Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7EC50570DFFB79A94532146FA82AC2F2A43B7E5FC50D906E0AE291D09FE5A720/0/88FA5A78FA0791DB64DB452ED6DE08F7A93F04EA.mft
File:                     88FA5A78FA0791DB64DB452ED6DE08F7A93F04EA.mft (raw, json)
Hash identifier:          wNAKXMn9IvWDMAQQ8G25WKwOKZIq6tCgUGAWavBFjjQ=
Subject key identifier:   8D:93:1E:E9:6F:AA:3A:91:BF:42:5E:48:9C:66:F0:73:B6:E4:60:59
Authority key identifier: 88:FA:5A:78:FA:07:91:DB:64:DB:45:2E:D6:DE:08:F7:A9:3F:04:EA
Certificate issuer:       /CN=88FA5A78FA0791DB64DB452ED6DE08F7A93F04EA
Certificate serial:       0BA74DBD305C0333D2A5DF3D41647D74F3377726
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88FA5A78FA0791DB64DB452ED6DE08F7A93F04EA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7EC50570DFFB79A94532146FA82AC2F2A43B7E5FC50D906E0AE291D09FE5A720/0/88FA5A78FA0791DB64DB452ED6DE08F7A93F04EA.mft
Manifest number:          D1
Signing time:             Mon 28 Apr 2025 12:38:59 +0000
Manifest this update:     Mon 28 Apr 2025 12:33:59 +0000
Manifest next update:     Sat 03 May 2025 02:52:59 +0000
Files and hashes:         1: 88FA5A78FA0791DB64DB452ED6DE08F7A93F04EA.crl (hash: HnftRayjYQlu+QgdEuKRniS20VfBApJm9CpWzsA3oKE=)
                          2: 323830333a363439303a3a2f33322d3438203d3e20323732383139.roa (hash: 4AEu0L9Iy9Lcm7xvxt4xsiBM8REPqRnjuKc/rrUWzM8=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7EC50570DFFB79A94532146FA82AC2F2A43B7E5FC50D906E0AE291D09FE5A720/0/88FA5A78FA0791DB64DB452ED6DE08F7A93F04EA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7EC50570DFFB79A94532146FA82AC2F2A43B7E5FC50D906E0AE291D09FE5A720/0/88FA5A78FA0791DB64DB452ED6DE08F7A93F04EA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88FA5A78FA0791DB64DB452ED6DE08F7A93F04EA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a7:4d:bd:30:5c:03:33:d2:a5:df:3d:41:64:7d:74:f3:37:77:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88FA5A78FA0791DB64DB452ED6DE08F7A93F04EA
        Validity
            Not Before: Apr 28 12:33:59 2025 GMT
            Not After : May  3 02:52:59 2025 GMT
        Subject: CN=8D931EE96FAA3A91BF425E489C66F073B6E46059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6b:03:ca:f7:b8:ee:6c:0f:e1:9c:2a:07:58:
                    86:9f:62:37:47:1a:78:59:34:46:4a:17:1b:6c:7d:
                    ab:d1:e8:7b:8b:71:98:51:50:95:f4:77:98:2b:16:
                    b7:69:9e:ba:cc:ad:09:20:f3:c0:44:d2:14:93:ef:
                    4d:cf:45:7c:9f:99:52:79:a6:74:6c:0b:21:b6:e5:
                    7f:1d:06:3e:27:c1:fc:97:b8:69:cc:3f:81:ac:c7:
                    ec:89:57:7f:97:02:7e:50:3e:eb:6d:09:d8:6b:8f:
                    48:8b:5f:81:a5:a4:9b:3b:2d:2b:9c:d6:99:af:08:
                    bd:45:00:38:dc:c9:99:05:51:2e:37:75:ef:d5:73:
                    3f:ab:b5:8f:84:2c:be:79:e4:bd:a9:76:5a:3b:b5:
                    99:ad:08:03:cc:f1:d7:fb:c4:ff:81:9b:75:08:14:
                    b5:4c:03:b6:c8:79:ee:30:4f:c4:a7:27:3b:af:77:
                    82:56:f6:7e:44:b1:f8:66:e8:fd:ea:83:32:2e:2b:
                    94:22:35:a6:04:f5:a4:60:5a:82:b7:31:6f:fc:82:
                    c5:c7:c2:f7:f5:93:f4:14:c3:d0:a9:c6:6d:b9:21:
                    4f:7c:80:ca:b5:48:f8:3e:35:6f:b1:c2:18:00:9d:
                    91:c5:82:9e:b5:53:24:39:8f:b6:3a:34:ad:75:58:
                    94:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:93:1E:E9:6F:AA:3A:91:BF:42:5E:48:9C:66:F0:73:B6:E4:60:59
