Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft
File:                     D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft (raw, json)
Hash identifier:          L6v53QeJX162RGMP0ektb9lwiv4T1POiPQQDTbo1Rm0=
Subject key identifier:   1A:32:1B:36:58:B8:2A:33:AC:34:17:A4:ED:11:66:52:B2:D7:3D:03
Authority key identifier: D9:D3:E0:DB:C4:C3:EB:0E:E7:CA:56:4F:0F:91:A0:38:A1:D5:87:7C
Certificate issuer:       /CN=D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C
Certificate serial:       234913056F47987087FBADE61C83DD346EBED21B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft
Manifest number:          D3
Signing time:             Mon 28 Apr 2025 09:47:18 +0000
Manifest this update:     Mon 28 Apr 2025 09:42:17 +0000
Manifest next update:     Fri 02 May 2025 23:11:17 +0000
Files and hashes:         1: 34352e37302e3138302e302f32322d3232203d3e20323635383134.roa (hash: BQdwxtgo5L1T0UilqKluFvqRRHzFjkB9p9gPX/wbUVY=)
                          2: D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.crl (hash: 5PZTjFElu/+Nves/45FJWSFonioku0qfnhYoZT/kt6M=)
                          3: 34352e37302e3138312e3232342f32372d3237203d3e20323635383134.roa (hash: 0A7i94jTbUoP2cfm7TdMPv+bVBJxVqMSEHN1Kg3Ojx4=)
                          4: 323830333a333832303a3a2f33322d3332203d3e20323635383134.roa (hash: JzvgMJvQy8H80UwSvphA3clT68+3AsxpsiwjJ+J10lo=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:49:13:05:6f:47:98:70:87:fb:ad:e6:1c:83:dd:34:6e:be:d2:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C
        Validity
            Not Before: Apr 28 09:42:17 2025 GMT
            Not After : May  2 23:11:17 2025 GMT
        Subject: CN=1A321B3658B82A33AC3417A4ED116652B2D73D03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:08:b0:da:74:72:98:a3:27:6e:d7:96:4a:d4:
                    ff:07:59:4e:ba:68:02:e7:46:03:1c:d5:e4:54:d5:
                    b8:1f:b2:c2:11:4f:7a:41:d5:43:45:33:53:d8:5b:
                    66:cb:8d:9d:18:e1:92:a5:7d:3e:fb:64:89:81:f5:
                    77:6b:4a:5d:6d:3a:1a:80:31:7c:2a:85:cf:c9:5a:
                    a7:c7:73:05:4d:db:2d:c5:db:fe:a7:bc:6c:7d:e9:
                    e2:50:9f:27:8b:7f:17:c1:70:8a:0f:0b:3c:02:e6:
                    8b:6c:a8:36:d5:50:40:86:47:63:7a:45:86:ee:ad:
                    0d:01:17:ea:a7:9c:57:fb:fc:fb:6e:6f:8d:0c:5d:
                    7d:5e:70:30:70:c3:59:a9:ca:8c:27:e6:64:f2:ed:
                    3e:3f:8f:e1:82:96:c6:7f:4f:fe:9e:bc:45:3b:fe:
                    55:74:4f:de:13:13:c6:30:ba:9e:f3:78:70:3c:f8:
                    96:46:2a:60:a8:3b:28:b9:dd:dd:1a:f0:a0:fe:86:
                    49:17:8f:59:6d:bf:27:02:f8:34:e0:61:17:fb:28:
                    15:f7:a7:ae:bc:d9:90:a5:b7:2d:0a:fe:d2:71:90:
                    ce:34:14:f0:7c:fa:fe:a3:13:88:56:1c:13:11:7a:
                    bf:94:4d:88:f3:0a:f9:94:4d:32:85:b7:d9:3f:c4:
                    19:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:32:1B:36:58:B8:2A:33:AC:34:17:A4:ED:11:66:52:B2:D7:3D:03
            X509v3 Authority Key Identifier:
                keyid:D9:D3:E0:DB:C4:C3:EB:0E:E7:CA:56:4F:0F:91:A0:38:A1:D5:87:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:5a:f4:6f:59:d9:38:13:79:b4:1e:a5:c2:87:63:bf:93:34:
         0d:b5:08:db:06:48:bf:d2:51:fd:8e:01:90:19:44:84:0c:38:
         e5:af:53:25:14:b7:cf:f3:fb:51:ea:cd:e9:c1:bc:49:dd:16:
         87:a2:8f:60:a4:71:75:a1:04:97:10:70:bf:0e:e7:49:e4:0f:
         fa:6b:a3:1d:30:32:aa:f9:a5:d9:73:df:ca:3a:d9:77:70:44:
         5c:76:9c:fb:a7:6b:0e:46:a1:8c:c5:eb:c6:36:8e:ad:da:2c:
         8c:ef:a9:5d:16:42:bb:87:a8:7c:31:47:92:78:1b:7e:be:11:
         ae:d4:c4:82:2d:83:8e:eb:e0:76:eb:39:d5:b0:29:4f:56:6d:
         45:66:99:45:f8:89:ac:fe:f2:2a:4f:13:04:81:f2:24:c3:96:
         3d:be:7a:43:67:e8:5e:04:7c:80:00:ad:18:96:8e:85:c4:ee:
         65:5d:fc:8d:fe:e8:62:b2:85:4c:b0:db:c1:a8:55:0e:cf:9d:
         91:5a:fe:5c:ff:2e:be:90:16:73:f2:9b:b7:82:84:36:f8:39:
         af:7a:fd:96:bc:3c:ee:2d:8a:90:66:0b:ba:f9:fb:6b:ec:bf:
         7e:22:20:bc:07:aa:60:36:46:2e:f5:89:f7:a8:aa:93:a3:03:
         45:7e:f8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:50 2025 by rpki-client on console.sobornost.net