Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.mft
File:                     D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.mft (raw, json)
Hash identifier:          D8cAjVI2PV/uR1Ynl/SIzJLmFNT9P0AjpFFT+Ukrz7U=
Subject key identifier:   CF:B1:ED:4D:2E:9E:34:56:7F:2A:E9:05:B5:38:AD:DA:43:76:BD:DF
Authority key identifier: D0:53:F7:D4:2F:C9:FD:03:55:6A:9F:3D:2A:F9:E3:D2:22:1B:AD:FC
Certificate issuer:       /CN=D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC
Certificate serial:       68A61905E1582E26B1303503B634F09AC634C97E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.mft
Manifest number:          D8
Signing time:             Mon 28 Apr 2025 11:58:36 +0000
Manifest this update:     Mon 28 Apr 2025 11:53:36 +0000
Manifest next update:     Sun 04 May 2025 03:01:36 +0000
Files and hashes:         1: 3230302e31322e3133362e302f32332d3234203d3e203237383735.roa (hash: s6GCGiJyDSb86VrCH0fhS5UzF5ChJSRL0GozSa2u4kg=)
                          2: 3137392e302e3133322e302f32322d3234203d3e203237383735.roa (hash: 4jZ0FR3rO/p13F+DfAYz/BEVfvxqu7oDfa0XkUrLln8=)
                          3: D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.crl (hash: g/7j1twXqTMz9b2IUSBSa1YhRo6Es4DyMwD9BFgKf9w=)
                          4: 323830313a3165303a3a2f34322d3432203d3e203237383735.roa (hash: zVKIqxz1V6s8EKDHNNpTEq1tDKO41NP8UCQwzdnUwS8=)
                          5: 323830313a3165303a3a2f34352d3435203d3e203237383735.roa (hash: 90WvzbqTB787+x+pOUVuQP1sgpCgksajfC0CsIqoEcg=)
                          6: 323830313a3165303a3a2f34332d3433203d3e203237383735.roa (hash: 6vRhkYD/zV5Z7Aqhq6zyShBWS23fGFPHD3Fn7vV7TKQ=)
                          7: 3230302e31322e3133332e302f32342d3234203d3e203237383735.roa (hash: Vve7JdEj4CeroSJlW1E/TvC0hwblAof0+on19tiLKIg=)
                          8: 3230302e392e3134372e302f32342d3234203d3e203237383735.roa (hash: nvxUNYhQVdGJA1FBbX15dxVlZ2TpaQTeFe67bY7Ivss=)
                          9: 3230302e31322e3133342e302f32332d3234203d3e203237383735.roa (hash: HOuDJ+H6QEo/PrcopTt7dSt6rHAOKi16hUEaQl46VPc=)
                          10: 3230302e31322e3133382e302f32342d3234203d3e203237383735.roa (hash: PLQZVxODAI0ZWxpBJD8MF5n5CLcKZCP5kLr1fVwORyA=)
                          11: 323830313a3165303a3a2f34382d3438203d3e203237383735.roa (hash: Sm0nr+ZEW5L5/flacotivDu6MHC97CrwNGB1jcnp/lE=)
                          12: 323830313a3165303a3a2f34362d3436203d3e203237383735.roa (hash: Wq3CvoagsYdCStsPo0je0MKz+6a48RVFigmID6mX+AU=)
                          13: 323830313a3165303a3a2f34342d3434203d3e203237383735.roa (hash: OtRf4XZPCrevmfxhs1gA8cuwRg8o9PgpID0Gl07sH40=)
                          14: 323830313a3165303a3a2f34312d3438203d3e203237383735.roa (hash: QQrR+gtG+4RiXhrZ/k8a8Ja36SspCAqQCGj4x73J0Sk=)
                          15: 323830313a3165303a3a2f34372d3437203d3e203237383735.roa (hash: BMuD1DT5Fd/m1U0pFhd6s8F9zzExTXbpgeDxEp3Jqes=)
