Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/32793492640B2B030DF9AD1F86E219D5520EB27B38A6A9608E4EBE0C06B58364/0/CE673D18656DBB48028685CE4E2B38F6AFD92A7E.mft
File:                     CE673D18656DBB48028685CE4E2B38F6AFD92A7E.mft (raw, json)
Hash identifier:          gUOz2vMKz2Tw1h8liAFvkBWjVr201G3b/blM7WNbRQE=
Subject key identifier:   4F:B4:34:E9:61:05:CA:CE:17:99:75:E2:8D:5C:3D:7D:B3:A6:C8:B1
Authority key identifier: CE:67:3D:18:65:6D:BB:48:02:86:85:CE:4E:2B:38:F6:AF:D9:2A:7E
Certificate issuer:       /CN=CE673D18656DBB48028685CE4E2B38F6AFD92A7E
Certificate serial:       41DCB54E075BD7DDDC09647D97891DBFC679BD1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE673D18656DBB48028685CE4E2B38F6AFD92A7E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/32793492640B2B030DF9AD1F86E219D5520EB27B38A6A9608E4EBE0C06B58364/0/CE673D18656DBB48028685CE4E2B38F6AFD92A7E.mft
Manifest number:          D0
Signing time:             Mon 28 Apr 2025 09:06:54 +0000
Manifest this update:     Mon 28 Apr 2025 09:01:54 +0000
Manifest next update:     Fri 02 May 2025 22:15:54 +0000
Files and hashes:         1: 34352e3137382e382e302f32322d3233203d3e20323637383736.roa (hash: 6VoZQ3tKUQ003jjlANYepZ3U/4IpStcCrQrtOFlMnQs=)
                          2: CE673D18656DBB48028685CE4E2B38F6AFD92A7E.crl (hash: HjxXRpvSr1w1i0vFgLABohZ6kBfJAXlHfNz4+Oo2vCI=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/32793492640B2B030DF9AD1F86E219D5520EB27B38A6A9608E4EBE0C06B58364/0/CE673D18656DBB48028685CE4E2B38F6AFD92A7E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/32793492640B2B030DF9AD1F86E219D5520EB27B38A6A9608E4EBE0C06B58364/0/CE673D18656DBB48028685CE4E2B38F6AFD92A7E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE673D18656DBB48028685CE4E2B38F6AFD92A7E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:dc:b5:4e:07:5b:d7:dd:dc:09:64:7d:97:89:1d:bf:c6:79:bd:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE673D18656DBB48028685CE4E2B38F6AFD92A7E
        Validity
            Not Before: Apr 28 09:01:54 2025 GMT
            Not After : May  2 22:15:54 2025 GMT
        Subject: CN=4FB434E96105CACE179975E28D5C3D7DB3A6C8B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:02:06:c1:2c:3c:53:d8:92:18:5f:97:a1:5c:
                    ba:18:b2:d0:62:c3:ad:8f:e4:5c:cf:18:a3:21:4e:
                    e9:d5:0d:10:e9:a9:67:f5:3a:f2:54:41:8b:48:08:
                    02:f3:c4:4f:c8:ff:14:15:1b:5d:8b:37:e3:bc:c2:
                    92:7f:67:d1:00:4a:5d:19:61:a9:0d:1d:85:9c:0e:
                    2d:97:f9:6a:27:60:b5:4c:21:d3:5c:c3:db:45:7e:
                    fb:aa:92:f4:d6:18:3c:10:15:ef:00:08:99:d3:06:
                    d5:fc:95:91:84:d5:1c:d0:fa:68:7f:69:81:17:d7:
                    82:6e:94:28:69:82:a0:cc:e3:1e:02:86:cd:c2:5a:
                    c9:a3:31:d3:5b:48:9e:c6:85:bf:c0:b6:da:24:c2:
                    6b:51:b5:36:89:6e:b0:fa:a6:55:86:21:6b:cf:1f:
                    a1:8c:9e:9f:c2:25:28:12:aa:41:72:f5:64:20:b3:
                    30:7d:e9:ea:a7:db:83:dd:ab:98:58:34:e0:c6:46:
                    5c:4e:f5:72:7c:c2:24:b9:48:db:cf:dd:4b:ce:7d:
                    b1:b5:29:db:ff:8b:57:b0:f4:1e:dc:aa:79:5f:72:
                    e0:15:07:c2:ab:23:a8:b9:43:49:ff:9c:c5:e2:4e:
                    f4:5c:d2:0b:2f:ea:f1:6f:56:ea:f6:3f:12:b7:e8:
                    ed:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B4:34:E9:61:05:CA:CE:17:99:75:E2:8D:5C:3D:7D:B3:A6:C8:B1
            X509v3 Authority Key Identifier:
                keyid:CE:67:3D:18:65:6D:BB:48:02:86:85:CE:4E:2B:38:F6:AF:D9:2A:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/32793492640B2B030DF9AD1F86E219D5520EB27B38A6A9608E4EBE0C06B58364/0/CE673D18656DBB48028685CE4E2B38F6AFD92A7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE673D18656DBB48028685CE4E2B38F6AFD92A7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/32793492640B2B030DF9AD1F86E219D5520EB27B38A6A9608E4EBE0C06B58364/0/CE673D18656DBB48028685CE4E2B38F6AFD92A7E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:0f:64:22:46:d4:57:b8:ca:ee:fa:0f:8c:46:db:d2:82:27:
         ea:49:6a:9a:e3:2a:0e:91:66:23:14:23:bf:63:55:6d:7d:d8:
         4a:6d:64:30:9f:8d:4e:f1:4b:35:b6:f0:a6:36:0e:48:79:a7:
         d2:5d:79:04:32:73:8f:c9:4e:a8:e9:04:55:50:30:a0:12:e1:
         36:c3:a2:89:ac:bf:91:73:55:ec:82:14:4b:02:3c:cf:98:ec:
         18:00:ef:c2:fe:08:e4:4d:91:06:b7:7d:4b:d8:b9:42:97:2b:
         fe:37:78:14:6e:0b:e3:3d:47:0b:8e:c2:dd:68:d3:ab:6f:00:
         5d:f9:36:be:17:1e:72:4b:36:19:ec:ed:a0:3d:3c:f3:ef:6e:
         96:12:cb:d5:32:dd:eb:c2:d0:1b:79:39:52:73:ff:02:22:2c:
         1f:32:f5:5c:cb:ad:46:3d:65:26:f0:75:f4:10:93:b8:9d:50:
         7e:de:48:80:e1:c7:e0:3c:d4:d8:8e:cd:61:7e:ba:56:0a:c7:
         79:6c:f9:34:5a:ba:07:31:87:8f:99:a8:0e:91:85:48:3f:73:
         de:1e:42:6d:ee:77:be:24:78:c9:57:87:c4:88:d1:fb:5a:3d:
         7a:56:d7:85:59:c2:fb:3c:29:4a:e1:4e:fa:d1:b0:0b:da:31:
         3f:6c:aa:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:49 2025 by rpki-client on console.sobornost.net