Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FEBC9126C0E0A7E03F7E5536F8E59DB9AC30C0363C5512AD9E7F2D30483A16E/0/D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7.mft
File:                     D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7.mft (raw, json)
Hash identifier:          qtFBYRkVzYf3otLMQ90IT4EhrBM3jww1Jya7Dacev9c=
Subject key identifier:   76:77:25:56:4A:D4:60:F9:8E:DE:9C:88:A9:DF:C3:73:35:C5:3B:17
Authority key identifier: D6:0A:F8:08:8C:FC:FC:3A:52:D3:18:D5:8C:9C:FD:12:1C:E6:F7:C7
Certificate issuer:       /CN=D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7
Certificate serial:       4E25AC2067DF974547246EF7DB7AD29B6F33F69F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FEBC9126C0E0A7E03F7E5536F8E59DB9AC30C0363C5512AD9E7F2D30483A16E/0/D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7.mft
Manifest number:          D3
Signing time:             Mon 28 Apr 2025 15:35:40 +0000
Manifest this update:     Mon 28 Apr 2025 15:30:40 +0000
Manifest next update:     Sun 04 May 2025 05:32:40 +0000
Files and hashes:         1: D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7.crl (hash: yPnNJYdHzLMY2VwA7F5EMAz2p4IqhTsZ8lXJK7yt56U=)
                          2: 3139302e39392e38382e302f32322d3234203d3e203532323436.roa (hash: DYDfZBRHm5MRw+ZJ1PxfNM1YSbyDkrhD0SKalU607kk=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FEBC9126C0E0A7E03F7E5536F8E59DB9AC30C0363C5512AD9E7F2D30483A16E/0/D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FEBC9126C0E0A7E03F7E5536F8E59DB9AC30C0363C5512AD9E7F2D30483A16E/0/D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:25:ac:20:67:df:97:45:47:24:6e:f7:db:7a:d2:9b:6f:33:f6:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7
        Validity
            Not Before: Apr 28 15:30:40 2025 GMT
            Not After : May  4 05:32:40 2025 GMT
        Subject: CN=767725564AD460F98EDE9C88A9DFC37335C53B17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:65:14:fb:91:e9:b7:0d:08:5e:57:d0:78:41:
                    12:2b:76:04:fd:ec:8d:05:be:4f:a0:86:ac:0d:7a:
                    46:d2:f6:29:ae:cb:b5:d1:a8:d7:8f:5a:cc:f0:2d:
                    8b:eb:66:5d:47:a4:db:92:24:d9:30:26:01:2d:87:
                    4a:46:d0:58:c9:45:75:d3:64:a3:96:c1:6b:1c:96:
                    f3:89:ef:79:fe:14:9a:33:72:23:7d:43:21:20:dd:
                    41:02:ee:69:53:aa:cf:99:4f:cf:ec:5c:ee:38:a7:
                    0e:49:d0:ad:5e:dc:42:cd:2d:c5:46:9e:66:30:9b:
                    8e:16:7f:9e:52:86:af:e1:11:e9:67:03:a9:b4:e1:
                    12:09:40:6e:4a:09:a0:17:54:e7:82:16:52:99:12:
                    fd:24:2d:65:cf:92:5f:69:ba:37:62:35:a8:43:98:
                    dd:97:a0:90:d8:8b:40:dd:8b:44:7d:5f:3d:2d:99:
                    97:22:5b:55:f2:ac:61:e9:98:24:19:51:fb:31:68:
                    d6:74:59:ae:5c:5b:49:8c:95:f0:25:9d:db:01:1d:
                    76:ee:27:8f:9c:5b:61:5b:9d:4c:76:af:53:a5:15:
                    77:12:ff:cd:c0:6f:68:92:91:cf:88:04:f1:d1:c7:
                    92:ce:c7:06:e1:b7:39:68:12:f2:80:99:59:fb:92:
                    75:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:77:25:56:4A:D4:60:F9:8E:DE:9C:88:A9:DF:C3:73:35:C5:3B:17
