Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.mft
File:                     87A91E98C90C25D18222E29A92C4DA9CA00DA421.mft (raw, json)
Hash identifier:          HZs9I39hHwxBBmzhM42LwyZ3mhr0LDfTwsq3u7m/zlU=
Subject key identifier:   2E:F3:9C:2B:D0:3A:17:17:A2:7E:4E:59:03:42:82:28:75:BC:22:CF
Authority key identifier: 87:A9:1E:98:C9:0C:25:D1:82:22:E2:9A:92:C4:DA:9C:A0:0D:A4:21
Certificate issuer:       /CN=87A91E98C90C25D18222E29A92C4DA9CA00DA421
Certificate serial:       287BABF1D6811D4F2F6808CF09FD4B307097B886
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.mft
Manifest number:          D4
Signing time:             Sun 27 Apr 2025 15:11:02 +0000
Manifest this update:     Sun 27 Apr 2025 15:06:02 +0000
Manifest next update:     Fri 02 May 2025 16:40:02 +0000
Files and hashes:         1: 34352e3136302e3230322e302f32342d3234203d3e20323636383834.roa (hash: fcQQVwgjwAK65rUiK+6ZAey9cVNaHcmhq1VrdQz9ANQ=)
                          2: 34352e3136302e3230332e302f32342d3234203d3e20323636383834.roa (hash: bujUp7BJREwfFYcwzVYofSIcOCNVaUMdrVM2qo2m7Eg=)
                          3: 323830333a3661303a3a2f33322d3332203d3e20323636383834.roa (hash: qYhb8x8oqlQ6pvcLzqdt0ZcUfZUCw9q7dAj5kJxa0+I=)
                          4: 34352e3136302e3230302e302f32342d3234203d3e20323636383834.roa (hash: VzKudr+ieFKJgOjwccj2C2am6TlsyHznqYbeTqVEoTI=)
                          5: 34352e3136302e3230312e302f32342d3234203d3e20323636383834.roa (hash: r9qoTXS4P/UF5C7L4DilGTBMU1vqPmN4JkObMwByVSY=)
                          6: 34352e3136302e3230302e302f32322d3232203d3e20323636383834.roa (hash: NHYLG/rtj3qB+Nv69TAJCsyV+ij9AF+9Ne706ZWzaZk=)
                          7: 87A91E98C90C25D18222E29A92C4DA9CA00DA421.crl (hash: vKpA2A8I7Q8KJ0e9r3yZBVp+bmHQPZS6ItXFeDBdRyA=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:7b:ab:f1:d6:81:1d:4f:2f:68:08:cf:09:fd:4b:30:70:97:b8:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87A91E98C90C25D18222E29A92C4DA9CA00DA421
        Validity
            Not Before: Apr 27 15:06:02 2025 GMT
            Not After : May  2 16:40:02 2025 GMT
        Subject: CN=2EF39C2BD03A1717A27E4E590342822875BC22CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9f:40:40:2c:ad:38:6b:68:d8:c9:38:a3:1b:
                    a1:f8:ee:a6:53:c5:c3:cc:1a:f9:98:6b:36:6b:4d:
                    3d:74:d6:13:c7:6b:a9:db:57:49:f3:ab:0f:c4:1f:
                    dd:45:40:66:24:64:6d:50:f1:76:3f:a0:17:bd:ff:
                    a0:f2:0a:50:6e:39:1d:f5:22:3b:c4:24:0e:ec:c5:
                    03:f3:41:1b:e9:eb:70:df:80:dd:c3:54:6b:ad:84:
                    09:96:b5:89:e1:83:15:16:2f:6d:b1:95:20:99:cd:
                    22:d4:75:c3:d6:81:fe:23:1c:e8:d3:de:f2:ff:39:
                    67:d7:3f:bf:e7:67:d6:a5:86:bd:ae:d8:7c:cc:09:
                    1e:6c:0b:1c:26:c5:89:4e:a8:d2:5e:c0:7c:9b:a1:
                    78:e7:02:d8:47:59:93:ab:83:5c:05:ec:b2:29:00:
                    b2:6c:8c:c5:f3:20:49:24:90:d0:6d:5b:59:c9:97:
                    24:2d:c3:61:44:88:59:ba:b5:dd:a6:cf:4b:d0:3d:
                    ce:77:6e:f4:85:78:7b:46:29:a8:6e:0a:f5:4d:ae:
                    3d:c4:e0:fc:cb:6e:92:ce:89:46:ff:18:5e:bd:6b:
                    51:bb:9a:53:10:b9:b7:72:ac:11:7e:05:2c:c6:cb:
                    9d:83:09:f2:f7:ff:d3:8e:9a:fd:17:ba:d4:6c:cf:
                    b2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F3:9C:2B:D0:3A:17:17:A2:7E:4E:59:03:42:82:28:75:BC:22:CF
            X509v3 Authority Key Identifier:
                keyid:87:A9:1E:98:C9:0C:25:D1:82:22:E2:9A:92:C4:DA:9C:A0:0D:A4:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:4a:37:78:3e:ec:ed:50:e1:e6:ac:5c:22:67:61:87:df:e6:
         a1:48:06:47:a6:97:65:e3:c7:b1:07:29:64:c3:bb:59:cf:e6:
         2b:a4:d3:26:11:81:c0:8c:86:89:ac:da:a4:e6:a4:4d:15:1f:
         f7:d5:6c:c3:7d:3c:e3:65:5b:5c:ae:5a:2b:46:97:8c:ad:e9:
         86:b2:55:12:e8:e8:19:9b:60:66:b1:c6:54:98:5c:7d:e5:22:
         33:a1:fb:58:34:5e:fb:49:79:3d:43:46:58:6a:4b:de:71:30:
         c1:90:ff:e2:59:8b:4b:74:58:bb:22:5f:38:56:62:ab:bd:ef:
         cc:29:da:f1:d6:1e:b6:c0:70:c4:4d:4a:a4:28:31:b4:be:dd:
         fa:c1:d8:30:82:af:de:ef:8d:a4:0b:c5:e3:59:a8:4a:9a:91:
         20:97:84:2c:32:f1:a2:1d:8b:99:c3:56:eb:db:83:db:db:5c:
         d0:43:4b:0c:d4:80:a0:84:be:c5:e1:89:b2:af:45:ed:76:88:
         ce:69:13:0b:69:b4:a5:c1:d1:03:4e:ef:29:6c:68:dc:58:23:
         01:5e:40:2f:a4:56:0f:04:73:06:9a:23:1a:30:37:54:38:f0:
         6a:77:2f:ae:44:78:44:cb:28:43:2a:65:34:f7:f4:ee:4b:c6:
         1b:29:bf:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:03:58 2025 by rpki-client on console.sobornost.net