Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9399D99CE2C923EA50E4F4495CD1769806749B9E22ADDF1B9FB5D5385C3CD654/0/9D98B90757B8CB40B7C9F37D51A2866FB3487370.mft
File:                     9D98B90757B8CB40B7C9F37D51A2866FB3487370.mft (raw, json)
Hash identifier:          KKRVQGBxkwkxzRjJotcMMG/n/3Bq+udJ4MNqcSQGFlw=
Subject key identifier:   AE:29:A6:F5:32:14:87:1D:A3:C3:D9:84:51:64:4D:C2:E4:B6:42:1A
Authority key identifier: 9D:98:B9:07:57:B8:CB:40:B7:C9:F3:7D:51:A2:86:6F:B3:48:73:70
Certificate issuer:       /CN=9D98B90757B8CB40B7C9F37D51A2866FB3487370
Certificate serial:       25AE566D1CF267EF0E9593D73D2AD2BAFAA0DBE0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D98B90757B8CB40B7C9F37D51A2866FB3487370.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9399D99CE2C923EA50E4F4495CD1769806749B9E22ADDF1B9FB5D5385C3CD654/0/9D98B90757B8CB40B7C9F37D51A2866FB3487370.mft
Manifest number:          C9
Signing time:             Mon 28 Apr 2025 10:58:02 +0000
Manifest this update:     Mon 28 Apr 2025 10:53:02 +0000
Manifest next update:     Sat 03 May 2025 17:55:02 +0000
Files and hashes:         1: 9D98B90757B8CB40B7C9F37D51A2866FB3487370.crl (hash: /w+y2fIXWZCOFfJwnzT3iCwKlT4Zzh3urCWgKFhQN/Y=)
                          2: 323830363a3430313a3a2f33322d3438203d3e20323730323138.roa (hash: PW+3qcZw2p+m57UnN5/KJhfqkW2Ty2uM5V9o2Qxs6Yw=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9399D99CE2C923EA50E4F4495CD1769806749B9E22ADDF1B9FB5D5385C3CD654/0/9D98B90757B8CB40B7C9F37D51A2866FB3487370.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9399D99CE2C923EA50E4F4495CD1769806749B9E22ADDF1B9FB5D5385C3CD654/0/9D98B90757B8CB40B7C9F37D51A2866FB3487370.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D98B90757B8CB40B7C9F37D51A2866FB3487370.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ae:56:6d:1c:f2:67:ef:0e:95:93:d7:3d:2a:d2:ba:fa:a0:db:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D98B90757B8CB40B7C9F37D51A2866FB3487370
        Validity
            Not Before: Apr 28 10:53:02 2025 GMT
            Not After : May  3 17:55:02 2025 GMT
        Subject: CN=AE29A6F53214871DA3C3D98451644DC2E4B6421A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:40:7d:ea:e4:41:14:9d:0b:0f:40:b5:4e:b2:
                    db:9f:9f:1d:73:98:73:88:e2:73:32:03:98:48:cc:
                    c1:b0:f4:08:6d:cb:ac:81:ec:c6:13:a8:2e:f8:94:
                    16:b9:2f:88:4f:e9:9f:19:85:a4:86:1f:e7:f3:3a:
                    1b:03:88:45:ce:41:63:4a:e5:05:ff:7d:6d:6d:e3:
                    53:1e:1d:58:45:01:55:62:85:e9:f1:a2:d7:90:36:
                    aa:3e:a2:e6:e6:a4:bb:b5:f7:74:bd:a2:3f:2b:75:
                    3a:73:37:84:4a:e1:4a:4a:21:56:bc:1d:c8:1f:a1:
                    7d:30:dd:52:90:b3:ae:9f:1a:8c:bc:f7:69:0c:63:
                    3b:69:88:ad:ac:51:c8:9b:d3:64:fa:a8:e8:96:28:
                    bd:da:c8:09:52:3c:33:ee:cb:03:f1:b9:aa:6e:88:
                    bd:80:3a:56:6f:71:11:d5:44:32:9c:d5:d4:78:ec:
                    83:20:17:b1:1c:3e:ef:bc:e8:91:92:7d:8c:c5:06:
                    2b:f1:da:4b:5f:ee:b1:86:96:7c:3d:f4:60:08:27:
                    4c:fa:86:73:ce:a4:79:4b:5d:1b:a0:9f:65:ba:9c:
                    aa:c6:02:36:30:90:be:37:86:2b:c1:88:67:0f:c0:
                    ca:3a:f5:2d:b2:33:f5:f0:18:30:03:e0:0d:a0:79:
                    fe:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:29:A6:F5:32:14:87:1D:A3:C3:D9:84:51:64:4D:C2:E4:B6:42:1A
            X509v3 Authority Key Identifier:
                keyid:9D:98:B9:07:57:B8:CB:40:B7:C9:F3:7D:51:A2:86:6F:B3:48:73:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9399D99CE2C923EA50E4F4495CD1769806749B9E22ADDF1B9FB5D5385C3CD654/0/9D98B90757B8CB40B7C9F37D51A2866FB3487370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D98B90757B8CB40B7C9F37D51A2866FB3487370.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9399D99CE2C923EA50E4F4495CD1769806749B9E22ADDF1B9FB5D5385C3CD654/0/9D98B90757B8CB40B7C9F37D51A2866FB3487370.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:0f:f9:ad:88:e7:1d:50:30:4e:1a:27:1b:37:bc:ec:93:32:
         7c:30:65:74:7d:3c:54:16:b5:bc:74:fe:a9:62:36:c8:e7:c4:
         11:19:12:1c:d1:b6:cd:a4:2a:cc:38:ab:47:14:a0:b9:e7:90:
         ec:34:72:9b:21:60:58:6c:59:54:39:cb:d5:22:8c:67:fb:b5:
         cf:df:a0:c8:12:76:7d:47:17:b8:1d:21:e8:fc:7e:8d:f5:b3:
         3b:b2:ac:94:23:2a:49:ab:cd:45:49:6e:dc:66:a2:e4:04:89:
         59:1c:1b:93:64:f3:78:fd:48:24:b5:8b:37:42:b0:3f:bc:5c:
         fb:58:45:67:98:74:bd:38:20:03:19:14:0b:ba:13:c2:8a:e4:
         08:87:e8:29:65:b5:80:00:b4:40:28:ac:cf:b6:ad:17:7c:af:
         f8:50:f6:14:d0:f6:c4:f3:a9:a2:c2:83:2f:bc:ad:fb:c9:31:
         fe:81:26:96:99:d0:17:55:0e:9e:c1:6c:ee:7e:5e:d5:18:db:
         15:d2:6f:b7:9b:f4:48:f1:e9:0c:0d:00:c6:8b:fa:1d:77:a7:
         ef:dc:76:84:ce:ad:78:b2:c6:39:43:70:f7:45:07:3a:77:c0:
         19:c5:be:a6:4d:70:31:ec:5f:36:21:a2:6b:b7:24:12:b0:37:
         10:41:48:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:50 2025 by rpki-client on console.sobornost.net