Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.mft
File:                     208A6A9014A4D9F040F76110276AD236D1F5C14E.mft (raw, json)
Hash identifier:          sTZW12VEctrGuRTO7o2nfWmUpG3J6lW60KFGgcaRAs8=
Subject key identifier:   22:D5:52:EA:51:99:F1:56:51:AF:5C:E3:D2:2F:6C:C7:8E:0E:BF:CD
Authority key identifier: 20:8A:6A:90:14:A4:D9:F0:40:F7:61:10:27:6A:D2:36:D1:F5:C1:4E
Certificate issuer:       /CN=208A6A9014A4D9F040F76110276AD236D1F5C14E
Certificate serial:       2517C54D20A8747CC2E1706EE1F2109110ECF062
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.mft
Manifest number:          CE
Signing time:             Mon 28 Apr 2025 11:08:08 +0000
Manifest this update:     Mon 28 Apr 2025 11:03:08 +0000
Manifest next update:     Sat 03 May 2025 12:39:08 +0000
Files and hashes:         1: 323830363a3366353a3a2f33322d3332203d3e20323730313837.roa (hash: raPkbGN8o+41tuLZij+Ifemtqlo+SUvZ6oC4WiiMEe4=)
                          2: 208A6A9014A4D9F040F76110276AD236D1F5C14E.crl (hash: 77dcZywRl/r046s50yHS803G+65xKLxueCHKt3g6gbc=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:17:c5:4d:20:a8:74:7c:c2:e1:70:6e:e1:f2:10:91:10:ec:f0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208A6A9014A4D9F040F76110276AD236D1F5C14E
        Validity
            Not Before: Apr 28 11:03:08 2025 GMT
            Not After : May  3 12:39:08 2025 GMT
        Subject: CN=22D552EA5199F15651AF5CE3D22F6CC78E0EBFCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e8:8a:52:31:55:3f:15:a2:bf:af:6b:90:d2:
                    80:09:53:92:c6:81:a6:32:ab:06:59:7c:c9:84:c3:
                    fc:e8:e7:9c:d8:49:e6:b8:8f:1a:f1:de:2c:5a:98:
                    40:ac:bf:f4:49:70:20:4c:76:aa:4c:e6:c9:bb:4e:
                    d2:4f:25:65:63:8f:d9:02:64:20:c6:5d:62:dc:b3:
                    af:00:e1:38:b0:f8:54:b1:e7:b8:b7:e5:06:bd:72:
                    b8:be:52:8d:2d:40:fb:91:6d:b0:bc:16:7f:17:6a:
                    a8:f3:ef:9e:ef:ed:a6:86:57:45:c2:5c:5f:47:df:
                    00:9e:e0:9e:5f:8f:dd:29:89:ac:9e:27:09:0e:6e:
                    e9:6b:81:d1:93:2f:e6:7b:25:5d:72:6f:e9:92:3d:
                    22:1a:90:80:e9:4b:ed:3d:df:a0:d6:d3:f7:1c:44:
                    a9:fc:18:35:3b:dc:8f:1c:28:7d:55:79:ab:fb:af:
                    38:8e:cc:ad:ae:b2:b8:79:b5:75:b7:f2:37:de:18:
                    96:2b:33:1f:ed:2f:26:d8:99:dc:da:6f:bb:cc:75:
                    59:c8:4a:90:44:0d:cf:2b:48:5d:38:5e:22:de:84:
                    78:18:a2:ce:a0:34:06:de:03:3e:d4:7e:bf:3c:7d:
                    50:04:35:0d:d5:d1:61:0c:94:ec:d6:7b:6a:39:dc:
                    bd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D5:52:EA:51:99:F1:56:51:AF:5C:E3:D2:2F:6C:C7:8E:0E:BF:CD
            X509v3 Authority Key Identifier:
