Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
File:                     CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft (raw, json)
Hash identifier:          KQs9kwRcG536bHaUZrievoZA3G+0ngupTdAPSsPSLf4=
Subject key identifier:   3C:CB:83:03:2F:CC:D5:DF:68:EE:72:2C:DB:16:AB:15:C1:FF:26:12
Authority key identifier: CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49
Certificate issuer:       /CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
Certificate serial:       488F09E25D53ED27392F1798E860A45C86EC6EC3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
Manifest number:          D8
Signing time:             Mon 28 Apr 2025 06:20:12 +0000
Manifest this update:     Mon 28 Apr 2025 06:15:12 +0000
Manifest next update:     Fri 02 May 2025 19:01:12 +0000
Files and hashes:         1: 3230302e3232392e302e302f32302d3234203d3e203532323633.roa (hash: 15AnM/dZ2cOa4ul8ya6chcuL7wO96O9N5qgUEe0rbqc=)
                          2: 3137302e3234362e3135362e302f32322d3234203d3e203532323633.roa (hash: 5bexrapK4q9CZpLcnBFYUUN76MCYRsb04cp3LUHAk/I=)
                          3: 3230302e3130352e39362e302f32312d3234203d3e203532323633.roa (hash: oYkq7+CyDDn/snXLYaYFtH/o41Wi0O+YgxyA71w+48Q=)
                          4: 3137302e3135302e35362e302f32322d3234203d3e203532323633.roa (hash: FEWS1FF/XF+UlpNr4p4hcjaJzVSq5aKm/ZVtKJXfumQ=)
                          5: 3137372e39332e302e302f31392d3234203d3e203532323633.roa (hash: s4BvyelKadZMYkpAtLqR0SNsZ2baCRlAZ5NIgSS0Lrw=)
                          6: 3133382e3131382e38302e302f32322d3234203d3e203532323633.roa (hash: +tpnvgwn+fekYn4fFlRp22qfms/lZ40WHjkbzkol9vs=)
                          7: CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl (hash: vIvS+7/5yBFiY0HYU50I+gE+ZXnlecEW6DOa+iVACjo=)
                          8: 3139302e3131332e39362e302f31392d3234203d3e203532323633.roa (hash: y02JrXJYNXuWW9UHV3528drFMBQbw38YOOkzJPUFtFk=)
                          9: 3139302e3137312e39362e302f31392d3234203d3e203532323633.roa (hash: OdxcYAVFWJ0LXWU4ccY3o3N3bUq6GFK5FchgsDHF/dc=)
                          10: 323830333a313330303a3a2f33322d3634203d3e203532323633.roa (hash: rjI4ULmGu6qYjv0FL0k2/1/NMRijEcEzQUkamWFbEsw=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:8f:09:e2:5d:53:ed:27:39:2f:17:98:e8:60:a4:5c:86:ec:6e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
        Validity
            Not Before: Apr 28 06:15:12 2025 GMT
            Not After : May  2 19:01:12 2025 GMT
        Subject: CN=3CCB83032FCCD5DF68EE722CDB16AB15C1FF2612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ed:aa:f3:71:5b:6c:ae:5d:a3:bf:1b:da:25:
                    3f:5a:32:99:9d:99:d8:44:98:6a:b7:e3:8b:79:d9:
                    70:ac:77:25:91:1b:73:f2:ea:07:e7:0c:2e:39:be:
                    18:e6:d2:f5:16:79:a7:d9:9e:de:a6:54:6d:5a:83:
                    be:13:c0:64:02:74:56:35:fd:e2:6a:bf:1f:19:2b:
                    c3:f9:02:78:89:18:65:5c:49:c8:98:f0:20:07:56:
                    8f:b1:ba:2c:46:75:b4:d7:2a:59:c3:e5:84:6e:29:
                    5d:d6:0f:aa:8d:95:7c:1c:5d:20:3a:5c:ac:38:26:
                    e2:3b:f0:b3:ac:07:15:0f:d9:68:04:62:c0:90:cb:
                    9a:6c:6c:f5:fe:32:de:f0:7b:a2:95:42:c2:05:34:
                    e0:31:f7:f2:f1:f5:ef:b1:8f:9a:81:03:0d:4e:b1:
                    ef:e0:ef:ba:8f:35:cc:1f:96:b1:30:43:7b:b0:aa:
                    77:fc:a3:45:8a:90:2c:dc:15:cf:cb:b2:23:2e:88:
                    a7:4a:50:75:62:15:85:7c:80:d9:b3:4e:9f:fd:6c:
                    a0:3b:e2:5f:60:ba:1f:0f:d6:16:25:93:40:6a:eb:
                    a4:12:69:ee:ff:d9:1c:f0:13:87:40:7b:51:86:83:
                    bb:ad:07:8b:9c:d3:b0:fe:e7:07:56:1f:92:2d:41:
                    ba:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CB:83:03:2F:CC:D5:DF:68:EE:72:2C:DB:16:AB:15:C1:FF:26:12
            X509v3 Authority Key Identifier:
                keyid:CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:2e:7d:84:f2:3b:7c:96:a7:37:dd:6f:84:93:79:44:b7:16:
         dc:8d:fc:82:08:85:b2:9f:8d:ac:ef:c3:f3:1f:8f:5c:df:68:
         10:dc:7e:e3:e0:4e:5e:20:23:7d:9c:c9:ff:54:8e:22:d5:7c:
         48:4d:9b:dd:e5:11:3f:9d:c4:a6:81:2b:b5:06:5f:8f:73:e4:
         6c:fe:71:15:d7:20:a1:d5:95:7c:fd:d3:be:d0:32:5f:c0:c1:
         ac:a6:7e:83:4d:cf:b0:1c:0f:03:86:f2:96:a8:01:9a:95:60:
         22:a1:7e:e3:96:1b:07:07:e2:66:d1:5c:ee:de:21:e4:71:8f:
         61:1e:a5:79:be:61:94:c5:75:9f:80:ed:d5:60:9a:e1:95:80:
         53:a1:fa:52:07:25:76:7f:38:2e:bc:38:e9:6d:f6:3d:ec:0f:
         de:fd:7c:fa:1c:95:12:46:e8:48:79:9a:9f:09:8a:21:23:96:
         8e:3e:8d:43:d5:5a:c6:82:1c:40:85:a0:56:99:9b:3c:46:11:
         6d:cc:21:66:12:d4:00:13:19:de:a3:1f:b5:1a:88:09:d7:ea:
         f9:fa:0c:4d:98:ca:5b:60:2c:c2:77:49:35:f2:a5:68:8c:1f:
         c5:74:14:7b:5d:c1:c9:a7:f6:c6:d9:ba:82:86:d9:9c:34:e8:
         67:45:08:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:21 2025 by rpki-client on console.sobornost.net