Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.mft
File:                     B29AFE85DC197D537BB9426875AD7F12DC402702.mft (raw, json)
Hash identifier:          KDgNsvXqcXfJnSApcpxaNu4VKVyiHvZGLdihYNkKMdk=
Subject key identifier:   B4:BE:26:48:38:94:08:AC:A5:84:83:AA:92:32:4F:B5:4D:EF:17:04
Authority key identifier: B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02
Certificate issuer:       /CN=B29AFE85DC197D537BB9426875AD7F12DC402702
Certificate serial:       7AFA4112D1C8291618C2AD716516CAA07B028EE3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.mft
Manifest number:          D2
Signing time:             Mon 28 Apr 2025 14:30:02 +0000
Manifest this update:     Mon 28 Apr 2025 14:25:02 +0000
Manifest next update:     Sun 04 May 2025 06:22:02 +0000
Files and hashes:         1: 3230302e35322e3134342e302f32302d3234203d3e203237393332.roa (hash: 2+Q8AAXBW1eufEqo0d3D/afnqHY3Kh6/gXE98bixPHY=)
                          2: B29AFE85DC197D537BB9426875AD7F12DC402702.crl (hash: bUE3HjnBBY8h8jlDDtUnd5E/EOp5X2J/eL/34q7m2JE=)
                          3: 3230302e35322e3135302e302f32342d3332203d3e203532343638.roa (hash: VgZB6xLzpe52CnpHRKkLhiylzh5MIBA0Xq2TPT+uPEA=)
                          4: 3139302e3138352e3131322e302f32302d3234203d3e203237393332.roa (hash: dlBnSNYnR+ruaLIYdg+Ms4a4rN/NG/iXdvwQQyvCJL8=)
                          5: 3139302e3132342e3136302e302f32312d3234203d3e203237393332.roa (hash: YyiLBls4+I/xUjFopJglbYIgKJEuanxYfixdjArHHrA=)
                          6: 3139302e3138352e3131352e302f32342d3234203d3e20323632323334.roa (hash: mqW2sbO0ZxREqK99pIexZWjv7Zc+p+JxWRkOYg4KMD4=)
                          7: 3139302e3138352e3131332e302f32342d3234203d3e20323632323334.roa (hash: QmDQM7FhGJe6BM0wKQBFr7xBnSM2Eh3773d8mKs8dRI=)
                          8: 3139302e3132342e3136342e302f32342d3234203d3e20323632323334.roa (hash: ajGeAdxsYDvqLXPZZoKyZ1oKQYwzl+34sUDYcj0ba4A=)
                          9: 3230302e35322e3134342e302f32302d3230203d3e203237393332.roa (hash: uCG4LwFzTZxZpg8S1tnueRiB/hWFfWsyxS2gDiAHxHw=)
                          10: 3230302e3130372e3233322e302f32312d3234203d3e203237393332.roa (hash: UXR0iaKadNbQjXX4r81lkIleL8QrIEfmiALIavdbd78=)
                          11: 323830303a3661303a3a2f33322d3634203d3e203237393332.roa (hash: U6xnKoPuJUO0B0XhxDTo6tf/syyRrQI7Z5VlofQ3iLY=)
                          12: 3134332e3230322e3139362e302f32322d3234203d3e203237393332.roa (hash: WvpG/wTrEM7rLIuKtknxQircQ74FcuUh/x76cdqbrWY=)
                          13: 3230302e35322e3135342e302f32342d3234203d3e203237393332.roa (hash: J3v3UGY90GqE9RpEau/8wgoMaIfbgVKfQBhpbY/HAr4=)
                          14: 3139302e3138352e3131342e302f32342d3234203d3e20323632323334.roa (hash: BGQILorhFZSnPEcU4xf1yJSyhmxLT6i1Xz3qCwZNkmY=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl
