IgVm3lirYfNI=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0040B6D98C8FC62E4F905B39B9DF76CC2EB749047E0AA77992F9653B1AC3790/0/99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0040B6D98C8FC62E4F905B39B9DF76CC2EB749047E0AA77992F9653B1AC3790/0/99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:26:5f:86:85:86:30:9f:f7:4a:f8:9c:88:98:92:8e:b9:54:34:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D28F035CFBF29FCCEA3B81800F0AFAAB00722A
        Validity
            Not Before: Nov 20 08:05:35 2024 GMT
            Not After : Nov 25 23:32:35 2024 GMT
        Subject: CN=2AFCD05EA52B5622CB56AB090EA50CF129897B05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d6:c5:08:9c:68:5f:f8:82:a1:de:7b:e9:84:
                    6e:1d:a6:91:9e:37:a8:2b:4c:a4:4b:1f:99:80:94:
                    91:59:c5:08:93:cc:f5:44:fd:f2:b1:a1:cc:63:ed:
                    69:52:f8:04:29:30:c7:c2:be:43:28:7c:57:70:2f:
                    f7:81:06:6f:f6:28:cf:53:56:48:55:3e:59:ab:28:
                    ec:13:10:55:84:78:e4:e0:fe:ba:2f:c3:ff:88:31:
                    a7:97:4f:4d:eb:ba:a4:c9:12:b4:5b:10:0a:93:c3:
                    2f:1e:b5:46:10:fc:be:a1:e6:34:31:15:0c:28:b9:
                    6d:7e:ca:97:89:5a:fd:fc:2e:15:4d:48:32:d7:c1:
                    e1:ca:e4:9d:e8:57:f4:4e:14:7f:9d:ef:26:76:71:
                    e2:aa:9a:29:94:b9:7d:c5:8b:6d:e0:f3:bd:f1:fc:
                    a0:d4:ce:bb:eb:03:fe:e7:39:c7:73:96:5d:9e:5b:
                    4d:a0:45:7e:f5:bd:bf:f0:a2:ce:66:10:fe:db:16:
                    dc:a9:57:dd:33:88:63:8c:29:82:fe:c7:cc:1c:45:
                    6d:fe:80:a7:33:1d:af:f5:47:32:00:ad:e6:83:99:
                    ab:4f:11:04:0b:11:83:0a:b1:8d:24:84:00:b8:7f:
                    80:c2:57:37:12:c4:f7:0e:8f:6f:68:ec:2c:92:32:
                    87:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:FC:D0:5E:A5:2B:56:22:CB:56:AB:09:0E:A5:0C:F1:29:89:7B:05
            X509v3 Authority Key Identifier:
                keyid:99:D2:8F:03:5C:FB:F2:9F:CC:EA:3B:81:80:0F:0A:FA:AB:00:72:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0040B6D98C8FC62E4F905B39B9DF76CC2EB749047E0AA77992F9653B1AC3790/0/99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0040B6D98C8FC62E4F905B39B9DF76CC2EB749047E0AA77992F9653B1AC3790/0/99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ae:ae:c1:be:e3:c7:55:94:93:a4:99:6e:79:00:4b:43:35:
         3a:68:6b:42:4a:1f:25:14:00:d4:51:bc:00:9e:1d:84:e7:f6:
         06:27:e7:bc:8a:4f:ee:5b:00:c1:27:b6:6b:5e:13:48:de:97:
         94:ca:90:a1:e0:40:a2:ab:13:cf:f9:01:05:e6:fe:08:99:94:
         a7:67:83:d3:32:34:1b:69:cf:42:2f:bc:9c:6c:d6:5d:c1:98:
         ab:65:10:76:d1:fa:71:41:c0:93:e1:29:a2:ae:d0:cf:86:ba:
         e2:0d:41:dd:ad:6e:a1:d3:ce:3d:cd:ca:cf:ac:b9:dd:a6:88:
         40:fd:68:99:25:af:57:78:1f:5b:18:7c:2b:5a:0e:7d:d3:98:
         05:78:9f:13:5e:7d:91:88:ab:3c:3b:f4:67:0c:ec:ad:b3:bc:
         73:fe:bd:48:10:18:f1:29:47:51:c7:bb:a5:85:09:36:79:08:
         a6:80:43:f3:f4:55:fd:42:26:31:25:24:75:ac:fe:a4:65:4a:
         9c:f3:d4:a9:22:b2:ac:7e:26:d8:84:89:2d:39:de:03:ad:4d:
         b6:9e:6c:be:a9:52:12:9d:de:05:3b:4f:8f:f5:e3:17:45:ff:
         c0:83:d3:0b:1e:d9:fe:90:7c:8d:bd:b0:0c:bf:e0:67:9f:56:
         a1:85:03:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:09:01 2024 by rpki-client on console-ams.rpki-client.org