Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.mft
File:                     35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.mft (raw, json)
Hash identifier:          1fGJ20In1SYUctLgC9bquQycWRExdoJ43BGKIRa3iuI=
Subject key identifier:   64:7E:85:07:00:8B:3D:B2:EB:6B:58:FB:E4:7C:11:2A:D0:D5:A1:78
Authority key identifier: 35:DD:CB:BB:81:68:CA:B4:0A:53:D8:B5:D3:F8:CD:F8:58:D3:A9:9C
Certificate issuer:       /CN=35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C
Certificate serial:       29717DDC70C9E0C41D4E15BD59A545B99C887F13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.mft
Manifest number:          D3
Signing time:             Mon 28 Apr 2025 17:01:39 +0000
Manifest this update:     Mon 28 Apr 2025 16:56:39 +0000
Manifest next update:     Sat 03 May 2025 02:40:39 +0000
Files and hashes:         1: 3230302e31342e36302e302f32342d3234203d3e20323639393633.roa (hash: McTQN/gzt40lO4XLEn/bnLDx+L42Yp/wvNHlFn+nfiA=)
                          2: 3230302e31342e36312e302f32342d3234203d3e20323731383933.roa (hash: tBHwKNBqu8izLIAZtsYF9Sv3+6hDKWBOzuv5AFnbq0s=)
                          3: 3230302e31342e36332e302f32342d3234203d3e20323731383935.roa (hash: R/xlQioDY89XcDeeG5I0NudslmN4l6JszCL8g4ImE1w=)
                          4: 323830313a31383a323830303a3a2f34382d3438203d3e20323639393633.roa (hash: iHmUij6tGAnaB8sGgGBn4Tc6WTxYiLVE8QxsUg/ECUk=)
                          5: 35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.crl (hash: 1dhAYiKrjJEXSdjX/sIzArGVA/9JYY399S+WVYx5P20=)
                          6: 3230302e31342e36322e302f32342d3234203d3e20323731383934.roa (hash: +uBzTORbQf53oDCI78NsvBd//pCTklRu2qH9JmQll10=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:71:7d:dc:70:c9:e0:c4:1d:4e:15:bd:59:a5:45:b9:9c:88:7f:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C
        Validity
            Not Before: Apr 28 16:56:39 2025 GMT
            Not After : May  3 02:40:39 2025 GMT
        Subject: CN=647E8507008B3DB2EB6B58FBE47C112AD0D5A178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6b:18:ad:49:51:e2:47:12:e7:ed:54:34:67:
                    a0:4c:62:30:ef:a4:e7:c8:c1:78:1c:00:19:99:7c:
                    d2:b1:c3:ae:80:6b:6b:7e:d6:89:68:37:10:0f:9f:
                    f0:e1:b1:75:bb:69:3e:a1:08:7f:1e:0d:9f:54:41:
                    d6:02:30:e1:da:c6:7e:55:cb:fb:87:49:34:e7:56:
                    e0:08:cc:4c:0a:e6:21:86:78:6d:89:08:bc:25:99:
                    78:c3:0c:9a:1e:41:14:83:d3:93:46:68:92:e3:13:
                    68:28:89:d1:3b:b6:3a:f9:36:6b:ce:bb:f4:c5:48:
                    ba:3a:b0:bd:ab:d2:1e:66:86:13:51:60:7e:2b:00:
                    60:24:61:6a:e9:1c:c0:3e:5a:a4:88:08:fb:55:01:
                    08:72:02:6a:94:a0:1c:a7:be:03:82:27:df:38:25:
                    de:b9:06:4f:d7:aa:22:50:bb:db:ae:6d:05:c9:ed:
                    ca:d5:7e:7e:b9:7c:6f:9e:f4:f3:89:64:e3:43:63:
                    41:25:b0:b7:59:7f:52:0b:05:3f:93:8a:7a:f0:2a:
                    de:37:cd:3a:3b:51:a4:94:e8:59:ed:ff:45:23:9a:
                    82:de:27:d4:c9:ac:54:83:1f:26:37:68:26:37:0b:
