Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/692A101380E9B33FEA9235250342038D944AA0461C7CE2A8C570D0ACB095052E/0/D1B1A6D534F8C49C32B76E3C60C8174212B150E0.mft
File:                     D1B1A6D534F8C49C32B76E3C60C8174212B150E0.mft (raw, json)
Hash identifier:          R2ICb4YPvLeo2Zp8uPF1f1/bxc6AxEdPnwq/H/1Y/p4=
Subject key identifier:   45:C5:1C:2E:B2:0B:6E:CF:D1:4F:FD:D7:95:3C:6C:C0:8F:8A:EC:7B
Authority key identifier: D1:B1:A6:D5:34:F8:C4:9C:32:B7:6E:3C:60:C8:17:42:12:B1:50:E0
Certificate issuer:       /CN=D1B1A6D534F8C49C32B76E3C60C8174212B150E0
Certificate serial:       5891D862568BD03B8C4927C64E25BEE0C3214568
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1B1A6D534F8C49C32B76E3C60C8174212B150E0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/692A101380E9B33FEA9235250342038D944AA0461C7CE2A8C570D0ACB095052E/0/D1B1A6D534F8C49C32B76E3C60C8174212B150E0.mft
Manifest number:          D3
Signing time:             Mon 28 Apr 2025 07:36:01 +0000
Manifest this update:     Mon 28 Apr 2025 07:31:01 +0000
Manifest next update:     Sun 04 May 2025 01:33:01 +0000
Files and hashes:         1: 34352e3138322e32382e302f32322d3234203d3e20323635383136.roa (hash: w7gAEINAXEWRri5vQ5qFmAHvFqv4WVVMhCOVltD7ttk=)
                          2: D1B1A6D534F8C49C32B76E3C60C8174212B150E0.crl (hash: ZVpzkNZVDQMJ7KGrdSlRAjYODV78HVXOLQmfZ7fB6yw=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/692A101380E9B33FEA9235250342038D944AA0461C7CE2A8C570D0ACB095052E/0/D1B1A6D534F8C49C32B76E3C60C8174212B150E0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/692A101380E9B33FEA9235250342038D944AA0461C7CE2A8C570D0ACB095052E/0/D1B1A6D534F8C49C32B76E3C60C8174212B150E0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1B1A6D534F8C49C32B76E3C60C8174212B150E0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:91:d8:62:56:8b:d0:3b:8c:49:27:c6:4e:25:be:e0:c3:21:45:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B1A6D534F8C49C32B76E3C60C8174212B150E0
        Validity
            Not Before: Apr 28 07:31:01 2025 GMT
            Not After : May  4 01:33:01 2025 GMT
        Subject: CN=45C51C2EB20B6ECFD14FFDD7953C6CC08F8AEC7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0a:0f:da:6e:07:5d:58:cb:65:1e:7d:35:f9:
                    16:c4:18:bb:5e:66:c5:9e:2d:bd:66:75:fa:18:cc:
                    ab:35:28:13:e4:ed:03:fd:16:5e:5e:ff:97:7c:41:
                    63:92:31:f3:c3:87:25:df:38:bd:ab:9e:21:54:01:
                    63:73:83:99:ec:d1:85:22:18:ef:f0:e4:96:2c:1b:
                    36:ef:00:2d:74:13:60:37:c2:f9:31:9e:d0:83:cf:
                    7b:7e:5f:f8:bc:fc:cf:70:fa:e3:6b:2d:d3:5a:28:
                    3e:c4:2c:22:54:bd:b0:58:7d:cc:e6:f1:06:45:23:
                    60:c2:0a:24:52:06:7e:1f:82:55:aa:73:74:4b:08:
                    5d:19:2a:03:e9:e5:c9:7e:c4:81:e8:ad:2d:23:07:
                    f0:05:be:0b:99:6f:10:b1:3c:d7:48:4f:8c:a7:3d:
                    49:07:b0:36:f6:aa:a1:68:ea:a4:94:a0:ee:dc:86:
                    c7:27:73:63:46:62:71:4c:bb:ba:e4:0b:d1:9a:50:
                    88:bb:3d:7a:96:f6:ca:16:3f:9a:26:ba:d1:29:75:
                    36:db:c0:31:d3:7c:be:95:a1:c3:51:ea:07:1b:fb:
                    d6:80:32:c9:27:d1:91:37:ea:fd:75:3a:b2:75:8f:
                    a7:15:7b:63:c3:dc:c9:9a:8e:4c:7e:ea:42:b9:c8:
                    9f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C5:1C:2E:B2:0B:6E:CF:D1:4F:FD:D7:95:3C:6C:C0:8F:8A:EC:7B
