Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.mft
File:                     DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.mft (raw, json)
Hash identifier:          lNbkrjIBPwqY+5G9q5XP/yLYKC/XIOM809p+3BZkSyw=
Subject key identifier:   2E:F7:74:68:13:40:A1:8D:12:06:6F:64:33:E5:DA:16:E4:58:6B:4D
Authority key identifier: DA:08:9F:A2:42:DF:F5:A5:D9:12:D8:E5:A1:82:FD:C3:22:BB:B5:FA
Certificate issuer:       /CN=DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA
Certificate serial:       4DA7F758793CB045A008002F4382D472F7F74564
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.mft
Manifest number:          64
Signing time:             Mon 28 Apr 2025 19:28:07 +0000
Manifest this update:     Mon 28 Apr 2025 19:23:07 +0000
Manifest next update:     Sat 03 May 2025 10:59:07 +0000
Files and hashes:         1: 323830313a3132363a3a2f34342d3434203d3e20323632353839.roa (hash: ZdMFSSnl+bVCAYLkfOFhjzGcKskoNNiklFm/f+K/Sc4=)
                          2: DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.crl (hash: 30D2Rirf8+xsVEuGWJXUWaExcZp0bC4gP5MItN6pxcg=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:a7:f7:58:79:3c:b0:45:a0:08:00:2f:43:82:d4:72:f7:f7:45:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA
        Validity
            Not Before: Apr 28 19:23:07 2025 GMT
            Not After : May  3 10:59:07 2025 GMT
        Subject: CN=2EF774681340A18D12066F6433E5DA16E4586B4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:26:2b:35:85:de:d7:85:ea:f6:af:22:19:80:
                    ac:59:03:7c:ac:3b:8b:83:68:1d:c1:4d:34:0f:9c:
                    27:8c:1a:04:63:13:3d:07:fa:dd:12:4c:5c:a8:0b:
                    09:6b:33:1b:0d:d1:dc:5c:a4:5e:83:68:02:4d:fb:
                    2f:5e:0a:1e:17:a5:12:38:78:97:a1:bb:39:0b:63:
                    0f:15:48:07:f6:c2:10:b7:28:d4:13:7f:e7:57:6f:
                    a9:a9:69:5d:67:2b:20:ab:e0:03:30:0e:97:d9:6d:
                    87:ec:8e:84:88:70:4b:a4:b8:95:4a:ee:0d:98:f4:
                    56:50:a4:ab:70:9d:f5:d0:4f:cd:b0:1f:63:1e:ad:
                    05:e9:23:df:68:d4:45:94:b7:0e:6d:11:70:fb:c5:
                    e3:af:fd:7e:52:8d:2e:73:44:9a:7d:9d:63:02:38:
                    a2:ff:73:b3:a0:3c:b6:f2:38:ba:34:e1:24:c7:9e:
                    2d:06:a1:ef:23:6d:e9:2b:b7:48:d7:3a:1a:71:a3:
                    3b:9e:84:0e:28:71:16:84:af:9a:90:ea:fc:eb:2f:
                    ca:8b:65:c9:f1:31:5a:85:8a:7b:52:34:89:c9:06:
                    0b:45:ef:5d:a9:aa:b8:11:20:fb:41:d8:0e:f4:52:
                    78:4c:73:ad:44:05:5a:61:50:94:1d:05:18:d2:58:
                    e8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F7:74:68:13:40:A1:8D:12:06:6F:64:33:E5:DA:16:E4:58:6B:4D
            X509v3 Authority Key Identifier:
                keyid:DA:08:9F:A2:42:DF:F5:A5:D9:12:D8:E5:A1:82:FD:C3:22:BB:B5:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:dc:fc:8d:58:7e:eb:f2:42:14:b6:40:96:11:f4:89:91:8a:
         7d:d2:be:0c:b1:21:2c:68:cc:ba:cf:d5:1b:97:65:5f:e6:33:
         7b:06:97:dc:c3:71:5d:09:ce:ed:87:d1:e8:52:7b:d5:9b:f8:
         a0:8d:c7:83:13:a8:ce:bf:2f:f6:3f:15:81:56:e3:c4:50:b6:
         09:fc:d0:dc:59:0c:70:13:b4:c2:a3:e5:eb:17:e5:62:37:4e:
         65:b3:c5:21:b6:59:95:bf:1f:03:b2:9d:1f:70:6f:84:39:5a:
         82:4e:e8:44:fd:1b:a1:0a:50:21:8c:f5:1a:68:ed:46:28:99:
         a7:f4:f7:ff:ca:10:96:84:3e:1b:c3:8e:bf:1d:2d:e4:34:57:
         2f:4b:e7:d4:c1:28:9d:e5:3f:88:64:09:4e:1b:c5:64:7c:62:
         12:cd:12:2f:ed:2c:76:34:27:ff:4d:a3:7a:d4:66:fd:c9:38:
         93:e2:55:98:fe:21:f3:d7:9c:bb:41:a1:6f:a8:fa:d4:c3:ba:
         f2:f3:cb:95:9b:a8:02:58:9e:8c:b0:8b:80:65:9f:a6:c6:99:
         f7:d2:4f:64:3f:d9:e3:02:03:0d:d2:df:cd:8d:b4:b2:d8:9e:
         9c:50:ae:61:97:b6:0e:06:17:ae:72:99:80:31:f9:ec:41:07:
         00:4c:7f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:36 2025 by rpki-client on console.sobornost.net