            X509v3 Authority Key Identifier:
                keyid:D6:0A:F8:08:8C:FC:FC:3A:52:D3:18:D5:8C:9C:FD:12:1C:E6:F7:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FEBC9126C0E0A7E03F7E5536F8E59DB9AC30C0363C5512AD9E7F2D30483A16E/0/D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FEBC9126C0E0A7E03F7E5536F8E59DB9AC30C0363C5512AD9E7F2D30483A16E/0/D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:6d:03:b6:cb:a9:63:55:2e:74:7c:86:aa:09:03:8a:14:9d:
         1f:23:d7:df:96:d2:ae:2c:2a:14:e1:d9:5f:04:e7:86:a7:de:
         cb:35:29:5a:8c:61:18:39:27:ac:00:96:f0:3f:50:e6:1e:43:
         7e:fa:a6:19:6c:e2:09:ee:4f:6c:05:30:fd:43:e3:4e:19:0f:
         46:00:83:e4:ea:51:0c:05:e2:16:0a:51:9e:3c:92:eb:e2:0a:
         a1:d6:28:48:c5:81:66:59:78:53:cb:2c:b1:57:47:47:4c:17:
         15:c5:2b:50:7f:4e:4c:40:63:0a:7c:8c:3b:95:29:ba:19:68:
         88:33:26:b1:82:0e:65:6a:5e:e3:39:03:74:7d:80:68:39:22:
         4d:e5:80:5b:05:b1:c0:9a:1e:dd:7b:2c:23:76:12:63:d8:e0:
         a3:c8:d3:bc:4c:4f:52:a6:5b:93:32:37:58:53:07:4c:fb:6b:
         6e:c9:76:cd:ce:c8:be:7c:e1:70:f8:71:17:f9:95:98:fe:f9:
         12:f4:8e:a2:a5:91:16:06:98:10:7a:8d:4b:68:2a:d7:f4:a7:
         7e:a3:a2:86:af:19:11:21:4a:05:94:c7:a9:84:ac:ae:14:e8:
         06:45:39:fe:6f:07:41:e8:fb:97:a0:a5:b8:85:b2:4e:59:3c:
         26:ad:7e:b7
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUTiWsIGffl0VHJG7323rSm28z9p8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYwQUY4MDg4Q0ZDRkMzQTUyRDMxOEQ1OEM5Q0ZEMTIx
Q0U2RjdDNzAeFw0yNTA0MjgxNTMwNDBaFw0yNTA1MDQwNTMyNDBaMDMxMTAvBgNV
BAMTKDc2NzcyNTU2NEFENDYwRjk4RURFOUM4OEE5REZDMzczMzVDNTNCMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ZRT7kem3DQheV9B4QRIrdgT9
7I0Fvk+ghqwNekbS9imuy7XRqNePWszwLYvrZl1HpNuSJNkwJgEth0pG0FjJRXXT
ZKOWwWsclvOJ73n+FJozciN9QyEg3UEC7mlTqs+ZT8/sXO44pw5J0K1e3ELNLcVG
nmYwm44Wf55Shq/hEelnA6m04RIJQG5KCaAXVOeCFlKZEv0kLWXPkl9pujdiNahD
mN2XoJDYi0Ddi0R9Xz0tmZciW1XyrGHpmCQZUfsxaNZ0Wa5cW0mMlfAlndsBHXbu
J4+cW2FbnUx2r1OlFXcS/83Ab2iSkc+IBPHRx5LOxwbhtzloEvKAmVn7knXFAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUdnclVkrUYPmO3pyIqd/DczXFOxcwHwYDVR0j
BBgwFoAU1gr4CIz8/DpS0xjVjJz9Ehzm98cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RkVCQzkxMjZDMEUwQTdFMDNGN0U1NTM2RjhFNTlEQjlB
QzMwQzAzNjNDNTUxMkFEOUU3RjJEMzA0ODNBMTZFLzAvRDYwQUY4MDg4Q0ZDRkMz
QTUyRDMxOEQ1OEM5Q0ZEMTIxQ0U2RjdDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjBBRjgwODhDRkNGQzNBNTJE
MzE4RDU4QzlDRkQxMjFDRTZGN0M3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEZFQkM5MTI2QzBFMEE3RTAzRjdFNTUzNkY4RTU5REI5QUMzMEMwMzYz
QzU1MTJBRDlFN0YyRDMwNDgzQTE2RS8wL0Q2MEFGODA4OENGQ0ZDM0E1MkQzMThE
NThDOUNGRDEyMUNFNkY3QzcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCGbQO2y6ljVS50fIaqCQOKFJ0f
I9ffltKuLCoU4dlfBOeGp97LNSlajGEYOSesAJbwP1DmHkN++qYZbOIJ7k9sBTD9
Q+NOGQ9GAIPk6lEMBeIWClGePJLr4gqh1ihIxYFmWXhTyyyxV0dHTBcVxStQf05M
QGMKfIw7lSm6GWiIMyaxgg5lal7jOQN0fYBoOSJN5YBbBbHAmh7deywjdhJj2OCj
yNO8TE9SpluTMjdYUwdM+2tuyXbNzsi+fOFw+HEX+ZWY/vkS9I6ipZEWBpgQeo1L
aCrX9Kd+o6KGrxkRIUoFlMephKyuFOgGRTn+bwdB6PuXoKW4hbJOWTwmrX63
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:48 2025 by rpki-client on console.sobornost.net