Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.mft
File:                     07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.mft (raw, json)
Hash identifier:          3fReO6Ak7KjoEbuh9h442lbRp6fVLpJxpWmelWbPlkM=
Subject key identifier:   0D:07:4B:AA:F7:7E:C8:70:94:5C:63:9A:01:ED:69:65:70:DB:FC:85
Authority key identifier: 07:CC:AF:A3:BE:AB:3D:5E:20:F9:9F:25:E8:3A:28:8F:4B:4D:48:FC
Certificate issuer:       /CN=07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC
Certificate serial:       4F9D6D1FEBF2E76A7F1CA635919C16FEF7CF21C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.mft
Manifest number:          D5
Signing time:             Sun 27 Apr 2025 00:37:22 +0000
Manifest this update:     Sun 27 Apr 2025 00:32:22 +0000
Manifest next update:     Thu 01 May 2025 23:25:22 +0000
Files and hashes:         1: 34352e3138392e3131362e302f32342d3234203d3e20323733313333.roa (hash: xLf/u7wuRXW1WssV1J/y+Rs0RNG23OllJQ+KmOJAqpo=)
                          2: 34352e3138392e3131362e302f32332d3234203d3e20323639383537.roa (hash: uF4J2hJZd2aQ36LurcOH1yVjf921Xo5vaWy5iEvd8wg=)
                          3: 34352e3138392e3131362e302f32332d3234203d3e20323733313333.roa (hash: uzBiFNd6Lj06RJ2fgQwgjCZFZj8yTuFhwjFyELndnyU=)
                          4: 323830333a353065303a3a2f33322d3438203d3e20323733313333.roa (hash: 57Cq2+HTF2BjAUm1y4Kbboe7SIMCFJ8yL/FXNWIyjUU=)
                          5: 34352e3138392e3131382e302f32342d3234203d3e20323639383537.roa (hash: rbTQQnVKJEHfLIy99HKfy0+VICEVwdtffxGxRz+boXM=)
                          6: 34352e3138392e3131372e302f32342d3234203d3e20323733313333.roa (hash: UrWFY94qZiBrALyoywY9Qls2/qnaFpwfCkYF4NFe5SA=)
                          7: 34352e3138392e3131382e302f32342d3234203d3e20323733313333.roa (hash: kVd9MRu0RC6DTYBaNeraDmKAaTkqfAUsyT7SpQC/NJI=)
                          8: 07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.crl (hash: tFUaqZJNHzR1G8ECbr3fPh/GFC8wvTKfagY8txPwI4c=)
                          9: 323830333a353065303a3a2f33322d3438203d3e20323639383537.roa (hash: 7mW/aS+63T1H9VbJ8Ocpz3rrxICdDPLPBhtrM44rRXA=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:9d:6d:1f:eb:f2:e7:6a:7f:1c:a6:35:91:9c:16:fe:f7:cf:21:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC
        Validity
            Not Before: Apr 27 00:32:22 2025 GMT
            Not After : May  1 23:25:22 2025 GMT
        Subject: CN=0D074BAAF77EC870945C639A01ED696570DBFC85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d2:02:16:2f:77:8a:93:4f:a3:96:c9:79:60:
                    00:02:8c:78:31:a3:b4:c3:54:c0:6a:d1:d3:e5:41:
                    58:e5:aa:d5:44:b8:0b:66:ba:cd:b7:ed:18:a1:31:
                    43:59:b0:00:17:40:d8:ee:80:55:8b:a7:fc:db:fe:
                    05:b2:81:d2:05:de:6c:61:61:ec:10:c5:a9:5f:73:
                    0b:b4:e9:21:2a:a3:48:9f:7a:26:1f:59:5d:e0:fe:
                    99:ba:9e:76:30:0e:64:4a:20:53:ec:6e:d2:c1:cb:
                    60:64:67:c8:55:10:c8:da:39:45:66:46:04:6d:43:
                    08:14:91:11:62:ee:d5:93:3d:18:52:84:4e:31:ff:
                    4a:3e:50:10:08:aa:c1:bf:75:23:13:37:bd:73:7f:
                    c4:d0:e1:6c:51:69:e6:99:06:e8:24:b7:07:80:6f:
                    27:f5:10:fe:a2:09:aa:82:d1:1e:5f:06:4f:e1:82:
                    cf:73:3c:db:a5:a7:2a:5b:40:e4:12:0e:5c:ec:81:
                    22:1a:07:50:a2:d5:35:73:4c:04:a4:97:3c:88:67:
                    ce:bd:c0:55:c0:b7:b9:19:72:5d:f5:db:06:45:b7:
                    2f:59:48:7d:1e:3d:44:71:43:c8:90:9e:28:99:c3:
                    37:16:e6:e0:1b:b6:4c:52:5e:6d:39:04:2b:9b:cd:
                    d4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:07:4B:AA:F7:7E:C8:70:94:5C:63:9A:01:ED:69:65:70:DB:FC:85
            X509v3 Authority Key Identifier:
                keyid:07:CC:AF:A3:BE:AB:3D:5E:20:F9:9F:25:E8:3A:28:8F:4B:4D:48:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:2e:0f:9b:c8:da:76:fd:d5:ae:07:77:21:83:7c:29:0b:c0:
         d8:b1:32:0a:5a:c8:7f:5c:6a:d7:76:7d:61:64:70:0c:b6:2a:
         48:19:d7:eb:41:93:da:7e:ec:f2:f7:4c:b4:f2:30:fe:e4:c6:
         1c:3e:11:35:32:ad:2f:5d:fb:24:27:9a:39:4b:72:c6:a2:fd:
         47:95:f6:d4:6a:51:2d:29:d6:3b:d5:7e:86:50:ec:6f:b4:de:
         e7:09:1a:bb:3b:b1:67:19:06:a4:ef:7a:81:c4:31:dc:b2:04:
         7b:8f:0a:0f:56:53:f2:74:bf:43:76:b1:22:ac:30:43:1b:8e:
         59:cd:c3:de:ea:1a:b9:14:ba:d2:98:91:26:be:87:10:93:93:
         08:30:be:5b:f0:f8:d1:72:68:dd:8b:3a:d9:a1:d1:bd:36:85:
         70:84:4f:c8:0e:1a:d1:1e:f0:17:90:7c:cc:9f:75:52:39:d3:
         9a:e5:4f:01:fb:42:83:f9:73:74:e7:5a:dc:ed:05:03:1f:67:
         2e:2f:26:39:42:7e:29:88:57:3a:db:de:8b:47:1a:d6:dd:12:
         5c:95:1e:bb:13:18:5a:12:ee:9a:02:d3:3e:ca:92:96:39:fe:
         27:d7:90:7d:f6:c6:3a:99:e3:a7:fc:46:cc:e2:ca:f1:42:2e:
         64:2c:23:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:23 2025 by rpki-client on console.sobornost.net