                          rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:fa:41:12:d1:c8:29:16:18:c2:ad:71:65:16:ca:a0:7b:02:8e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B29AFE85DC197D537BB9426875AD7F12DC402702
        Validity
            Not Before: Apr 28 14:25:02 2025 GMT
            Not After : May  4 06:22:02 2025 GMT
        Subject: CN=B4BE2648389408ACA58483AA92324FB54DEF1704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c3:59:0f:ee:d7:29:4f:1c:40:cd:90:80:3e:
                    ad:9e:4e:b0:20:fc:1e:c9:19:3c:ea:54:f1:32:f4:
                    a7:ae:4a:88:4e:2d:00:ea:ea:54:15:55:3e:70:00:
                    ae:96:61:20:19:f4:37:ce:32:e9:f7:8b:24:56:cb:
                    78:ea:14:5b:08:d9:9b:b4:38:8f:b2:ff:16:79:ce:
                    01:0d:64:23:6d:1e:bd:91:01:9d:9f:9b:1c:24:88:
                    82:77:07:8c:9c:c5:05:fc:c9:ec:b3:ea:5d:64:1f:
                    6b:f9:5d:ba:cf:e8:47:ed:c4:a9:e9:40:ab:99:8b:
                    c1:fd:bd:8a:19:a0:d9:76:c7:aa:c3:67:29:49:91:
                    06:22:91:c4:31:8b:20:9e:b0:81:93:68:98:3f:6e:
                    87:c2:8a:33:c7:92:23:e9:b3:bd:9f:47:bf:9b:b3:
                    1c:e1:6d:aa:aa:95:1a:08:da:c3:fd:31:79:5b:93:
                    43:97:0b:d7:a7:51:db:0c:8f:35:73:8d:40:8c:77:
                    fd:28:f0:3b:53:d8:36:89:0a:c7:34:2f:dc:2a:40:
                    bd:50:77:52:6f:8c:e3:2f:59:82:20:d3:2f:d3:d1:
                    23:e4:02:40:2f:1f:17:a9:0c:23:10:49:65:0a:58:
                    0c:fb:d7:f5:b8:08:38:7f:22:bb:95:fb:2b:ce:30:
                    60:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:BE:26:48:38:94:08:AC:A5:84:83:AA:92:32:4F:B5:4D:EF:17:04
            X509v3 Authority Key Identifier:
                keyid:B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:28:70:94:f2:fd:38:9b:bd:7a:2e:5e:42:57:14:13:a4:d1:
         33:1e:bd:2b:96:96:3c:f3:47:62:96:24:76:7b:f7:24:72:b9:
         28:d1:fe:c5:5a:07:98:61:f5:77:93:15:f3:93:5b:f5:34:9e:
         12:11:6a:d2:98:cf:57:b1:01:f8:36:3c:f0:c0:d3:79:68:6b:
         24:47:60:67:b7:27:1d:b9:29:a2:1a:cd:a2:17:51:6d:9e:d0:
         d5:f8:69:20:09:54:f5:51:8d:ba:13:65:f6:52:05:a4:4f:be:
         ce:b6:19:30:bc:ae:31:54:8d:a0:0a:26:9b:e9:ad:12:3f:1d:
         dd:48:33:b5:b7:e5:ac:7b:a1:87:8b:c5:ee:65:de:dc:39:23:
         96:e4:27:d4:28:a9:2a:50:84:c4:d5:41:9e:ce:00:9b:a0:33:
         07:82:01:7f:58:e5:c4:5d:65:0d:e7:0f:39:c6:56:e9:64:14:
         45:a6:d0:63:90:a7:c0:b1:fa:8f:fb:d6:c1:b6:1f:0e:31:74:
         d4:fb:fb:c3:fe:e4:52:3e:c3:9a:82:e4:c0:bf:ff:17:24:bc:
         e1:b0:35:31:dd:bc:e0:78:0a:8b:a9:97:2d:ca:2b:85:79:22:
         63:96:a6:b8:e6:97:4b:e6:a0:05:8f:87:31:60:60:b5:eb:25:
         cd:de:80:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:48 2025 by rpki-client on console.sobornost.net