Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.mft
File:                     78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.mft (raw, json)
Hash identifier:          87VmsMvg+HvPpTKtCNtFoZVphHjcecPrQvSpWnight8=
Subject key identifier:   2E:67:8A:27:65:51:7D:84:9A:AD:CC:ED:FB:D9:4A:85:71:4E:95:64
Authority key identifier: 78:53:3E:B3:FC:1F:0B:8C:19:3C:BD:87:00:0A:8F:67:54:AA:FE:91
Certificate issuer:       /CN=78533EB3FC1F0B8C193CBD87000A8F6754AAFE91
Certificate serial:       60F32FDED4998B729C8E249097C3132B4F86E459
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.mft
Manifest number:          D4
Signing time:             Wed 23 Apr 2025 22:42:19 +0000
Manifest this update:     Wed 23 Apr 2025 22:37:19 +0000
Manifest next update:     Mon 28 Apr 2025 08:29:19 +0000
Files and hashes:         1: 3230312e3139302e302e302f31382d3234203d3e203134373534.roa (hash: AMSwn/ztxJRkhZnfdYpxz0wF7WBXksXWNI7k2p1l7AM=)
                          2: 3139302e3130372e3132382e302f32302d3234203d3e203134373534.roa (hash: 6usO7ZkmnwBTxcOj//3Bs8l+ij1b+IlBXgjfTpkUwNQ=)
                          3: 78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.crl (hash: gRVue9cIO3vnpVgXO150O5TzAcN+CV8A/GWp8nA1Zno=)
                          4: 3139302e3130352e3132382e302f32302d3234203d3e203134373534.roa (hash: HCvme4QpdY0zCIznlje0PYVv0c3XbzrXh2UrGdia20Y=)
                          5: 323830333a343630303a3a2f33322d3438203d3e203134373534.roa (hash: vm6TdEr+aHQ0kC/qbsTZJgFdKu9lYZirWOsuTkYkBwM=)
                          6: 3230302e3130372e3132302e302f32312d3234203d3e203134373534.roa (hash: fiWPLSteNTOYUsvzRZ5xKClLt4HpxAijR7LnOKlsxSY=)
                          7: 3138312e3131352e302e302f31372d3234203d3e203134373534.roa (hash: JktX1yo/QdojIV2xLMImUv/DNIwHgT9kazENDuKFC28=)
                          8: 3139302e3130372e3134342e302f32302d3234203d3e203134373534.roa (hash: nlM6M4N01Kvz3OLXSPaxxcMdL1vlGoZzLRgq6ExkMEA=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 01:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f3:2f:de:d4:99:8b:72:9c:8e:24:90:97:c3:13:2b:4f:86:e4:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78533EB3FC1F0B8C193CBD87000A8F6754AAFE91
        Validity
            Not Before: Apr 23 22:37:19 2025 GMT
            Not After : Apr 28 08:29:19 2025 GMT
        Subject: CN=2E678A2765517D849AADCCEDFBD94A85714E9564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b8:cc:d0:3b:5d:b1:6c:9e:6d:50:f5:64:7d:
                    59:16:55:90:c1:ee:d9:74:fa:a5:0a:09:d1:a9:14:
                    3f:70:16:63:6c:bb:2a:72:a4:6b:07:45:0d:75:bc:
                    6b:2a:4e:b1:8a:67:98:27:7a:0f:8e:d5:82:75:c4:
                    0b:9d:17:77:c2:58:df:dd:a5:15:59:ac:56:6b:b7:
                    8b:a2:12:2a:59:15:37:05:0c:ec:5f:dc:e4:0b:98:
                    7c:fb:a6:3d:c1:9f:9f:ea:80:14:78:61:95:f8:68:
                    6d:9a:17:ab:23:6f:a4:67:1e:44:a0:4a:f5:a9:0b:
                    77:44:e5:a6:c9:8e:7e:a2:f1:0b:ee:4a:1f:4c:82:
                    b1:b3:4f:69:4d:53:ab:8b:82:61:bc:31:e7:e1:9d:
                    2e:e5:ea:07:ba:5e:d5:2c:c7:ac:28:2a:b9:fc:da:
                    90:10:37:91:8d:6b:95:37:72:1a:c8:21:9b:f7:c9:
                    07:29:8c:78:a6:e7:02:33:8e:ca:25:20:d8:cd:0b:
                    03:85:94:70:74:72:80:bf:e0:e4:d2:f0:10:36:09:
                    5d:b6:25:bc:03:1f:c5:8c:e5:ab:56:5e:33:dd:1a:
                    ac:16:54:a8:42:ef:a1:19:3b:05:54:37:d5:7f:c7:
                    15:49:d5:77:bb:69:22:ff:de:fd:fc:8a:04:1b:19:
                    b6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:67:8A:27:65:51:7D:84:9A:AD:CC:ED:FB:D9:4A:85:71:4E:95:64
            X509v3 Authority Key Identifier:
                keyid:78:53:3E:B3:FC:1F:0B:8C:19:3C:BD:87:00:0A:8F:67:54:AA:FE:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:a4:56:7b:ab:cc:77:86:8f:b0:97:21:67:47:5f:fc:5b:07:
         31:68:f5:e0:c4:4a:5a:5b:6d:39:7c:a1:aa:48:90:0b:4d:26:
         f2:3c:93:b6:dd:c7:77:4e:cb:e3:ea:07:7d:da:ef:4d:92:4a:
         2f:a5:d8:02:d3:21:c8:fa:1e:68:b4:63:71:f7:13:d8:96:f3:
         f4:fc:68:ef:e7:fc:6a:29:fc:f3:2f:54:0e:1c:bf:95:04:e3:
         41:4a:e2:ce:d8:a9:0e:6c:84:7d:e5:21:74:a2:8d:e5:69:48:
         97:5a:7f:b9:5f:ed:1b:0e:00:ee:2f:3a:d9:53:05:a2:a9:e8:
         f9:08:2f:86:32:9e:42:48:e6:ff:83:0c:d3:d9:90:83:14:38:
         30:80:26:7a:d2:71:99:35:4f:74:f4:ad:f8:b6:a8:de:47:78:
         60:c4:93:e2:80:9d:8f:a0:04:01:17:c4:c8:bd:38:82:c9:cf:
         1e:d5:b9:cf:b3:df:5f:2a:7a:5c:99:0e:cf:b0:01:69:51:63:
         68:fd:55:d3:27:df:36:47:58:f1:83:18:27:52:4b:35:d4:ef:
         53:07:cc:b8:a6:89:8a:71:d2:56:df:fa:51:84:90:ec:3b:6d:
         d4:b4:a0:80:d7:f8:36:51:7b:10:a1:ba:d2:b5:2c:d5:f8:ef:
         ec:3f:ac:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 01:45:50 2025 by rpki-client on console.sobornost.net