Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A25A58787EB92A021765B796FDF47BAE5C56190A4D0891C327897426FFF022D/0/08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4.mft
File:                     08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4.mft (raw, json)
Hash identifier:          RbzCzJnfordXcr3b0WwQ1a6QAyM/11TewqMOefPkiPQ=
Subject key identifier:   71:A8:0B:98:4A:BC:BE:F4:37:D5:F3:6C:8D:D2:AC:53:01:6C:5B:2E
Authority key identifier: 08:52:20:00:E6:80:B6:B5:BB:AE:CA:5C:D4:D9:E5:B0:AC:EA:5B:E4
Certificate issuer:       /CN=08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4
Certificate serial:       5FF82FD4B3FAAA9B2F4EB5F1FEE2F5EF679C2A0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A25A58787EB92A021765B796FDF47BAE5C56190A4D0891C327897426FFF022D/0/08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4.mft
Manifest number:          D1
Signing time:             Sun 27 Apr 2025 08:01:49 +0000
Manifest this update:     Sun 27 Apr 2025 07:56:49 +0000
Manifest next update:     Fri 02 May 2025 23:12:49 +0000
Files and hashes:         1: 323830313a31653a653830303a3a2f34382d3438203d3e20323632313836.roa (hash: TTZ+juVhyuIp62o3pIlrFsQzwqfhUwYx1D98nuYssnY=)
                          2: 08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4.crl (hash: vi94av0J7SwTsyL9egBBmWPYF22fmA6ONFhpTIAaqTo=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A25A58787EB92A021765B796FDF47BAE5C56190A4D0891C327897426FFF022D/0/08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A25A58787EB92A021765B796FDF47BAE5C56190A4D0891C327897426FFF022D/0/08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f8:2f:d4:b3:fa:aa:9b:2f:4e:b5:f1:fe:e2:f5:ef:67:9c:2a:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4
        Validity
            Not Before: Apr 27 07:56:49 2025 GMT
            Not After : May  2 23:12:49 2025 GMT
        Subject: CN=71A80B984ABCBEF437D5F36C8DD2AC53016C5B2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ef:d8:12:d4:e7:aa:ef:7a:6d:72:82:6b:5e:
                    a5:a4:4f:03:e0:66:96:13:c2:0e:b5:9c:46:e1:64:
                    d1:23:29:ce:55:66:0a:76:f4:a8:3a:e4:7a:51:97:
                    a8:37:40:35:39:b2:06:65:9a:0f:26:34:f0:a9:7d:
                    f9:7c:75:7a:34:23:96:ef:8d:5f:79:47:ea:52:fb:
                    ec:bd:4e:6e:d9:e0:ef:39:04:8d:72:08:45:a6:ba:
                    97:3e:2a:8e:2d:a4:38:38:e8:c3:1c:38:b0:b7:06:
                    31:8b:0c:d0:d5:26:57:26:7f:b5:24:91:26:78:63:
                    49:b2:2a:3a:e5:fe:4f:cb:58:26:31:6c:73:c4:7e:
                    93:cb:92:b7:3e:dd:a8:08:ae:6a:13:91:09:7d:1f:
                    13:c3:7d:d4:f2:f4:a0:66:cc:2c:fa:c5:1c:0d:83:
                    c0:5a:d0:43:46:cb:b4:45:a9:b5:c0:fb:8e:30:bc:
                    ef:0a:c1:d6:13:d9:b7:90:71:f9:ad:24:a1:4a:ad:
                    82:66:aa:7f:bd:7b:52:97:0a:03:f2:b9:36:a8:82:
                    bf:36:db:11:9c:75:b5:d4:25:a5:db:66:d5:88:c6:
                    2b:0c:6d:be:f8:57:06:4d:b0:8b:25:68:40:b8:eb:
                    c9:58:a2:3c:57:69:2e:c1:46:b5:bc:d9:58:59:b0:
                    32:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A8:0B:98:4A:BC:BE:F4:37:D5:F3:6C:8D:D2:AC:53:01:6C:5B:2E
            X509v3 Authority Key Identifier:
                keyid:08:52:20:00:E6:80:B6:B5:BB:AE:CA:5C:D4:D9:E5:B0:AC:EA:5B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A25A58787EB92A021765B796FDF47BAE5C56190A4D0891C327897426FFF022D/0/08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A25A58787EB92A021765B796FDF47BAE5C56190A4D0891C327897426FFF022D/0/08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:61:95:77:f0:d2:8e:b6:18:13:76:d9:b3:6d:07:64:f0:53:
         95:0b:42:eb:e8:c4:f1:c9:8f:52:fe:54:fc:8e:f2:4c:6d:45:
         8b:fd:a3:bf:d3:c1:dc:92:0e:f9:bb:d0:fb:e3:96:30:5e:a7:
         4d:c9:59:f9:a5:69:6a:5f:df:82:f8:d6:76:6c:50:34:84:61:
         8e:31:6c:f3:88:c3:f8:77:0a:94:92:dd:d9:42:e2:9d:ca:02:
         ec:6c:b2:c4:79:bb:2a:fc:45:56:ec:e2:37:ea:c0:3e:61:de:
         18:ed:77:37:3e:d5:8d:8b:10:01:30:d9:cd:01:08:a1:8d:e5:
         19:c0:38:39:95:91:a9:c5:a7:a8:53:c7:b6:b0:db:eb:f4:41:
         49:cd:4f:5e:ad:73:d7:5f:b0:63:7a:1f:8e:0a:18:2c:f5:e2:
         a9:ee:1c:b5:a0:c3:79:77:87:1f:c4:c1:d8:1c:68:e7:ed:5b:
         03:c7:73:5b:67:e7:79:3e:80:54:72:cd:2d:64:15:4d:88:0a:
         db:9a:c7:d0:00:8e:9a:06:cc:e2:4a:80:e1:2a:16:2c:57:a0:
         a8:b3:c8:8f:1b:b1:6e:15:94:be:02:99:37:72:50:4c:94:65:
         61:ea:b8:22:97:ca:55:09:cf:05:7d:59:3c:18:f7:48:7b:c1:
         99:4c:42:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:25 2025 by rpki-client on console.sobornost.net