Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5BC27E67CC4BD72DBD695E8B8FD48EE83524B67C058379454E87EA4739D3405E/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.mft
File:                     17FD7B4CD3B97225C91244D204C973ABA848EF0A.mft (raw, json)
Hash identifier:          hMdO3vPxi5/G2kNafBXBBEXOoudkp8RntphjnuUBAwk=
Subject key identifier:   3B:2A:89:98:C6:7C:2E:D2:EE:E7:63:B0:3A:B6:A1:D8:DF:FB:9C:0D
Authority key identifier: 17:FD:7B:4C:D3:B9:72:25:C9:12:44:D2:04:C9:73:AB:A8:48:EF:0A
Certificate issuer:       /CN=17FD7B4CD3B97225C91244D204C973ABA848EF0A
Certificate serial:       251B8BCF9FB16CE8653A736E930B63B8C620328D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5BC27E67CC4BD72DBD695E8B8FD48EE83524B67C058379454E87EA4739D3405E/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.mft
Manifest number:          CE
Signing time:             Mon 28 Apr 2025 00:36:28 +0000
Manifest this update:     Mon 28 Apr 2025 00:31:28 +0000
Manifest next update:     Fri 02 May 2025 12:57:28 +0000
Files and hashes:         1: 3137302e38302e3134302e302f32322d3234203d3e20323634383139.roa (hash: +D7+8NrAc3EwgQ6M6bHakcyDJQX+yUCKb8QWB0WNKbc=)
                          2: 17FD7B4CD3B97225C91244D204C973ABA848EF0A.crl (hash: I/NSQ1gK1Je6Pldotqa6sRYx4XYB490AyJOP4Ik2j10=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5BC27E67CC4BD72DBD695E8B8FD48EE83524B67C058379454E87EA4739D3405E/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5BC27E67CC4BD72DBD695E8B8FD48EE83524B67C058379454E87EA4739D3405E/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:1b:8b:cf:9f:b1:6c:e8:65:3a:73:6e:93:0b:63:b8:c6:20:32:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17FD7B4CD3B97225C91244D204C973ABA848EF0A
        Validity
            Not Before: Apr 28 00:31:28 2025 GMT
            Not After : May  2 12:57:28 2025 GMT
        Subject: CN=3B2A8998C67C2ED2EEE763B03AB6A1D8DFFB9C0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c4:c4:f8:d5:13:60:30:7c:15:02:43:1b:e2:
                    5d:61:19:42:bc:64:58:44:92:35:cf:9b:3f:c6:15:
                    e8:69:ca:9a:37:27:42:46:09:98:18:8d:36:a3:16:
                    de:e0:af:49:54:63:9a:50:5a:28:a3:a1:02:59:37:
                    c9:65:ab:a1:f7:42:91:31:c0:7f:62:67:9f:99:b8:
                    fc:ce:04:a6:3f:56:14:a3:d4:4e:63:8c:ca:35:96:
                    24:d4:1d:e6:5e:b6:f7:dc:10:d1:fa:43:21:ff:19:
                    47:1a:99:72:1c:57:98:57:92:2d:6b:6b:13:9e:60:
                    56:b1:d5:38:47:1a:d8:76:04:d0:cd:34:d5:1a:a9:
                    05:6e:59:a5:5e:c4:c4:1f:5e:b0:b5:4b:b8:63:07:
                    5a:52:c2:cf:56:09:b1:94:17:25:77:6d:a5:44:d8:
                    de:15:d4:db:23:1a:0a:bb:64:64:f7:fc:ff:4c:fe:
                    43:5a:5f:99:2a:fe:bd:7c:5b:d9:7c:69:cb:2d:52:
                    e4:53:ee:f5:82:ef:9d:c2:bf:ac:4b:b4:63:33:14:
                    50:bf:68:cf:0f:5a:bd:b2:66:a9:bf:5c:8b:97:27:
                    dc:d3:4e:8e:a9:62:e3:6d:c8:a1:7c:27:37:61:bb:
                    8e:c3:66:cc:4a:4d:e8:ef:8e:30:f7:22:a8:bb:02:
                    b5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:2A:89:98:C6:7C:2E:D2:EE:E7:63:B0:3A:B6:A1:D8:DF:FB:9C:0D
            X509v3 Authority Key Identifier:
                keyid:17:FD:7B:4C:D3:B9:72:25:C9:12:44:D2:04:C9:73:AB:A8:48:EF:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5BC27E67CC4BD72DBD695E8B8FD48EE83524B67C058379454E87EA4739D3405E/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5BC27E67CC4BD72DBD695E8B8FD48EE83524B67C058379454E87EA4739D3405E/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:49:2b:b6:ad:8a:cd:69:83:42:b9:29:85:30:0b:0b:91:ff:
         79:28:f7:21:de:ec:98:2b:f2:ca:b3:3a:09:54:0f:3f:87:5a:
         61:4e:7b:45:4b:f6:a9:ac:a9:c0:d9:26:22:06:f2:37:58:0f:
         9c:f9:23:70:e3:b8:ae:83:b9:eb:da:79:8b:71:26:05:f1:a0:
         00:fb:2a:6c:57:c1:9a:11:b8:65:8a:3e:34:4d:0d:3f:4a:72:
         d5:95:62:05:aa:be:9e:de:d2:d4:5c:ef:53:f9:e7:8a:e4:4a:
         0e:59:16:ef:d3:8c:64:74:20:de:41:09:e2:a4:fb:b6:f4:db:
         b6:c1:51:70:fe:21:a9:de:d1:9e:24:43:9b:67:19:46:f0:91:
         36:2b:99:eb:20:39:84:e6:03:9c:cc:4a:b2:d8:0e:96:d8:2d:
         0c:ca:dd:49:94:38:43:57:07:9f:8a:6d:85:47:08:1e:d9:bb:
         d9:69:cf:d5:06:cd:32:d3:12:85:a8:f0:4f:d2:b9:28:d7:c9:
         d3:6e:11:43:37:44:aa:f4:a6:07:3c:c8:02:79:45:a7:9e:33:
         8a:28:25:00:7c:e3:9b:a4:80:2e:a3:ca:5a:ad:75:04:53:29:
         12:32:1c:2b:77:b9:f4:fe:e1:92:48:6f:30:60:09:6e:c7:3f:
         69:ed:2f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:12 2025 by rpki-client on console.sobornost.net