Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft
File:                     20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft (raw, json)
Hash identifier:          ELA+3WCJV7T62XuYhnaF2PzjBFv4aik7NPLFOhWolTg=
Subject key identifier:   F8:9D:D6:F5:E0:34:00:EB:88:E9:A6:0A:BC:E9:ED:EA:86:5C:07:C8
Authority key identifier: 20:AF:1F:FA:81:5C:6E:3F:3B:90:68:AD:D3:D3:AF:B1:10:DA:7D:45
Certificate issuer:       /CN=20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45
Certificate serial:       4B02B752765A35B0657D4658807EDEFDD867D0F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft
Manifest number:          D4
Signing time:             Mon 28 Apr 2025 20:18:35 +0000
Manifest this update:     Mon 28 Apr 2025 20:13:35 +0000
Manifest next update:     Sun 04 May 2025 19:31:35 +0000
Files and hashes:         1: 34352e3138392e3233352e302f32342d3234203d3e20323733303036.roa (hash: tHCd2o3Ws3sRzLZIPTJtx1XUzBWF561xvUTQHUix3mg=)
                          2: 3230312e3133312e38382e302f32332d3233203d3e20323733303036.roa (hash: UxWVsSHgc7sCdCdtXfz5xPAdpgKquF6TGclmGWtYyus=)
                          3: 20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl (hash: ZEXvPHODi/hXQFpS55zOB1q54EUOyD7yhF9x1DsaTzs=)
                          4: 3230312e3133312e38382e302f32342d3234203d3e20323733303036.roa (hash: Y3oZHoznCaUCBQoRIIqHUk1GE9kbKfIIaQ4fpU0PJjw=)
                          5: 3230312e3133312e38392e302f32342d3234203d3e20323733303036.roa (hash: D4Wuw579mtmQk3148E/t7+wdylw1tUvsSFL+d95cbeo=)
                          6: 323830333a383465303a3a2f33322d3332203d3e20323733303036.roa (hash: IhrcR9v71SHVWTPWhhNNwFVAgzsaGowtRREEzljdA5Q=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:02:b7:52:76:5a:35:b0:65:7d:46:58:80:7e:de:fd:d8:67:d0:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45
        Validity
            Not Before: Apr 28 20:13:35 2025 GMT
            Not After : May  4 19:31:35 2025 GMT
        Subject: CN=F89DD6F5E03400EB88E9A60ABCE9EDEA865C07C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:eb:80:96:ec:cd:ab:b0:d7:ed:bd:69:37:f4:
                    7b:97:7c:1a:69:ea:41:41:68:04:4d:0a:56:fd:b1:
                    3c:44:2a:d4:49:51:48:36:06:07:67:7a:d6:d1:ed:
                    99:38:c5:10:b3:4d:1b:2d:5c:60:1d:cd:c9:02:0c:
                    9f:d2:46:c0:f9:ea:8a:bf:81:6e:ba:29:d9:7e:38:
                    34:39:91:e1:9e:d1:75:48:fb:3b:0d:b1:f0:8e:ea:
                    9e:0f:e8:98:6b:fb:35:cd:c8:fb:d6:18:86:ff:a6:
                    53:2a:f9:60:de:16:b3:d7:88:93:4c:d8:a4:d5:8e:
                    3a:4e:f3:c1:e6:b2:d5:97:8b:cb:fb:61:d2:de:8f:
                    40:85:3e:37:ba:fc:c4:4f:37:64:79:4e:63:b7:3d:
                    cc:7f:eb:c0:0f:37:2f:6f:8a:f6:16:70:7e:73:d6:
                    61:ce:87:a7:d9:7a:3c:66:55:a6:59:df:67:bc:74:
                    08:f5:1a:18:1f:8c:97:8f:08:5e:c9:07:20:90:d9:
                    a0:44:db:ad:44:e8:3c:84:73:67:79:2d:01:4d:b3:
                    19:56:26:0e:04:3f:10:af:92:e4:5a:2b:ed:74:1b:
                    76:6a:82:d1:74:8c:a9:d2:2d:14:88:e2:1b:f2:55:
