Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.mft
File:                     FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.mft (raw, json)
Hash identifier:          tzDsCuxX9mvxJJh8DFvojxtmDxvezOvJ06NG9hp1dDk=
Subject key identifier:   AD:01:53:7B:6D:6B:3E:1F:39:0C:70:9A:D7:46:29:B4:DD:D7:A9:19
Authority key identifier: FD:CD:3C:F2:DE:71:0C:85:FB:6B:36:F5:57:02:D0:4B:F4:63:16:B3
Certificate issuer:       /CN=FDCD3CF2DE710C85FB6B36F55702D04BF46316B3
Certificate serial:       188E85E613C7B33F89664A5D48CFF3290DD42D4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.mft
Manifest number:          D4
Signing time:             Mon 28 Apr 2025 00:36:29 +0000
Manifest this update:     Mon 28 Apr 2025 00:31:29 +0000
Manifest next update:     Sat 03 May 2025 05:33:29 +0000
Files and hashes:         1: 323830333a3432303a3a2f33322d3336203d3e20323635383331.roa (hash: 3kNxLTzG3E9i3YAdyI//3hg7STI0yVneltrGA5DppxY=)
                          2: 3230302e3131342e38382e302f32312d3234203d3e203238313230.roa (hash: E0pyWsPwDbvGYA6QVPw0NXtPPpUnz9WQSQupvhjqBWE=)
                          3: 3230302e3131342e38382e302f32312d3234203d3e20323635373033.roa (hash: gCOSAX01mHAW9Br9N/cQdBXb3hKurbr30hEP23bmOSA=)
                          4: 3230302e3131342e38382e302f32312d3234203d3e20323635383331.roa (hash: LSBHm7Och1KLERTRJ0IhpkF2kSioSAtI3SryhKRBXqs=)
                          5: FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.crl (hash: 8Wu4I3sMAsz5DTMfIIyCOPnvtH20T1+jsGar2LpKNWU=)
                          6: 323830333a3432303a3a2f33322d3336203d3e20323635373033.roa (hash: 1189QGhLs6uWWVfnEVPIKs0KaZtEWaZP733bip7O12s=)
                          7: 323830333a3432303a3a2f33322d3336203d3e203238313230.roa (hash: N/Tlrn3SCl9h1RS8rJlL5r5uDk1h3eXiOWFlcc/FG/c=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:8e:85:e6:13:c7:b3:3f:89:66:4a:5d:48:cf:f3:29:0d:d4:2d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDCD3CF2DE710C85FB6B36F55702D04BF46316B3
        Validity
            Not Before: Apr 28 00:31:29 2025 GMT
            Not After : May  3 05:33:29 2025 GMT
        Subject: CN=AD01537B6D6B3E1F390C709AD74629B4DDD7A919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:30:22:dc:2b:3d:3a:43:9e:0d:a5:ca:a3:24:
                    ff:a5:96:90:82:9f:36:1c:21:e7:5c:de:44:3e:be:
                    dd:87:f5:e4:66:67:4d:9b:a7:e2:ed:3d:ed:23:21:
                    20:23:9a:ae:0b:d2:b5:32:71:d4:cc:8e:6b:1f:e4:
                    56:30:33:c0:fa:5a:78:d4:39:89:43:35:49:e3:65:
                    97:f4:5e:52:3e:63:c9:d4:1d:23:c8:9c:df:55:a6:
                    30:a4:92:73:64:a0:08:52:d5:7a:50:16:a6:f7:41:
                    58:94:51:42:81:14:8d:54:4e:e0:2c:f7:f3:c6:fd:
                    fe:cf:8a:44:1d:20:67:db:3b:e5:c8:3a:ac:7b:69:
                    8c:8f:16:eb:54:27:21:f8:6f:58:f8:75:8f:ca:7e:
                    e2:9b:df:3b:5b:83:d9:13:bc:ff:48:41:ff:b5:71:
                    68:c6:96:cd:67:06:58:4e:72:7f:f1:78:be:23:9d:
                    e8:01:fd:81:ee:58:41:d9:7e:b0:b2:8e:2d:90:9a:
                    32:1b:09:bd:64:eb:d0:0c:f3:5a:f5:01:91:50:e8:
                    00:07:75:69:43:81:87:f4:17:71:ed:76:26:18:30:
                    2d:cf:be:d6:ce:57:d0:6d:3b:0d:0e:6e:66:b4:d0:
                    7e:7f:87:74:a5:6f:bb:99:07:0c:40:6c:b4:ef:d4:
                    30:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:01:53:7B:6D:6B:3E:1F:39:0C:70:9A:D7:46:29:B4:DD:D7:A9:19
            X509v3 Authority Key Identifier:
                keyid:FD:CD:3C:F2:DE:71:0C:85:FB:6B:36:F5:57:02:D0:4B:F4:63:16:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:90:5a:72:49:a2:04:55:2a:94:01:7e:9e:3a:d1:67:d5:c1:
         52:8b:e3:5a:95:7b:f6:4d:f2:20:df:f4:ef:5d:fe:8d:d1:a0:
         59:d6:74:c3:4a:b2:3a:b1:ef:69:38:38:79:c4:68:11:2a:38:
         25:3f:43:7a:33:bc:18:3c:99:99:d4:aa:b2:2c:ee:ae:62:5b:
         cf:55:18:88:0a:e5:7e:7c:d0:4e:f0:6f:49:cf:cf:7a:73:ca:
         51:e6:b4:d3:08:8e:23:48:02:c1:68:69:0e:59:8c:34:35:58:
         9b:88:7c:73:71:2f:5e:cd:b7:cc:9a:14:cb:7e:2d:2f:6b:76:
         df:a1:9c:98:4f:b4:ae:58:1e:d6:e9:86:c3:dc:26:0f:67:e7:
         db:57:b3:7d:7d:cd:41:0e:51:7b:09:91:ba:ff:23:1a:c1:1c:
         e7:3c:70:c0:7e:63:7c:a9:bb:df:f8:25:d0:94:33:4b:c1:1b:
         db:73:fe:75:2a:8b:db:70:5f:d7:8a:fb:fc:c0:91:ae:7b:14:
         bc:a2:1a:3f:5c:3b:86:7a:d7:85:2f:ad:cb:b8:0d:3a:ee:55:
         71:65:c5:38:9a:8f:3d:26:c1:ca:b2:ce:7b:8e:c7:85:d4:71:
         85:02:ad:12:c9:ef:1e:cf:c1:93:12:1f:e8:5f:25:38:0e:fc:
         c8:7b:22:08
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUGI6F5hPHsz+JZkpdSM/zKQ3ULU4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkRDRDNDRjJERTcxMEM4NUZCNkIzNkY1NTcwMkQwNEJG
NDYzMTZCMzAeFw0yNTA0MjgwMDMxMjlaFw0yNTA1MDMwNTMzMjlaMDMxMTAvBgNV
BAMTKEFEMDE1MzdCNkQ2QjNFMUYzOTBDNzA5QUQ3NDYyOUI0REREN0E5MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2MCLcKz06Q54NpcqjJP+llpCC
nzYcIedc3kQ+vt2H9eRmZ02bp+LtPe0jISAjmq4L0rUycdTMjmsf5FYwM8D6WnjU
OYlDNUnjZZf0XlI+Y8nUHSPInN9VpjCkknNkoAhS1XpQFqb3QViUUUKBFI1UTuAs
9/PG/f7PikQdIGfbO+XIOqx7aYyPFutUJyH4b1j4dY/KfuKb3ztbg9kTvP9IQf+1
cWjGls1nBlhOcn/xeL4jnegB/YHuWEHZfrCyji2QmjIbCb1k69AM81r1AZFQ6AAH
dWlDgYf0F3HtdiYYMC3PvtbOV9BtOw0Obma00H5/h3Slb7uZBwxAbLTv1DCjAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUrQFTe21rPh85DHCa10YptN3XqRkwHwYDVR0j
BBgwFoAU/c088t5xDIX7azb1VwLQS/RjFrMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjZEREFCNkU5NEQ3NEJEMzMwNUVGQ0ZEMzc4QkU4OEUz
QkNEREQ3QTcxMjEyNzY2NTc3QkI2OUIyMzBFODk4LzAvRkRDRDNDRjJERTcxMEM4
NUZCNkIzNkY1NTcwMkQwNEJGNDYzMTZCMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRENEM0NGMkRFNzEwQzg1RkI2
QjM2RjU1NzAyRDA0QkY0NjMxNkIzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI2RERBQjZFOTRENzRCRDMzMDVFRkNGRDM3OEJFODhFM0JDREREN0E3
MTIxMjc2NjU3N0JCNjlCMjMwRTg5OC8wL0ZEQ0QzQ0YyREU3MTBDODVGQjZCMzZG
NTU3MDJEMDRCRjQ2MzE2QjMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBVkFpySaIEVSqUAX6eOtFn1cFS
i+NalXv2TfIg3/TvXf6N0aBZ1nTDSrI6se9pODh5xGgRKjglP0N6M7wYPJmZ1Kqy
LO6uYlvPVRiICuV+fNBO8G9Jz896c8pR5rTTCI4jSALBaGkOWYw0NVibiHxzcS9e
zbfMmhTLfi0va3bfoZyYT7SuWB7W6YbD3CYPZ+fbV7N9fc1BDlF7CZG6/yMawRzn
PHDAfmN8qbvf+CXQlDNLwRvbc/51KovbcF/Xivv8wJGuexS8oho/XDuGeteFL63L
uA067lVxZcU4mo89JsHKss57jseF1HGFAq0Sye8ez8GTEh/oXyU4DvzIeyII
-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:15 2025 by rpki-client on console.sobornost.net