Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft
File:                     2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft (raw, json)
Hash identifier:          UsfeDbBgSvaX3t1+lXRsllJaQLyq0QRc7SWwnZwTL7w=
Subject key identifier:   B9:88:07:79:AC:CF:33:80:03:A1:0F:BF:51:1A:3E:B5:4A:11:AC:1F
Authority key identifier: 2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89
Certificate issuer:       /CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589
Certificate serial:       32E1695B0F90E42420C43A674096AC4A3ECA4505
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft
Manifest number:          CF
Signing time:             Sun 27 Apr 2025 19:23:26 +0000
Manifest this update:     Sun 27 Apr 2025 19:18:26 +0000
Manifest next update:     Fri 02 May 2025 21:16:26 +0000
Files and hashes:         1: 2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl (hash: wMjPzeO+aqwzTN5DfwgCAkmrWR9d3SlKPR4p8vSEQek=)
                          2: 323830333a666265303a3a2f33322d3438203d3e20323730303932.roa (hash: oO7wKo0+SVqOjkWZN+0gQ07+aVmVbN4/1cQXmOBOt+E=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e1:69:5b:0f:90:e4:24:20:c4:3a:67:40:96:ac:4a:3e:ca:45:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589
        Validity
            Not Before: Apr 27 19:18:26 2025 GMT
            Not After : May  2 21:16:26 2025 GMT
        Subject: CN=B9880779ACCF338003A10FBF511A3EB54A11AC1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1e:9c:e4:9e:b2:cb:92:17:8d:69:b9:eb:4d:
                    54:0a:a8:17:b2:03:f4:23:40:a6:a6:f0:f2:96:54:
                    61:e6:f3:c6:0e:e8:9d:b6:f3:d9:92:c4:d2:59:4e:
                    48:f3:12:ae:16:fa:4b:c8:30:d9:12:6f:6f:e5:c0:
                    c3:35:1b:fd:67:f6:dd:88:2d:27:74:9f:33:d9:97:
                    f9:1e:83:7f:ce:3e:54:61:16:99:e0:a0:7a:d5:e1:
                    6f:27:51:87:11:12:0a:d6:ac:36:db:e3:53:85:df:
                    ad:d9:ce:3a:26:71:d5:7d:68:d4:f0:3b:69:f5:dd:
                    b9:96:69:5d:e7:91:14:8d:0c:b0:ab:b0:9f:5b:df:
                    16:e4:ee:b3:b2:a7:4e:65:51:32:76:b8:69:2f:c0:
                    c5:98:38:f6:25:f2:60:41:74:66:c0:20:ba:c5:88:
                    86:51:ed:d0:c1:33:5c:a4:c7:db:df:df:78:71:f7:
                    83:e2:c5:17:42:61:65:38:44:44:65:50:77:80:f2:
                    31:46:d1:7d:00:c2:ef:7b:a2:81:ac:61:e2:03:42:
                    d2:ae:a7:cb:fc:fc:9b:f8:da:c1:1c:93:97:e7:43:
                    14:fd:76:44:63:20:ec:61:b6:1e:04:f3:84:30:9e:
                    0d:e6:4a:5a:58:f8:01:eb:71:47:e4:95:51:d7:bc:
                    18:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:88:07:79:AC:CF:33:80:03:A1:0F:BF:51:1A:3E:B5:4A:11:AC:1F
            X509v3 Authority Key Identifier:
                keyid:2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:7a:4c:9d:b8:b1:03:d9:ba:14:6b:12:b4:bd:01:98:51:31:
         7b:99:51:86:53:01:0d:a7:20:73:8d:56:1f:89:02:04:54:1f:
         04:d3:2a:22:93:e6:b9:9d:f8:57:91:e8:9f:1e:62:e3:65:34:
         1c:76:4a:db:95:f4:c7:1f:60:17:df:e8:6a:95:ba:cf:df:87:
         f0:9e:55:04:5f:ff:c5:7a:9d:63:ce:84:8c:b5:9c:0e:9a:6d:
         8b:cf:3d:c7:f4:32:3b:7c:1e:76:63:68:c0:13:87:e8:06:0a:
         48:4f:04:0c:c8:ff:9f:5c:de:12:f7:23:c7:fc:e2:c9:bd:bb:
         d5:58:4c:85:2a:90:25:af:07:b1:99:65:33:d0:4f:d9:a9:ba:
         9e:eb:53:7d:85:9c:01:f7:c2:f0:51:e8:06:2c:38:7c:a6:f4:
         63:8b:82:e9:8a:70:91:c4:16:e3:9f:d7:a6:0e:fb:6e:88:4e:
         f9:52:57:dc:d0:d1:6f:97:a5:31:f1:08:b4:14:28:f3:de:ab:
         65:44:dd:db:90:2d:f5:57:70:3b:26:16:b4:69:a3:f0:86:6c:
         25:21:f3:59:cb:98:88:67:1c:14:25:4f:ac:b9:fc:27:f3:9b:
         64:e1:56:3c:36:49:ca:13:4e:09:a6:be:6a:1d:27:90:a7:6b:
         34:65:71:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:42:59 2025 by rpki-client on console.sobornost.net