Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.mft
File:                     3249F9F2D0369FF06E9B2651663EFA2423E42AFC.mft (raw, json)
Hash identifier:          5qdciklkN3y9+EeGgOGPPLBiXpwC/hY+yH6u5w0B4zM=
Subject key identifier:   68:C6:20:4E:3E:7A:07:24:0A:21:8A:40:CC:18:C5:05:6E:65:E7:BB
Authority key identifier: 32:49:F9:F2:D0:36:9F:F0:6E:9B:26:51:66:3E:FA:24:23:E4:2A:FC
Certificate issuer:       /CN=3249F9F2D0369FF06E9B2651663EFA2423E42AFC
Certificate serial:       4EDDC62ED1B0ACEE714B439B72F479C5606F040F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.mft
Manifest number:          D4
Signing time:             Mon 28 Apr 2025 07:20:48 +0000
Manifest this update:     Mon 28 Apr 2025 07:15:48 +0000
Manifest next update:     Sat 03 May 2025 05:33:48 +0000
Files and hashes:         1: 3139302e3130332e3139312e302f32342d3234203d3e203631343638.roa (hash: TwENXE9MINDzJxezpU6RLWqWFSi6cvkXDAa+XXkISdY=)
                          2: 3249F9F2D0369FF06E9B2651663EFA2423E42AFC.crl (hash: 4cqTpDsWBJDVpT4RGVNz0/elSjR25W2wdZp3F8o10c4=)
                          3: 3139302e3130332e3139312e302f32342d3234203d3e20323732313430.roa (hash: ZFz+ldthdpJDmo4FmWZ0CAydFmaLOh635KqcOcyn6Co=)
                          4: 323830313a31383a353830303a3a2f34382d3438203d3e20323732313430.roa (hash: RmKEwQbfcsWn5R2wHHVzndU8+69HzL8akYJDXU4u40Q=)
                          5: 323830313a31383a353830303a3a2f34382d3438203d3e203631343638.roa (hash: MqwMNFGJ7UgbOVEQWxbU5hVaghWE/1a37kKoRYuarpU=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:dd:c6:2e:d1:b0:ac:ee:71:4b:43:9b:72:f4:79:c5:60:6f:04:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3249F9F2D0369FF06E9B2651663EFA2423E42AFC
        Validity
            Not Before: Apr 28 07:15:48 2025 GMT
            Not After : May  3 05:33:48 2025 GMT
        Subject: CN=68C6204E3E7A07240A218A40CC18C5056E65E7BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:e9:4c:44:d7:07:37:e9:b7:6f:03:74:d4:3c:
                    49:87:b4:48:e2:73:ad:f5:38:19:20:93:9e:7f:41:
                    25:df:3f:a0:61:ab:a2:25:70:39:0d:04:17:a2:9d:
                    2f:ee:cc:d8:d7:8d:6e:a1:dd:92:c9:59:e1:c0:ac:
                    6f:fe:1f:3e:6c:ea:39:5d:b2:8e:5e:13:12:6e:0c:
                    5f:74:32:98:4b:49:7d:86:03:f3:78:f5:19:c1:e7:
                    3c:db:86:b1:50:f5:d2:1e:7b:ff:ec:b0:63:4e:11:
                    fd:1e:42:43:46:ab:96:ed:1a:1f:79:6a:05:36:a2:
                    8c:47:da:97:89:b8:fd:28:08:7e:58:cd:f6:c5:10:
                    c4:c6:36:18:e1:e4:5f:07:2d:86:df:08:6b:de:d0:
                    82:a9:08:bd:92:6d:07:a1:2f:f1:53:35:cc:46:c5:
                    a7:26:40:e5:0c:e0:2a:c3:bd:15:3e:2c:c4:0d:c6:
                    0a:35:54:7b:72:2e:7c:b6:bb:62:af:73:a4:7a:5b:
                    cf:a8:b7:49:52:84:2b:72:35:99:f4:46:af:ac:29:
                    9d:a5:51:5a:1b:49:51:c3:a2:f2:be:80:c8:85:92:
                    30:ae:d1:c2:7e:18:62:02:25:59:40:ca:b7:02:c3:
                    3e:a8:cb:4a:99:2a:38:54:a9:f1:6a:b3:80:a4:ed:
                    69:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C6:20:4E:3E:7A:07:24:0A:21:8A:40:CC:18:C5:05:6E:65:E7:BB
            X509v3 Authority Key Identifier:
                keyid:32:49:F9:F2:D0:36:9F:F0:6E:9B:26:51:66:3E:FA:24:23:E4:2A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:a9:0f:2a:56:aa:1c:bd:39:da:4b:c3:e1:6d:07:b4:0f:b8:
         bc:fa:f8:a7:05:39:1b:4d:9d:19:cc:c9:74:90:96:13:48:01:
         cf:46:ac:40:b5:c7:e3:71:4e:12:4d:d1:00:1c:9b:fd:ef:77:
         90:6f:62:18:cb:69:4d:c8:ef:13:8d:85:ff:26:24:0c:37:02:
         df:c5:fd:2a:48:ee:aa:80:f6:6c:91:71:f8:81:20:fd:28:5d:
         0d:96:e0:11:0a:9d:40:53:ce:88:54:9b:c6:b3:a7:e1:a5:7c:
         e4:0b:e9:c0:d4:1e:2c:9a:64:aa:4f:cb:78:3e:74:f1:7e:b6:
         bd:27:ba:61:fd:05:46:c5:8d:5c:ed:e8:11:af:b7:67:ef:fb:
         da:14:12:5b:74:1f:76:62:f0:49:67:58:3b:3c:85:39:c5:aa:
         32:57:c3:e2:35:d1:3e:3b:21:fd:6f:57:7b:a9:ad:08:8f:90:
         48:be:fc:3b:6e:e4:83:40:bf:53:95:10:3b:80:eb:27:d5:63:
         34:2e:bd:a3:55:04:57:80:a0:01:03:ff:6e:6e:e5:e7:83:b2:
         87:f0:f9:02:95:d9:e5:31:e2:b8:ae:63:ac:0c:df:93:0b:93:
         e4:62:e4:3f:f4:7c:34:6c:18:dd:da:88:58:e4:33:8f:0a:3f:
         3f:f6:2d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:13 2025 by rpki-client on console.sobornost.net