Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.mft
File:                     BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.mft (raw, json)
Hash identifier:          M7XbKBUJcqQ/9MYmLa/btvYbROomM66vsTzGfvqpXIU=
Subject key identifier:   2B:DC:28:3C:A6:E2:E9:79:61:07:2B:59:B7:7A:AC:7D:CE:2F:1F:D0
Authority key identifier: BC:07:B2:C8:A7:1C:2F:6B:0C:14:5B:CB:AC:B7:57:8D:B7:BC:03:79
Certificate issuer:       /CN=BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379
Certificate serial:       2883C95C2FE7215826E5EAB10E23A1726DB771F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.mft
Manifest number:          D4
Signing time:             Mon 28 Apr 2025 12:59:08 +0000
Manifest this update:     Mon 28 Apr 2025 12:54:08 +0000
Manifest next update:     Sun 04 May 2025 06:55:08 +0000
Files and hashes:         1: 3137372e33372e33392e302f32342d3234203d3e20323731393835.roa (hash: gvu7gGeSc3GV7yqI5u/OhQLtOgTuLCTVvmS6s5rnv9M=)
                          2: 3137372e33372e33372e302f32342d3234203d3e20323731393835.roa (hash: /6ZL92s4jykMHEoVUqygtQ1mf6C0Wa6TryzJlEL9mu4=)
                          3: 3137372e33372e33382e302f32342d3234203d3e20323731393835.roa (hash: CtH701BydxqyKo/98bVbQaFNFTRRwNleGS6PvIhAiow=)
                          4: 3137372e33372e33362e302f32342d3234203d3e20323731393835.roa (hash: QoVr7mAOy2IvMJrFhyvGth/D9uvOOJvkliDpZxftRUc=)
                          5: BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.crl (hash: c0W7zlv5NBPkzRyhu/bTxOWOJsGOLEjaVT02+mQlI+A=)
                          6: 3137372e33372e33362e302f32322d3232203d3e20323731393835.roa (hash: q2ghVpfod+hBb9oNN1BauYSc4iJpzXAZlEw5b2V18qo=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.crl
                          rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:83:c9:5c:2f:e7:21:58:26:e5:ea:b1:0e:23:a1:72:6d:b7:71:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379
        Validity
            Not Before: Apr 28 12:54:08 2025 GMT
            Not After : May  4 06:55:08 2025 GMT
        Subject: CN=2BDC283CA6E2E97961072B59B77AAC7DCE2F1FD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dc:07:02:14:ea:c3:2d:8d:9b:f3:3e:a1:e5:
                    ac:83:8d:39:20:c6:22:8a:11:b6:63:a6:9d:f7:34:
                    1c:58:6e:a8:c2:5d:46:b9:0c:10:ed:c1:66:c2:47:
                    ae:3b:ce:59:71:6e:f8:26:62:63:d7:83:6a:99:99:
                    be:c8:78:d7:b9:99:6a:33:99:88:e4:ca:04:7d:94:
                    23:4d:1a:e6:86:63:c1:06:95:a7:34:0f:93:9e:09:
                    6e:43:5d:25:73:95:c9:61:7a:10:17:7b:c8:0a:66:
                    28:17:cd:f3:a7:29:b4:bc:20:27:a4:68:08:f1:aa:
                    b7:42:a2:fb:43:a0:f3:87:ab:5a:27:7f:cd:86:98:
                    68:4c:45:5d:8c:53:67:f0:3c:9f:b5:3f:d4:bf:03:
                    23:08:71:ea:12:15:dc:77:e3:60:9c:aa:19:70:c7:
                    57:d2:db:e8:b8:d8:00:e1:6e:74:d1:68:b7:a1:ff:
                    de:62:e5:dd:88:c8:23:d6:af:e8:cf:9b:61:6d:92:
                    3f:0a:0f:d5:14:39:a9:39:06:46:2a:e0:05:53:f5:
                    83:c5:b2:89:9c:11:79:8d:15:5a:aa:eb:be:96:c5:
                    b0:ad:d7:68:b4:8e:42:dc:2e:25:31:c1:35:33:2b:
                    a7:af:40:51:ce:82:b8:e0:8c:c4:e9:d8:7e:b8:23:
                    89:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DC:28:3C:A6:E2:E9:79:61:07:2B:59:B7:7A:AC:7D:CE:2F:1F:D0
            X509v3 Authority Key Identifier:
                keyid:BC:07:B2:C8:A7:1C:2F:6B:0C:14:5B:CB:AC:B7:57:8D:B7:BC:03:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:fe:83:f4:6d:25:01:6e:79:ee:18:d8:18:19:fd:51:89:04:
         13:1f:a3:c2:ff:4f:31:67:cd:ce:cc:92:e0:ae:0a:28:94:15:
         ff:50:58:ea:4e:d9:65:2e:e9:b4:7a:f9:e9:6d:a4:8a:e3:89:
         a2:60:af:aa:ba:7d:21:bc:0c:9d:be:ba:1c:62:47:98:7f:b6:
         24:a2:7f:4e:83:24:e7:10:2e:43:42:50:c5:3e:6f:b4:ec:fe:
         5c:fa:4d:44:a7:bb:92:d9:bd:bc:d7:95:34:1c:91:68:45:cd:
         34:64:42:f2:73:e9:97:3a:62:72:c7:cf:aa:31:e4:01:ca:ff:
         7b:4a:45:3d:a3:6b:e7:65:e5:4d:ca:00:a1:18:2b:af:5e:9a:
         fb:b6:b0:fb:2a:84:37:53:1b:92:84:64:fe:e6:2d:7d:64:e0:
         83:70:f3:8a:33:62:ef:a3:c6:d5:15:05:16:19:d7:32:9c:de:
         62:b9:18:ca:10:f6:c8:d9:b8:6b:06:62:c0:ea:cc:62:af:28:
         2e:e3:56:d6:9e:2b:d8:3f:1e:9f:de:9c:05:b8:4d:c1:69:7a:
         f0:42:18:73:33:14:61:c7:d0:37:cc:6f:ab:ad:1d:08:fe:9c:
         d0:81:28:c6:c1:d9:e9:96:2f:70:8c:43:83:db:d7:d9:d8:32:
         37:f9:5a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:55 2025 by rpki-client on console.sobornost.net