Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8488B76BE88430924D65B4F45A4A9CE1DB6B37DB371F3BB62C522C3AB4302CE2/0/D7CD1DD417D4984BBAA3B202F8815F2B8E6F9FFA.mft
File:                     D7CD1DD417D4984BBAA3B202F8815F2B8E6F9FFA.mft (raw, json)
Hash identifier:          xo/QfHyxGno50l5dUwOUo+5sL+s7k6R6+c4QO20ddbQ=
Subject key identifier:   A1:06:C3:4E:43:33:23:91:8A:75:05:0D:EE:EB:81:B3:63:5F:6B:30
Authority key identifier: D7:CD:1D:D4:17:D4:98:4B:BA:A3:B2:02:F8:81:5F:2B:8E:6F:9F:FA
Certificate issuer:       /CN=D7CD1DD417D4984BBAA3B202F8815F2B8E6F9FFA
Certificate serial:       5E270A8BF810ED07AE19419CC3FA7823AE0A204E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7CD1DD417D4984BBAA3B202F8815F2B8E6F9FFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8488B76BE88430924D65B4F45A4A9CE1DB6B37DB371F3BB62C522C3AB4302CE2/0/D7CD1DD417D4984BBAA3B202F8815F2B8E6F9FFA.mft
Manifest number:          D0
Signing time:             Sun 27 Apr 2025 18:12:45 +0000
Manifest this update:     Sun 27 Apr 2025 18:07:45 +0000
Manifest next update:     Sat 03 May 2025 06:08:45 +0000
Files and hashes:         1: D7CD1DD417D4984BBAA3B202F8815F2B8E6F9FFA.crl (hash: TFhFU1R3JQIZ5h42hmdx05bN4SHs6+HFKd4n0d3/3h8=)
                          2: 323830313a31653a643830303a3a2f34382d3438203d3e20323732393334.roa (hash: Ueway4zxLyxG3WL/0n/WwBcFSI9NkqjZHPkIXnf9ulI=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8488B76BE88430924D65B4F45A4A9CE1DB6B37DB371F3BB62C522C3AB4302CE2/0/D7CD1DD417D4984BBAA3B202F8815F2B8E6F9FFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8488B76BE88430924D65B4F45A4A9CE1DB6B37DB371F3BB62C522C3AB4302CE2/0/D7CD1DD417D4984BBAA3B202F8815F2B8E6F9FFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7CD1DD417D4984BBAA3B202F8815F2B8E6F9FFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:27:0a:8b:f8:10:ed:07:ae:19:41:9c:c3:fa:78:23:ae:0a:20:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7CD1DD417D4984BBAA3B202F8815F2B8E6F9FFA
        Validity
            Not Before: Apr 27 18:07:45 2025 GMT
            Not After : May  3 06:08:45 2025 GMT
        Subject: CN=A106C34E433323918A75050DEEEB81B3635F6B30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e2:74:39:dc:97:10:76:66:51:9a:64:a2:fa:
                    0e:62:9e:59:eb:e6:71:92:28:b7:d1:af:e9:e1:92:
                    68:22:9d:82:23:5e:05:db:ef:a4:a5:c6:12:f8:04:
                    4f:2b:e7:81:ed:68:ec:34:2f:1f:ec:02:f2:e9:02:
                    04:fa:99:5c:c7:01:50:86:e1:c6:ad:11:01:b3:3a:
                    bb:ba:76:7c:41:e0:a4:85:f7:52:97:e9:6a:90:9d:
                    44:20:0d:81:c5:ab:24:f9:e3:94:6a:d1:ac:03:68:
                    84:aa:84:4a:e1:02:0e:d6:30:31:46:25:90:e6:de:
                    c0:b4:a7:a0:41:70:d9:e4:59:33:5b:bb:82:3a:0b:
                    ff:0a:12:b5:31:73:26:de:25:fb:c4:bc:5e:94:06:
                    38:11:ff:40:e3:d3:78:9b:86:a8:db:a7:b7:2e:84:
                    b7:a4:9f:57:18:14:ca:2c:08:05:9f:b3:7a:ff:0f:
                    24:18:85:86:08:9c:f5:68:f3:9e:5e:cc:70:21:49:
                    e3:03:c7:9c:b1:f0:58:0f:fd:1a:2f:3e:8f:2b:1c:
                    32:63:fd:5d:b8:66:91:43:d8:85:93:de:f4:dd:0d:
                    2b:3e:5a:e2:02:f2:ab:c6:f5:c3:8e:89:90:6c:20:
                    28:4c:c6:75:21:59:d8:89:a7:df:82:6c:07:52:93:
                    88:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:06:C3:4E:43:33:23:91:8A:75:05:0D:EE:EB:81:B3:63:5F:6B:30
