Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.mft
File:                     E83D0B134BF256367D3FDA5E392565CAA89D5D3C.mft (raw, json)
Hash identifier:          d6Vr2Lr3rnxu1qsjW8Bu83cUlHxTYgWpVLNtZUCdyUY=
Subject key identifier:   95:6D:DA:F3:F7:D0:46:A8:42:84:5B:91:42:E9:14:68:98:46:58:84
Authority key identifier: E8:3D:0B:13:4B:F2:56:36:7D:3F:DA:5E:39:25:65:CA:A8:9D:5D:3C
Certificate issuer:       /CN=E83D0B134BF256367D3FDA5E392565CAA89D5D3C
Certificate serial:       45BBC08EC3D054FE6FE2FF20BA52684FB1C4D890
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.mft
Manifest number:          D7
Signing time:             Mon 28 Apr 2025 00:01:09 +0000
Manifest this update:     Sun 27 Apr 2025 23:56:09 +0000
Manifest next update:     Fri 02 May 2025 03:05:09 +0000
Files and hashes:         1: 3136382e3139342e3135312e302f32342d3234203d3e20323634373434.roa (hash: ixZV32xBwK2CqDEJpCeFDfiXlo4zwSNc3UuXX0D80c8=)
                          2: 3136382e3139342e3134392e302f32342d3234203d3e20323634373434.roa (hash: q9j4s57MZdZizOEHCsKIgznQZxhfitSsnZ0PQT4tOS8=)
                          3: E83D0B134BF256367D3FDA5E392565CAA89D5D3C.crl (hash: gIrWRehpCdrn11Z/qBkAc7IfSeDcVumG0k2T1oTzJm0=)
                          4: 3136382e3139342e3134382e302f32342d3234203d3e20323634373434.roa (hash: JD1vem71X51Oj0Vkh9ph5A3ocpiRpkV2mgk9NXqHjxo=)
                          5: 3136382e3139342e3134382e302f32322d3232203d3e20323634373434.roa (hash: Ur+Dirs0TLqadLRvU8/z37Snh6mPrxz7M7Cf04VUOv8=)
                          6: 3136382e3139342e3135302e302f32342d3234203d3e20323634373434.roa (hash: CrdHTX9eYG0q3LrcVwrnpmoDBxeIfh0mLB4WAgxpSMU=)
                          7: 323830333a616634303a3a2f33322d3335203d3e20323634373434.roa (hash: gpW8fLr4JPthw4TipGBRJSKONB5wTSJTnjuxigDdYEE=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 03:05:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:bb:c0:8e:c3:d0:54:fe:6f:e2:ff:20:ba:52:68:4f:b1:c4:d8:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E83D0B134BF256367D3FDA5E392565CAA89D5D3C
        Validity
            Not Before: Apr 27 23:56:09 2025 GMT
            Not After : May  2 03:05:09 2025 GMT
        Subject: CN=956DDAF3F7D046A842845B9142E9146898465884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c7:3f:6e:e3:ee:2a:a1:7a:5c:62:fc:a8:dc:
                    89:ea:f4:b7:0f:9a:b6:56:2e:a6:6c:be:59:c6:95:
                    17:25:ec:94:7f:8e:0d:0c:d6:7f:ae:8a:68:ce:08:
                    f4:cd:74:fc:99:e3:9e:5c:a2:b7:21:de:d8:aa:75:
                    04:ed:df:b4:65:57:61:f3:98:44:91:62:97:11:60:
                    da:ff:f6:2e:5f:83:c7:a8:91:3e:30:73:aa:8c:82:
                    c1:e4:c3:2c:2b:dc:96:56:72:c6:f7:29:c1:e6:1b:
                    8f:2e:de:a4:80:8a:16:e3:18:ce:90:66:73:4d:f1:
                    ef:ea:d9:17:7e:de:50:4a:fd:e8:77:50:7e:1a:7a:
                    e4:b5:8c:f0:ec:d2:21:05:aa:01:b6:23:bc:31:37:
                    20:41:cd:91:58:7e:de:95:d0:8a:e5:f3:d2:36:6f:
                    6a:44:a9:54:87:b2:37:82:9e:ae:7f:07:9c:ba:08:
                    eb:ed:67:7d:f7:55:16:e7:98:94:5d:7b:ef:3b:4f:
                    70:0b:d6:d6:00:3a:29:bb:f1:a6:72:6c:2c:54:64:
                    1c:17:e8:b7:31:58:04:db:2c:0a:ef:ba:1f:5e:e9:
                    ac:3e:6b:26:cc:7e:be:35:e9:a4:19:a5:07:da:79:
                    85:38:2e:b0:c1:54:09:b7:e1:da:c5:72:b4:ad:e2:
                    f5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6D:DA:F3:F7:D0:46:A8:42:84:5B:91:42:E9:14:68:98:46:58:84
            X509v3 Authority Key Identifier:
                keyid:E8:3D:0B:13:4B:F2:56:36:7D:3F:DA:5E:39:25:65:CA:A8:9D:5D:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:95:91:1e:c6:77:c2:fc:fe:22:8b:3b:c9:45:6b:58:a8:54:
         d3:6d:0b:79:e8:42:a0:96:72:32:46:a9:9c:57:35:1d:15:e6:
         77:40:81:10:65:b9:6c:2d:b9:27:cc:9c:57:2f:1a:87:58:da:
         6c:6d:37:ce:25:7d:54:40:07:07:67:58:35:a2:0d:94:1f:2b:
         01:58:29:b2:3b:2d:b8:48:4e:bb:61:d9:98:0d:24:04:1f:34:
         70:5d:3f:64:69:89:b0:76:b1:0d:df:96:b1:3c:bd:43:f2:cb:
         47:61:1d:5a:6a:3b:b5:0e:5a:3f:ef:8c:57:70:39:58:bf:39:
         fe:88:50:99:6e:59:ff:62:f8:0f:22:da:a8:7d:38:88:f8:57:
         c4:01:b9:60:91:e1:b1:2c:76:28:be:73:d7:9c:c0:01:53:95:
         51:59:63:a5:cd:fe:19:17:7b:b3:03:a2:91:3d:a8:97:e8:78:
         b9:0c:8b:8d:82:40:c0:b3:d2:c9:60:87:03:12:82:a3:7a:e9:
         76:db:7a:5b:79:4d:f1:6d:2d:c9:72:0c:02:b5:6e:8a:0e:f3:
         f7:62:d9:7b:63:ec:83:ce:71:e4:92:c5:9f:c3:1b:3d:b6:8c:
         40:86:4f:42:e0:05:ff:b5:08:12:65:43:36:07:00:02:e4:70:
         53:18:3e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:17 2025 by rpki-client on console.sobornost.net