Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft
File:                     25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft (raw, json)
Hash identifier:          iHKcTnrKjLr1Kk3a4a8sTyrq9XHP5d64Y6ycx3rRuvo=
Subject key identifier:   F5:9A:83:9B:10:B0:5B:A5:B6:93:CF:7C:22:2C:D7:4E:00:18:38:5B
Authority key identifier: 25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A
Certificate issuer:       /CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A
Certificate serial:       016FE1C3C1CBE2957D2EAB253D4814F6F33D949E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft
Manifest number:          D8
Signing time:             Mon 28 Apr 2025 12:03:41 +0000
Manifest this update:     Mon 28 Apr 2025 11:58:41 +0000
Manifest next update:     Fri 02 May 2025 18:23:41 +0000
Files and hashes:         1: 34352e3136312e34372e302f32342d3234203d3e20323636393032.roa (hash: R49+wWAjZezXpnjFE7SoK205+j8QHF55FrOQnSN8YaY=)
                          2: 34352e3136312e34362e302f32342d3234203d3e20323636393032.roa (hash: xDW4Lo9hVeYDQd0CfzQjVI0iUuT8tc/GgroA2Aw5kCM=)
                          3: 34352e3136312e34342e302f32342d3234203d3e20323636393032.roa (hash: 9jaD8ScaSBtZgY1McxVIxZirAvjcAcgSOFZqFeK76+o=)
                          4: 25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl (hash: IMKQjDBHdONhrqPavcmdFOBvXExiZg/UX2U6e8Oz6N8=)
                          5: 34352e3136312e34342e302f32322d3232203d3e20323636393032.roa (hash: wff5HMuPjRY+aZAF2OdCcw6nUxf458UNR9ehNwtR7m8=)
                          6: 34352e3136312e34352e302f32342d3234203d3e20323636393032.roa (hash: /0gy1miHRoy/ostSkAVmkit9ibYLsGQ/IUPZTZwCW20=)
                          7: 323830313a31353a663030303a3a2f34382d3438203d3e20323636393032.roa (hash: KyyYuN0Yyj5ZO2OssZou9c0xljNW9QC9IlHwmAWoHQg=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:6f:e1:c3:c1:cb:e2:95:7d:2e:ab:25:3d:48:14:f6:f3:3d:94:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A
        Validity
            Not Before: Apr 28 11:58:41 2025 GMT
            Not After : May  2 18:23:41 2025 GMT
        Subject: CN=F59A839B10B05BA5B693CF7C222CD74E0018385B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d9:55:de:06:19:0b:74:3c:57:cd:1e:17:63:
                    74:37:d1:df:df:5f:a3:f5:93:22:ca:c2:bf:b6:54:
                    5a:b4:4a:a1:af:87:22:12:67:0a:87:b6:a0:22:a1:
                    13:f9:92:54:57:c2:77:bc:99:5c:73:df:79:8f:34:
                    74:b6:e6:c8:91:73:4d:00:84:3a:09:3c:7a:2d:d6:
                    05:f0:92:63:0e:0c:a1:e0:e6:ce:08:ee:e2:09:75:
                    4d:c4:e1:1b:99:8d:96:f3:74:4b:b2:f1:9a:32:4c:
                    b5:59:cb:5b:37:77:09:cf:ee:92:2e:cc:4a:0b:a7:
                    55:06:ed:1a:e6:00:cb:79:63:45:53:25:9b:33:27:
                    9d:ae:4d:c9:58:a6:ba:0c:40:5d:b8:b9:0f:55:b8:
                    19:0c:b0:6b:37:6f:32:3a:fd:6b:67:06:95:00:c4:
                    ec:cd:fa:a8:09:94:42:61:3b:6e:87:a7:6d:35:e0:
                    bf:34:f1:5f:3e:5b:71:34:f9:07:46:85:37:bb:bb:
                    a6:5e:3d:87:53:6d:34:6c:b2:10:46:ef:03:78:4a:
                    6f:4f:a1:3f:6c:3b:b8:05:b4:f2:a5:f6:57:2f:59:
                    dc:6c:74:e5:5d:88:92:7f:30:0d:4c:4b:fa:ae:8a:
                    40:58:4a:fe:2f:43:fa:bf:79:c4:98:94:52:03:ff:
                    52:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:9A:83:9B:10:B0:5B:A5:B6:93:CF:7C:22:2C:D7:4E:00:18:38:5B
            X509v3 Authority Key Identifier:
                keyid:25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:a4:6a:af:f9:20:60:d7:c8:4f:48:a9:38:d3:62:f6:19:9c:
         e6:44:6d:bd:70:31:5f:88:e8:22:80:ff:49:00:4f:8b:4e:80:
         6f:a8:7e:5f:17:0f:63:a3:5e:97:07:fc:26:fc:5e:71:a2:4c:
         d6:7c:b6:03:89:e1:58:5f:17:c0:73:30:c6:9e:5f:dd:c4:d7:
         f1:fa:a6:6e:c7:95:6e:2f:23:d8:c0:74:f3:f4:0e:7d:19:76:
         2a:fd:f4:aa:6f:92:38:da:08:a6:9b:8d:67:6c:35:2e:c7:3d:
         f1:30:cf:7a:69:0c:ce:d1:fb:1f:3a:1d:f8:46:ff:00:1d:66:
         1c:dd:ee:69:cf:80:8a:22:8c:ee:f3:3f:7a:65:ea:b1:65:3a:
         6d:e2:44:1f:39:4a:28:ee:c2:3a:13:2e:01:4d:fa:56:60:f1:
         ec:7d:8d:de:09:09:fe:09:08:47:99:67:cb:bd:28:ff:3b:84:
         a4:da:f2:fe:af:c4:fc:aa:75:b4:56:4a:91:0d:00:b2:60:77:
         8a:e5:fd:7e:89:97:91:3d:5f:2b:ad:1b:61:cb:c5:7a:b3:cb:
         5e:dc:4d:4e:f4:41:e8:30:6f:78:3a:78:46:e3:61:c7:91:2b:
         e1:34:dd:0d:e2:31:8c:eb:ca:53:1e:74:67:4a:58:9b:09:39:
         17:16:e5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:54 2025 by rpki-client on console.sobornost.net