Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4A1E58D704E27E7F8A5D7B0F3EEECBC8F491E09320EE503A4E1DEE90DF3DC229/0/8B36E26722DD047AC28A81BF9B5C3D4F48696DFF.mft
File:                     8B36E26722DD047AC28A81BF9B5C3D4F48696DFF.mft (raw, json)
Hash identifier:          Ov0qxwK5+20Y7O2sdQzkHStv8uGgERfRY7tqWXImLBY=
Subject key identifier:   18:C4:D0:CC:DB:DA:7E:0B:D0:B7:F0:3C:E6:3E:86:85:1B:F5:E3:CC
Authority key identifier: 8B:36:E2:67:22:DD:04:7A:C2:8A:81:BF:9B:5C:3D:4F:48:69:6D:FF
Certificate issuer:       /CN=8B36E26722DD047AC28A81BF9B5C3D4F48696DFF
Certificate serial:       3BDFEF6FE3A65ADD2EA62B5049BE39098033BE6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B36E26722DD047AC28A81BF9B5C3D4F48696DFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4A1E58D704E27E7F8A5D7B0F3EEECBC8F491E09320EE503A4E1DEE90DF3DC229/0/8B36E26722DD047AC28A81BF9B5C3D4F48696DFF.mft
Manifest number:          D3
Signing time:             Mon 28 Apr 2025 05:09:30 +0000
Manifest this update:     Mon 28 Apr 2025 05:04:30 +0000
Manifest next update:     Sun 04 May 2025 02:48:30 +0000
Files and hashes:         1: 323830333a653435303a3a2f33322d3438203d3e20323733313331.roa (hash: U0sS2W/mCjQd6HPLEOSTw+QYMmyYqFgO1O+eYgRAvEA=)
                          2: 8B36E26722DD047AC28A81BF9B5C3D4F48696DFF.crl (hash: //ox6W35c22iGbeZza9n8fHKC6suagPRBQRjtFz0IA4=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4A1E58D704E27E7F8A5D7B0F3EEECBC8F491E09320EE503A4E1DEE90DF3DC229/0/8B36E26722DD047AC28A81BF9B5C3D4F48696DFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4A1E58D704E27E7F8A5D7B0F3EEECBC8F491E09320EE503A4E1DEE90DF3DC229/0/8B36E26722DD047AC28A81BF9B5C3D4F48696DFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B36E26722DD047AC28A81BF9B5C3D4F48696DFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:df:ef:6f:e3:a6:5a:dd:2e:a6:2b:50:49:be:39:09:80:33:be:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B36E26722DD047AC28A81BF9B5C3D4F48696DFF
        Validity
            Not Before: Apr 28 05:04:30 2025 GMT
            Not After : May  4 02:48:30 2025 GMT
        Subject: CN=18C4D0CCDBDA7E0BD0B7F03CE63E86851BF5E3CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4e:8c:18:11:bc:d9:53:68:89:60:79:31:71:
                    7a:63:11:c6:1d:58:48:fc:a7:e1:b7:ec:88:be:36:
                    88:3b:28:d6:5f:48:8a:fe:52:5d:b5:e8:f6:d0:6e:
                    fe:9b:95:7b:4d:7d:02:ed:4e:cc:04:71:ec:b7:83:
                    28:3d:a2:c3:2e:b0:33:4c:15:22:8b:c6:17:70:df:
                    f1:cd:fa:28:c2:f4:91:7c:71:cf:57:90:35:1a:f9:
                    cb:ce:18:e8:b5:4a:ae:6d:cd:cd:57:79:b1:2d:95:
                    32:97:b1:24:f1:8e:44:d1:68:d4:68:b0:7a:66:0b:
                    93:59:c3:97:dc:d3:73:4c:c8:65:51:7c:76:e8:c8:
                    68:26:42:16:58:97:ef:dd:e2:35:bc:b0:2c:38:80:
                    86:26:ae:f5:ae:98:d7:c6:34:c1:08:eb:46:14:ff:
                    50:80:24:2c:2f:1d:21:c8:c5:58:83:e2:66:ee:fb:
                    78:d4:d5:74:bb:0c:35:b5:d6:57:f7:5d:d6:e7:ec:
                    82:62:50:8b:9e:b3:da:da:34:40:96:ad:c2:52:e7:
                    a2:32:f6:cf:f4:16:8d:aa:1b:c8:72:8d:8d:39:d9:
                    04:e6:8b:91:a6:ec:39:dd:75:3f:bd:d7:0b:9b:33:
                    23:ac:89:ff:2b:bd:e7:1f:49:a9:17:7f:31:13:5a:
                    f6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C4:D0:CC:DB:DA:7E:0B:D0:B7:F0:3C:E6:3E:86:85:1B:F5:E3:CC
            X509v3 Authority Key Identifier:
                keyid:8B:36:E2:67:22:DD:04:7A:C2:8A:81:BF:9B:5C:3D:4F:48:69:6D:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4A1E58D704E27E7F8A5D7B0F3EEECBC8F491E09320EE503A4E1DEE90DF3DC229/0/8B36E26722DD047AC28A81BF9B5C3D4F48696DFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B36E26722DD047AC28A81BF9B5C3D4F48696DFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4A1E58D704E27E7F8A5D7B0F3EEECBC8F491E09320EE503A4E1DEE90DF3DC229/0/8B36E26722DD047AC28A81BF9B5C3D4F48696DFF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:d8:4c:3b:de:d5:fa:27:9e:a5:d5:39:0e:31:48:01:81:ee:
         f2:d1:d2:c9:48:22:7e:e1:86:cc:d6:b9:10:39:24:da:4b:5f:
         27:2f:f9:94:f3:1c:1d:07:f0:db:5e:e6:7b:21:31:da:64:7d:
         0b:18:e2:ab:74:73:e4:1b:af:9b:c4:32:1d:29:ee:f7:5f:48:
         d0:b2:fd:6d:2a:69:f1:e0:8b:de:69:9b:89:c9:06:57:3c:98:
         c3:60:4e:f0:f8:cf:c3:b9:0f:1d:7e:6d:82:db:a3:9e:26:13:
         11:5d:8b:0f:ef:91:7e:b3:12:da:c1:44:bb:cb:97:04:79:6f:
         17:28:e1:22:09:fe:6c:05:cd:c1:70:83:88:7f:b7:f8:bf:0d:
         b5:66:97:e6:d3:a0:b8:f7:05:13:de:aa:4f:38:57:51:7d:1b:
         ab:87:a7:21:78:ef:4e:96:93:1e:17:a4:97:a4:78:0b:cd:0b:
         e7:59:ab:a6:9d:a6:c0:a6:b3:82:b5:65:55:f5:c4:b4:00:e7:
         ea:b3:7c:50:97:91:f5:5f:f6:40:5f:50:a0:b7:57:bd:4c:ad:
         43:cb:8a:6b:1e:86:e2:c5:0a:99:ec:92:2b:ce:c3:af:d9:34:
         15:5d:1c:cd:bf:d8:e5:36:d3:53:9a:88:de:59:f5:70:d4:84:
         51:70:e7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:19 2025 by rpki-client on console.sobornost.net