                    43:31:0d:84:16:2d:3d:cc:93:19:5c:3e:03:ba:d2:
                    ed:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:9D:D6:F5:E0:34:00:EB:88:E9:A6:0A:BC:E9:ED:EA:86:5C:07:C8
            X509v3 Authority Key Identifier:
                keyid:20:AF:1F:FA:81:5C:6E:3F:3B:90:68:AD:D3:D3:AF:B1:10:DA:7D:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:72:40:dd:92:68:64:84:98:be:b4:f8:50:2d:30:52:e5:47:
         9b:57:23:06:3b:4b:ef:ed:e2:cb:8a:2b:03:15:57:00:9c:84:
         48:11:5e:af:c7:11:81:f9:2e:e9:9b:98:57:f2:c8:58:13:31:
         f0:d1:88:e0:b5:ea:68:48:37:49:6f:bf:28:09:16:3f:ef:80:
         2a:d5:6d:73:a0:53:b1:cf:ee:2f:f1:1d:50:30:c6:46:56:f9:
         f4:e5:05:d8:37:58:60:e5:ff:c2:07:26:57:e4:ac:43:f0:d5:
         76:a8:dd:82:d8:4d:98:ab:d3:69:9a:79:a2:23:5b:f4:5b:3d:
         bd:d8:86:b0:81:fe:13:ba:8c:26:3c:42:1a:b7:b9:c5:78:41:
         82:d7:e0:40:37:dd:4d:f0:09:c2:2e:ce:3f:53:49:2e:79:5d:
         a8:d0:3e:96:93:18:04:94:ea:78:d8:ea:e6:3c:03:04:68:3f:
         20:4e:5d:eb:3c:c9:ed:52:0b:b8:07:80:44:59:83:dc:94:6a:
         e9:18:08:30:68:a1:64:87:7b:f3:9e:a9:7a:aa:5c:1d:94:ec:
         5d:14:84:8f:7a:d9:9e:45:0e:fb:f5:c9:d6:b6:7a:cf:9f:74:
         c1:c3:13:1e:be:43:e3:89:ad:0b:5f:ab:6b:87:c4:eb:f2:60:
         c9:0a:7b:23
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUSwK3UnZaNbBlfUZYgH7e/dhn0PcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBBRjFGRkE4MTVDNkUzRjNCOTA2OEFERDNEM0FGQjEx
MERBN0Q0NTAeFw0yNTA0MjgyMDEzMzVaFw0yNTA1MDQxOTMxMzVaMDMxMTAvBgNV
BAMTKEY4OURENkY1RTAzNDAwRUI4OEU5QTYwQUJDRTlFREVBODY1QzA3QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc64CW7M2rsNftvWk39HuXfBpp
6kFBaARNClb9sTxEKtRJUUg2BgdnetbR7Zk4xRCzTRstXGAdzckCDJ/SRsD56oq/
gW66Kdl+ODQ5keGe0XVI+zsNsfCO6p4P6Jhr+zXNyPvWGIb/plMq+WDeFrPXiJNM
2KTVjjpO88HmstWXi8v7YdLej0CFPje6/MRPN2R5TmO3Pcx/68APNy9vivYWcH5z
1mHOh6fZejxmVaZZ32e8dAj1GhgfjJePCF7JByCQ2aBE261E6DyEc2d5LQFNsxlW
Jg4EPxCvkuRaK+10G3ZqgtF0jKnSLRSI4hvyVUMxDYQWLT3MkxlcPgO60u3DAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU+J3W9eA0AOuI6aYKvOnt6oZcB8gwHwYDVR0j
BBgwFoAUIK8f+oFcbj87kGit09OvsRDafUUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRUIzQjM3NTU2QThEQTJFNzA2QTRBNzMzN0Y3REJCQzQ3
QUJCQUNENzEzMjI5QjU0Q0FDRDY3MEVCQzA1RTUxLzAvMjBBRjFGRkE4MTVDNkUz
RjNCOTA2OEFERDNEM0FGQjExMERBN0Q0NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEFGMUZGQTgxNUM2RTNGM0I5
MDY4QUREM0QzQUZCMTEwREE3RDQ1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUVCM0IzNzU1NkE4REEyRTcwNkE0QTczMzdGN0RCQkM0N0FCQkFDRDcx
MzIyOUI1NENBQ0Q2NzBFQkMwNUU1MS8wLzIwQUYxRkZBODE1QzZFM0YzQjkwNjhB
REQzRDNBRkIxMTBEQTdENDUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB+ckDdkmhkhJi+tPhQLTBS5Ueb
VyMGO0vv7eLLiisDFVcAnIRIEV6vxxGB+S7pm5hX8shYEzHw0YjgtepoSDdJb78o
CRY/74Aq1W1zoFOxz+4v8R1QMMZGVvn05QXYN1hg5f/CByZX5KxD8NV2qN2C2E2Y
q9NpmnmiI1v0Wz292Iawgf4TuowmPEIat7nFeEGC1+BAN91N8AnCLs4/U0kueV2o
0D6WkxgElOp42OrmPAMEaD8gTl3rPMntUgu4B4BEWYPclGrpGAgwaKFkh3vznql6
qlwdlOxdFISPetmeRQ779cnWtnrPn3TBwxMevkPjia0LX6trh8Tr8mDJCnsj
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:38 2025 by rpki-client on console.sobornost.net