Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.mft
File:                     CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.mft (raw, json)
Hash identifier:          4dyqpRXraUR9SmZQWdGS9tPoOSy3sdD4n6mPFjrNEyk=
Subject key identifier:   57:65:1B:D0:AB:19:9D:90:95:B4:59:12:B9:DD:A2:3F:DE:0F:B8:B4
Authority key identifier: CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F
Certificate issuer:       /CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
Certificate serial:       3373ABC4507DF72FFD7B33CFD4DB9A91394C1B6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.mft
Manifest number:          D2
Signing time:             Mon 28 Apr 2025 10:07:28 +0000
Manifest this update:     Mon 28 Apr 2025 10:02:28 +0000
Manifest next update:     Sat 03 May 2025 08:59:28 +0000
Files and hashes:         1: 323830333a623263303a3a2f33322d3438203d3e203139313639.roa (hash: FJy02U9rWd+tvACRc1LjDSE7WXZY7AKkni5n69/WdtE=)
                          2: 323830333a623263303a3a2f33322d3438203d3e20323634383531.roa (hash: yMxXoOQr2UNiqFenv+tsegYIY8UyyHHlBTx8sL/6MO0=)
                          3: 323830333a623263303a3a2f33322d3438203d3e203132393536.roa (hash: r9HRMnWiyty0Ot3j1ORr3wjDrr1Lr/ocUP8HIbxzZvQ=)
                          4: 3137302e38332e3231362e302f32322d3234203d3e203232373234.roa (hash: oEDE8tIeiw9g3LimO8fnl1grvxAHKQgXswG0iZhG8OQ=)
                          5: CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl (hash: Z1xQyHMz0e/UPw/4JlwbqWaVGbnx1tTKN17gPC+jnZA=)
                          6: 323830333a623263303a3a2f33322d3438203d3e203232373234.roa (hash: ZeGfFxSVzSzbCf8uwl2ie0Rwykq8YLtVgrtdXaAM5A8=)
                          7: 3137302e38332e3231362e302f32322d3234203d3e2033353439.roa (hash: OvTJZuvFkSEVitHExbH+8DKKzFHQUI1HvX5A526CK4c=)
                          8: 3137302e38332e3231362e302f32322d3234203d3e203139313639.roa (hash: ORRHzNnBMbGNzrjs9zGKoGIPZTbb54sGzahRty+TAJ0=)
                          9: 3137302e38332e3231362e302f32322d3234203d3e203237393437.roa (hash: K3Bmn3u4iMFezN9w6C1SnmZB71U6qZxo+pXxmNRLH8A=)
                          10: 323830333a623263303a3a2f33322d3438203d3e203237393437.roa (hash: cik4ui3C6oU7kz9yeHeRALjMQIPm4DDux8BHlrZqVeE=)
                          11: 323830333a623263303a3a2f33322d3438203d3e203237383535.roa (hash: cBZAsgYBRe9PwtVJB9mQrHmPZG5SNZVKpc0a0adUbj4=)
                          12: 323830333a623263303a3a2f33322d3430203d3e2033353439.roa (hash: OHazFAKL7lVks8hx1YQfTr0f1g0PtvCkynMUmxkOMSs=)
                          13: 3137302e38332e3231362e302f32322d3234203d3e20323634383531.roa (hash: DWq9A5P4cTHGYlQekszn1Ov7s9cpWi9RiEkBKsRc3A0=)
                          14: 3137302e38332e3231362e302f32322d3234203d3e203237383535.roa (hash: 3KgKaqDK90iI5kU+rlWYz1fV/y1gKUBdK2uqjZ9tZAo=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:73:ab:c4:50:7d:f7:2f:fd:7b:33:cf:d4:db:9a:91:39:4c:1b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
        Validity
            Not Before: Apr 28 10:02:28 2025 GMT
            Not After : May  3 08:59:28 2025 GMT
        Subject: CN=57651BD0AB199D9095B45912B9DDA23FDE0FB8B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:55:46:89:cd:fe:a3:07:8b:5c:5c:f7:77:c8:
                    92:37:50:80:ea:47:53:6a:dc:a4:b2:45:28:6e:2c:
                    31:bd:39:f6:f4:6f:39:41:9b:9e:77:cd:fb:64:56:
                    c0:b6:44:b5:9f:78:88:a5:ab:2d:f0:64:f1:c7:34:
                    3b:a7:d8:c2:17:84:7b:8a:ad:38:e1:d2:f0:dc:b8:
                    c3:14:54:bc:d0:57:2d:93:36:26:c8:a2:3c:82:a3:
                    2f:d9:db:98:a9:c5:dd:e4:2a:2a:6a:9f:a7:e0:5a:
                    c9:0a:99:9e:70:86:4b:76:e5:5a:0d:85:73:85:59:
                    8c:ad:4c:cd:98:62:40:4c:af:99:fc:8f:68:c2:9f:
                    33:d1:6e:2e:11:df:66:8f:77:52:bd:81:00:f2:21:
                    f1:78:66:ea:27:30:e8:7f:77:5c:18:c5:9d:c1:44:
                    c6:4f:eb:f7:46:8b:42:85:eb:e5:8a:61:a7:12:65:
                    36:d5:86:98:4a:a3:c1:94:af:f5:f1:31:93:b7:76:
                    1b:3b:52:5a:c8:62:9e:24:53:7b:6c:22:94:55:41:
                    d0:bc:39:41:a6:fc:92:99:e9:23:b0:6c:81:74:ea:
                    01:d5:75:3e:32:47:02:e2:9d:30:8e:12:54:90:20:
                    f3:f0:6c:ed:2a:f7:28:9d:fc:0c:6a:57:c5:d3:c1:
                    0e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:65:1B:D0:AB:19:9D:90:95:B4:59:12:B9:DD:A2:3F:DE:0F:B8:B4
            X509v3 Authority Key Identifier:
                keyid:CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:f6:22:13:90:af:ec:95:23:72:b6:79:97:73:63:ab:86:ed:
         6e:91:a3:9c:e4:b8:df:61:fd:cb:1c:f5:8d:b1:b8:4c:b3:17:
         70:1c:9b:44:e8:9b:13:b4:f6:49:cb:b3:37:84:8c:f9:7f:96:
         84:d8:08:96:b3:a6:f8:fa:a3:f0:85:ec:a4:f1:46:6c:bf:02:
         3a:de:b6:8d:99:cb:a0:45:7b:a7:0c:04:23:a6:bf:3d:28:b1:
         63:bd:01:ef:fe:06:8f:f6:58:dc:95:dd:65:06:4f:52:18:22:
         41:80:07:81:f2:37:ec:40:43:85:86:cc:8c:0a:ab:ce:40:af:
         93:09:85:dc:ef:7e:86:45:3c:e2:88:5b:d5:67:42:e6:a2:a1:
         77:0c:2c:62:13:40:a8:9a:45:f5:72:ec:8d:86:6c:40:92:f8:
         9b:b8:99:26:3f:81:41:28:2a:6c:e3:f6:5c:3f:06:be:3e:2f:
         73:0d:e4:84:da:2b:12:e3:66:65:55:83:2a:a0:5b:c6:8d:11:
         5e:58:12:f8:90:97:ec:e6:65:74:6a:cd:2a:a1:9b:06:6a:ac:
         f8:d4:24:61:25:3e:33:a4:fd:d7:3e:2d:f3:fb:4d:8f:f6:f4:
         cd:44:4d:83:44:5c:1f:c6:58:e8:d4:11:65:4c:97:aa:2d:28:
         56:ff:35:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:49 2025 by rpki-client on console.sobornost.net