            X509v3 Authority Key Identifier:
                keyid:88:FA:5A:78:FA:07:91:DB:64:DB:45:2E:D6:DE:08:F7:A9:3F:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7EC50570DFFB79A94532146FA82AC2F2A43B7E5FC50D906E0AE291D09FE5A720/0/88FA5A78FA0791DB64DB452ED6DE08F7A93F04EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88FA5A78FA0791DB64DB452ED6DE08F7A93F04EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7EC50570DFFB79A94532146FA82AC2F2A43B7E5FC50D906E0AE291D09FE5A720/0/88FA5A78FA0791DB64DB452ED6DE08F7A93F04EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ad:47:5a:00:5c:71:41:19:1c:e3:b2:ba:16:25:73:9a:06:
         7a:71:70:08:68:56:9c:68:73:aa:6f:58:bd:eb:13:27:5f:87:
         81:3d:6d:06:a8:91:94:3e:49:0f:81:51:df:45:d8:c2:76:ae:
         76:06:37:10:d1:f2:63:a5:9a:ce:c3:9d:d4:a0:37:f3:4a:e6:
         dc:56:4f:ff:18:7f:54:36:34:00:ba:ed:3e:03:42:b2:1f:92:
         fc:27:b8:2c:67:1b:73:54:b1:c4:32:ad:2f:b3:9c:43:58:67:
         1e:97:54:dc:61:34:fd:f7:0c:17:0c:db:3f:15:7b:57:a1:9a:
         51:c4:b7:cc:02:20:9a:66:9b:f8:07:3e:9f:2c:d0:bd:a8:bf:
         1b:57:5e:62:37:54:46:f0:23:1d:bf:30:94:a4:21:59:2a:5f:
         22:52:33:e9:9c:94:7a:06:19:e1:54:0a:c3:75:4d:f4:e4:bc:
         47:8e:07:7c:0b:5c:2f:24:8b:ef:e9:66:15:26:b6:d7:d2:64:
         70:48:68:be:5b:54:3e:ee:b7:72:02:35:7b:0e:5a:01:8c:ba:
         0d:f6:54:b6:b7:0a:60:05:bf:54:81:60:59:06:ba:18:ec:12:
         2f:52:d7:b8:1e:04:5d:f8:6c:3e:6f:d4:dc:b5:de:c0:03:94:
         bc:cd:1c:d6
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUC6dNvTBcAzPSpd89QWR9dPM3dyYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhGQTVBNzhGQTA3OTFEQjY0REI0NTJFRDZERTA4RjdB
OTNGMDRFQTAeFw0yNTA0MjgxMjMzNTlaFw0yNTA1MDMwMjUyNTlaMDMxMTAvBgNV
BAMTKDhEOTMxRUU5NkZBQTNBOTFCRjQyNUU0ODlDNjZGMDczQjZFNDYwNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXawPK97jubA/hnCoHWIafYjdH
GnhZNEZKFxtsfavR6HuLcZhRUJX0d5grFrdpnrrMrQkg88BE0hST703PRXyfmVJ5
pnRsCyG25X8dBj4nwfyXuGnMP4Gsx+yJV3+XAn5QPuttCdhrj0iLX4GlpJs7LSuc
1pmvCL1FADjcyZkFUS43de/Vcz+rtY+ELL555L2pdlo7tZmtCAPM8df7xP+Bm3UI
FLVMA7bIee4wT8SnJzuvd4JW9n5Esfhm6P3qgzIuK5QiNaYE9aRgWoK3MW/8gsXH
wvf1k/QUw9Cpxm25IU98gMq1SPg+NW+xwhgAnZHFgp61UyQ5j7Y6NK11WJT5AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUjZMe6W+qOpG/Ql5InGbwc7bkYFkwHwYDVR0j
BBgwFoAUiPpaePoHkdtk20Uu1t4I96k/BOowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RUM1MDU3MERGRkI3OUE5NDUzMjE0NkZBODJBQzJGMkE0
M0I3RTVGQzUwRDkwNkUwQUUyOTFEMDlGRTVBNzIwLzAvODhGQTVBNzhGQTA3OTFE
QjY0REI0NTJFRDZERTA4RjdBOTNGMDRFQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84OEZBNUE3OEZBMDc5MURCNjRE
QjQ1MkVENkRFMDhGN0E5M0YwNEVBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0VDNTA1NzBERkZCNzlBOTQ1MzIxNDZGQTgyQUMyRjJBNDNCN0U1RkM1
MEQ5MDZFMEFFMjkxRDA5RkU1QTcyMC8wLzg4RkE1QTc4RkEwNzkxREI2NERCNDUy
RUQ2REUwOEY3QTkzRjA0RUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB1rUdaAFxxQRkc47K6FiVzmgZ6
cXAIaFacaHOqb1i96xMnX4eBPW0GqJGUPkkPgVHfRdjCdq52BjcQ0fJjpZrOw53U
oDfzSubcVk//GH9UNjQAuu0+A0KyH5L8J7gsZxtzVLHEMq0vs5xDWGcel1TcYTT9
9wwXDNs/FXtXoZpRxLfMAiCaZpv4Bz6fLNC9qL8bV15iN1RG8CMdvzCUpCFZKl8i
UjPpnJR6BhnhVArDdU305LxHjgd8C1wvJIvv6WYVJrbX0mRwSGi+W1Q+7rdyAjV7
DloBjLoN9lS2twpgBb9UgWBZBroY7BIvUte4HgRd+Gw+b9Tctd7AA5S8zRzW
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:56 2025 by rpki-client on console.sobornost.net