Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.mft
File:                     25AA12EC2868B90A693EEAD25632B15E24525ED3.mft (raw, json)
Hash identifier:          GUwLZBRJp8xb+XrqmQl/2o6Dvi+ulMgtkkDZbHUe+1o=
Subject key identifier:   42:D8:DF:C9:01:E0:3D:F2:47:22:F2:2A:4F:45:14:AF:11:00:89:3D
Authority key identifier: 25:AA:12:EC:28:68:B9:0A:69:3E:EA:D2:56:32:B1:5E:24:52:5E:D3
Certificate issuer:       /CN=25AA12EC2868B90A693EEAD25632B15E24525ED3
Certificate serial:       3C337DEADC89C25BB227FB4763C52777ED0B6988
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.mft
Manifest number:          D6
Signing time:             Mon 28 Apr 2025 11:58:37 +0000
Manifest this update:     Mon 28 Apr 2025 11:53:37 +0000
Manifest next update:     Sat 03 May 2025 18:41:37 +0000
Files and hashes:         1: 3132382e3230312e32312e302f32342d3234203d3e20323635373430.roa (hash: qTvdfSriRxHc7wkHNo0IAN/Qx1468+njGOKpm1whrOc=)
                          2: 25AA12EC2868B90A693EEAD25632B15E24525ED3.crl (hash: iwdlMg+d6Yoh+R6t1agRwrfXWiS4chs5gI8kqrRhEoQ=)
                          3: 3132382e3230312e32332e302f32342d3234203d3e2037303439.roa (hash: VoQydPU5DEPjzB+MLhREvk1La0IFYEloHY8Kn0t5FAQ=)
                          4: 3132382e3230312e32302e302f32322d3232203d3e20323635373430.roa (hash: bz11AZFfJ0r+HEGUYsgx+d3pCKTnexmFq2lHu4m96A0=)
                          5: 3132382e3230312e32322e302f32342d3234203d3e20323635373430.roa (hash: fBb/Sws8vjsc2ypyW8NRLt5+r/8zb+cgyjDIBeclCRI=)
                          6: 3132382e3230312e32302e302f32342d3234203d3e2037303439.roa (hash: RAgkM/z/+RK+WKswD249qEq93ktU1YUh8I7JSw5E9MU=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:33:7d:ea:dc:89:c2:5b:b2:27:fb:47:63:c5:27:77:ed:0b:69:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25AA12EC2868B90A693EEAD25632B15E24525ED3
        Validity
            Not Before: Apr 28 11:53:37 2025 GMT
            Not After : May  3 18:41:37 2025 GMT
        Subject: CN=42D8DFC901E03DF24722F22A4F4514AF1100893D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7c:0a:2f:73:7e:35:65:3c:9e:15:19:04:e8:
                    45:2d:e4:d6:89:8f:61:10:0f:e2:d9:ff:e2:21:7e:
                    f4:7c:23:0f:83:8b:b6:de:94:15:77:c2:1b:37:60:
                    fe:e2:e3:81:52:cb:13:1c:63:4c:71:6d:fe:73:51:
                    c6:32:2a:a8:df:45:cf:d3:b7:5e:24:15:c1:de:ee:
                    06:bb:ef:9e:4c:ff:a3:0f:8f:ef:73:ca:6f:f3:4a:
                    06:bb:39:10:52:81:56:98:7f:7c:93:9a:1a:a1:8e:
                    25:e9:49:4d:04:34:75:9d:40:a3:b8:90:9e:88:1c:
                    65:27:75:83:28:22:5d:5d:49:14:e7:bb:92:91:06:
                    7f:21:e6:2b:8e:df:28:42:9d:bd:b9:26:c3:77:5c:
                    41:c5:41:66:e7:7e:81:28:5c:17:df:30:65:ad:e9:
                    ef:91:92:6f:6b:53:39:80:5a:38:54:61:46:6a:73:
                    9d:e8:d7:98:6f:57:4b:39:ce:34:f9:dd:d6:e8:69:
                    f6:8d:ac:93:89:32:95:a7:90:4f:69:f5:d5:3d:e2:
                    b0:94:f9:5a:0b:dd:b7:5b:d5:69:a1:cc:23:ea:e3:
                    86:95:9a:ad:dd:31:eb:e1:3e:03:86:c6:cc:9b:9d:
                    07:47:b8:fc:c5:d0:5c:8c:49:bd:66:e4:c3:17:f7:
                    1a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D8:DF:C9:01:E0:3D:F2:47:22:F2:2A:4F:45:14:AF:11:00:89:3D
            X509v3 Authority Key Identifier:
                keyid:25:AA:12:EC:28:68:B9:0A:69:3E:EA:D2:56:32:B1:5E:24:52:5E:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:5c:cf:31:16:3e:51:17:c0:54:50:39:68:f7:91:64:bc:bb:
         12:a2:31:13:a4:21:e8:ec:07:27:e4:c1:bc:a4:8b:48:cc:6b:
         66:bd:90:79:f9:4a:6f:13:96:6e:02:9f:51:1a:aa:26:25:84:
         cb:9c:0c:c6:4c:26:cb:a1:8f:88:68:e2:29:68:94:95:33:ec:
         80:4f:d2:70:09:0d:de:37:f5:26:a6:9f:07:ec:be:2d:ed:e4:
         eb:c9:b3:06:f8:aa:8d:1c:00:4e:78:23:09:6f:3a:bb:7c:4d:
         d0:c7:4f:2e:0c:21:ef:62:af:8c:ce:9a:ea:2a:05:d0:92:93:
         f4:4c:48:d0:19:9c:f8:bc:14:7a:e0:2d:1e:88:10:d0:e9:82:
         8d:2a:70:65:d0:43:cc:25:4a:aa:c1:41:67:41:d6:1d:48:88:
         3a:ac:e5:b7:6b:4b:b5:89:ce:d4:02:f5:59:0b:d6:b6:be:e0:
         3f:1c:01:cf:07:44:8c:00:de:79:fb:38:1a:38:4e:07:89:25:
         4d:c5:fe:f3:b7:39:0c:1a:c5:55:c5:7e:56:d7:14:df:07:e3:
         17:c5:1e:6f:0c:fa:20:4f:97:d1:0f:ff:28:42:00:0e:2c:96:
         e3:a1:e9:6b:a1:0a:23:7b:82:25:21:62:85:15:cc:03:7a:52:
         3e:78:57:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:56 2025 by rpki-client on console.sobornost.net