Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft
File:                     BCDD50591AFBE01DD1E89006B709D14B69D79567.mft (raw, json)
Hash identifier:          ocwgVKbmIzfBMGwn3bR9hOtAsQWtJbBLFEiddLu4k9E=
Subject key identifier:   23:E0:43:D5:39:50:98:31:DB:7A:D8:AD:13:48:34:2F:81:45:9F:E1
Authority key identifier: BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67
Certificate issuer:       /CN=BCDD50591AFBE01DD1E89006B709D14B69D79567
Certificate serial:       4C37D467EFF464CAD7B65FFEA51A2D4D1C1F40E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft
Manifest number:          CF
Signing time:             Sat 26 Apr 2025 21:20:21 +0000
Manifest this update:     Sat 26 Apr 2025 21:15:21 +0000
Manifest next update:     Fri 02 May 2025 11:49:21 +0000
Files and hashes:         1: BCDD50591AFBE01DD1E89006B709D14B69D79567.crl (hash: xbwbi/umE819SiHq4cJb8RbqCgGHgTh1+rjsltQ1APM=)
                          2: 3138362e302e3138302e302f32322d3234203d3e20323633323434.roa (hash: 0DlXsm98HlB5uDzTYzIjyDBNM1DJ5k3QRekEzRjOxzQ=)
                          3: 3139302e3130362e33322e302f32312d3234203d3e20323633323434.roa (hash: IKpYtNnPqJi7A2I065akkFAJXM/1P20XrCW6mLLJ8DY=)
                          4: 3133382e39392e3138342e302f32322d3234203d3e20323633323434.roa (hash: r3mpym8MNwnvHxIuYSgXnngQZcrxT6L1+B3uUPWi9dY=)
                          5: 3137302e3234372e3134302e302f32322d3234203d3e20323633323434.roa (hash: xopTA6jKSIsdkIE6jBzhXIFqdR5+llPDfkKoskVciXA=)
                          6: 323830303a6362303a3a2f33322d3332203d3e20323633323434.roa (hash: xE0WR5/ruDA/dVZ0+3we5loaoEfoXV3bW2gy/4j2ZRc=)
                          7: 3133312e37322e3133322e302f32322d3234203d3e20323633323434.roa (hash: 9BHe64mInmx7D9r4r9/CtM7RjflnHnNO52klk8Xfo/4=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:37:d4:67:ef:f4:64:ca:d7:b6:5f:fe:a5:1a:2d:4d:1c:1f:40:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCDD50591AFBE01DD1E89006B709D14B69D79567
        Validity
            Not Before: Apr 26 21:15:21 2025 GMT
            Not After : May  2 11:49:21 2025 GMT
        Subject: CN=23E043D539509831DB7AD8AD1348342F81459FE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:43:b2:05:4e:ff:01:2f:0e:f9:0a:24:f1:47:
                    f3:e8:93:1b:ab:4c:6b:b6:6b:50:de:fd:d2:ca:00:
                    08:7e:8b:99:db:47:8e:77:86:19:1c:a9:3b:c5:21:
                    71:ea:19:7b:45:c2:eb:ac:fe:be:5b:0e:f1:ba:32:
                    6c:0c:b7:24:5e:cf:16:3c:2d:1a:da:8c:1b:49:82:
                    a8:ca:19:a0:9b:8b:85:be:e8:37:e8:40:6d:9e:98:
                    83:ba:6c:3d:a9:17:42:c1:2e:24:3e:50:6e:17:39:
                    7d:be:d1:45:ed:bb:ac:f6:d2:9f:ec:b1:aa:4a:9b:
                    75:54:f2:41:1a:cc:34:04:51:b0:b4:ab:5a:ce:2d:
                    35:ac:e4:0c:d6:97:04:b2:99:33:1c:ea:6c:c5:e7:
                    ff:4d:70:42:4a:e7:69:8e:6a:34:b9:28:5e:7e:17:
                    3f:cd:57:61:d4:16:07:fd:d6:77:ed:55:69:e7:ed:
                    39:17:c5:55:2f:37:90:c4:08:d6:08:9d:49:9c:50:
                    82:bb:4c:59:67:bd:15:e0:7b:aa:12:e5:01:c8:fa:
                    61:28:22:7e:f4:97:46:c6:ad:4a:49:a6:f9:85:bd:
                    72:18:06:b6:53:52:0c:00:f1:14:3c:c5:12:5b:49:
                    b1:43:40:b2:a0:ec:72:c9:11:66:e6:ba:63:26:1c:
                    ce:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E0:43:D5:39:50:98:31:DB:7A:D8:AD:13:48:34:2F:81:45:9F:E1
            X509v3 Authority Key Identifier:
                keyid:BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:52:29:85:e0:4c:71:8a:1d:b1:e9:3b:21:8e:99:eb:77:5f:
         a1:e7:99:a8:c2:1c:fd:3a:5c:db:ae:db:26:80:f9:55:06:09:
         d6:e7:72:ce:c3:31:c9:80:f1:b5:3a:5d:8b:57:69:70:e6:9b:
         9d:63:97:09:29:11:bd:38:c7:c4:30:a6:2e:cf:35:49:15:71:
         e7:53:c8:5c:c2:16:2c:af:79:c9:a1:3f:42:10:5e:21:4b:c1:
         7d:69:d4:95:b6:b0:f1:72:8a:cf:a7:3b:0e:b5:a5:d7:1f:a4:
         ed:42:16:72:7b:4b:30:96:5a:3d:e7:b3:80:33:d7:11:13:a6:
         f8:79:cb:5e:92:48:7d:9b:de:9e:8a:f2:38:1d:86:c0:b9:95:
         f1:5f:77:8c:c2:1b:59:7e:89:22:4d:cf:4e:53:2d:2e:60:40:
         e9:aa:a1:01:25:20:ca:59:68:8e:c9:82:4e:6b:ae:cc:96:bc:
         00:3b:d6:03:3a:25:33:0b:ac:92:34:58:77:d1:f7:ce:cb:7b:
         bf:d1:b0:16:13:13:37:1d:b2:14:9c:92:19:de:71:d0:4b:26:
         fa:79:2a:53:7c:0c:70:0f:90:58:55:55:a4:e7:71:c4:ff:cc:
         c1:88:98:a2:5a:12:88:c1:5d:8b:63:ec:e6:e1:b4:de:5a:3c:
         53:10:5a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:03 2025 by rpki-client on console.sobornost.net