Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.mft
File:                     C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.mft (raw, json)
Hash identifier:          y7pc0PVJum1s1+zwZj9kzIVVmOgKao8wPBgDcWMJwLk=
Subject key identifier:   39:8C:09:9D:DD:CB:A6:A1:9D:43:DA:D5:5B:2B:F0:FF:5D:A8:CC:F2
Authority key identifier: C5:22:4A:5C:17:DD:52:1C:4B:7F:49:4B:6A:D7:1E:99:71:D3:4A:BE
Certificate issuer:       /CN=C5224A5C17DD521C4B7F494B6AD71E9971D34ABE
Certificate serial:       44C5E274C4E1B31C8A2BAC788B06CE9539A8CBCD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.mft
Manifest number:          DA
Signing time:             Mon 28 Apr 2025 00:41:34 +0000
Manifest this update:     Mon 28 Apr 2025 00:36:34 +0000
Manifest next update:     Fri 02 May 2025 14:38:34 +0000
Files and hashes:         1: 323830363a3336323a3a2f33322d3430203d3e20323635363036.roa (hash: dYOaP/k/Yr3aKGk0pwYKE+kEBwxEZa/obMbN+aZge1U=)
                          2: C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.crl (hash: s4PQzykuJG2KSJZ5lds1x6IWlwonUqO8DIu4EysDRFY=)
                          3: 3230302e3232352e36302e302f32332d3234203d3e20323635363036.roa (hash: 51+0gME+kWYR4n9Zv1GXIzpivNmbXgiaRnHXCoCEIdw=)
                          4: 3134382e3233302e31352e302f32342d3234203d3e20323635363036.roa (hash: KFR/YiOLCd9cAfIuilXSEjWbqE19TYEscA3o/SiaT7E=)
                          5: 34352e3138382e3132342e302f32322d3234203d3e20323635363036.roa (hash: 0HZY/OU0B5PnaoDotnKIoc0/2dgWlzYBOZymyWVafQQ=)
                          6: 3134382e3233302e342e302f32342d3234203d3e20323635363036.roa (hash: /WEbu4qLnkptvAkZj5YZYQGujIOx3Di2895jp7bR1Ug=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c5:e2:74:c4:e1:b3:1c:8a:2b:ac:78:8b:06:ce:95:39:a8:cb:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5224A5C17DD521C4B7F494B6AD71E9971D34ABE
        Validity
            Not Before: Apr 28 00:36:34 2025 GMT
            Not After : May  2 14:38:34 2025 GMT
        Subject: CN=398C099DDDCBA6A19D43DAD55B2BF0FF5DA8CCF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a3:8b:ab:9c:b4:1d:c5:9e:a2:10:78:20:6f:
                    6a:f1:f2:a6:40:0f:37:59:9d:18:c3:f3:93:01:81:
                    a0:c9:68:e2:87:5e:32:3c:32:f7:a6:a7:22:23:8b:
                    dd:98:00:48:2a:ef:d6:69:f3:d8:33:ef:b6:13:9b:
                    9a:31:43:59:7b:fb:bd:4b:5c:c5:1f:5e:61:f4:28:
                    a8:cf:8d:0c:c4:35:b7:84:cc:8f:1b:a3:c0:c8:e3:
                    b6:3d:c9:62:f6:45:da:33:55:e5:13:be:99:d3:1b:
                    3f:77:ed:8a:06:19:ab:20:b0:f3:75:36:1c:58:c5:
                    b5:db:f4:58:50:5e:95:55:b9:8f:ff:b8:94:db:ea:
                    93:aa:da:bf:0c:ce:a0:12:65:cb:c4:e0:95:8e:cc:
                    fb:0a:5a:94:70:cc:56:76:66:00:bd:d6:98:46:80:
                    8f:27:22:59:fb:72:4f:2a:b9:ca:06:06:3f:10:98:
                    2d:2f:d1:e8:c8:61:0a:a6:bc:5a:d2:bb:d6:6f:3c:
                    a9:45:e9:d4:a8:9b:38:29:f4:10:b7:b9:eb:2c:4a:
                    97:d4:bc:a6:54:ea:ba:be:09:d3:ea:52:6e:7b:46:
                    4f:13:03:c3:85:54:5b:28:42:08:18:5c:22:35:69:
                    0b:c5:b7:f9:08:7b:7a:e2:32:c6:1c:c6:8e:f9:40:
                    f9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8C:09:9D:DD:CB:A6:A1:9D:43:DA:D5:5B:2B:F0:FF:5D:A8:CC:F2
            X509v3 Authority Key Identifier:
                keyid:C5:22:4A:5C:17:DD:52:1C:4B:7F:49:4B:6A:D7:1E:99:71:D3:4A:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:97:5a:e9:ca:11:fb:5c:ea:61:f8:99:24:79:d8:dd:dd:f8:
         9b:fa:a5:55:88:b7:bf:01:b2:9a:da:d7:09:ad:dc:35:12:f3:
         e5:6f:fc:62:e4:26:2a:9c:9d:b5:01:22:f6:a2:dc:7a:79:87:
         40:0d:f0:e8:7f:36:5b:82:65:fe:43:a3:6d:80:20:65:ca:9f:
         d3:73:78:4a:95:bc:f5:1d:6a:ff:b5:14:36:72:7e:dc:0e:ba:
         48:4c:68:33:71:a1:61:1c:ff:db:ac:45:a6:d4:87:f7:74:e5:
         7e:f5:4b:89:b5:cd:65:07:7b:24:7d:49:88:71:3a:e0:c6:1e:
         d6:ba:27:3e:0b:0e:47:90:1b:98:6f:b3:4b:b2:8e:01:49:df:
         74:90:53:df:1d:a3:06:3c:fa:f3:ba:3c:46:7a:7f:f2:18:ad:
         b4:89:d5:af:a7:7c:6a:2c:4b:ff:20:65:ac:37:92:d8:3d:6c:
         39:8f:41:cc:b8:7d:60:b5:fb:7e:cd:2a:f0:34:aa:65:52:87:
         0d:66:22:7e:16:6a:6c:6e:26:d7:f7:c4:39:46:4d:07:d1:97:
         11:30:55:bb:4c:d4:2e:2f:95:cd:70:73:bc:e2:64:88:41:24:
         08:78:97:7b:2a:33:4d:e3:1d:f3:d3:66:c3:0c:dd:76:dc:02:
         c7:c1:97:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:04 2025 by rpki-client on console.sobornost.net