Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft
File:                     00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft (raw, json)
Hash identifier:          j8EzPEFJuLXaGsT9sTq3LeR5WB4iXGFlSd8ZmGP3aog=
Subject key identifier:   E1:52:CE:C9:E6:02:67:CC:E7:33:18:ED:CD:EB:47:7D:EC:A6:55:61
Authority key identifier: 00:FF:29:5B:93:9A:D7:25:89:CE:24:B7:E4:ED:41:FC:5C:56:A3:36
Certificate issuer:       /CN=00FF295B939AD72589CE24B7E4ED41FC5C56A336
Certificate serial:       2566AEE3C1C0243E922E3709642EFC62CD8E9BA6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft
Manifest number:          D3
Signing time:             Mon 28 Apr 2025 13:39:32 +0000
Manifest this update:     Mon 28 Apr 2025 13:34:32 +0000
Manifest next update:     Fri 02 May 2025 22:03:32 +0000
Files and hashes:         1: 323830333a663161303a3a2f33322d3438203d3e20323637373035.roa (hash: Ndho+BhViPHLNULz7C2z55/V4iRAPugD06lZUvZ4mIY=)
                          2: 34352e3136342e3137322e302f32322d3234203d3e20323637373035.roa (hash: yZWkzdnI2yE2GWAW0fR8ozyK+67wGcmDL/+BxkZFYOM=)
                          3: 00FF295B939AD72589CE24B7E4ED41FC5C56A336.crl (hash: Th0O9Mo7FeK6zJNzru39RSnomS6h0LCd1+lsk0Ukv0I=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:66:ae:e3:c1:c0:24:3e:92:2e:37:09:64:2e:fc:62:cd:8e:9b:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00FF295B939AD72589CE24B7E4ED41FC5C56A336
        Validity
            Not Before: Apr 28 13:34:32 2025 GMT
            Not After : May  2 22:03:32 2025 GMT
        Subject: CN=E152CEC9E60267CCE73318EDCDEB477DECA65561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:36:fe:60:c7:10:02:8f:9c:a1:18:13:50:d8:
                    67:cb:0d:e2:b5:20:c2:ff:ec:e6:77:fc:e7:95:5f:
                    54:4e:b6:e5:e2:7e:8c:36:46:4f:17:0c:a8:e2:fc:
                    1c:66:c5:d2:2a:e0:96:8a:02:2d:49:db:aa:18:d9:
                    68:3d:e9:9f:6c:3c:a7:f6:9c:94:15:bd:ac:cc:6a:
                    7d:df:6b:14:15:28:4f:a2:02:d3:e5:3d:3b:24:95:
                    9b:27:65:b2:12:7a:fd:c6:a3:92:a5:d3:c1:4a:71:
                    03:48:dc:7f:c7:dc:90:d7:63:9b:60:66:fb:0c:39:
                    bb:65:44:0b:c1:c3:35:d6:a4:72:82:d9:68:f5:a4:
                    59:cc:4e:8e:f1:0b:42:19:ce:6d:48:b8:3c:86:36:
                    36:6c:79:a6:d8:8b:37:87:07:1b:d8:bb:82:a9:ef:
                    e4:2b:2b:da:a1:c3:28:c1:f7:57:3b:df:d7:2f:49:
                    b7:33:b2:64:fc:d7:ac:38:64:f7:df:35:35:e8:7d:
                    dd:88:80:4a:e6:cd:ed:9f:12:8f:ff:c7:82:f6:dc:
                    aa:c9:9e:a5:14:90:2c:92:23:a0:97:00:cb:09:e8:
                    c6:0e:ca:19:c3:27:f9:b2:59:d3:7b:65:67:67:19:
                    90:3b:03:2c:64:9d:b0:23:db:19:c3:db:87:1f:d2:
                    88:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:52:CE:C9:E6:02:67:CC:E7:33:18:ED:CD:EB:47:7D:EC:A6:55:61
            X509v3 Authority Key Identifier:
