Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.mft
File:                     4A8CA56E3B7BF88CD1347971DBEE896F367714C7.mft (raw, json)
Hash identifier:          JyQ6cGnSoRz9NnwE9yHoN6LMUZHbBLEE/SC+iT9KqwQ=
Subject key identifier:   2F:04:45:E4:7D:CD:FA:5A:F9:3C:66:62:36:49:5F:EB:E9:43:0E:47
Authority key identifier: 4A:8C:A5:6E:3B:7B:F8:8C:D1:34:79:71:DB:EE:89:6F:36:77:14:C7
Certificate issuer:       /CN=4A8CA56E3B7BF88CD1347971DBEE896F367714C7
Certificate serial:       21DA46177D4DBF99E00ABF8F8A059C7C95546EFF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.mft
Manifest number:          DB
Signing time:             Mon 28 Apr 2025 14:40:11 +0000
Manifest this update:     Mon 28 Apr 2025 14:35:11 +0000
Manifest next update:     Sat 03 May 2025 20:33:11 +0000
Files and hashes:         1: 3139302e31332e3231382e302f32332d3234203d3e20323632323038.roa (hash: 4bLg1hMHDPX2EXByMwQ7cFXxQQA9o6PMkwz4w+sXb9s=)
                          2: 3139302e31332e3231362e302f32342d3234203d3e20323632323038.roa (hash: 0rkxmO4pBWHfrl+hNkJCMfgYI1mw/jzQGG6puOttCF0=)
                          3: 3139302e31332e3231362e302f32312d3234203d3e20323632323038.roa (hash: +taxbYYapsAd4Lr2rc2Ms6wHqz24XDNrDJGf0PPg1WE=)
                          4: 3139302e31332e3232332e302f32342d3234203d3e20323632323038.roa (hash: PkRXnm55qWMN6d+n+wjL6E/vYG1pOn4aEs4rUblwKbo=)
                          5: 4A8CA56E3B7BF88CD1347971DBEE896F367714C7.crl (hash: o+oqJHIlxmJ47NHhTq5uZz/yF5r/BiOo9B53Ec48s7g=)
                          6: 3139302e31332e3231372e302f32342d3234203d3e20323632323038.roa (hash: MSsGtYyGM4xf5NGgoQeAQ4TMIWEzAe9gMbhdk/d/hqo=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:da:46:17:7d:4d:bf:99:e0:0a:bf:8f:8a:05:9c:7c:95:54:6e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A8CA56E3B7BF88CD1347971DBEE896F367714C7
        Validity
            Not Before: Apr 28 14:35:11 2025 GMT
            Not After : May  3 20:33:11 2025 GMT
        Subject: CN=2F0445E47DCDFA5AF93C666236495FEBE9430E47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a6:67:3a:ea:49:3c:35:18:73:c2:55:60:4e:
                    65:1b:cc:39:70:a1:c3:8e:a9:9b:de:22:44:a6:2e:
                    61:4a:46:34:b0:82:e3:37:6c:c4:d7:45:fd:06:ea:
                    84:d0:8e:59:bd:ef:b1:82:db:5e:60:fd:90:c1:09:
                    cc:a9:b3:07:fe:c6:eb:ef:f3:db:d3:19:9f:6e:1c:
                    df:86:07:30:5a:4c:ce:bc:0e:d1:e7:99:1a:69:1a:
                    98:0a:9a:d1:97:41:7f:85:b3:79:b0:ee:9f:86:18:
                    09:d0:db:c4:b1:09:48:a0:a9:da:f8:47:d1:36:6f:
                    b7:23:0e:2a:8d:46:af:c7:b6:3b:12:68:70:cb:81:
                    6b:72:2d:0e:ff:6a:f3:fe:48:f2:00:dc:ca:25:35:
                    bc:6e:b0:51:44:74:58:21:22:ec:a7:1b:c1:67:16:
                    ff:6f:44:62:23:2d:a1:b4:5a:ff:19:82:20:2d:7c:
                    dd:98:41:9b:04:91:8a:4e:da:5b:85:8c:c2:ae:49:
                    ca:09:3a:65:14:4c:fa:22:a4:90:df:96:63:31:0a:
                    a1:70:95:f0:c4:4a:90:eb:50:44:20:d0:36:38:17:
                    e3:ee:bf:8e:b6:7f:4f:b5:80:e7:3b:0c:b3:d2:ce:
                    c4:f1:55:dd:ec:2c:e6:21:2c:13:c3:04:eb:38:34:
                    8d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:04:45:E4:7D:CD:FA:5A:F9:3C:66:62:36:49:5F:EB:E9:43:0E:47
            X509v3 Authority Key Identifier:
                keyid:4A:8C:A5:6E:3B:7B:F8:8C:D1:34:79:71:DB:EE:89:6F:36:77:14:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:36:8d:3e:e8:13:db:b5:55:3b:3e:b7:e2:05:d7:7c:ce:16:
         0d:99:b0:1f:80:3e:f1:49:1a:63:d7:17:44:f2:69:50:a3:7f:
         8b:56:d0:c8:08:d7:ce:ad:a9:63:62:77:6b:be:98:0c:95:02:
         43:00:98:c6:dd:2b:0f:31:d2:2a:ef:77:d2:a9:8d:d2:65:69:
         2c:06:cd:26:26:e8:b9:27:3c:97:d6:da:78:66:5c:10:2b:16:
         10:c4:58:16:34:ad:30:c4:81:dc:fb:f8:bb:fe:78:bb:19:ef:
         3b:31:c9:85:9f:31:ac:57:6a:4a:08:dc:d8:69:c3:bf:5a:f0:
         f6:0a:4d:f0:e8:f0:30:d5:cd:a4:cd:f7:d0:3a:42:16:9f:0d:
         45:8d:88:94:af:32:c7:9d:4a:d5:94:d8:04:e9:51:21:36:61:
         ad:7d:6a:eb:e0:a8:85:e1:7e:40:e8:95:5f:ce:93:ad:b1:f0:
         06:a8:b8:dc:c1:98:55:a8:2e:cf:04:67:9b:4a:fa:2e:01:1a:
         57:8e:8b:5f:1a:1d:7a:ed:9d:8a:88:98:b5:9f:a3:f8:79:46:
         b1:e9:db:42:6a:49:53:e4:ef:92:79:a9:6b:66:0c:7d:56:a8:
         11:14:6d:14:5d:d1:10:77:2e:a2:4f:5e:dc:63:4a:f0:84:95:
         96:0e:ba:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:49 2025 by rpki-client on console.sobornost.net