Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft
File:                     8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft (raw, json)
Hash identifier:          WSMK47eVU7Qr7X8hivuFuiTAh5GInPJg+e0T8NqrSeA=
Subject key identifier:   9D:16:37:73:11:39:F0:2F:4B:0F:64:E5:96:BD:C4:98:F9:14:D3:22
Authority key identifier: 88:42:BB:EE:FA:85:FE:37:1B:DE:BC:4D:BB:17:09:EB:67:1B:0A:72
Certificate issuer:       /CN=8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72
Certificate serial:       3D0C8901D691643DD66D3A928D81A3FD7FD25C0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft
Manifest number:          08
Signing time:             Sun 27 Apr 2025 00:32:20 +0000
Manifest this update:     Sun 27 Apr 2025 00:27:20 +0000
Manifest next update:     Fri 02 May 2025 07:16:20 +0000
Files and hashes:         1: 8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.crl (hash: rEjopFhcvXx5RXi2NElfAVhmc4dKz6P5N9fLzZBnAbs=)
                          2: 323830333a6164303a3a2f33322d3332203d3e20323734303634.roa (hash: xT9XwSauYoSUnu1hhUiyvbXy1q8NqQprbVYTgbnc4vM=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:0c:89:01:d6:91:64:3d:d6:6d:3a:92:8d:81:a3:fd:7f:d2:5c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72
        Validity
            Not Before: Apr 27 00:27:20 2025 GMT
            Not After : May  2 07:16:20 2025 GMT
        Subject: CN=9D1637731139F02F4B0F64E596BDC498F914D322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7d:5a:59:63:48:55:d0:f5:4e:83:5c:da:89:
                    b1:e6:47:e3:ac:0f:fe:48:6f:b2:01:2f:fc:e5:66:
                    4e:1c:c7:57:70:ff:83:7f:b5:b6:91:ca:62:6b:b3:
                    6e:26:0b:22:49:da:f3:04:f4:aa:b6:c6:7f:83:d3:
                    65:fc:fa:b0:63:18:da:09:d9:50:93:39:bf:8d:c3:
                    40:b5:4d:a9:d9:33:9c:70:da:c2:b1:e2:e0:d8:ff:
                    b8:b7:17:0f:e5:c2:5e:9a:7a:d0:1d:f1:de:60:94:
                    30:45:f0:e1:3b:02:b5:00:84:6e:54:21:44:eb:b5:
                    86:9a:a3:48:1f:51:e7:8c:80:f0:5e:8a:c7:55:8b:
                    72:08:7d:59:38:41:cd:56:bf:9a:ee:9e:e3:f1:e4:
                    43:4d:aa:43:a2:fc:2b:48:74:b1:6f:9a:77:86:00:
                    44:a3:25:1c:5f:7d:d7:eb:2b:48:f0:75:a3:79:98:
                    e3:b4:34:3b:b6:8e:33:6f:6d:36:61:d1:76:ad:f3:
                    62:f1:a8:4f:bc:b6:85:a4:68:28:03:2c:00:7a:28:
                    ef:50:08:69:7f:45:35:6f:21:b8:50:f4:b5:b1:99:
                    ac:64:51:a7:09:b8:ea:6d:e3:c6:2f:28:b2:cc:b5:
                    2c:d6:9e:0e:f4:6a:94:6a:be:4c:54:cb:04:05:8d:
                    2d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:16:37:73:11:39:F0:2F:4B:0F:64:E5:96:BD:C4:98:F9:14:D3:22
            X509v3 Authority Key Identifier:
