Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
File:                     AA2338B66632D823F77072125112B5BF1F721769.mft (raw, json)
Hash identifier:          9b2mzzH3+nphoVz6KrC8kkcOwzVRqLBH7MtpmyccHNU=
Subject key identifier:   78:64:E4:52:91:70:BB:EE:C5:38:88:49:9A:17:9D:08:18:01:A8:33
Authority key identifier: AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
Certificate issuer:       /CN=AA2338B66632D823F77072125112B5BF1F721769
Certificate serial:       57BFB156BBC6903EB5F046A39F1A890DB506B197
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
Manifest number:          D2
Signing time:             Mon 28 Apr 2025 07:35:58 +0000
Manifest this update:     Mon 28 Apr 2025 07:30:58 +0000
Manifest next update:     Sat 03 May 2025 22:25:58 +0000
Files and hashes:         1: 34352e3233372e3232302e302f32342d3234203d3e20323636383139.roa (hash: S7FRt48mlJQdhRUBKeeOjWo5otOru6pXI07NZVe+lsM=)
                          2: 34352e3233372e3232322e302f32342d3234203d3e20323636383139.roa (hash: eoL7Y795RnrMWZUw7U8PkLtY0w5+OUPQ52ffjZRRUqE=)
                          3: 34352e3233372e3232302e302f32332d3233203d3e20323636383139.roa (hash: nOCJFysz8C8bWJVMRkvOCViuUCqzB1SjNWhFC7y70bc=)
                          4: 34352e3233372e3232302e302f32322d3232203d3e20323636383139.roa (hash: 5GwF/yG9sdY75vW2Fj///TOVFJ4fRdCrLcvD0MbMXqY=)
                          5: 34352e3233372e3232332e302f32342d3234203d3e20323636383139.roa (hash: H8ah+1UhN/eq5WKFT0vmFxrRSA6J3Cu5+ERJLv9mNDM=)
                          6: AA2338B66632D823F77072125112B5BF1F721769.crl (hash: Y+BN+dgUz/2RgI5WGH7lv3LnYJLoHIjmGryvfyiO9Bs=)
                          7: 34352e3233372e3232322e302f32332d3233203d3e20323636383139.roa (hash: PMUAqmCu4jLgGE4W1UfcbQhDKwanax0we0RQX2/iKas=)
                          8: 34352e3233372e3232312e302f32342d3234203d3e20323636383139.roa (hash: /elfOjbQfF2fPsMe6mNPua2FvaMW9MN/Vs+BX6OZ9K4=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl
                          rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:bf:b1:56:bb:c6:90:3e:b5:f0:46:a3:9f:1a:89:0d:b5:06:b1:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA2338B66632D823F77072125112B5BF1F721769
        Validity
            Not Before: Apr 28 07:30:58 2025 GMT
            Not After : May  3 22:25:58 2025 GMT
        Subject: CN=7864E4529170BBEEC53888499A179D081801A833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:00:0f:47:40:49:13:f5:13:c5:da:7b:05:53:
                    ad:af:b5:50:07:a5:f4:c5:43:0a:e0:af:ba:e3:ed:
                    65:4b:8c:2c:e7:b4:08:42:19:22:44:8a:c3:94:f8:
                    f0:b6:86:b0:4c:aa:59:da:b5:fe:12:5c:f4:56:b5:
                    e7:21:1a:65:e6:8d:2b:13:82:6b:42:eb:8f:60:5d:
                    76:a1:ee:6c:68:17:3f:9b:40:2f:5e:86:7a:fe:25:
                    18:48:a5:f1:6a:81:e8:de:46:77:e1:75:b5:98:60:
                    70:2f:90:25:49:b1:2f:19:05:56:94:49:d9:1c:51:
                    e6:7f:b2:38:97:54:0c:0c:12:c1:70:f2:0e:3c:4e:
                    d0:3b:75:96:48:29:ab:5a:2d:85:ab:09:c0:0c:c1:
                    61:2a:2d:be:f3:29:aa:86:f4:cc:97:9e:f4:49:65:
                    86:9d:21:44:74:2d:4b:bc:6a:8e:f9:7e:f2:50:a3:
                    9d:ca:ac:40:a2:75:f5:a1:8d:aa:b9:3d:05:f8:fe:
                    f5:89:6d:9d:b0:97:4c:63:d3:14:ed:d3:da:66:29:
                    1b:70:ad:b9:6a:85:27:06:1d:f0:f6:9c:bd:62:1e:
                    a1:d4:34:7e:ab:d0:1c:81:97:c9:0e:b5:7a:6e:0c:
                    25:68:7e:7c:03:58:ea:db:4b:89:9d:b5:d0:f1:c7:
                    4b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:64:E4:52:91:70:BB:EE:C5:38:88:49:9A:17:9D:08:18:01:A8:33
            X509v3 Authority Key Identifier:
                keyid:AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ef:c9:a6:fa:ed:9d:23:37:a5:39:56:6a:3c:e7:36:03:93:
         c7:28:72:05:9b:8e:c9:2b:da:97:54:d4:a3:e0:dc:24:27:4b:
         d7:39:f8:63:76:ca:31:58:b8:6f:e5:1f:82:61:e0:a0:3c:9e:
         04:86:aa:96:84:4a:dd:04:7a:7a:0d:40:ae:f3:13:ad:67:15:
         28:df:a5:a3:c9:86:0c:b1:32:51:de:a5:c4:33:bc:22:5f:d4:
         a1:56:7d:b8:2a:da:1d:e8:a4:12:74:94:1e:b3:cd:fd:1c:76:
         43:98:14:9d:bf:94:35:05:7d:98:45:ac:c1:f1:94:b4:44:d6:
         de:6c:b2:45:cc:6d:3c:7c:8c:50:1c:95:03:f6:6f:77:5f:00:
         bf:aa:a2:66:86:1e:26:85:3b:bd:fe:73:f0:17:77:33:da:b6:
         25:89:65:e7:c2:6f:0a:85:ca:c3:38:bd:68:4b:4d:d0:ad:ca:
         aa:19:35:6f:a9:00:b5:5c:99:03:a5:6e:2f:86:06:a7:48:a6:
         ba:2e:ac:62:3b:cd:b7:07:7b:5b:99:17:d1:45:9b:7c:72:d1:
         49:a3:cd:57:be:a1:97:1e:be:f9:42:14:1f:3d:47:90:e7:ba:
         28:9c:e8:56:45:92:78:b7:ff:f5:b5:47:b7:60:7a:1c:69:7d:
         be:a7:b5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:13 2025 by rpki-client on console.sobornost.net