Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17E37E11C5CCE1D25EDF1D8F041FEB3EA772B63708DF2439B022CF762E9C3363/0/EDF8234B3EFE3A62754B8F7A55758C85D3746EAF.mft
File:                     EDF8234B3EFE3A62754B8F7A55758C85D3746EAF.mft (raw, json)
Hash identifier:          THR2Ij2ElK+HMiUPEcI459dtcZq6fL1k2EmEOF9S/xk=
Subject key identifier:   81:74:4C:CA:0F:E8:7D:28:76:CE:69:49:30:2A:80:47:49:3A:32:DD
Authority key identifier: ED:F8:23:4B:3E:FE:3A:62:75:4B:8F:7A:55:75:8C:85:D3:74:6E:AF
Certificate issuer:       /CN=EDF8234B3EFE3A62754B8F7A55758C85D3746EAF
Certificate serial:       2AED7D943B9211DBCF64D0EDC4FE1E3B1FBC17EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EDF8234B3EFE3A62754B8F7A55758C85D3746EAF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17E37E11C5CCE1D25EDF1D8F041FEB3EA772B63708DF2439B022CF762E9C3363/0/EDF8234B3EFE3A62754B8F7A55758C85D3746EAF.mft
Manifest number:          D2
Signing time:             Mon 28 Apr 2025 15:40:44 +0000
Manifest this update:     Mon 28 Apr 2025 15:35:44 +0000
Manifest next update:     Sat 03 May 2025 17:56:44 +0000
Files and hashes:         1: 3230302e33352e302e302f31392d3235203d3e203232373236.roa (hash: wkQu/XN4VZdmbRxayDAeyelAmRZOSp/uipr4ROu9t3A=)
                          2: EDF8234B3EFE3A62754B8F7A55758C85D3746EAF.crl (hash: 3kTxOX1BkY/1nLYd6aMMEodfkaXeWY/UiB806PTTOLQ=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/17E37E11C5CCE1D25EDF1D8F041FEB3EA772B63708DF2439B022CF762E9C3363/0/EDF8234B3EFE3A62754B8F7A55758C85D3746EAF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/17E37E11C5CCE1D25EDF1D8F041FEB3EA772B63708DF2439B022CF762E9C3363/0/EDF8234B3EFE3A62754B8F7A55758C85D3746EAF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EDF8234B3EFE3A62754B8F7A55758C85D3746EAF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ed:7d:94:3b:92:11:db:cf:64:d0:ed:c4:fe:1e:3b:1f:bc:17:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDF8234B3EFE3A62754B8F7A55758C85D3746EAF
        Validity
            Not Before: Apr 28 15:35:44 2025 GMT
            Not After : May  3 17:56:44 2025 GMT
        Subject: CN=81744CCA0FE87D2876CE6949302A8047493A32DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:57:5b:36:cf:a4:4c:b1:4b:d3:45:db:2c:f1:
                    cb:3a:78:5a:6e:8c:58:a2:36:89:7a:67:0a:12:72:
                    4c:24:30:5d:df:bd:ca:06:c7:44:42:2c:39:48:26:
                    5b:ec:02:e0:39:c1:e4:16:d4:78:a4:0d:e6:1a:73:
                    61:b8:00:57:a3:8b:8b:ce:bb:4a:53:0d:1d:bc:f0:
                    02:7e:88:1f:8b:b9:a0:c4:db:9d:dc:cd:af:3d:c1:
                    40:ee:1c:10:48:12:cd:bd:fe:14:30:3d:27:e5:6d:
                    9b:7e:1d:85:fe:ab:7d:ac:93:0e:89:e1:4f:a6:e2:
                    86:2e:6a:bb:28:96:4f:e6:77:6d:96:d2:c9:da:8d:
                    a7:a2:35:a6:05:85:09:70:47:14:82:73:34:ca:ba:
                    29:c0:aa:d1:14:0e:5f:2e:76:0d:de:2c:06:a2:ac:
                    d9:a4:ce:ef:6a:27:3f:ba:c9:09:54:62:55:f9:8d:
                    7a:d4:0a:87:57:ef:bc:1e:cf:82:39:35:a5:e8:83:
                    0b:6b:39:1a:2d:d4:6a:15:88:dd:04:06:46:1c:50:
                    72:ae:ca:cf:7c:f9:78:4e:dc:28:d5:ca:7d:4b:b7:
                    e9:dc:8e:ce:07:4a:aa:be:a2:02:35:4d:6c:4e:20:
                    7f:20:b3:1c:84:50:11:8c:6e:25:e8:a2:67:da:ee:
                    d4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:74:4C:CA:0F:E8:7D:28:76:CE:69:49:30:2A:80:47:49:3A:32:DD
