Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.mft
File:                     08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.mft (raw, json)
Hash identifier:          T9lPFZhaQW2tux5fHhjU5sxXjavgyBF23hd8C2/3Www=
Subject key identifier:   5B:CD:FC:68:A2:5E:50:D4:81:D9:10:51:34:DF:CF:F9:B0:5E:90:AD
Authority key identifier: 08:06:8D:F7:BE:8B:7B:50:27:B2:FC:A1:92:7A:DB:4C:9E:65:D3:CF
Certificate issuer:       /CN=08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF
Certificate serial:       04D6DC54718BAD1576C51AF4BB730545CD025F83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.mft
Manifest number:          D2
Signing time:             Mon 28 Apr 2025 05:19:37 +0000
Manifest this update:     Mon 28 Apr 2025 05:14:37 +0000
Manifest next update:     Fri 02 May 2025 18:30:37 +0000
Files and hashes:         1: 3230302e3130352e3131322e302f32312d3234203d3e203238303538.roa (hash: lEua8GJfzTeL7+gQflgP2IWdLAwsUC6edxWk25GBWq8=)
                          2: 08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.crl (hash: VTgLUsMLyLWvMPH69uIy9k0e/2I2Zpd4RNEABvcXvpY=)
                          3: 3137392e36302e35352e302f32342d3234203d3e203532343638.roa (hash: iBwj3LwCxSn+trQ2LpXyaXwtNqH4IswX7AvIdSM0taY=)
                          4: 3137392e36302e35322e302f32342d3234203d3e20323731393239.roa (hash: muRdS5UUHmqHTES2uASQoN7avmsiuaUzMsQofwErSm4=)
                          5: 3137392e36302e35312e302f32342d3234203d3e20323635373939.roa (hash: A7ZfpVL9k7oePcqMyU0pREN1zbDPFruz6rI3Sd5xflg=)
                          6: 3137392e36302e34382e302f32302d3234203d3e203238303538.roa (hash: GSISkN9ckabl4XJXDBVqkBBg0sarMpJCQtjyheQzxvU=)
                          7: 3137392e36302e35362e302f32342d3234203d3e20323633383035.roa (hash: l4CjdEl1yGnDuHd/wJKz4ZA2iWrWy/UmeC3vLbR0yUw=)
                          8: 3137392e36302e35332e302f32342d3234203d3e203532343638.roa (hash: tJWnRb5eowxJncmo8LxGwbc/E8diLmCqTp86vBWztWk=)
                          9: 3137392e36302e35342e302f32342d3234203d3e20323635373939.roa (hash: tP2obconJhkcUn2eDgNR97hybSc9UDfAaE6WIo06M68=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d6:dc:54:71:8b:ad:15:76:c5:1a:f4:bb:73:05:45:cd:02:5f:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF
        Validity
            Not Before: Apr 28 05:14:37 2025 GMT
            Not After : May  2 18:30:37 2025 GMT
        Subject: CN=5BCDFC68A25E50D481D9105134DFCFF9B05E90AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c9:d1:35:85:b6:5e:ee:7e:e2:33:94:02:2f:
                    48:53:8b:d6:2e:0b:d7:ea:48:c6:6f:74:06:43:31:
                    4d:77:85:ae:83:d7:58:dc:cf:76:c6:88:1d:47:de:
                    25:6e:b1:76:7b:ba:77:cf:c5:28:3e:ee:88:ca:21:
                    38:4a:cd:42:67:49:6e:28:77:09:4b:d7:f2:f1:c3:
                    fc:80:74:9e:97:92:8d:f4:97:82:6c:76:a4:82:16:
                    0b:98:26:eb:6e:a6:cc:7b:b1:bb:fb:55:c1:c3:c4:
                    f1:3f:53:c2:4a:c6:ab:d1:ff:8f:1d:69:90:cf:c6:
                    dc:e4:6f:43:6a:68:08:df:e4:71:ba:f5:c7:b3:0c:
                    e2:fc:4a:ae:98:21:2b:51:bf:04:38:c8:2d:5a:43:
                    20:13:4a:96:58:f1:44:8c:a1:07:3f:59:a8:db:9c:
                    80:b1:2e:a5:c0:b2:84:f9:13:78:c0:f2:e2:7b:03:
                    ae:f0:0b:a0:aa:1e:99:58:c7:32:e1:82:84:c4:12:
                    9f:bc:53:80:87:f2:91:0f:a9:10:8d:d3:61:05:a5:
                    4b:b0:25:17:f7:d9:af:ff:a3:47:d9:7e:6b:6e:5d:
                    f8:15:08:b0:21:5a:b8:b3:02:59:81:1a:8c:49:7a:
                    ac:f6:cd:c8:47:c2:6e:5e:23:a2:44:b2:9e:25:a8:
                    df:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:CD:FC:68:A2:5E:50:D4:81:D9:10:51:34:DF:CF:F9:B0:5E:90:AD
            X509v3 Authority Key Identifier:
                keyid:08:06:8D:F7:BE:8B:7B:50:27:B2:FC:A1:92:7A:DB:4C:9E:65:D3:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:53:24:e1:f9:df:b8:87:98:d6:19:6f:c6:d3:78:ee:1b:eb:
         47:f1:c7:2e:ad:c2:95:01:16:20:00:a7:80:f7:8a:26:63:19:
         68:13:5a:b8:c3:fc:81:11:12:78:56:83:3d:fe:a7:91:ec:81:
         c2:fa:9a:7c:61:97:aa:5a:b0:7a:49:27:9f:43:51:a8:06:38:
         86:7f:c4:bd:66:64:d7:f2:27:03:83:0c:f9:e4:cb:12:7d:9c:
         9e:81:ad:89:be:b6:87:79:fb:b9:4b:26:f1:2c:6f:2d:ee:65:
         ec:04:a1:a3:0a:9b:34:84:77:47:7e:68:6d:9b:bf:4c:ae:e2:
         19:4b:dd:87:41:b1:9a:b8:08:c4:95:dd:f1:53:0d:64:e3:db:
         2a:5c:53:f3:f1:d6:bf:04:5c:b0:f0:93:ea:06:8f:fd:dc:04:
         bf:33:34:50:6b:60:42:1a:19:4d:ec:ad:47:57:49:31:07:b5:
         20:05:38:8b:b5:97:6e:c3:24:f9:eb:4d:c2:1f:41:e3:37:56:
         9f:b6:60:ff:69:88:d1:37:13:84:68:f3:ae:63:64:92:f5:1d:
         9d:3a:22:56:bd:b4:ac:c1:48:6f:68:75:5a:1f:2f:80:00:97:
         e3:66:88:99:ee:5c:bc:13:18:5f:82:e6:e2:06:e9:a9:8a:aa:
         d5:44:5d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:21 2025 by rpki-client on console.sobornost.net