Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/72D8F6687C54A870ACE71A32E06DA4C25D3ECA2212104A275238420D3E9A4B1F/0/4F756488F3CE4E25A1F0A875271CD9C70EACCA4C.mft
File:                     4F756488F3CE4E25A1F0A875271CD9C70EACCA4C.mft (raw, json)
Hash identifier:          EPXgWxpx0J1Xwqfo1+Bp3SFZmU8D/lhVsjnx+E4HFwY=
Subject key identifier:   FE:F5:A3:B6:B7:D9:D8:31:CC:6C:9E:22:47:48:A6:3E:02:60:BB:76
Authority key identifier: 4F:75:64:88:F3:CE:4E:25:A1:F0:A8:75:27:1C:D9:C7:0E:AC:CA:4C
Certificate issuer:       /CN=4F756488F3CE4E25A1F0A875271CD9C70EACCA4C
Certificate serial:       40E6853AC5978107D3A46482D76ECE6A8B9CA4C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F756488F3CE4E25A1F0A875271CD9C70EACCA4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/72D8F6687C54A870ACE71A32E06DA4C25D3ECA2212104A275238420D3E9A4B1F/0/4F756488F3CE4E25A1F0A875271CD9C70EACCA4C.mft
Manifest number:          2B
Signing time:             Sat 26 Apr 2025 07:03:45 +0000
Manifest this update:     Sat 26 Apr 2025 06:58:45 +0000
Manifest next update:     Fri 02 May 2025 01:51:45 +0000
Files and hashes:         1: 323830333a336639303a3a2f33322d3438203d3e20323733303836.roa (hash: SxlzzQTzkzMgEXLH/jQuCuNAQV4gDt38QXO5IBhK3to=)
                          2: 4F756488F3CE4E25A1F0A875271CD9C70EACCA4C.crl (hash: WO1W8kwLmQz6iNxFc63qMZEqT7LByI6t/Yy7qQzaQqY=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/72D8F6687C54A870ACE71A32E06DA4C25D3ECA2212104A275238420D3E9A4B1F/0/4F756488F3CE4E25A1F0A875271CD9C70EACCA4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/72D8F6687C54A870ACE71A32E06DA4C25D3ECA2212104A275238420D3E9A4B1F/0/4F756488F3CE4E25A1F0A875271CD9C70EACCA4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F756488F3CE4E25A1F0A875271CD9C70EACCA4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e6:85:3a:c5:97:81:07:d3:a4:64:82:d7:6e:ce:6a:8b:9c:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F756488F3CE4E25A1F0A875271CD9C70EACCA4C
        Validity
            Not Before: Apr 26 06:58:45 2025 GMT
            Not After : May  2 01:51:45 2025 GMT
        Subject: CN=FEF5A3B6B7D9D831CC6C9E224748A63E0260BB76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d2:ab:65:b0:04:80:51:f8:09:d9:f9:fb:07:
                    35:8e:ce:7d:84:f3:f6:92:cf:8b:9a:da:78:75:00:
                    2b:5c:96:55:c9:1f:8c:72:08:d0:97:84:cd:44:6b:
                    62:34:aa:6e:8d:da:de:e9:f2:5f:b3:d2:34:a4:25:
                    4d:09:3d:7a:ac:7d:80:20:03:06:18:be:fa:e7:88:
                    cd:ff:e4:e1:a7:42:d8:51:00:0a:8c:b6:c4:52:c0:
                    4c:81:6b:01:e7:2d:e4:ff:23:77:b5:ab:d3:ca:34:
                    eb:0d:54:79:bb:32:a3:83:76:20:fd:e9:02:1a:60:
                    6b:52:9e:ed:11:35:5a:ac:65:90:83:87:b6:f7:e4:
                    af:db:77:a2:5a:ab:59:6c:82:9f:d1:0a:eb:c2:a3:
                    fb:9a:40:b5:aa:4f:86:b7:b3:29:ba:c0:01:c7:1a:
                    5d:2c:34:4b:ab:55:f0:1a:9c:05:8a:57:65:88:26:
                    92:0f:53:d9:54:87:dd:81:7b:86:12:22:d5:a6:0d:
                    f4:57:05:d8:0d:3b:f8:43:61:60:cc:42:45:63:a4:
                    c2:61:cc:c1:3f:06:47:62:f7:82:36:02:ee:b1:0f:
                    9b:6f:ee:b4:ca:5a:ad:49:fb:c1:6c:fd:1c:ba:c8:
                    75:74:1a:34:db:bf:9d:9d:3e:7a:0a:8c:74:2b:1a:
                    c3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F5:A3:B6:B7:D9:D8:31:CC:6C:9E:22:47:48:A6:3E:02:60:BB:76
            X509v3 Authority Key Identifier:
                keyid:4F:75:64:88:F3:CE:4E:25:A1:F0:A8:75:27:1C:D9:C7:0E:AC:CA:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/72D8F6687C54A870ACE71A32E06DA4C25D3ECA2212104A275238420D3E9A4B1F/0/4F756488F3CE4E25A1F0A875271CD9C70EACCA4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F756488F3CE4E25A1F0A875271CD9C70EACCA4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/72D8F6687C54A870ACE71A32E06DA4C25D3ECA2212104A275238420D3E9A4B1F/0/4F756488F3CE4E25A1F0A875271CD9C70EACCA4C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:65:9d:64:73:3e:3f:03:32:c2:9f:ee:f3:8b:fe:6e:ef:39:
         9d:96:81:b4:d4:3a:c3:9f:84:c8:a5:70:dd:f3:41:ce:6f:1d:
         1c:7f:e7:f8:d4:22:b1:fe:c6:db:b5:ee:24:09:f4:b5:e9:f5:
         7e:b0:6b:b7:01:26:33:1e:18:63:67:bd:0b:81:f3:ef:6b:d1:
         0a:0e:be:6b:76:43:65:a6:36:67:7e:38:46:6f:a5:51:f8:80:
         b1:96:21:e3:74:cd:f6:d7:37:21:94:ee:c2:a8:04:c9:e6:c8:
         2e:83:7c:06:02:b7:75:ac:42:95:a6:3c:34:0d:58:6c:09:60:
         24:87:37:2e:ac:c8:af:75:a3:66:94:55:dd:9b:c1:0f:99:a1:
         54:71:80:82:5c:04:7b:13:fd:a6:68:64:ae:f0:44:58:0f:58:
         60:f9:b8:4c:16:e4:2b:3a:04:64:ee:da:c7:5b:19:fd:37:16:
         0b:d7:e2:9f:70:49:d3:ca:54:02:42:cc:1a:af:5b:73:d4:6c:
         5e:74:31:63:40:8a:2b:80:87:41:20:af:aa:d8:24:ca:15:32:
         a7:11:ce:2d:bb:9c:46:1d:4f:41:fb:20:ae:35:df:8c:0b:36:
         54:b6:96:3f:c2:6f:82:7e:e1:a8:c1:6b:b6:af:c2:99:42:45:
         1c:8e:c0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:16:32 2025 by rpki-client on console.sobornost.net