Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft
File:                     958AE74C7555B3A115DBFFC8840395CE219F59B5.mft (raw, json)
Hash identifier:          Ggpy0EKtbIOBcTM4xn/+HTCvAEB6iq+/HrfR4GuLSl4=
Subject key identifier:   D0:3A:0F:11:E1:94:A1:97:C2:38:87:36:D4:41:41:4F:4B:20:8A:A5
Authority key identifier: 95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5
Certificate issuer:       /CN=958AE74C7555B3A115DBFFC8840395CE219F59B5
Certificate serial:       28DA3FE4E07B43172C55EDC4EFC22CEDFC7592B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft
Manifest number:          D1
Signing time:             Sun 27 Apr 2025 16:16:39 +0000
Manifest this update:     Sun 27 Apr 2025 16:11:39 +0000
Manifest next update:     Fri 02 May 2025 22:23:39 +0000
Files and hashes:         1: 3139322e3134312e34302e302f32342d3234203d3e20323635373934.roa (hash: 1eatcISrRWEjiJa/p7xBX6b+4bgRrTHTtU+86eOUpvs=)
                          2: 958AE74C7555B3A115DBFFC8840395CE219F59B5.crl (hash: GB66DxPdM5S/Rd4Y9XAWl9WsUAkSSX9zk0K+CSDcpnM=)
                          3: 3139322e3134312e34302e302f32322d3232203d3e20323635373934.roa (hash: wrwjTyh9pOptnNw9f/Tc7oUs2AyzWXt8NtoMFsZcyT4=)
                          4: 3139322e3134312e34312e302f32342d3234203d3e20323635373934.roa (hash: DsrrF+UUK1Q1sB6PvCAllfUXQz6xxhErCjiWOoHEOPc=)
                          5: 323830333a653032303a3a2f33322d3332203d3e20323635373934.roa (hash: kte3CTPUXYYiPA/2fZyA0RgagBOOb+s0KWpcd0MjF1Y=)
                          6: 3139322e3134312e34322e302f32342d3234203d3e20323635373934.roa (hash: diXk1/Gtwc/ZoVUL78ZJK+xf8Tc+NqK2dFhbBJwjjXQ=)
                          7: 3139322e3134312e34332e302f32342d3234203d3e20323635373934.roa (hash: lFMPHHji0WkM/od00nWsQTxJbZLHB08h94Wr7OzPf/o=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:da:3f:e4:e0:7b:43:17:2c:55:ed:c4:ef:c2:2c:ed:fc:75:92:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958AE74C7555B3A115DBFFC8840395CE219F59B5
        Validity
            Not Before: Apr 27 16:11:39 2025 GMT
            Not After : May  2 22:23:39 2025 GMT
        Subject: CN=D03A0F11E194A197C2388736D441414F4B208AA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:16:7c:a6:b6:73:8f:bd:f5:dc:e5:39:98:58:
                    8b:7a:8a:7a:d3:36:15:ee:a7:bc:ad:3c:17:8b:f5:
                    c2:d0:fc:b7:8f:09:a6:dc:0e:e7:21:df:b7:69:5f:
                    a3:4b:e9:25:e0:95:02:ef:41:6b:55:8a:db:f3:d2:
                    0d:d3:16:85:c3:2a:2f:77:34:a8:9c:64:6c:dc:2a:
                    db:9f:d0:35:f7:d9:76:b0:3d:6f:ee:af:9b:b8:59:
                    a4:d7:db:29:0a:11:85:06:e4:b2:71:42:9c:28:33:
                    00:25:1a:54:5d:be:85:48:64:67:87:f7:34:50:5b:
                    17:d6:e5:87:07:ca:39:3a:34:62:ef:86:ee:4f:97:
                    5d:4f:46:63:27:2e:51:ce:84:ba:f8:4d:5f:a0:25:
                    a6:f9:f3:9c:35:d1:74:96:79:1b:36:18:f3:1e:4c:
                    fc:d6:29:8d:d3:74:a4:80:7c:28:b0:d1:8e:4c:3c:
                    69:2c:6a:60:44:67:01:0f:7c:58:2b:6b:99:9d:c5:
                    bb:2f:f4:d9:f7:cf:f4:de:b3:9b:01:3a:24:8b:14:
                    bb:49:0f:30:6f:70:08:e0:b7:3e:a3:ac:25:7d:09:
                    2c:ca:bd:6a:d9:0e:d7:57:8b:22:24:63:aa:e6:7f:
                    c8:83:6f:d0:87:9c:58:0e:c4:99:85:a3:a0:b0:97:
                    d2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3A:0F:11:E1:94:A1:97:C2:38:87:36:D4:41:41:4F:4B:20:8A:A5
            X509v3 Authority Key Identifier:
                keyid:95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:cf:f4:6e:30:2f:b6:18:ee:59:7b:f8:73:2a:6c:0a:9d:cb:
         19:2a:35:ab:76:d5:98:19:5b:e1:4b:58:c0:73:b7:01:af:15:
         b7:0f:93:7c:28:4f:ba:b4:d4:37:23:69:a5:ae:43:01:f9:46:
         22:80:e4:01:2a:e0:3a:50:88:e0:f4:4c:75:52:55:f6:5c:5b:
         00:e4:06:1e:fa:c0:76:99:04:ab:31:e2:c1:a0:70:e3:c5:d8:
         1d:a4:ef:6f:0d:f1:6b:14:54:2c:ef:3f:7e:3f:74:4b:93:37:
         9e:e6:fe:fa:c2:d9:eb:f3:50:6d:f4:b0:b6:2f:e7:23:8b:d2:
         a8:e5:a8:ca:de:14:42:c8:c3:79:4c:b2:b7:b1:8a:24:ea:46:
         43:0d:63:b5:f4:8e:e6:d1:fa:1c:c0:7e:32:68:f5:bd:74:4e:
         05:3a:62:85:2b:61:db:63:98:ec:41:ef:88:c5:83:23:d6:f0:
         e6:c4:f2:cb:79:57:f6:c1:6a:21:eb:f3:e8:16:e1:1f:c9:c2:
         11:dc:01:30:f0:39:af:05:48:08:8c:bf:b2:75:e5:8a:33:8d:
         9b:cf:f0:4e:f5:d1:94:81:23:8a:81:ec:be:37:f2:af:7e:a2:
         75:0c:5b:a3:ad:f7:a1:f8:de:ca:8a:07:66:f0:70:46:77:d1:
         22:6d:c2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:03 2025 by rpki-client on console.sobornost.net