                keyid:88:42:BB:EE:FA:85:FE:37:1B:DE:BC:4D:BB:17:09:EB:67:1B:0A:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:22:28:30:88:7f:1e:98:b7:2c:2b:3c:7d:8e:fe:72:b9:c4:
         0a:11:98:66:7d:32:94:b7:56:48:c5:fa:1f:fc:6e:e9:43:66:
         a6:08:38:b4:e6:4f:0a:7a:9c:72:92:c0:41:66:5f:17:1a:1f:
         51:8c:b0:d7:53:47:60:ac:a6:1a:0f:b7:80:c0:fe:6b:5d:65:
         b4:f7:ec:8c:ee:f7:5b:45:e8:b7:45:da:83:56:e6:ce:17:b7:
         b3:6d:45:8b:0f:a9:a1:4a:0c:89:d7:1a:d4:9c:1a:93:22:31:
         95:63:45:ae:66:13:bf:1f:ed:a6:d8:f0:e4:0a:68:78:cb:89:
         a8:ce:20:ca:66:28:d3:26:57:57:8f:34:94:e5:39:04:0d:69:
         1d:f7:84:be:f9:01:a1:56:35:e6:3b:6f:6e:00:85:8c:61:6a:
         77:cd:3f:4b:54:7b:9c:48:a5:10:dc:74:13:64:0e:59:12:9d:
         78:e4:2e:d1:e1:34:2a:ab:7d:72:40:36:1c:74:ea:91:df:b5:
         f1:2d:52:a5:0b:38:1c:63:32:af:66:e1:53:3c:48:b9:7f:62:
         13:dc:66:07:04:b8:ec:25:37:7e:42:90:53:b2:7f:b2:1b:38:
         99:e8:66:43:8f:bc:4c:48:9f:c3:2b:ad:ef:02:9d:5d:7c:72:
         54:8c:62:a6
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUPQyJAdaRZD3WbTqSjYGj/X/SXA4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg0MkJCRUVGQTg1RkUzNzFCREVCQzREQkIxNzA5RUI2
NzFCMEE3MjAeFw0yNTA0MjcwMDI3MjBaFw0yNTA1MDIwNzE2MjBaMDMxMTAvBgNV
BAMTKDlEMTYzNzczMTEzOUYwMkY0QjBGNjRFNTk2QkRDNDk4RjkxNEQzMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLfVpZY0hV0PVOg1zaibHmR+Os
D/5Ib7IBL/zlZk4cx1dw/4N/tbaRymJrs24mCyJJ2vME9Kq2xn+D02X8+rBjGNoJ
2VCTOb+Nw0C1TanZM5xw2sKx4uDY/7i3Fw/lwl6aetAd8d5glDBF8OE7ArUAhG5U
IUTrtYaao0gfUeeMgPBeisdVi3IIfVk4Qc1Wv5runuPx5ENNqkOi/CtIdLFvmneG
AESjJRxffdfrK0jwdaN5mOO0NDu2jjNvbTZh0Xat82LxqE+8toWkaCgDLAB6KO9Q
CGl/RTVvIbhQ9LWxmaxkUacJuOpt48YvKLLMtSzWng70apRqvkxUywQFjS3VAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUnRY3cxE58C9LD2Tllr3EmPkU0yIwHwYDVR0j
BBgwFoAUiEK77vqF/jcb3rxNuxcJ62cbCnIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNjY5OTRCMjA3OTkwQjFCRDM3MUNFRjExNDRFRjc3NEFF
RTM0MDdBOEEyOTM2QzVGREU5NDkyQTZCRUU1RDMyLzAvODg0MkJCRUVGQTg1RkUz
NzFCREVCQzREQkIxNzA5RUI2NzFCMEE3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84ODQyQkJFRUZBODVGRTM3MUJE
RUJDNERCQjE3MDlFQjY3MUIwQTcyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTY2OTk0QjIwNzk5MEIxQkQzNzFDRUYxMTQ0RUY3NzRBRUUzNDA3QThB
MjkzNkM1RkRFOTQ5MkE2QkVFNUQzMi8wLzg4NDJCQkVFRkE4NUZFMzcxQkRFQkM0
REJCMTcwOUVCNjcxQjBBNzIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCoIigwiH8emLcsKzx9jv5yucQK
EZhmfTKUt1ZIxfof/G7pQ2amCDi05k8KepxyksBBZl8XGh9RjLDXU0dgrKYaD7eA
wP5rXWW09+yM7vdbRei3RdqDVubOF7ezbUWLD6mhSgyJ1xrUnBqTIjGVY0WuZhO/
H+2m2PDkCmh4y4moziDKZijTJldXjzSU5TkEDWkd94S++QGhVjXmO29uAIWMYWp3
zT9LVHucSKUQ3HQTZA5ZEp145C7R4TQqq31yQDYcdOqR37XxLVKlCzgcYzKvZuFT
PEi5f2IT3GYHBLjsJTd+QpBTsn+yGziZ6GZDj7xMSJ/DK63vAp1dfHJUjGKm
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:25 2025 by rpki-client on console.sobornost.net