            X509v3 Authority Key Identifier:
                keyid:ED:F8:23:4B:3E:FE:3A:62:75:4B:8F:7A:55:75:8C:85:D3:74:6E:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17E37E11C5CCE1D25EDF1D8F041FEB3EA772B63708DF2439B022CF762E9C3363/0/EDF8234B3EFE3A62754B8F7A55758C85D3746EAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EDF8234B3EFE3A62754B8F7A55758C85D3746EAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17E37E11C5CCE1D25EDF1D8F041FEB3EA772B63708DF2439B022CF762E9C3363/0/EDF8234B3EFE3A62754B8F7A55758C85D3746EAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:6c:67:ef:ff:a6:62:17:bc:50:20:1c:d9:5c:f3:36:49:0f:
         17:2e:89:9a:56:e9:03:16:3e:db:57:a5:c7:68:22:4f:69:eb:
         46:92:fc:78:c5:d9:62:cf:bd:15:75:fe:2c:93:dc:da:94:10:
         14:2f:5c:75:75:62:12:6b:c6:36:f9:d9:b9:21:c9:62:f3:eb:
         d4:fc:02:9f:95:67:5e:5e:dd:27:b2:06:92:26:49:e0:c7:6f:
         bf:0a:b2:81:4d:77:52:9d:67:4a:54:5a:0e:f1:2c:c7:fc:b8:
         92:88:f2:0b:22:14:dd:e3:b4:f5:5a:fd:ed:68:09:6f:fe:b8:
         38:ef:e4:58:51:29:10:99:06:bd:e5:26:eb:fe:4d:af:83:6d:
         39:e6:63:5a:21:4a:d3:91:df:6e:4e:a9:21:e8:c2:79:d3:a9:
         10:82:b9:8d:f2:7c:7f:75:53:00:e3:e2:b2:55:f8:65:ac:0f:
         d4:49:cb:09:fe:de:07:50:e1:0b:4d:a9:66:b8:c8:4c:35:79:
         b6:e5:43:4a:70:9b:53:4d:d0:9e:50:57:ef:44:16:c6:52:d2:
         75:7b:a4:2c:ac:e1:0f:0f:38:38:bb:7a:27:72:f9:3a:14:92:
         aa:50:91:89:0b:15:1a:48:9f:1a:2f:77:58:e0:51:ec:4f:29:
         be:8c:65:8d
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUKu19lDuSEdvPZNDtxP4eOx+8F+owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURGODIzNEIzRUZFM0E2Mjc1NEI4RjdBNTU3NThDODVE
Mzc0NkVBRjAeFw0yNTA0MjgxNTM1NDRaFw0yNTA1MDMxNzU2NDRaMDMxMTAvBgNV
BAMTKDgxNzQ0Q0NBMEZFODdEMjg3NkNFNjk0OTMwMkE4MDQ3NDkzQTMyREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0V1s2z6RMsUvTRdss8cs6eFpu
jFiiNol6ZwoSckwkMF3fvcoGx0RCLDlIJlvsAuA5weQW1HikDeYac2G4AFeji4vO
u0pTDR288AJ+iB+LuaDE253cza89wUDuHBBIEs29/hQwPSflbZt+HYX+q32skw6J
4U+m4oYuarsolk/md22W0snajaeiNaYFhQlwRxSCczTKuinAqtEUDl8udg3eLAai
rNmkzu9qJz+6yQlUYlX5jXrUCodX77wez4I5NaXogwtrORot1GoViN0EBkYcUHKu
ys98+XhO3CjVyn1Lt+ncjs4HSqq+ogI1TWxOIH8gsxyEUBGMbiXoomfa7tSvAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUgXRMyg/ofSh2zmlJMCqAR0k6Mt0wHwYDVR0j
BBgwFoAU7fgjSz7+OmJ1S496VXWMhdN0bq8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xN0UzN0UxMUM1Q0NFMUQyNUVERjFEOEYwNDFGRUIzRUE3
NzJCNjM3MDhERjI0MzlCMDIyQ0Y3NjJFOUMzMzYzLzAvRURGODIzNEIzRUZFM0E2
Mjc1NEI4RjdBNTU3NThDODVEMzc0NkVBRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FREY4MjM0QjNFRkUzQTYyNzU0
QjhGN0E1NTc1OEM4NUQzNzQ2RUFGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTdFMzdFMTFDNUNDRTFEMjVFREYxRDhGMDQxRkVCM0VBNzcyQjYzNzA4
REYyNDM5QjAyMkNGNzYyRTlDMzM2My8wL0VERjgyMzRCM0VGRTNBNjI3NTRCOEY3
QTU1NzU4Qzg1RDM3NDZFQUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQATbGfv/6ZiF7xQIBzZXPM2SQ8X
LomaVukDFj7bV6XHaCJPaetGkvx4xdliz70Vdf4sk9zalBAUL1x1dWISa8Y2+dm5
Icli8+vU/AKflWdeXt0nsgaSJkngx2+/CrKBTXdSnWdKVFoO8SzH/LiSiPILIhTd
47T1Wv3taAlv/rg47+RYUSkQmQa95Sbr/k2vg2055mNaIUrTkd9uTqkh6MJ506kQ
grmN8nx/dVMA4+KyVfhlrA/UScsJ/t4HUOELTalmuMhMNXm25UNKcJtTTdCeUFfv
RBbGUtJ1e6QsrOEPDzg4u3oncvk6FJKqUJGJCxUaSJ8aL3dY4FHsTym+jGWN
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:47 2025 by rpki-client on console.sobornost.net