Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft
File:                     2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft (raw, json)
Hash identifier:          p9Bda4Q89mFz+ubW3Q1DEk/IGg7XJCekoJVJQEsqyeA=
Subject key identifier:   9A:BF:DB:67:9D:91:CB:F3:8F:AF:0E:28:71:C4:48:9B:EC:96:3D:82
Authority key identifier: 2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89
Certificate issuer:       /CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589
Certificate serial:       152E99E8DDD71B1B99332C085E6B15E692793B8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft
Manifest number:          E8
Signing time:             Fri 20 Jun 2025 23:54:59 +0000
Manifest this update:     Fri 20 Jun 2025 23:49:59 +0000
Manifest next update:     Thu 26 Jun 2025 21:26:59 +0000
Files and hashes:         1: 323830333a666265303a3a2f33322d3438203d3e20323730303932.roa (hash: oO7wKo0+SVqOjkWZN+0gQ07+aVmVbN4/1cQXmOBOt+E=)
                          2: 2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl (hash: Sm94mZVYcxjYTxVUHttjEmMpbhxqPpDFUScte9w8/74=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Jun 2025 21:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:2e:99:e8:dd:d7:1b:1b:99:33:2c:08:5e:6b:15:e6:92:79:3b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589
        Validity
            Not Before: Jun 20 23:49:59 2025 GMT
            Not After : Jun 26 21:26:59 2025 GMT
        Subject: CN=9ABFDB679D91CBF38FAF0E2871C4489BEC963D82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d0:f0:82:3c:4e:44:2a:88:fb:9e:ab:8b:58:
                    e0:9c:bf:34:02:93:08:e1:9e:dd:a1:00:02:c5:23:
                    14:e7:46:a8:f3:83:72:a9:fd:7e:67:22:0d:87:83:
                    dc:d0:85:2e:10:e6:27:1a:54:4e:cf:52:54:68:05:
                    b0:da:25:0d:1f:d2:e0:67:26:22:39:78:11:9d:f6:
                    e9:e1:03:8b:31:ff:ed:6d:2c:61:7d:cf:4d:e3:06:
                    eb:08:ef:b9:af:35:19:98:e6:2d:1d:b8:44:a7:72:
                    45:e6:22:20:7b:14:ce:10:9f:cc:13:6b:fe:3b:4e:
                    e4:b3:59:92:a0:e1:e7:d5:10:c1:4d:93:6a:12:10:
                    dd:3e:1f:ef:1b:e0:29:56:9c:9e:8a:09:98:ae:47:
                    1d:36:67:12:0f:6a:c2:7b:00:75:b9:d7:3c:68:11:
                    e0:f6:10:e0:8c:f9:10:94:a6:58:04:dc:2d:51:70:
                    2a:cd:b6:3a:02:88:9d:e5:e1:58:18:a6:ae:63:ec:
                    71:eb:c6:38:85:47:88:e9:1c:f3:5c:82:dc:3f:43:
                    cc:28:1f:aa:f7:35:17:07:df:37:3c:24:ec:84:06:
                    ec:6c:ad:67:7a:14:cd:8b:ec:ac:df:7c:f9:a2:89:
                    0f:26:58:e7:a7:d1:e1:ac:08:d0:ef:98:cf:de:aa:
                    12:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BF:DB:67:9D:91:CB:F3:8F:AF:0E:28:71:C4:48:9B:EC:96:3D:82
            X509v3 Authority Key Identifier:
                keyid:2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:db:98:62:48:3c:67:48:ee:aa:8f:5f:12:55:31:29:63:e8:
         7d:56:df:69:19:12:8c:5a:98:64:f4:ae:c2:a0:b0:15:21:80:
         0a:d8:88:d3:1c:28:4a:43:a2:76:26:6e:f1:b1:b1:9d:44:4c:
         8e:ae:b8:19:ba:50:84:58:c7:71:28:6b:45:95:29:42:d0:6b:
         05:ed:52:85:56:3b:38:ea:e9:59:30:71:fb:78:cc:a9:e1:be:
         6a:3c:c0:24:4e:94:a1:8f:6a:39:c8:67:88:37:17:ef:28:24:
         0e:29:7b:0c:5f:28:09:30:4b:64:49:c5:5c:fc:59:2a:e9:32:
         ff:69:03:fd:43:2b:66:d7:c7:13:77:c4:f2:df:c1:67:d9:1d:
         60:5c:bd:50:77:34:ce:11:6d:10:4d:32:df:8c:3e:41:9b:e1:
         88:cd:5d:1a:bf:fd:0e:7b:77:b1:04:0f:b0:1c:22:cd:06:99:
         37:3e:ea:e0:5c:54:14:96:6c:97:09:e7:c7:61:af:e3:a4:96:
         6b:3b:5a:0c:8f:29:bc:9c:11:1f:4d:2c:8a:d6:d6:73:25:56:
         e9:84:b2:b8:43:6b:9a:8d:6c:52:2b:8a:c0:a4:5a:d1:28:94:
         98:88:fd:b0:52:ce:e8:7b:19:53:7e:f8:9d:cb:45:39:6a:66:
         45:36:46:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 12:58:36 2025 by rpki-client