Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB77D0B4D23BCBE780AE5CA174587C8EA98CBEDD91FCCB151A80B5E5A151CF13/0/53C6FA7F2B93D2B911B3F49BBF9C49C099EED29B.mft
File:                     53C6FA7F2B93D2B911B3F49BBF9C49C099EED29B.mft (raw, json)
Hash identifier:          ow5k+yVeeIqm2i2AkiTsHGyFIQpRsfpfO0i6ZZ+vCLY=
Subject key identifier:   1C:5F:59:5E:39:AE:02:DE:65:F8:0A:D2:46:7F:F8:D5:F2:70:2B:8E
Authority key identifier: 53:C6:FA:7F:2B:93:D2:B9:11:B3:F4:9B:BF:9C:49:C0:99:EE:D2:9B
Certificate issuer:       /CN=53C6FA7F2B93D2B911B3F49BBF9C49C099EED29B
Certificate serial:       68649A4850CFA2C678F98AFBEE6AB19D53558705
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53C6FA7F2B93D2B911B3F49BBF9C49C099EED29B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB77D0B4D23BCBE780AE5CA174587C8EA98CBEDD91FCCB151A80B5E5A151CF13/0/53C6FA7F2B93D2B911B3F49BBF9C49C099EED29B.mft
Manifest number:          D2
Signing time:             Mon 28 Apr 2025 08:11:20 +0000
Manifest this update:     Mon 28 Apr 2025 08:06:20 +0000
Manifest next update:     Fri 02 May 2025 13:16:20 +0000
Files and hashes:         1: 53C6FA7F2B93D2B911B3F49BBF9C49C099EED29B.crl (hash: zT+XUaE5waQ/FNbV8/Tdvpk1KuxG1USyPaSukT1PFZc=)
                          2: 323830333a666131303a3a2f33322d3438203d3e20323731393336.roa (hash: IZxsSYe+9PAJETHTErGC79es9eijm4T6nh95IovLkFE=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB77D0B4D23BCBE780AE5CA174587C8EA98CBEDD91FCCB151A80B5E5A151CF13/0/53C6FA7F2B93D2B911B3F49BBF9C49C099EED29B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB77D0B4D23BCBE780AE5CA174587C8EA98CBEDD91FCCB151A80B5E5A151CF13/0/53C6FA7F2B93D2B911B3F49BBF9C49C099EED29B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53C6FA7F2B93D2B911B3F49BBF9C49C099EED29B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:64:9a:48:50:cf:a2:c6:78:f9:8a:fb:ee:6a:b1:9d:53:55:87:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53C6FA7F2B93D2B911B3F49BBF9C49C099EED29B
        Validity
            Not Before: Apr 28 08:06:20 2025 GMT
            Not After : May  2 13:16:20 2025 GMT
        Subject: CN=1C5F595E39AE02DE65F80AD2467FF8D5F2702B8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:eb:63:d0:1a:45:fe:e4:e6:f4:76:f4:87:70:
                    f3:65:af:6d:5c:a9:5d:aa:6b:f5:85:7c:f0:cb:bf:
                    63:cc:b9:cb:35:7f:24:68:49:a0:06:3d:67:de:e6:
                    cb:cc:21:36:c6:93:59:b6:f7:93:7f:30:83:92:cb:
                    f3:7f:06:3d:bf:e2:ca:0a:6f:7a:b5:a5:60:3b:50:
                    21:db:59:dc:63:e6:39:6c:cb:59:41:4e:e4:89:79:
                    ad:82:68:6e:5d:3e:43:3c:2e:77:4a:ac:84:b5:1b:
                    26:1a:0c:f8:5a:ad:c7:06:17:4c:ee:bd:89:80:bf:
                    5f:15:d2:87:00:f0:a4:03:7f:a5:e9:09:54:bb:2b:
                    7c:e7:40:fe:f7:4a:6c:ef:4a:5b:18:c3:49:21:08:
                    01:ed:76:ec:aa:ee:d9:49:2b:ae:a7:aa:68:7f:83:
                    09:3e:ae:f0:f0:6b:b9:f5:20:36:aa:22:53:89:87:
                    81:96:df:89:13:39:6f:a5:7d:1d:35:5e:88:4d:b7:
                    a1:1a:77:8d:66:ee:15:66:ff:a2:41:c8:f9:93:d3:
                    99:d8:53:b8:38:b9:b6:e0:97:31:37:33:47:8b:05:
                    b0:40:e5:96:69:99:df:92:a8:25:20:6a:28:46:31:
                    26:0c:7f:93:83:48:28:39:68:48:a5:81:dc:42:2c:
                    04:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:5F:59:5E:39:AE:02:DE:65:F8:0A:D2:46:7F:F8:D5:F2:70:2B:8E
            X509v3 Authority Key Identifier:
                keyid:53:C6:FA:7F:2B:93:D2:B9:11:B3:F4:9B:BF:9C:49:C0:99:EE:D2:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB77D0B4D23BCBE780AE5CA174587C8EA98CBEDD91FCCB151A80B5E5A151CF13/0/53C6FA7F2B93D2B911B3F49BBF9C49C099EED29B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53C6FA7F2B93D2B911B3F49BBF9C49C099EED29B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB77D0B4D23BCBE780AE5CA174587C8EA98CBEDD91FCCB151A80B5E5A151CF13/0/53C6FA7F2B93D2B911B3F49BBF9C49C099EED29B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:22:88:89:5d:76:01:7b:04:bb:ca:c3:56:ac:45:41:3d:bb:
         84:b9:69:97:8d:f4:38:53:80:79:46:59:1c:87:1f:50:8f:75:
         ca:43:ab:09:b7:8b:28:e3:d3:af:e6:5b:73:09:7b:de:9c:38:
         fd:2e:7c:b2:27:fe:d1:37:20:11:d2:19:e3:c8:7c:34:e1:ae:
         d2:cb:3b:e0:3d:97:1c:70:89:e6:59:39:7a:f6:f2:42:de:9e:
         a1:ad:4e:4b:69:2a:9d:53:fa:ec:0d:ef:44:54:7e:e2:46:30:
         0d:b9:f6:6e:1e:50:98:0b:8c:87:1c:e2:57:85:c3:9c:8f:b7:
         42:58:77:29:06:9b:2c:f3:14:c2:93:50:4a:0c:a1:15:de:a1:
         28:d8:b0:c5:c3:73:73:41:16:c5:72:8b:ae:12:28:1c:d9:f3:
         36:cc:cf:96:ff:47:27:06:06:8c:bf:5d:da:59:e9:a4:24:47:
         a6:01:05:5e:cc:9c:8e:a1:6a:b1:ed:41:8f:fb:82:c1:fa:52:
         4b:10:82:d8:70:96:79:cd:db:25:d3:96:9b:6e:b4:59:02:08:
         ac:d3:83:34:2f:ab:70:52:f8:68:8d:05:ec:ad:05:51:2d:40:
         c7:f5:1b:9f:cc:5f:f6:a8:ff:c1:7d:42:3a:59:e0:be:20:ed:
         69:6b:2b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:14 2025 by rpki-client on console.sobornost.net