Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.mft
File:                     86A5D10A30ED805BDE337515CB0F580086111558.mft (raw, json)
Hash identifier:          L44Yl06Ba6NUta8jS/9zqGgmm+5Ml0pWFsLw7UOsd/A=
Subject key identifier:   A3:5D:A8:03:C5:C2:99:BF:E7:D1:90:2D:94:DC:31:F6:0C:25:E5:36
Authority key identifier: 86:A5:D1:0A:30:ED:80:5B:DE:33:75:15:CB:0F:58:00:86:11:15:58
Certificate issuer:       /CN=86A5D10A30ED805BDE337515CB0F580086111558
Certificate serial:       4D0EEA9A9A3F0089EDC73EA73FB538DE8C87D9E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.mft
Manifest number:          D7
Signing time:             Sun 27 Apr 2025 13:50:15 +0000
Manifest this update:     Sun 27 Apr 2025 13:45:15 +0000
Manifest next update:     Fri 02 May 2025 15:17:15 +0000
Files and hashes:         1: 3138362e302e3135322e302f32322d3234203d3e203139393035.roa (hash: kvkorhOrX+jZT4TQUlDe1CcZf+5MbA/dWMc5P0WYIYM=)
                          2: 3138362e302e3135322e302f32322d3234203d3e20323033.roa (hash: /2YzcpL+zbZ/HOojoI6SfUsIOaF0b9Gg1wOatVdcruQ=)
                          3: 3138362e302e3135322e302f32322d3234203d3e20323032.roa (hash: 1wxGWZ0ctYk/wFZSCMD27MHsKMycX7OUGO18cY3jC+4=)
                          4: 3138362e302e3135322e302f32322d3234203d3e203131333932.roa (hash: 4BVHQHQ654pki4SqE7CRMY6rfA2Z7iQfJPz/dhZ4vvE=)
                          5: 3138362e302e3135322e302f32322d3234203d3e2033333536.roa (hash: LMXL9BBtyZEDXfGC+SjDlWd4kfoWpbHMLkt/K5gPL3A=)
                          6: 86A5D10A30ED805BDE337515CB0F580086111558.crl (hash: Bp1IIVP1B+h79n9ab5FDRYe8Bn7tlaZo/uM2JrmuyPo=)
                          7: 3138362e302e3135322e302f32322d3234203d3e2033353439.roa (hash: kClGDVfmtDv49/lAsICG1WreKudyMVPFaxkYzY300Ng=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:0e:ea:9a:9a:3f:00:89:ed:c7:3e:a7:3f:b5:38:de:8c:87:d9:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86A5D10A30ED805BDE337515CB0F580086111558
        Validity
            Not Before: Apr 27 13:45:15 2025 GMT
            Not After : May  2 15:17:15 2025 GMT
        Subject: CN=A35DA803C5C299BFE7D1902D94DC31F60C25E536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fd:f9:58:4c:9f:ff:90:36:cd:3b:56:e2:7a:
                    eb:e3:77:be:cb:1a:25:3a:71:7c:0c:4f:6f:31:c4:
                    d8:eb:71:31:d3:0d:9c:59:8b:f5:6a:29:7d:6c:86:
                    35:e4:f3:23:3d:ad:c6:5f:00:1e:34:48:5a:bc:58:
                    f7:76:a0:45:50:9c:ad:01:c2:3a:3b:a1:3a:82:7f:
                    85:c7:24:28:41:ce:a4:73:a3:df:e8:a2:7a:c8:24:
                    e5:c0:c5:74:45:aa:b9:6d:cf:ad:05:df:f6:bd:89:
                    c7:72:c4:cd:d7:08:86:84:5a:ae:bd:ac:cd:c9:5c:
                    4e:80:82:6e:6d:9f:cc:af:f4:a7:82:2c:04:e5:80:
                    93:64:4b:9d:d3:fa:01:eb:cd:c0:3e:0f:36:b0:b2:
                    96:c8:58:08:24:f2:68:b4:d9:d7:10:0e:2a:3b:b2:
                    06:00:7c:69:70:60:db:f3:4e:f6:0e:fc:47:8f:7a:
                    8a:f1:95:55:a8:73:33:9b:c8:21:8b:a9:9c:28:82:
                    74:9e:42:97:de:93:3a:53:b2:54:75:44:d9:83:a8:
                    11:cf:69:bf:35:ed:03:03:b8:e8:5e:89:6c:a7:eb:
                    47:26:e2:55:67:00:0c:c1:31:42:43:20:c8:17:b2:
                    3b:3c:fa:7b:84:34:e9:9e:b3:fd:98:78:67:4e:b6:
                    17:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5D:A8:03:C5:C2:99:BF:E7:D1:90:2D:94:DC:31:F6:0C:25:E5:36
            X509v3 Authority Key Identifier:
                keyid:86:A5:D1:0A:30:ED:80:5B:DE:33:75:15:CB:0F:58:00:86:11:15:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:e3:1a:55:87:0b:bb:4d:22:a8:d6:5d:23:a6:d4:2a:5d:01:
         b5:00:d4:eb:ba:13:a1:96:b5:0e:88:db:bd:fe:7d:6b:58:b7:
         76:74:e9:31:46:d5:2e:55:64:8c:02:b1:37:03:6f:db:85:94:
         fd:78:77:5d:0a:06:43:d5:77:33:45:26:fd:03:95:35:ca:90:
         c5:bb:16:e0:36:ea:ad:b4:61:d5:38:f6:b8:19:22:4e:1d:ce:
         4c:87:a6:1c:ed:47:1a:7e:0f:9c:98:ab:80:e4:1a:63:dd:52:
         41:bb:0e:b6:89:1f:b3:57:04:c2:32:a9:0a:71:a7:09:96:6e:
         2f:df:c4:3f:27:b6:44:2a:bd:d3:92:8c:d7:db:38:4b:34:d0:
         0f:64:53:c5:e4:70:4f:12:8b:9a:5b:49:8d:e2:42:7e:ff:14:
         91:61:7f:ef:5c:47:2e:22:fc:0e:3e:51:d5:51:9e:85:8a:cf:
         c3:4c:fe:e0:1f:3c:7d:50:df:a6:8c:2f:ac:61:57:fb:45:7d:
         e3:78:40:75:8b:49:a4:e0:0b:90:bd:59:43:1f:82:b2:57:00:
         77:d0:e7:63:d8:58:6a:a1:cf:e3:1e:3c:94:50:97:be:50:28:
         d6:37:c1:3f:97:02:f2:0c:f0:53:b3:1d:5d:d0:33:7b:7c:24:
         9f:48:9d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:03:58 2025 by rpki-client on console.sobornost.net