                    f1:e2:20:e1:38:1c:3d:1d:13:20:ed:ff:da:c5:5c:
                    38:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7E:85:07:00:8B:3D:B2:EB:6B:58:FB:E4:7C:11:2A:D0:D5:A1:78
            X509v3 Authority Key Identifier:
                keyid:35:DD:CB:BB:81:68:CA:B4:0A:53:D8:B5:D3:F8:CD:F8:58:D3:A9:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:fa:fb:45:a6:90:98:51:3a:ff:af:6b:f4:c9:a3:9a:19:31:
         36:1f:c6:76:5b:be:e8:eb:00:0c:21:3b:15:ad:58:52:72:24:
         74:5d:5b:13:22:ac:06:ec:2c:9e:1e:ae:27:6b:7e:12:69:eb:
         21:c5:2f:ea:93:30:fa:d9:c3:cd:0a:57:6e:a9:13:3f:73:1d:
         d3:74:af:e9:b0:a3:40:d7:66:b7:48:d4:c2:ec:23:64:6e:b8:
         32:68:f6:66:c7:a0:89:9d:73:57:dc:93:34:9b:4d:b3:3e:29:
         d7:67:94:58:b1:35:24:83:8b:3b:5c:73:36:06:22:67:ba:98:
         22:6d:58:2a:77:6b:3c:a8:69:3f:54:36:ae:d4:08:7f:a2:72:
         9b:60:0b:5f:9b:75:13:43:8c:cc:4e:3c:f4:aa:f1:8d:79:5d:
         c0:52:ce:10:cc:d2:2c:8d:fe:9d:ff:87:10:d1:30:73:d9:f5:
         7e:3d:00:2b:83:4a:7b:45:37:3b:22:1c:b6:41:c6:58:f2:aa:
         c9:67:0d:2f:87:ff:42:ac:5f:48:73:0e:fc:08:3c:a8:91:47:
         7f:22:22:23:84:79:fa:66:e9:71:8a:d0:48:a1:71:d4:7e:fc:
         8a:d9:cd:44:c1:40:02:65:e7:a9:26:6a:fa:51:68:53:fe:f9:
         52:9d:e9:75
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUKXF93HDJ4MQdThW9WaVFuZyIfxMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzVERENCQkI4MTY4Q0FCNDBBNTNEOEI1RDNGOENERjg1
OEQzQTk5QzAeFw0yNTA0MjgxNjU2MzlaFw0yNTA1MDMwMjQwMzlaMDMxMTAvBgNV
BAMTKDY0N0U4NTA3MDA4QjNEQjJFQjZCNThGQkU0N0MxMTJBRDBENUExNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTaxitSVHiRxLn7VQ0Z6BMYjDv
pOfIwXgcABmZfNKxw66Aa2t+1oloNxAPn/DhsXW7aT6hCH8eDZ9UQdYCMOHaxn5V
y/uHSTTnVuAIzEwK5iGGeG2JCLwlmXjDDJoeQRSD05NGaJLjE2goidE7tjr5NmvO
u/TFSLo6sL2r0h5mhhNRYH4rAGAkYWrpHMA+WqSICPtVAQhyAmqUoBynvgOCJ984
Jd65Bk/XqiJQu9uubQXJ7crVfn65fG+e9POJZONDY0ElsLdZf1ILBT+TinrwKt43
zTo7UaSU6Fnt/0UjmoLeJ9TJrFSDHyY3aCY3C/HiIOE4HD0dEyDt/9rFXDiXAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUZH6FBwCLPbLra1j75HwRKtDVoXgwHwYDVR0j
BBgwFoAUNd3Lu4FoyrQKU9i10/jN+FjTqZwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMDEyN0JCREYxMjg4Q0QwQkE1MzkwMTIyMTJDNkY1QUMw
NUYxQTMyQkRDOUE4MkZBRDAxQ0Y5NDM1QzE2MTVDLzAvMzVERENCQkI4MTY4Q0FC
NDBBNTNEOEI1RDNGOENERjg1OEQzQTk5Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNUREQ0JCQjgxNjhDQUI0MEE1
M0Q4QjVEM0Y4Q0RGODU4RDNBOTlDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzAxMjdCQkRGMTI4OENEMEJBNTM5MDEyMjEyQzZGNUFDMDVGMUEzMkJE
QzlBODJGQUQwMUNGOTQzNUMxNjE1Qy8wLzM1RERDQkJCODE2OENBQjQwQTUzRDhC
NUQzRjhDREY4NThEM0E5OUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB7+vtFppCYUTr/r2v0yaOaGTE2
H8Z2W77o6wAMITsVrVhSciR0XVsTIqwG7CyeHq4na34SaeshxS/qkzD62cPNCldu
qRM/cx3TdK/psKNA12a3SNTC7CNkbrgyaPZmx6CJnXNX3JM0m02zPinXZ5RYsTUk
g4s7XHM2BiJnupgibVgqd2s8qGk/VDau1Ah/onKbYAtfm3UTQ4zMTjz0qvGNeV3A
Us4QzNIsjf6d/4cQ0TBz2fV+PQArg0p7RTc7Ihy2QcZY8qrJZw0vh/9CrF9Icw78
CDyokUd/IiIjhHn6ZulxitBIoXHUfvyK2c1EwUACZeepJmr6UWhT/vlSnel1
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:30 2025 by rpki-client on console.sobornost.net