Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.mft
File:                     A1C86299C5FA84F9AB35C2974EACE4484F0A087A.mft (raw, json)
Hash identifier:          hP4kHworpfcCBxlzC0P0LEvwYotA0lbzSYreN8PXr1w=
Subject key identifier:   D3:73:2C:3D:97:1E:A1:4E:29:23:4C:99:DA:5E:54:DA:95:2C:64:7D
Authority key identifier: A1:C8:62:99:C5:FA:84:F9:AB:35:C2:97:4E:AC:E4:48:4F:0A:08:7A
Certificate issuer:       /CN=A1C86299C5FA84F9AB35C2974EACE4484F0A087A
Certificate serial:       02630504947B8761FBCAF578A373C2E5CE23F6BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.mft
Manifest number:          D8
Signing time:             Mon 28 Apr 2025 08:11:23 +0000
Manifest this update:     Mon 28 Apr 2025 08:06:23 +0000
Manifest next update:     Sat 03 May 2025 09:26:23 +0000
Files and hashes:         1: 3133382e33362e39362e302f32332d3233203d3e20323633373236.roa (hash: tIjT68LMP3/DPLdIRs8QrZJzdE0jrFskdUMyAT34N0o=)
                          2: 3133382e33362e39362e302f32342d3234203d3e20323633373236.roa (hash: n4iL8M/0u/mcbAlVGc28nq4LmNmdGvvAQqHIf3C+bxE=)
                          3: 3133382e33362e39392e302f32342d3234203d3e20323633373236.roa (hash: 7rUgq9Rhv+77CTxzxAkhVvyt8MLgh+XdP0DoOSxVJBA=)
                          4: 3133382e33362e39372e302f32342d3234203d3e20323633373236.roa (hash: FdtHUhWZD4RFvOJgfwB8nVsWd1NEuqUQYwHouMDAbKc=)
                          5: 323830333a6638303a3a2f33322d3634203d3e20323633373236.roa (hash: ImfJFzYsEIMk1kCW8k/P2mY/yy74Z2evstY0N4EHt04=)
                          6: A1C86299C5FA84F9AB35C2974EACE4484F0A087A.crl (hash: ipt/mT7gVnG0j4+y3qgkwbhnJRZPgQJs5oOsBa97oBQ=)
                          7: 3133382e33362e39362e302f32322d3232203d3e20323633373236.roa (hash: ggkdENscXwX7dCp6ovnxuWnKwp+76j/DcVndOhL7nyw=)
                          8: 3133382e33362e39382e302f32342d3234203d3e20323633373236.roa (hash: h91i4SvVASQtHKhdv3GWeT+5X8tc7IjTiZEnqIy/tr8=)
                          9: 3133382e33362e39382e302f32332d3233203d3e20323633373236.roa (hash: uo0f0wSGkNaK1FEGvuTOaAGDJ1e6fjxXJFR4bT0mG6E=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:63:05:04:94:7b:87:61:fb:ca:f5:78:a3:73:c2:e5:ce:23:f6:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1C86299C5FA84F9AB35C2974EACE4484F0A087A
        Validity
            Not Before: Apr 28 08:06:23 2025 GMT
            Not After : May  3 09:26:23 2025 GMT
        Subject: CN=D3732C3D971EA14E29234C99DA5E54DA952C647D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ac:f0:08:f4:0a:16:a7:44:cc:17:a1:1c:e7:
                    8a:b4:c3:b3:59:fa:46:84:2a:32:f0:18:eb:7d:f1:
                    54:b5:58:d8:21:d0:a2:2c:ec:ee:43:e9:fe:8d:42:
                    ac:15:06:71:5a:54:42:e2:3c:08:30:64:56:16:a7:
                    e0:d9:93:41:d0:07:a2:26:a7:df:98:73:8d:69:f9:
                    cd:84:c1:e6:b6:61:09:8c:6f:8b:e8:f3:bb:88:2f:
                    eb:9f:2b:d3:8a:39:15:aa:46:c5:59:2a:e3:e3:dc:
                    3a:27:15:44:5a:7b:57:74:a2:d7:3f:82:48:b4:64:
                    e8:27:64:67:e3:72:0c:4c:42:bf:6b:62:f7:d7:79:
                    93:78:33:13:1e:f4:91:33:19:ec:80:f9:ed:87:e8:
                    70:0a:0c:09:ca:66:17:b9:25:1b:74:1d:6f:c2:4d:
                    13:05:1c:39:d5:c2:dc:f2:b0:99:8b:37:3a:70:a1:
                    cb:0a:15:21:da:3a:34:5c:3d:5b:00:09:21:c8:97:
                    f1:ea:13:3a:b5:e7:4f:ca:a8:e1:6c:3c:2b:37:f8:
                    07:fa:d8:25:77:bf:8a:4b:10:44:c1:26:6c:06:5e:
                    ca:9f:34:f6:b2:49:f9:5a:35:ea:35:f5:31:d5:0f:
                    3e:4a:dd:b3:33:d4:0f:33:44:34:da:9d:9e:6a:58:
                    8d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:73:2C:3D:97:1E:A1:4E:29:23:4C:99:DA:5E:54:DA:95:2C:64:7D
            X509v3 Authority Key Identifier:
                keyid:A1:C8:62:99:C5:FA:84:F9:AB:35:C2:97:4E:AC:E4:48:4F:0A:08:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:b5:2a:4f:b7:94:ca:d5:5d:bc:60:2f:94:82:28:f4:3e:f2:
         5b:0e:f9:76:b1:f9:45:b2:0b:34:e0:e3:24:d4:19:11:f2:8e:
         48:73:ef:34:ee:1f:d4:09:7d:63:e3:24:2a:36:b7:d4:7b:de:
         8d:e9:82:25:60:27:0a:07:db:a4:fd:eb:b9:34:c9:6b:10:3a:
         39:98:89:61:c4:26:6d:f2:ca:70:47:95:22:d8:b7:60:c0:d9:
         aa:a8:40:93:79:ee:36:bb:bd:b7:e0:f2:43:44:ed:18:1b:bf:
         06:32:4e:bb:b2:47:f1:90:d8:f1:b5:54:24:93:d5:5c:fc:d5:
         b5:fd:20:b2:95:1f:ca:b1:39:b3:bb:3f:b5:3b:8e:b0:ec:20:
         0f:57:b9:93:2e:ce:bc:e4:4f:bd:bd:b8:09:f3:53:57:f9:04:
         b8:77:fd:db:20:a5:5d:29:d2:94:a7:c0:8d:01:fd:8a:e1:73:
         8d:45:ae:c7:c8:3b:24:06:4c:ca:eb:2b:8c:04:72:53:53:85:
         6e:da:a9:0f:f4:b6:80:56:fc:92:78:d4:58:30:61:32:64:d0:
         73:64:01:d7:d8:7d:46:a7:22:c1:62:0a:bf:09:63:59:be:86:
         98:b9:81:56:b1:cd:4f:0c:29:27:f5:3e:cb:c1:4e:b9:b6:97:
         50:00:0a:7b
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUAmMFBJR7h2H7yvV4o3PC5c4j9rwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFDODYyOTlDNUZBODRGOUFCMzVDMjk3NEVBQ0U0NDg0
RjBBMDg3QTAeFw0yNTA0MjgwODA2MjNaFw0yNTA1MDMwOTI2MjNaMDMxMTAvBgNV
BAMTKEQzNzMyQzNEOTcxRUExNEUyOTIzNEM5OURBNUU1NERBOTUyQzY0N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDerPAI9AoWp0TMF6Ec54q0w7NZ
+kaEKjLwGOt98VS1WNgh0KIs7O5D6f6NQqwVBnFaVELiPAgwZFYWp+DZk0HQB6Im
p9+Yc41p+c2Ewea2YQmMb4vo87uIL+ufK9OKORWqRsVZKuPj3DonFURae1d0otc/
gki0ZOgnZGfjcgxMQr9rYvfXeZN4MxMe9JEzGeyA+e2H6HAKDAnKZhe5JRt0HW/C
TRMFHDnVwtzysJmLNzpwocsKFSHaOjRcPVsACSHIl/HqEzq150/KqOFsPCs3+Af6
2CV3v4pLEETBJmwGXsqfNPaySflaNeo19THVDz5K3bMz1A8zRDTanZ5qWI1jAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU03MsPZceoU4pI0yZ2l5U2pUsZH0wHwYDVR0j
BBgwFoAUochimcX6hPmrNcKXTqzkSE8KCHowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOUI4QjBCNTAyN0Q4RDg2MUQ3Q0E2MjM1ODY1MkQyMDEy
NkIwNkE4M0I3MTc5QkM2OThEN0QyQTBFNzMzRjRELzAvQTFDODYyOTlDNUZBODRG
OUFCMzVDMjk3NEVBQ0U0NDg0RjBBMDg3QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMUM4NjI5OUM1RkE4NEY5QUIz
NUMyOTc0RUFDRTQ0ODRGMEEwODdBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjlCOEIwQjUwMjdEOEQ4NjFEN0NBNjIzNTg2NTJEMjAxMjZCMDZBODNC
NzE3OUJDNjk4RDdEMkEwRTczM0Y0RC8wL0ExQzg2Mjk5QzVGQTg0RjlBQjM1QzI5
NzRFQUNFNDQ4NEYwQTA4N0EubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAhtSpPt5TK1V28YC+Ugij0PvJb
Dvl2sflFsgs04OMk1BkR8o5Ic+807h/UCX1j4yQqNrfUe96N6YIlYCcKB9uk/eu5
NMlrEDo5mIlhxCZt8spwR5Ui2LdgwNmqqECTee42u7234PJDRO0YG78GMk67skfx
kNjxtVQkk9Vc/NW1/SCylR/KsTmzuz+1O46w7CAPV7mTLs685E+9vbgJ81NX+QS4
d/3bIKVdKdKUp8CNAf2K4XONRa7HyDskBkzK6yuMBHJTU4Vu2qkP9LaAVvySeNRY
MGEyZNBzZAHX2H1GpyLBYgq/CWNZvoaYuYFWsc1PDCkn9T7LwU65tpdQAAp7
-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:12 2025 by rpki-client on console.sobornost.net