Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft
File:                     BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft (raw, json)
Hash identifier:          7um5YT2gxVWKMK/wcuOJm8cgRyKSB/SNzyN/Frk90Bc=
Subject key identifier:   B1:4C:8F:82:DE:6B:DC:E7:0D:CF:C8:B1:46:BF:CF:E8:BB:DE:CE:82
Authority key identifier: BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B
Certificate issuer:       /CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
Certificate serial:       7B1B55962F1D6633F2CD9ACE711CF45970D05C73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft
Manifest number:          D5
Signing time:             Mon 28 Apr 2025 00:41:34 +0000
Manifest this update:     Mon 28 Apr 2025 00:36:34 +0000
Manifest next update:     Fri 02 May 2025 22:20:34 +0000
Files and hashes:         1: 3230302e37342e3235352e302f32342d3234203d3e203238303530.roa (hash: SXF+iCOaXxohlu09DbmzNtLAo1poH9lkJGXGcaHFcJA=)
                          2: BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl (hash: NauiZw1u/gGU1WLCjUL+p1jiqm1X+XJHqWd0ANXBX2w=)
                          3: 3230302e37342e3235322e302f32342d3234203d3e203238303530.roa (hash: 93aGNsNifP3OVF+eeUqRj4VzNi6ml4CEBm9NizKGCk8=)
                          4: 3230302e37342e3235342e302f32342d3234203d3e203238303530.roa (hash: JY8I2y8DKYtW0y3ksx0VtUBjarL88aRVe3sizrByqR0=)
                          5: 3230302e37342e3234382e302f32342d3234203d3e203238303530.roa (hash: dOHLOsSAt9dMYyx6gsP/D/1zl2CueJEIiBzHqVQNr+I=)
                          6: 3230302e37342e3235302e302f32342d3234203d3e203238303530.roa (hash: dbtl+9uX7PdG2FA9REeBw158WIFvABX3kOPXdLJyE/Q=)
                          7: 3230302e37342e3235332e302f32342d3234203d3e203238303530.roa (hash: DYDiyM1Ja+2morMZBb13l0i1f+QjktuVzIfm4h0iEsM=)
                          8: 3230302e37342e3234392e302f32342d3234203d3e203238303530.roa (hash: k/un8zqpTMglunOD4EcoItdRqA0WoCxs4fArTst6BKI=)
                          9: 3230302e37342e3235312e302f32342d3234203d3e203238303530.roa (hash: 2qSj8DllafoL0YTwuGanzeUVSWm1vD7YvLZMrGi6fuA=)
                          10: 323830333a323034303a3a2f33322d3332203d3e203238303530.roa (hash: OmlbRyhT/ZJTfY7NLG2Wk/eDNN2JwiK/qbRcXt2tEDQ=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:1b:55:96:2f:1d:66:33:f2:cd:9a:ce:71:1c:f4:59:70:d0:5c:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
        Validity
            Not Before: Apr 28 00:36:34 2025 GMT
            Not After : May  2 22:20:34 2025 GMT
        Subject: CN=B14C8F82DE6BDCE70DCFC8B146BFCFE8BBDECE82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:41:4c:8d:8c:f1:95:9c:d4:24:14:fc:27:fd:
                    1a:15:3d:64:5d:c2:c2:8f:1f:03:0d:4c:91:43:cb:
                    3f:52:30:fe:c6:c0:80:58:d6:9d:c7:b8:c3:ea:b0:
                    02:15:b4:a2:e3:51:ef:7e:a1:9e:53:41:60:41:ae:
                    13:b8:2c:19:c4:7a:0c:12:0f:85:c4:69:f7:24:7a:
                    ce:55:99:bf:8d:7d:f5:84:8c:d8:29:9c:2c:b5:0d:
                    e4:1c:a9:6a:77:70:bd:15:f8:7d:ee:53:7c:56:2b:
                    7b:25:49:78:c9:e3:6f:73:db:66:13:40:17:b1:87:
                    36:21:6b:e5:58:d3:65:fb:a1:30:05:c1:f9:e2:ba:
                    56:3d:ed:dd:1c:cf:ca:d5:62:e9:db:f0:94:69:19:
                    d7:fa:08:53:bf:62:ab:48:6f:49:a2:7f:f6:39:9d:
                    20:b6:44:16:3e:f7:26:e1:18:f2:7e:14:11:d1:b5:
                    dc:e1:b4:e5:fb:69:d1:72:e7:fb:90:b8:dc:93:48:
                    99:f2:32:71:b6:9c:e1:ca:2b:33:87:6c:7e:c2:c8:
                    01:56:72:e1:70:e9:16:8b:0c:ea:4f:d8:7d:18:35:
                    4e:3d:26:b8:ad:45:17:c7:4e:88:e7:2e:9a:4c:e0:
                    fc:ea:6d:a6:18:dd:b9:f3:96:5e:43:d2:5b:d4:81:
                    72:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4C:8F:82:DE:6B:DC:E7:0D:CF:C8:B1:46:BF:CF:E8:BB:DE:CE:82
            X509v3 Authority Key Identifier:
                keyid:BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:e0:a1:bd:0a:95:30:29:87:f9:0b:10:c1:55:41:c4:be:64:
         6c:b0:52:60:28:05:b2:b2:44:99:5b:8a:4e:59:ae:e8:55:27:
         58:a2:84:65:a2:13:8b:92:ae:f2:c5:c1:6d:0e:e7:53:ae:e0:
         20:c2:69:81:92:8b:6f:ae:21:9b:40:de:67:6b:ca:51:fe:23:
         c8:65:04:77:e7:f8:06:8b:92:c4:58:0d:d2:c6:b5:24:d6:17:
         d5:54:c8:5c:ff:cc:bc:77:44:fa:53:99:3d:d8:f7:31:64:9d:
         dd:0b:5b:8e:09:fc:60:e5:a4:8a:99:ed:4e:37:7c:4d:43:fd:
         92:e5:a1:85:bf:99:22:24:e0:2f:16:9a:0b:bd:9a:40:d1:41:
         d9:00:f6:ba:02:96:96:07:31:83:01:f5:95:41:6e:0b:7a:86:
         7f:68:5f:58:2c:80:55:98:57:69:8e:70:e0:e0:f0:29:ca:4f:
         4b:d4:45:15:ef:8c:dd:34:94:4a:d8:09:65:37:fd:5f:f2:07:
         7b:54:f7:a8:cd:6e:3f:ea:5d:2e:78:6f:c2:83:e4:6f:bf:e1:
         75:e6:b2:d7:17:46:df:98:d8:6b:ed:c6:4c:94:fb:16:ce:1e:
         bc:aa:e5:03:67:79:11:70:16:e3:f5:42:25:2f:b7:b9:6e:43:
         99:31:fe:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:15 2025 by rpki-client on console.sobornost.net