Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.mft
File:                     A4EC8475F98014B965F34B25A2A68F58AAEE199B.mft (raw, json)
Hash identifier:          sokUvg/3vQ9EJaRryZEkEBjGiJhAqyn7HxQLajPNboY=
Subject key identifier:   D8:D0:C2:21:06:28:A5:2C:95:FE:7B:68:7A:E3:16:28:59:55:A3:9F
Authority key identifier: A4:EC:84:75:F9:80:14:B9:65:F3:4B:25:A2:A6:8F:58:AA:EE:19:9B
Certificate issuer:       /CN=A4EC8475F98014B965F34B25A2A68F58AAEE199B
Certificate serial:       445A6FADD59D0849772CF454767C38C2DF8AB65F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.mft
Manifest number:          D2
Signing time:             Mon 28 Apr 2025 18:12:16 +0000
Manifest this update:     Mon 28 Apr 2025 18:07:16 +0000
Manifest next update:     Sat 03 May 2025 21:22:16 +0000
Files and hashes:         1: 323830333a3938303a3a2f33322d3438203d3e20323633323438.roa (hash: wuRXM5EfbR2rc2yjTx5TPpM0hxdgowByRsbklro0trY=)
                          2: A4EC8475F98014B965F34B25A2A68F58AAEE199B.crl (hash: KgpioXj6ZnoB1jgWLx+8lEIlMoeF0ethmdvFbu5B198=)
                          3: 3137302e38342e3130382e302f32322d3234203d3e203233343536.roa (hash: rQ5+F6z4zn0uDnztOIbk/FDrNjw0CZluhswd7gFxYfY=)
                          4: 323830333a3938303a3a2f33322d3332203d3e20323633323438.roa (hash: C2StroqvUjGd5Dq7mIoDzeb7cUCSaZzGxlwXtORACBA=)
                          5: 323830333a3938303a3a2f33322d3332203d3e203233343536.roa (hash: cB07EWV3K9rijpdGmuyxgDCna69vW2uPmMOIObeC3ls=)
                          6: 3137302e38342e3130382e302f32322d3234203d3e20323633323438.roa (hash: 8WIrU4rxAdLdem4uhtqkZGj4qh+9hejyc+9jaXi4F+c=)
                          7: 3230302e3139322e3233362e302f32322d3234203d3e203233343536.roa (hash: TNiCy3O+Kg+PDwzaBnUsKfWZiAvxRsy3VcEVtjE3S0M=)
                          8: 3230302e3139322e3233362e302f32322d3232203d3e20323633323438.roa (hash: aYQ3vbsAKT1SOXJ5PnEH8IxDZs4HmHDdG0IG9LNLu3U=)
                          9: 3230302e3139322e3233362e302f32322d3234203d3e20323633323438.roa (hash: ApMxyCo98U4w0jeRfA0aqySI7EO6TXGKz36oU4QMkVo=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:5a:6f:ad:d5:9d:08:49:77:2c:f4:54:76:7c:38:c2:df:8a:b6:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4EC8475F98014B965F34B25A2A68F58AAEE199B
        Validity
            Not Before: Apr 28 18:07:16 2025 GMT
            Not After : May  3 21:22:16 2025 GMT
        Subject: CN=D8D0C2210628A52C95FE7B687AE316285955A39F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:50:34:e9:f2:5c:98:65:f6:0c:90:1c:1b:87:
                    d3:fc:35:7e:a1:c0:ae:88:8d:79:a4:c1:57:a0:30:
                    e5:1b:eb:9b:56:2d:cb:bb:d3:d6:0a:bb:00:e1:9d:
                    35:43:63:4e:35:03:c1:c6:53:29:33:4b:af:7b:20:
                    90:d8:16:74:3c:c1:3e:0f:7d:6f:59:44:42:fe:a0:
                    cd:ae:98:b7:ce:95:fe:61:0f:3d:c4:74:81:20:85:
                    59:56:8a:6e:d9:d5:7e:d6:ba:00:2b:f6:da:18:b6:
                    67:fa:5a:85:52:03:30:36:be:b3:8f:86:11:ef:dd:
                    dd:b1:f7:61:10:35:ca:4a:ec:58:b4:41:b8:5b:cf:
                    22:9a:bb:64:b5:2a:87:c3:b1:21:6b:c5:af:c8:bf:
                    11:5f:cd:6f:0e:d0:42:7e:ba:87:b0:28:65:9d:42:
                    bd:51:84:56:a9:30:33:af:62:5c:e5:62:3a:4f:e9:
                    79:ec:5a:5a:6a:6b:66:e8:01:17:6b:79:fc:0d:64:
                    d8:2e:3d:36:4b:d2:4d:45:2b:c2:f9:a0:82:5e:7e:
                    5c:c9:fa:be:1c:0f:0d:76:79:ff:ff:4f:b6:96:82:
                    06:1a:3c:82:e9:a3:67:e1:1d:5f:1e:92:c2:7e:a0:
                    7d:e5:43:5e:b5:0f:cc:e0:bb:3f:06:d7:c3:87:4e:
                    20:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D0:C2:21:06:28:A5:2C:95:FE:7B:68:7A:E3:16:28:59:55:A3:9F
            X509v3 Authority Key Identifier:
                keyid:A4:EC:84:75:F9:80:14:B9:65:F3:4B:25:A2:A6:8F:58:AA:EE:19:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:61:8d:b3:7e:fc:d2:3e:8b:7c:87:80:54:10:e3:08:6f:ab:
         0a:16:0b:4f:0f:bf:6e:5d:6e:7e:14:82:c0:56:b4:71:34:40:
         89:37:02:a8:50:05:13:66:b0:a4:42:fe:b4:2f:db:37:98:fb:
         a4:58:cf:ac:5c:0c:7c:36:2a:4e:2d:15:c2:f7:22:42:66:b2:
         42:13:9e:4f:85:c7:79:05:b4:e7:29:d9:44:5b:8f:bf:ad:00:
         93:a5:86:73:7f:50:64:5e:51:b7:cf:67:dd:d5:63:d3:ef:a4:
         51:5e:0b:2c:9d:96:61:87:33:4e:5a:a5:9a:ec:5a:e8:05:e5:
         df:61:a7:04:82:50:13:dc:1f:fc:d9:8d:8e:38:0a:43:91:fc:
         46:c5:4d:a1:db:1d:fe:ba:30:33:af:84:33:fa:8e:bc:1d:aa:
         b6:e8:13:a8:cc:c5:14:95:9b:49:79:2c:3e:f7:a1:78:b5:94:
         27:c4:08:17:2a:9a:8d:b3:1b:eb:b4:29:4b:1b:5c:41:78:8e:
         3f:9c:c5:14:39:94:39:d9:23:7d:15:57:23:9b:cb:6a:25:a4:
         dc:82:9d:38:96:68:62:a5:3b:f5:4d:ce:7c:ca:f9:73:2d:2d:
         89:e5:8d:ce:ae:2f:e3:31:65:f5:dd:e5:a4:d6:76:b5:35:6a:
         2e:68:35:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:29 2025 by rpki-client on console.sobornost.net