            X509v3 Authority Key Identifier:
                keyid:D1:B1:A6:D5:34:F8:C4:9C:32:B7:6E:3C:60:C8:17:42:12:B1:50:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/692A101380E9B33FEA9235250342038D944AA0461C7CE2A8C570D0ACB095052E/0/D1B1A6D534F8C49C32B76E3C60C8174212B150E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1B1A6D534F8C49C32B76E3C60C8174212B150E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/692A101380E9B33FEA9235250342038D944AA0461C7CE2A8C570D0ACB095052E/0/D1B1A6D534F8C49C32B76E3C60C8174212B150E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:65:b7:64:36:4e:dd:b8:14:4c:54:b9:14:46:8e:57:52:a0:
         49:00:a1:57:71:f8:b3:7e:90:32:54:61:61:6b:ae:c8:ff:3e:
         c2:e7:09:e9:84:3c:bf:0f:bf:0a:71:6d:c3:44:c2:d3:8c:92:
         96:8b:8f:7a:4d:db:46:55:f8:48:d5:65:7d:10:c7:6c:93:0b:
         5f:53:48:d2:ac:e8:a6:1f:49:ad:b2:27:e4:8a:b5:d3:ba:52:
         f7:b0:a5:37:c1:8e:c4:6f:60:54:9b:29:21:64:02:ed:d7:cb:
         ef:e8:1d:95:40:37:c3:e5:0f:2f:4c:4f:61:75:0b:97:2e:5c:
         99:99:5f:ea:cd:71:94:b0:14:69:b3:0d:17:ce:85:8b:06:ae:
         0e:5b:f5:8d:ec:45:e9:f3:9f:4f:ac:0b:5e:19:28:4b:69:a4:
         c6:2f:38:48:3a:e5:2b:a2:13:c6:22:35:c8:04:7f:27:65:09:
         20:fa:d3:5d:c4:af:3d:a2:56:3f:ef:ab:52:e2:a8:64:b7:2c:
         bd:74:d9:34:1b:00:70:a0:f6:75:f3:36:3f:1a:58:77:ef:1a:
         7e:45:61:8e:fc:f6:7f:bd:5a:b6:e2:76:88:dc:14:3b:5c:63:
         48:17:60:5c:5e:fd:c1:cd:3c:51:cc:9c:cf:39:0f:f9:1a:80:
         0d:f4:33:c2
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUWJHYYlaL0DuMSSfGTiW+4MMhRWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFCMUE2RDUzNEY4QzQ5QzMyQjc2RTNDNjBDODE3NDIx
MkIxNTBFMDAeFw0yNTA0MjgwNzMxMDFaFw0yNTA1MDQwMTMzMDFaMDMxMTAvBgNV
BAMTKDQ1QzUxQzJFQjIwQjZFQ0ZEMTRGRkRENzk1M0M2Q0MwOEY4QUVDN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYCg/abgddWMtlHn01+RbEGLte
ZsWeLb1mdfoYzKs1KBPk7QP9Fl5e/5d8QWOSMfPDhyXfOL2rniFUAWNzg5ns0YUi
GO/w5JYsGzbvAC10E2A3wvkxntCDz3t+X/i8/M9w+uNrLdNaKD7ELCJUvbBYfczm
8QZFI2DCCiRSBn4fglWqc3RLCF0ZKgPp5cl+xIHorS0jB/AFvguZbxCxPNdIT4yn
PUkHsDb2qqFo6qSUoO7chscnc2NGYnFMu7rkC9GaUIi7PXqW9soWP5omutEpdTbb
wDHTfL6VocNR6gcb+9aAMskn0ZE36v11OrJ1j6cVe2PD3Mmajkx+6kK5yJ/5AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQURcUcLrILbs/RT/3XlTxswI+K7HswHwYDVR0j
BBgwFoAU0bGm1TT4xJwyt248YMgXQhKxUOAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82OTJBMTAxMzgwRTlCMzNGRUE5MjM1MjUwMzQyMDM4RDk0
NEFBMDQ2MUM3Q0UyQThDNTcwRDBBQ0IwOTUwNTJFLzAvRDFCMUE2RDUzNEY4QzQ5
QzMyQjc2RTNDNjBDODE3NDIxMkIxNTBFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMUIxQTZENTM0RjhDNDlDMzJC
NzZFM0M2MEM4MTc0MjEyQjE1MEUwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjkyQTEwMTM4MEU5QjMzRkVBOTIzNTI1MDM0MjAzOEQ5NDRBQTA0NjFD
N0NFMkE4QzU3MEQwQUNCMDk1MDUyRS8wL0QxQjFBNkQ1MzRGOEM0OUMzMkI3NkUz
QzYwQzgxNzQyMTJCMTUwRTAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA4ZbdkNk7duBRMVLkURo5XUqBJ
AKFXcfizfpAyVGFha67I/z7C5wnphDy/D78KcW3DRMLTjJKWi496TdtGVfhI1WV9
EMdskwtfU0jSrOimH0mtsifkirXTulL3sKU3wY7Eb2BUmykhZALt18vv6B2VQDfD
5Q8vTE9hdQuXLlyZmV/qzXGUsBRpsw0XzoWLBq4OW/WN7EXp859PrAteGShLaaTG
LzhIOuUrohPGIjXIBH8nZQkg+tNdxK89olY/76tS4qhktyy9dNk0GwBwoPZ18zY/
Glh37xp+RWGO/PZ/vVq24naI3BQ7XGNIF2BcXv3BzTxRzJzPOQ/5GoAN9DPC
-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:13 2025 by rpki-client on console.sobornost.net