Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.mft
File:                     3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.mft (raw, json)
Hash identifier:          PbHTpgwwAECmCl5BaIgFt6HbK/igQrt2Kt1EuLjd17k=
Subject key identifier:   15:46:9C:44:6F:9A:7B:52:95:8D:8C:FA:22:C8:DC:B5:E3:7D:6A:04
Authority key identifier: 3A:2C:3D:E3:9D:ED:BA:52:25:EA:7F:EB:C2:89:33:12:0A:B9:36:1B
Certificate issuer:       /CN=3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B
Certificate serial:       7803E80D66334D4B182A6E14BF6416C788DE126D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.mft
Manifest number:          D7
Signing time:             Mon 28 Apr 2025 10:17:35 +0000
Manifest this update:     Mon 28 Apr 2025 10:12:35 +0000
Manifest next update:     Sun 04 May 2025 04:37:35 +0000
Files and hashes:         1: 34352e3233382e31342e302f32342d3234203d3e20323636383337.roa (hash: dx7Wir8VzyeHn11OwhEmvt1a7jQAwZ8r3WKZFGWRtew=)
                          2: 3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.crl (hash: V6jkl3X0VYkAUmqxroMutisQzKBXl0d+B1MK9JHxtKg=)
                          3: 34352e3233382e31352e302f32342d3234203d3e20323636383337.roa (hash: Bmw20APIVMjvq39dtY427XRBNWaEAqpZl5wHV9APQUk=)
                          4: 34352e3233382e31332e302f32342d3234203d3e20323636383337.roa (hash: TweF547cK5kyXGGllFG6TgNJS/zTO+zo/byH9dKqEag=)
                          5: 34352e3233382e31322e302f32322d3232203d3e20323636383337.roa (hash: sBDlrOi6OX8fhObNHbkkKzgKtYlRqBa9/6Atr38M+Ts=)
                          6: 34352e3233382e31322e302f32342d3234203d3e20323636383337.roa (hash: ZqjrylmRAMSD4SndX3439GaIBgZVzniOvF2jiqpQMzk=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:03:e8:0d:66:33:4d:4b:18:2a:6e:14:bf:64:16:c7:88:de:12:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B
        Validity
            Not Before: Apr 28 10:12:35 2025 GMT
            Not After : May  4 04:37:35 2025 GMT
        Subject: CN=15469C446F9A7B52958D8CFA22C8DCB5E37D6A04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5e:57:c9:05:28:b3:f7:8f:4b:65:dc:a3:98:
                    21:91:93:ba:11:cb:b3:f5:5c:12:06:24:7a:1e:5d:
                    3b:6d:23:8e:76:38:d9:4b:cf:38:61:f3:95:2a:12:
                    d5:df:40:41:0f:03:ff:a5:a8:f2:07:04:a3:f3:b5:
                    a9:c0:cd:db:ea:c4:11:3a:a0:25:90:ed:35:6e:3d:
                    f2:dc:37:ef:56:68:9c:dd:e2:04:2f:dc:b8:1c:b5:
                    da:29:32:4f:70:5f:7c:99:a2:f1:7e:d2:f1:54:70:
                    67:46:6e:d2:29:d0:89:79:df:74:0e:45:05:1b:77:
                    0d:b1:1e:43:17:6a:8b:f2:f0:9f:9f:8a:ee:6d:3c:
                    f9:be:e1:3d:4b:59:e6:89:fc:45:8d:64:a6:b0:87:
                    95:2c:8a:65:68:2e:56:5d:b9:7d:01:b8:19:60:f5:
                    63:88:be:e2:65:e4:84:be:2d:ee:be:87:9c:57:7a:
                    1a:cf:a2:89:8e:6c:63:a8:ad:f7:26:91:a5:1c:c4:
                    9e:34:50:b3:d9:f7:c0:ed:56:74:a2:a4:29:be:34:
                    33:b1:d9:4c:03:98:48:b3:2d:31:f9:df:10:09:5f:
                    22:ba:c0:08:db:29:1a:d3:02:28:df:c5:ee:57:bb:
                    e5:5e:ba:70:ef:e4:0f:85:d9:55:d9:dd:02:21:82:
                    fc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:46:9C:44:6F:9A:7B:52:95:8D:8C:FA:22:C8:DC:B5:E3:7D:6A:04
            X509v3 Authority Key Identifier:
                keyid:3A:2C:3D:E3:9D:ED:BA:52:25:EA:7F:EB:C2:89:33:12:0A:B9:36:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:b8:e5:43:91:77:fb:f2:8f:a1:d1:2e:65:5d:75:b8:2b:f8:
         31:5f:d6:53:ea:89:fc:f9:84:2b:15:35:47:0f:f1:ad:32:9a:
         e5:5e:77:a1:be:5b:0e:41:d9:69:f8:9e:af:29:ed:84:df:ec:
         e0:ce:5c:cc:82:dd:0d:18:81:7e:6b:be:72:3e:eb:87:81:76:
         fa:2f:77:fe:5b:33:dd:67:33:ae:a2:cf:30:5b:d1:9c:24:a0:
         d8:6d:cb:61:f8:64:32:b7:9c:f7:89:d0:38:c8:c6:46:9e:a2:
         1c:ab:e5:b4:87:2e:87:a4:e0:4e:bc:62:93:80:17:02:82:aa:
         61:3b:92:c5:08:67:ea:ff:9c:d3:ba:fa:c4:a3:4c:ca:40:0f:
         55:26:e0:03:62:b4:58:12:8e:7e:c8:d8:9c:ac:a1:c7:21:1d:
         93:91:49:95:4d:79:a7:4a:b5:58:09:d9:58:43:fe:c4:43:b0:
         5d:19:f8:57:a3:38:ce:1b:95:b7:bb:10:32:39:b9:67:0d:ee:
         c1:44:51:d2:26:74:ed:9f:e0:c0:96:79:75:b0:32:ce:ab:da:
         b0:8f:53:34:57:bd:20:82:73:df:20:12:64:9b:c4:bc:04:26:
         64:3e:a3:7d:85:59:f8:ef:34:b4:f3:20:b3:4c:28:09:77:59:
         c3:af:c4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:49 2025 by rpki-client on console.sobornost.net