                keyid:20:8A:6A:90:14:A4:D9:F0:40:F7:61:10:27:6A:D2:36:D1:F5:C1:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:17:8a:4c:fb:f9:b5:38:df:c7:68:08:bf:d1:5c:33:03:8c:
         2b:0f:c1:e4:2f:86:ef:31:fc:28:75:43:21:54:a3:1e:c4:20:
         7f:d4:1f:f5:71:0d:86:45:f2:8e:68:91:10:16:a6:45:59:17:
         e5:fa:ff:c6:67:bb:f8:e4:8a:d7:90:51:10:9e:cf:8b:68:bc:
         4e:6e:28:be:93:6f:49:49:f6:ec:53:b5:4d:4c:e3:17:05:98:
         65:94:1a:87:a7:49:d4:99:ce:c8:c3:4f:0c:db:39:3d:1d:f0:
         e6:74:44:83:a3:f4:b5:9c:89:18:b2:ad:78:bd:70:c4:30:a5:
         b2:bb:f6:31:a5:48:18:91:d7:37:ab:01:2a:9e:1d:28:78:34:
         7e:70:c5:6e:14:36:20:72:ae:15:0a:6f:51:05:df:ce:d6:59:
         e7:2d:75:3b:92:f7:20:0d:ce:72:f6:12:f4:96:d7:40:b0:98:
         01:d6:74:3f:97:e9:b7:10:27:86:32:12:2d:f2:d8:7e:ec:f5:
         27:08:4c:24:32:52:7d:f7:70:5f:4a:ac:b4:cf:b9:e5:ca:0c:
         9f:26:7d:77:14:05:82:92:14:fa:75:76:81:35:27:ef:63:29:
         cb:c4:e4:34:42:f8:ff:b3:9f:62:05:75:5b:19:76:08:f8:5a:
         7b:cd:d9:78
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUJRfFTSCodHzC4XBu4fIQkRDs8GIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA4QTZBOTAxNEE0RDlGMDQwRjc2MTEwMjc2QUQyMzZE
MUY1QzE0RTAeFw0yNTA0MjgxMTAzMDhaFw0yNTA1MDMxMjM5MDhaMDMxMTAvBgNV
BAMTKDIyRDU1MkVBNTE5OUYxNTY1MUFGNUNFM0QyMkY2Q0M3OEUwRUJGQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi6IpSMVU/FaK/r2uQ0oAJU5LG
gaYyqwZZfMmEw/zo55zYSea4jxrx3ixamECsv/RJcCBMdqpM5sm7TtJPJWVjj9kC
ZCDGXWLcs68A4Tiw+FSx57i35Qa9cri+Uo0tQPuRbbC8Fn8Xaqjz757v7aaGV0XC
XF9H3wCe4J5fj90piayeJwkObulrgdGTL+Z7JV1yb+mSPSIakIDpS+0936DW0/cc
RKn8GDU73I8cKH1Veav7rziOzK2usrh5tXW38jfeGJYrMx/tLybYmdzab7vMdVnI
SpBEDc8rSF04XiLehHgYos6gNAbeAz7Ufr88fVAENQ3V0WEMlOzWe2o53L3pAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUItVS6lGZ8VZRr1zj0i9sx44Ov80wHwYDVR0j
BBgwFoAUIIpqkBSk2fBA92EQJ2rSNtH1wU4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NkZFMUJEMzhGMEZDOUYxQUMyNzJDQURFODFFRUEwMTg5
RDU3QUFDQ0FCQkJCODBGRENBN0UyNThBQzA0MzYzLzAvMjA4QTZBOTAxNEE0RDlG
MDQwRjc2MTEwMjc2QUQyMzZEMUY1QzE0RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMDhBNkE5MDE0QTREOUYwNDBG
NzYxMTAyNzZBRDIzNkQxRjVDMTRFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTZGRTFCRDM4RjBGQzlGMUFDMjcyQ0FERTgxRUVBMDE4OUQ1N0FBQ0NB
QkJCQjgwRkRDQTdFMjU4QUMwNDM2My8wLzIwOEE2QTkwMTRBNEQ5RjA0MEY3NjEx
MDI3NkFEMjM2RDFGNUMxNEUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBSF4pM+/m1ON/HaAi/0VwzA4wr
D8HkL4bvMfwodUMhVKMexCB/1B/1cQ2GRfKOaJEQFqZFWRfl+v/GZ7v45IrXkFEQ
ns+LaLxObii+k29JSfbsU7VNTOMXBZhllBqHp0nUmc7Iw08M2zk9HfDmdESDo/S1
nIkYsq14vXDEMKWyu/YxpUgYkdc3qwEqnh0oeDR+cMVuFDYgcq4VCm9RBd/O1lnn
LXU7kvcgDc5y9hL0ltdAsJgB1nQ/l+m3ECeGMhIt8th+7PUnCEwkMlJ993BfSqy0
z7nlygyfJn13FAWCkhT6dXaBNSfvYynLxOQ0Qvj/s59iBXVbGXYI+Fp7zdl4
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:49 2025 by rpki-client on console.sobornost.net