Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
File:                     A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft (raw, json)
Hash identifier:          q4G0wxBFhqOmHQTIAPrfBwOecSXAPeHjk4JG0Z/NPM8=
Subject key identifier:   22:07:AC:F6:EC:64:C7:37:BA:B7:22:E9:3F:18:ED:35:68:BC:A1:F2
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       5A79391BCFE81D4095A0924D01B16829BF5B7D99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
Manifest number:          D3
Signing time:             Mon 28 Apr 2025 05:04:27 +0000
Manifest this update:     Mon 28 Apr 2025 04:59:27 +0000
Manifest next update:     Fri 02 May 2025 09:06:27 +0000
Files and hashes:         1: 3139302e3139362e3232382e302f32342d3234203d3e20323634363838.roa (hash: cm+2+l8fDwyxqPwwlVf6aHiMLWm4RzB13GKLbpcixs4=)
                          2: 3139302e3130372e3234352e302f32342d3234203d3e20323634363838.roa (hash: dfUdLR1ZD0V6GW0ff7cXlsz5CZtAHoB2qKEN/CpR/Lk=)
                          3: 3139302e3139362e3232352e302f32342d3234203d3e20323634363838.roa (hash: 2TFE70+p1JQKJLzLrXAyTv9HO85R9Mfe4hSX5Q9jt94=)
                          4: 3139302e3130372e3234342e302f32342d3234203d3e20323634363838.roa (hash: 9FMVaQwOvkJe4ejMVwiJFIYqx4JrLbfvB9ImYZ/0AwI=)
                          5: 3139302e3139362e3232342e302f32342d3234203d3e20323634363838.roa (hash: A8KLTN+I82RIMxTPwc0HYcZRQ0tBrsyI+BjMsajZODk=)
                          6: 3139302e3139362e3233372e302f32342d3234203d3e20323634363838.roa (hash: G7clLSagF4ZFY3UOqd/LMAm0xWpmmQZXUuBeX6E1lTU=)
                          7: 3139302e3139362e3232342e302f32302d3230203d3e20323634363838.roa (hash: mgT2wxv6zjyMcpZVISr2t6EQpFtScg0u6rdxIMZ4Qdk=)
                          8: 3139302e3130372e3234372e302f32342d3234203d3e20323634363838.roa (hash: XmEhSFuHVuZM0xaQG4wqUOffljTbarv4gfEdQ1lrYQY=)
                          9: 3139302e3130372e3234322e302f32342d3234203d3e20323634363838.roa (hash: w6F/goUP3ryv9Il23qJ9AB4uDgIvA0K10GpNeWIAwIA=)
                          10: 3139302e3139362e3233312e302f32342d3234203d3e20323634363838.roa (hash: mRyq8lxw3rWpBho/mYhSeCJ8uufErPCjhN28UIxJVms=)
                          11: 3139302e3139362e3232372e302f32342d3234203d3e20323634363838.roa (hash: Kda5YUOvvoTLfwR6WoxpVf9fEhgVwBUSpqzBkxGItZk=)
                          12: 3139302e3139362e3233332e302f32342d3234203d3e20323634363838.roa (hash: chPWMafWoF9pY4feSFD20cqMCGlpog4pfStajHri3EY=)
                          13: 3139302e3130372e3234362e302f32342d3234203d3e20323634363838.roa (hash: VraYU4UEQDzyhlSKd5JuJynSlR4ge6NOwJ8fAug+Krg=)
                          14: 3139302e3139362e3232382e302f32322d3232203d3e20323634363838.roa (hash: 8b63YJBPNqC/MM604Et3g7aYls1jXB4Rgu1xbX2AEys=)
                          15: 3139302e3139362e3233302e302f32342d3234203d3e20323634363838.roa (hash: zU04ry1mJqQ/ulBDHk/ZOZN99IwrGZ4IMYmUDtEaKH8=)
                          16: 3139302e3139362e3233322e302f32342d3234203d3e20323634363838.roa (hash: X0YfrPA6i9qxKibVrmp1RqTGUBC9/8sQS5XuxZuv1MM=)