                          16: 3137392e302e3133362e302f32312d3234203d3e203237383735.roa (hash: rdN2uJSb3prDwXP2hR1U/Q1yEXu8EC7YE7sjiL7rOvQ=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a6:19:05:e1:58:2e:26:b1:30:35:03:b6:34:f0:9a:c6:34:c9:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC
        Validity
            Not Before: Apr 28 11:53:36 2025 GMT
            Not After : May  4 03:01:36 2025 GMT
        Subject: CN=CFB1ED4D2E9E34567F2AE905B538ADDA4376BDDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f4:c2:86:29:1f:ac:e0:47:f3:ef:61:56:48:
                    b4:62:d4:c8:bf:8d:8b:aa:c8:cb:d2:92:41:80:77:
                    57:14:2b:ed:41:9f:05:81:b4:b9:4f:b6:5c:33:fa:
                    da:d7:82:5d:50:c2:db:d3:05:20:e6:0d:06:73:28:
                    f1:ec:4f:fd:5c:b6:72:a3:8c:42:6c:e1:23:81:6e:
                    99:f8:f9:0a:e5:f5:ef:c0:07:b0:9b:7d:de:83:f2:
                    31:f0:f6:c2:33:c7:50:f7:c7:73:3b:82:6a:7f:24:
                    30:b7:c7:e6:2e:2e:93:90:0b:d3:90:8e:f1:8e:61:
                    c9:1f:f1:fb:08:90:74:96:1f:bb:66:17:68:99:a2:
                    93:db:7e:45:eb:5c:e8:9c:d0:e0:27:e5:4a:6a:13:
                    d8:88:fa:2f:f8:fd:34:49:18:73:50:51:92:78:e2:
                    fc:5d:85:1e:14:e3:33:1a:02:56:e7:8b:99:2a:00:
                    eb:91:75:2f:1d:f3:c4:7a:17:ed:5b:a5:0e:47:39:
                    e4:8e:0d:1c:8e:a8:64:24:e9:76:ca:32:64:12:cc:
                    88:24:bf:f5:62:50:89:5b:89:46:53:d7:6f:3b:94:
                    e1:d4:37:ca:96:8e:54:4c:ec:68:af:a1:d2:6b:68:
                    06:69:49:1e:f3:c8:39:c8:bd:e1:2d:77:b0:f7:86:
                    dc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B1:ED:4D:2E:9E:34:56:7F:2A:E9:05:B5:38:AD:DA:43:76:BD:DF
            X509v3 Authority Key Identifier:
                keyid:D0:53:F7:D4:2F:C9:FD:03:55:6A:9F:3D:2A:F9:E3:D2:22:1B:AD:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:8c:cb:b4:3c:82:bf:2e:6a:c4:2e:d8:cb:de:11:4f:11:b2:
         9b:5c:05:af:2d:9f:e1:9a:84:13:38:1d:f7:51:54:15:61:fd:
         e9:79:72:7d:64:27:f0:fc:53:0b:61:1f:b6:02:14:e1:59:fd:
         29:df:82:b5:2e:b8:a4:e6:d3:91:0b:38:c4:aa:d0:6e:e8:28:
         09:6c:17:f2:00:1e:d2:a1:da:2e:26:38:d2:a4:60:12:bb:73:
         da:0c:30:52:35:69:bf:73:03:71:78:d6:a5:e3:97:fd:bd:a0:
         3b:57:aa:c0:c6:05:12:07:a1:6d:38:2f:57:02:22:59:53:4b:
         0d:af:2c:bc:ea:b4:ac:7f:3c:f3:36:9e:5e:d7:42:63:13:e4:
         92:e0:d6:f9:dd:4b:4b:be:f0:5a:3a:64:a3:0e:6c:34:8c:80:
         8c:83:23:c7:1e:fa:18:af:7b:d0:bc:95:53:48:f6:f2:b5:eb:
         d4:8d:ce:8a:3a:4a:54:29:93:cf:4b:05:61:63:54:cf:14:5a:
         79:56:13:90:23:ce:4c:84:16:e4:43:55:73:f3:97:65:96:b7:
         84:ec:f3:47:5d:c7:1d:7f:77:c0:f5:c3:05:49:eb:af:46:24:
         bc:41:fc:d3:96:5e:03:a6:a4:81:d2:66:68:54:fe:0b:45:2f:
         c3:d5:9a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:56 2025 by rpki-client on console.sobornost.net