                keyid:00:FF:29:5B:93:9A:D7:25:89:CE:24:B7:E4:ED:41:FC:5C:56:A3:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:ad:bb:be:be:64:85:5a:1b:86:1e:49:b7:47:e9:94:e3:eb:
         6a:2f:34:92:c4:c2:c0:cd:3a:3d:da:18:07:42:91:88:6f:7a:
         6e:69:da:38:29:fb:3d:a2:08:27:49:01:2d:04:fa:8e:cb:cf:
         4a:eb:c7:1a:fd:73:fc:8f:97:47:dd:65:4e:d9:01:49:b4:69:
         e5:b2:41:9b:48:3e:eb:aa:ad:c4:54:44:31:1f:ad:cf:3f:c8:
         55:3d:df:96:65:60:9b:c1:47:4e:a4:9e:f8:5b:16:f3:eb:21:
         46:79:7e:55:aa:0a:b1:98:b0:2c:50:a3:ad:2f:9f:6c:ef:05:
         cc:bf:94:c1:01:d8:c6:c8:4a:11:8a:6b:00:39:fc:0f:26:44:
         28:05:6f:89:b7:80:d2:0b:8c:3d:40:1c:b6:0b:03:d8:65:14:
         87:4b:17:ed:81:2d:e1:1c:9e:62:67:72:9a:c3:09:dc:44:59:
         96:7d:58:9e:4f:af:39:5d:22:4d:c2:47:52:df:50:c4:c3:3f:
         5e:bc:61:10:88:a1:2b:04:3b:3f:e7:29:fa:6e:7c:18:e8:36:
         a5:b7:51:cb:34:cd:37:65:c6:1d:2a:7d:fe:4d:48:26:9f:63:
         6a:34:75:52:df:ba:fe:61:e2:3f:a7:f2:67:de:b8:70:fb:c1:
         ef:1a:12:50
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUJWau48HAJD6SLjcJZC78Ys2Om6YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDBGRjI5NUI5MzlBRDcyNTg5Q0UyNEI3RTRFRDQxRkM1
QzU2QTMzNjAeFw0yNTA0MjgxMzM0MzJaFw0yNTA1MDIyMjAzMzJaMDMxMTAvBgNV
BAMTKEUxNTJDRUM5RTYwMjY3Q0NFNzMzMThFRENERUI0NzdERUNBNjU1NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbNv5gxxACj5yhGBNQ2GfLDeK1
IML/7OZ3/OeVX1ROtuXifow2Rk8XDKji/BxmxdIq4JaKAi1J26oY2Wg96Z9sPKf2
nJQVvazMan3faxQVKE+iAtPlPTsklZsnZbISev3Go5Kl08FKcQNI3H/H3JDXY5tg
ZvsMObtlRAvBwzXWpHKC2Wj1pFnMTo7xC0IZzm1IuDyGNjZseabYizeHBxvYu4Kp
7+QrK9qhwyjB91c739cvSbczsmT816w4ZPffNTXofd2IgErmze2fEo//x4L23KrJ
nqUUkCySI6CXAMsJ6MYOyhnDJ/myWdN7ZWdnGZA7AyxknbAj2xnD24cf0ogBAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU4VLOyeYCZ8znMxjtzetHfeymVWEwHwYDVR0j
BBgwFoAUAP8pW5Oa1yWJziS35O1B/FxWozYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQzM1RTlERjJDOUU3QUNEQzU3MzNDNkFEOUQ0QUZENDA3
OEVFNURFQTU1RjlFNjIwQjU0QjRDNTAxQTIxRkNCLzAvMDBGRjI5NUI5MzlBRDcy
NTg5Q0UyNEI3RTRFRDQxRkM1QzU2QTMzNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMEZGMjk1QjkzOUFENzI1ODlD
RTI0QjdFNEVENDFGQzVDNTZBMzM2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkMzNUU5REYyQzlFN0FDREM1NzMzQzZBRDlENEFGRDQwNzhFRTVERUE1
NUY5RTYyMEI1NEI0QzUwMUEyMUZDQi8wLzAwRkYyOTVCOTM5QUQ3MjU4OUNFMjRC
N0U0RUQ0MUZDNUM1NkEzMzYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA+rbu+vmSFWhuGHkm3R+mU4+tq
LzSSxMLAzTo92hgHQpGIb3puado4Kfs9oggnSQEtBPqOy89K68ca/XP8j5dH3WVO
2QFJtGnlskGbSD7rqq3EVEQxH63PP8hVPd+WZWCbwUdOpJ74Wxbz6yFGeX5Vqgqx
mLAsUKOtL59s7wXMv5TBAdjGyEoRimsAOfwPJkQoBW+Jt4DSC4w9QBy2CwPYZRSH
SxftgS3hHJ5iZ3KawwncRFmWfVieT685XSJNwkdS31DEwz9evGEQiKErBDs/5yn6
bnwY6Dalt1HLNM03ZcYdKn3+TUgmn2NqNHVS37r+YeI/p/Jn3rhw+8HvGhJQ
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:55 2025 by rpki-client on console.sobornost.net