                          17: 3139302e3139362e3232392e302f32342d3234203d3e20323634363838.roa (hash: dzIrg29PBghrDahTTrEBo9NSnW9+2FEOy/3vkGfW5t8=)
                          18: 3139302e3130372e3234312e302f32342d3234203d3e20323634363838.roa (hash: cD9LXuzFSJ2oTzbP0NfoKkxzEaZn8dDCVM4/TScf+Cg=)
                          19: 3139302e3139362e3233362e302f32342d3234203d3e20323634363838.roa (hash: UdUs/1gD9446L4zajJf4Di9FtULzLibnVKe+WLHpDHQ=)
                          20: 3139302e3130372e3234302e302f32312d3234203d3e20323634363838.roa (hash: FqOfz0e9z38d44Q/VFPeDgOP6bFZPkzX5d2O/iXvJtc=)
                          21: 3139302e3130372e3234302e302f32342d3234203d3e20323634363838.roa (hash: 1j4uRf3L/kKfymd1EmQhNp+CY6krJ1DsWMrSkSCmzqY=)
                          22: 3139302e3139362e3233342e302f32342d3234203d3e20323634363838.roa (hash: dwNE+n7bb1yq2/4r/hiHptnNP2+H759Fq434ABGhVkA=)
                          23: 3139302e3139362e3233382e302f32342d3234203d3e20323634363838.roa (hash: XDghWvZnsgd+bJLWBJ2STuSdO/2LC8KaVaqS1TodWJQ=)
                          24: A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl (hash: jsV36ix5xPYfNaOYpsIdPriCmB+DaphlvhaEy79P4aU=)
                          25: 3139302e3130372e3234332e302f32342d3234203d3e20323634363838.roa (hash: 3+MB7T99p5y/DbLUKMNTwR+mP2J9sn/36EU7/BWt8GI=)
                          26: 3139302e3139362e3233392e302f32342d3234203d3e20323634363838.roa (hash: u0REvgyxhTaxrTnqM1+o8UZS/ZFSwTOQkHCEsdzjZMU=)
                          27: 3139302e3139362e3233352e302f32342d3234203d3e20323634363838.roa (hash: gp5wz2zWJSezvWFcg/XRUcRf5PZ+g+9nyKiEKxWTUjw=)
                          28: 3139302e3139362e3232362e302f32342d3234203d3e20323634363838.roa (hash: BFiQYA14v2OjJTSpnvCoTa3KdMKR6Baq2E5HxBZflZY=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:79:39:1b:cf:e8:1d:40:95:a0:92:4d:01:b1:68:29:bf:5b:7d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Apr 28 04:59:27 2025 GMT
            Not After : May  2 09:06:27 2025 GMT
        Subject: CN=2207ACF6EC64C737BAB722E93F18ED3568BCA1F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:aa:22:b7:69:f3:6b:48:82:e6:ad:3a:42:1c:
                    ba:15:2e:21:d0:4c:27:ed:c2:69:b9:6d:91:91:1a:
                    9b:9e:db:d2:61:e1:c6:f1:33:b6:ab:1b:68:44:51:
                    f9:aa:de:de:bd:43:7f:e7:26:7f:e4:d5:44:75:9b:
                    80:0a:7f:01:fb:2f:c1:a7:6f:79:60:13:d3:b8:c0:
                    81:fa:ef:01:e1:cb:96:71:44:d4:52:42:02:bf:37:
                    6c:ed:b1:7d:96:a4:4c:0a:4e:7e:9e:8a:38:55:0b:
                    2d:76:97:68:9c:3a:ab:2c:f5:f9:ff:48:ae:af:f1:
                    bb:91:ae:2a:b1:ec:85:56:dc:f8:f9:e9:65:2b:60:
                    b9:8c:e6:d9:35:22:c6:50:e9:f0:d5:6e:0b:db:3c:
                    8d:fa:3d:7b:8d:fa:f8:3e:f5:3c:00:35:50:0a:ce:
                    77:c9:64:85:1a:04:54:11:97:f9:0b:9d:76:d0:cc:
                    e3:59:e6:0a:3b:0d:09:b6:09:3d:8c:64:d5:fd:e3:
                    24:2f:85:e1:0c:0d:1d:00:03:57:25:a2:92:c5:ce:
                    73:c2:3a:73:3e:60:8a:f8:50:6e:2c:a2:c8:6d:76:
                    5b:f9:53:da:da:56:8a:d3:f5:ee:97:04:cb:df:eb:
                    a2:d7:de:8e:9d:fb:13:d0:fc:78:81:f9:b5:e7:43:
                    18:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:07:AC:F6:EC:64:C7:37:BA:B7:22:E9:3F:18:ED:35:68:BC:A1:F2
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:e1:a2:03:c9:ce:46:94:8c:92:48:a2:4d:12:7d:1b:89:0f:
         ac:18:91:55:a6:7d:e1:51:ef:68:f7:fc:1e:9e:85:8f:e4:98:
         f5:ee:9a:b4:9f:44:2e:42:51:75:6f:36:54:fb:cc:70:5e:20:
         d8:b7:60:77:dc:33:9a:b1:1e:be:0d:00:b8:64:18:11:37:fb:
         0d:c3:88:38:fa:d5:7d:cd:fb:4b:9c:30:0b:32:f6:1b:8d:a8:
         4c:b5:3a:8f:25:85:0f:44:a6:bb:92:ca:bc:c1:ce:0e:06:f5:
         5c:c7:10:07:40:23:c7:4f:3e:86:8c:b4:92:82:eb:db:36:32:
         20:48:82:e2:e5:e1:af:df:b1:c0:2c:58:01:d8:91:92:fe:b3:
         00:89:12:a5:83:a4:cc:84:41:30:40:55:34:eb:1a:bb:1d:75:
         53:f8:d5:a1:4c:e2:24:b5:3f:ef:6e:ce:a2:c1:ca:e6:44:5c:
         71:cc:a1:52:02:0c:c9:77:57:c0:b6:f3:0e:ea:01:d1:d9:db:
         17:f0:c1:39:41:18:77:f0:63:18:52:4f:24:a6:20:1c:76:f3:
         40:24:fd:ad:36:ac:f1:4d:95:82:38:d8:70:be:c1:55:5e:ab:
         43:f4:da:7a:32:0d:9b:c1:b6:ad:64:71:93:88:05:b0:d9:92:
         d7:88:2e:5e
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUWnk5G8/oHUCVoJJNAbFoKb9bfZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTgxNTdCQkYzNTg0NDY5MzE3RUI0MDU4RDFCOUIzNzlE
QzlEMTdEOTAeFw0yNTA0MjgwNDU5MjdaFw0yNTA1MDIwOTA2MjdaMDMxMTAvBgNV
BAMTKDIyMDdBQ0Y2RUM2NEM3MzdCQUI3MjJFOTNGMThFRDM1NjhCQ0ExRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIqiK3afNrSILmrTpCHLoVLiHQ
TCftwmm5bZGRGpue29Jh4cbxM7arG2hEUfmq3t69Q3/nJn/k1UR1m4AKfwH7L8Gn
b3lgE9O4wIH67wHhy5ZxRNRSQgK/N2ztsX2WpEwKTn6eijhVCy12l2icOqss9fn/
SK6v8buRriqx7IVW3Pj56WUrYLmM5tk1IsZQ6fDVbgvbPI36PXuN+vg+9TwANVAK
znfJZIUaBFQRl/kLnXbQzONZ5go7DQm2CT2MZNX94yQvheEMDR0AA1clopLFznPC
OnM+YIr4UG4soshtdlv5U9raVorT9e6XBMvf66LX3o6d+xPQ/HiB+bXnQxiDAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUIges9uxkxze6tyLpPxjtNWi8ofIwHwYDVR0j
BBgwFoAUqBV7vzWERpMX60BY0bmzedydF9kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RDkzOTREQjAwNzJGQkJENUVBRkM1NEM1QzU2MjE1REY2
ODA3Rjg2NkI0QzcyNTVBODJCMUQ3MkM5RTk3RDZELzAvQTgxNTdCQkYzNTg0NDY5
MzE3RUI0MDU4RDFCOUIzNzlEQzlEMTdEOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BODE1N0JCRjM1ODQ0NjkzMTdF
QjQwNThEMUI5QjM3OURDOUQxN0Q5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUQ5Mzk0REIwMDcyRkJCRDVFQUZDNTRDNUM1NjIxNURGNjgwN0Y4NjZC
NEM3MjU1QTgyQjFENzJDOUU5N0Q2RC8wL0E4MTU3QkJGMzU4NDQ2OTMxN0VCNDA1
OEQxQjlCMzc5REM5RDE3RDkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAg4aIDyc5GlIySSKJNEn0biQ+s
GJFVpn3hUe9o9/wenoWP5Jj17pq0n0QuQlF1bzZU+8xwXiDYt2B33DOasR6+DQC4
ZBgRN/sNw4g4+tV9zftLnDALMvYbjahMtTqPJYUPRKa7ksq8wc4OBvVcxxAHQCPH
Tz6GjLSSguvbNjIgSILi5eGv37HALFgB2JGS/rMAiRKlg6TMhEEwQFU06xq7HXVT
+NWhTOIktT/vbs6iwcrmRFxxzKFSAgzJd1fAtvMO6gHR2dsX8ME5QRh38GMYUk8k
piAcdvNAJP2tNqzxTZWCONhwvsFVXqtD9Np6Mg2bwbatZHGTiAWw2ZLXiC5e
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:20 2025 by rpki-client on console.sobornost.net