            X509v3 Authority Key Identifier:
                keyid:D7:CD:1D:D4:17:D4:98:4B:BA:A3:B2:02:F8:81:5F:2B:8E:6F:9F:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8488B76BE88430924D65B4F45A4A9CE1DB6B37DB371F3BB62C522C3AB4302CE2/0/D7CD1DD417D4984BBAA3B202F8815F2B8E6F9FFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7CD1DD417D4984BBAA3B202F8815F2B8E6F9FFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8488B76BE88430924D65B4F45A4A9CE1DB6B37DB371F3BB62C522C3AB4302CE2/0/D7CD1DD417D4984BBAA3B202F8815F2B8E6F9FFA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:e6:d1:53:fe:12:e6:46:f3:5c:7b:54:8b:ee:60:bc:24:63:
         41:42:07:9f:1f:e3:86:7b:90:bd:dc:e7:b7:1f:4c:6f:63:b3:
         3b:89:f9:3e:d7:dd:bf:c9:a0:a9:a0:89:7d:6e:25:66:2b:4e:
         ae:45:b3:f8:d8:21:6a:50:2f:38:1b:b4:5a:38:1b:5a:3e:66:
         10:48:27:1d:ae:c1:fb:ec:85:b8:f5:8f:23:16:9d:0b:52:f9:
         64:0b:bf:0a:cc:81:7c:f3:ba:22:61:15:0e:5d:7e:0a:e4:d2:
         95:78:56:76:a6:ca:9c:c8:c2:c8:41:ae:d2:a4:1b:ca:94:41:
         2e:7e:b7:15:d4:80:47:1c:d3:59:bf:fa:0f:e3:59:72:a0:9e:
         64:b6:80:51:5c:fe:41:36:53:d6:c0:15:5b:7b:26:11:f4:ac:
         f9:04:db:3f:f5:68:51:eb:16:fe:5b:73:c9:3c:7a:82:63:98:
         86:0a:44:a1:52:ab:66:af:93:33:5f:70:a7:96:6c:18:80:60:
         c1:97:21:c2:e8:3b:7b:c4:f6:8d:60:c6:fd:42:7d:d6:e3:3b:
         34:ec:93:8d:8f:54:8a:7b:73:26:2d:fa:80:25:9d:fb:34:ff:
         84:74:06:59:36:01:5a:93:06:7f:e5:ef:d9:a6:1c:99:d2:b0:
         29:ed:5a:dc
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUXicKi/gQ7QeuGUGcw/p4I64KIE4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdDRDFERDQxN0Q0OTg0QkJBQTNCMjAyRjg4MTVGMkI4
RTZGOUZGQTAeFw0yNTA0MjcxODA3NDVaFw0yNTA1MDMwNjA4NDVaMDMxMTAvBgNV
BAMTKEExMDZDMzRFNDMzMzIzOTE4QTc1MDUwREVFRUI4MUIzNjM1RjZCMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp4nQ53JcQdmZRmmSi+g5inlnr
5nGSKLfRr+nhkmginYIjXgXb76SlxhL4BE8r54HtaOw0Lx/sAvLpAgT6mVzHAVCG
4catEQGzOru6dnxB4KSF91KX6WqQnUQgDYHFqyT545Rq0awDaISqhErhAg7WMDFG
JZDm3sC0p6BBcNnkWTNbu4I6C/8KErUxcybeJfvEvF6UBjgR/0Dj03ibhqjbp7cu
hLekn1cYFMosCAWfs3r/DyQYhYYInPVo855ezHAhSeMDx5yx8FgP/RovPo8rHDJj
/V24ZpFD2IWT3vTdDSs+WuIC8qvG9cOOiZBsIChMxnUhWdiJp9+CbAdSk4j/AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUoQbDTkMzI5GKdQUN7uuBs2NfazAwHwYDVR0j
BBgwFoAU180d1BfUmEu6o7IC+IFfK45vn/owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NDg4Qjc2QkU4ODQzMDkyNEQ2NUI0RjQ1QTRBOUNFMURC
NkIzN0RCMzcxRjNCQjYyQzUyMkMzQUI0MzAyQ0UyLzAvRDdDRDFERDQxN0Q0OTg0
QkJBQTNCMjAyRjg4MTVGMkI4RTZGOUZGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EN0NEMURENDE3RDQ5ODRCQkFB
M0IyMDJGODgxNUYyQjhFNkY5RkZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODQ4OEI3NkJFODg0MzA5MjRENjVCNEY0NUE0QTlDRTFEQjZCMzdEQjM3
MUYzQkI2MkM1MjJDM0FCNDMwMkNFMi8wL0Q3Q0QxREQ0MTdENDk4NEJCQUEzQjIw
MkY4ODE1RjJCOEU2RjlGRkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAq5tFT/hLmRvNce1SL7mC8JGNB
QgefH+OGe5C93Oe3H0xvY7M7ifk+192/yaCpoIl9biVmK06uRbP42CFqUC84G7Ra
OBtaPmYQSCcdrsH77IW49Y8jFp0LUvlkC78KzIF887oiYRUOXX4K5NKVeFZ2psqc
yMLIQa7SpBvKlEEufrcV1IBHHNNZv/oP41lyoJ5ktoBRXP5BNlPWwBVbeyYR9Kz5
BNs/9WhR6xb+W3PJPHqCY5iGCkShUqtmr5MzX3CnlmwYgGDBlyHC6Dt7xPaNYMb9
Qn3W4zs07JONj1SKe3MmLfqAJZ37NP+EdAZZNgFakwZ/5e/ZphyZ0rAp7Vrc
-----END CERTIFICATE-----
Generated at Sun Apr 27 21:43:01 2025 by rpki-client on console.sobornost.net