Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CE995227CB743022A101AA85DF989A5FD8B4339CD68B1791016101C90A7B9A6/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.mft
File:                     412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.mft (raw, json)
Hash identifier:          KFhyRjgJDGBFg/kgUoXwaxmxX0hjlx6HfP3KClRttuY=
Subject key identifier:   E2:A5:3D:A6:08:AD:CE:2E:07:91:84:3A:11:69:8A:73:7F:98:EC:EE
Authority key identifier: 41:2E:3F:2D:3B:64:DF:DE:B5:82:85:F6:53:32:7E:EB:6F:F6:CA:E9
Certificate issuer:       /CN=412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9
Certificate serial:       53A53BCCDFD551E24D8D07301FFFD6E7F5E54403
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CE995227CB743022A101AA85DF989A5FD8B4339CD68B1791016101C90A7B9A6/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.mft
Manifest number:          D1
Signing time:             Sat 26 Apr 2025 20:14:43 +0000
Manifest this update:     Sat 26 Apr 2025 20:09:43 +0000
Manifest next update:     Fri 02 May 2025 11:55:43 +0000
Files and hashes:         1: 412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.crl (hash: NHJbuc2drkcUW0kvKa0QDsKhxSbxQ6LJOTeBanon9F8=)
                          2: 3230302e392e342e302f32322d3232203d3e203233323031.roa (hash: FdjamUUJO7fn8FL2YMV0xf91FP0OAJYNugAVbP4IdZs=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CE995227CB743022A101AA85DF989A5FD8B4339CD68B1791016101C90A7B9A6/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CE995227CB743022A101AA85DF989A5FD8B4339CD68B1791016101C90A7B9A6/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a5:3b:cc:df:d5:51:e2:4d:8d:07:30:1f:ff:d6:e7:f5:e5:44:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9
        Validity
            Not Before: Apr 26 20:09:43 2025 GMT
            Not After : May  2 11:55:43 2025 GMT
        Subject: CN=E2A53DA608ADCE2E0791843A11698A737F98ECEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:40:4c:cf:c7:fe:35:73:db:31:e6:f8:2d:48:
                    e0:da:88:6f:cf:ba:53:85:1f:d7:0a:7e:d3:2a:be:
                    f2:78:9f:b1:b8:3b:08:0a:d4:e5:3f:f7:2c:7f:e7:
                    9e:89:6d:16:76:c5:05:ca:96:4d:e3:c2:97:11:77:
                    f3:b2:0c:a3:ad:fc:f4:a1:61:52:58:84:b4:54:52:
                    4d:9f:d1:57:96:0e:f8:93:fe:b4:7e:51:f8:3f:a2:
                    39:e3:22:14:f3:d3:a9:dd:45:a6:30:a4:d1:b0:3b:
                    38:fb:5e:8d:02:10:be:d8:89:66:86:ea:51:56:d1:
                    95:a3:16:98:26:68:5d:23:60:b5:cd:bc:72:e9:9e:
                    f0:2c:ce:5e:8b:e5:c1:a2:6f:1e:ff:e6:e6:f2:97:
                    f4:6f:e0:16:e4:2b:54:5a:37:12:b5:85:0d:1d:4c:
                    81:88:ab:07:f2:99:d5:a6:99:10:d0:9c:10:3c:2a:
                    af:e2:64:f7:3f:a8:6e:8b:39:47:c4:0c:98:75:34:
                    2d:b1:f2:e5:70:4b:3b:a0:fd:d1:12:52:b5:9e:d4:
                    d7:3d:3b:3f:15:a2:58:d5:a4:cd:34:37:8b:61:e1:
                    46:4b:77:11:cd:ce:3a:b1:73:8d:5b:5a:da:0a:8f:
                    73:bd:40:41:eb:f1:0f:98:94:2d:8e:23:98:46:02:
                    c0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A5:3D:A6:08:AD:CE:2E:07:91:84:3A:11:69:8A:73:7F:98:EC:EE
            X509v3 Authority Key Identifier:
                keyid:41:2E:3F:2D:3B:64:DF:DE:B5:82:85:F6:53:32:7E:EB:6F:F6:CA:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CE995227CB743022A101AA85DF989A5FD8B4339CD68B1791016101C90A7B9A6/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CE995227CB743022A101AA85DF989A5FD8B4339CD68B1791016101C90A7B9A6/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:bd:66:ab:9b:24:47:b2:2c:7d:e6:a3:7f:63:a0:20:45:7e:
         dd:97:4e:54:57:d6:d6:f8:10:68:f1:31:00:cd:b6:7a:e6:f6:
         05:05:ad:48:4b:67:d7:d2:71:7e:d5:71:60:7b:4a:b0:c2:29:
         0c:3c:dd:d8:b3:3b:c5:0d:97:24:f5:fa:da:79:08:e7:9a:9a:
         12:65:29:6d:bd:db:11:67:96:2d:2a:08:16:c4:1d:c9:c7:ae:
         a4:44:92:c6:d5:a4:80:59:00:f5:aa:21:6e:0f:ff:a8:24:48:
         e9:b2:55:0c:85:c4:e7:90:41:69:1f:51:0e:da:8c:10:28:f0:
         8b:22:0c:6a:a2:2e:9d:48:2a:9a:c8:92:72:d2:f2:3d:84:c0:
         94:9b:81:d3:43:d7:54:ba:d7:9d:55:0e:1f:93:06:8a:58:ea:
         c0:2d:b9:4f:ac:04:e9:22:22:10:f2:8d:51:80:5d:9c:84:0b:
         fd:67:14:4b:65:b0:54:c9:86:8e:09:91:c7:29:6e:a4:be:d2:
         44:fb:94:b4:84:a0:ac:b5:51:77:88:06:ae:6a:22:8a:af:7a:
         f5:24:3a:0a:3a:d2:45:c0:a1:e4:f0:21:54:e6:ea:8c:3d:16:
         69:29:00:ea:d6:ad:f3:35:8d:87:98:f1:c7:e9:93:ad:ca:a3:
         c6:76:98:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:04 2025 by rpki-client on console.sobornost.net