Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D61860C0604BA139BEB3D652902D018E6ED34FFB4002B4B34EBBF217B1F7776/0/BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.mft
File:                     BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.mft (raw, json)
Hash identifier:          m9ufsQCT4zEXq+jwzl9xpdpq505mL1uKTEyvTRnZ7Po=
Subject key identifier:   D0:DF:8B:16:53:AB:CB:99:EE:C6:83:FF:AF:A1:F2:00:09:89:D3:96
Authority key identifier: BD:46:A9:8D:09:6A:D8:AE:77:F8:6D:CA:2F:11:E0:BD:0A:B0:F2:E7
Certificate issuer:       /CN=BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7
Certificate serial:       40F533911A03BE2B636AAFB8D191CDCF2A20D8A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D61860C0604BA139BEB3D652902D018E6ED34FFB4002B4B34EBBF217B1F7776/0/BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.mft
Manifest number:          D4
Signing time:             Sat 26 Apr 2025 18:38:43 +0000
Manifest this update:     Sat 26 Apr 2025 18:33:43 +0000
Manifest next update:     Thu 01 May 2025 23:42:43 +0000
Files and hashes:         1: 34352e3137322e3231382e302f32342d3234203d3e20323637383130.roa (hash: uoo514WR/dUkEa5zgU3sdbbRN+Z9srwGiyXQAMxyJ7U=)
                          2: BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.crl (hash: J66ZSzai+okY3dF3DTRYkEpSyTup681ATefk9q9WeNw=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D61860C0604BA139BEB3D652902D018E6ED34FFB4002B4B34EBBF217B1F7776/0/BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D61860C0604BA139BEB3D652902D018E6ED34FFB4002B4B34EBBF217B1F7776/0/BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f5:33:91:1a:03:be:2b:63:6a:af:b8:d1:91:cd:cf:2a:20:d8:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7
        Validity
            Not Before: Apr 26 18:33:43 2025 GMT
            Not After : May  1 23:42:43 2025 GMT
        Subject: CN=D0DF8B1653ABCB99EEC683FFAFA1F2000989D396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e7:e8:76:e5:fd:51:dc:9a:63:6b:9a:f8:f8:
                    f9:fe:a6:fa:c6:77:82:9a:29:7d:7b:31:ff:1d:46:
                    ce:1d:fa:d8:2a:31:43:3a:86:b9:7d:93:90:f6:b1:
                    0c:eb:62:c8:d9:bb:62:7a:26:c2:4c:53:79:0b:ba:
                    8d:ce:41:10:27:80:8e:51:f7:55:85:b7:04:85:5a:
                    e4:2a:c0:1d:31:9f:c6:74:63:7f:b8:35:c9:54:39:
                    67:f7:46:51:48:22:4a:f2:30:d2:47:eb:59:85:85:
                    76:74:6c:2b:00:93:23:72:04:96:1e:33:60:44:0e:
                    1c:7a:c1:49:ff:0f:0c:42:ea:aa:b0:b8:95:00:91:
                    fe:f0:83:b3:1e:a4:1f:d3:c7:86:cb:80:6c:84:64:
                    83:a0:8e:48:73:cf:c6:ef:cf:2a:ff:52:09:34:a0:
                    0d:37:21:b9:f6:49:21:98:ed:2b:c6:5d:98:4d:e7:
                    eb:ab:d2:aa:34:7f:06:9b:e7:bc:ef:f1:4d:d4:fd:
                    eb:77:98:66:aa:58:48:73:3b:45:11:66:d5:81:2b:
                    e3:6b:31:70:a6:4d:df:fa:26:af:83:88:db:ce:ce:
                    56:f3:f9:db:3d:c2:03:05:93:5c:a4:31:e4:ac:92:
                    c3:94:17:24:b0:76:55:81:7e:e8:9a:35:a7:7e:88:
                    0c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DF:8B:16:53:AB:CB:99:EE:C6:83:FF:AF:A1:F2:00:09:89:D3:96
            X509v3 Authority Key Identifier:
                keyid:BD:46:A9:8D:09:6A:D8:AE:77:F8:6D:CA:2F:11:E0:BD:0A:B0:F2:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D61860C0604BA139BEB3D652902D018E6ED34FFB4002B4B34EBBF217B1F7776/0/BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D61860C0604BA139BEB3D652902D018E6ED34FFB4002B4B34EBBF217B1F7776/0/BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:d5:79:73:6c:d5:03:93:61:75:d7:91:10:b0:20:3c:4a:f8:
         27:dd:c1:4a:13:4d:86:12:37:c9:aa:6b:9b:d2:5e:30:02:1a:
         27:d7:b3:a9:0e:20:46:16:64:eb:63:aa:16:0d:2c:ad:5e:9e:
         56:7e:c5:16:09:d1:1d:66:be:87:00:2d:5e:62:c4:19:89:a2:
         b2:aa:0b:38:a2:ca:24:48:6d:38:a2:80:61:3f:10:33:24:9a:
         5b:16:79:71:6a:8c:f0:04:af:6a:e7:d0:30:61:d6:6a:09:4e:
         7a:d3:fd:1c:29:11:dc:f8:71:4b:2e:f7:1f:db:de:9d:b2:6b:
         af:ad:03:af:6a:ff:fa:3d:fc:93:69:c5:38:6a:c8:6d:ae:6c:
         b0:53:4d:38:50:e8:5c:5f:0d:3d:da:3e:f5:78:c0:0f:38:75:
         67:c7:f4:45:84:41:f7:64:75:45:12:f5:2f:eb:7a:77:52:0d:
         f6:0d:4c:76:1d:d1:72:21:11:4c:71:b9:f3:51:3d:51:bb:62:
         ff:0b:8a:8b:04:9e:29:e3:bc:26:1c:08:9f:70:17:15:a1:34:
         07:97:a6:9a:02:a2:1b:6f:e8:82:19:2f:af:56:70:ff:6a:ae:
         9c:0c:19:d7:8b:b5:3d:e9:cf:e2:b3:91:5f:31:33:c4:b4:a3:
         3b:7b:1f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:59:58 2025 by rpki-client on console.sobornost.net