Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3F3113B81AF3FD2448A47AEA0168935257B94663.mft
File:                     3F3113B81AF3FD2448A47AEA0168935257B94663.mft (raw, json)
Hash identifier:          KsCI5KC2QQkhyAAWYaGZ4d2TswrrFwyIXblCg5JaJ/U=
Subject key identifier:   79:CA:70:3C:F5:44:8A:18:6E:85:27:27:ED:FE:EB:4E:30:FC:A9:F0
Authority key identifier: 3F:31:13:B8:1A:F3:FD:24:48:A4:7A:EA:01:68:93:52:57:B9:46:63
Certificate issuer:       /CN=3F3113B81AF3FD2448A47AEA0168935257B94663
Certificate serial:       52B68FA9BDCD8E65176093E65074D1A50EFACEE3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F3113B81AF3FD2448A47AEA0168935257B94663.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3F3113B81AF3FD2448A47AEA0168935257B94663.mft
Manifest number:          D2
Signing time:             Sun 27 Apr 2025 07:16:21 +0000
Manifest this update:     Sun 27 Apr 2025 07:11:21 +0000
Manifest next update:     Fri 02 May 2025 04:21:21 +0000
Files and hashes:         1: 323830333a3765303a3a2f33322d3438203d3e20323633373932.roa (hash: gWbSqyNR0zrEayGCkeWenUpSUInd5qYlvQo13NREySg=)
                          2: 3137392e35312e3134312e302f32342d3234203d3e20323633373932.roa (hash: nZJUmAL6Own9jsTy3IXaXnRkkOBaxIfY5iJYEIsADr0=)
                          3: 3137392e35312e3134332e302f32342d3234203d3e20323633373932.roa (hash: OiPmSGZXNRwNHNW3m9Yzw68PW3XwlP4uSSBBBAEe5A8=)
                          4: 3137392e35312e3134302e302f32342d3234203d3e20323633373932.roa (hash: +89hiWfERgyZbhBe09lsReCsfZN/hG80/u6Qq21VCVw=)
                          5: 3F3113B81AF3FD2448A47AEA0168935257B94663.crl (hash: EZlZSb14FcuB2AU1fxbtEeqXG3+6POXmYmb7nCFEyZ8=)
                          6: 3137392e35312e3134322e302f32342d3234203d3e20323633373932.roa (hash: ZfUhllq4eWTsajUtStYDzFfu+zRCHMljcYw+1ORk/AQ=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3F3113B81AF3FD2448A47AEA0168935257B94663.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3F3113B81AF3FD2448A47AEA0168935257B94663.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F3113B81AF3FD2448A47AEA0168935257B94663.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b6:8f:a9:bd:cd:8e:65:17:60:93:e6:50:74:d1:a5:0e:fa:ce:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F3113B81AF3FD2448A47AEA0168935257B94663
        Validity
            Not Before: Apr 27 07:11:21 2025 GMT
            Not After : May  2 04:21:21 2025 GMT
        Subject: CN=79CA703CF5448A186E852727EDFEEB4E30FCA9F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2c:9a:d8:1e:1b:c1:21:65:46:7c:5d:b1:14:
                    31:76:ef:81:d9:f6:0c:23:c3:27:a5:cf:fc:05:7e:
                    94:98:9b:c8:85:d8:f1:8f:fb:39:fb:3c:69:0c:a4:
                    94:60:f8:7e:02:f9:68:da:e7:3f:71:31:fd:aa:be:
                    76:57:56:7b:32:78:53:d0:52:57:ac:08:c0:c1:43:
                    fe:4a:e2:c0:d6:9d:d9:c7:1c:2f:22:72:d6:0b:9d:
                    16:05:3e:c1:c6:7c:5f:cf:b8:7a:4d:c6:0d:5a:7c:
                    00:bf:d2:24:d6:81:92:e4:3e:9d:ad:f2:40:ea:a7:
                    02:d0:da:10:57:f6:16:1f:23:66:25:99:ce:b9:06:
                    c5:dd:6c:32:dd:1c:c3:95:c8:fc:c7:cb:20:3c:e0:
                    ea:e8:33:7c:81:48:34:3f:29:ce:a2:a9:81:23:c3:
                    d3:e1:96:d8:11:f3:cf:00:0f:7a:a4:52:c5:33:46:
                    f4:b5:1d:c5:b0:b9:43:e1:14:10:0d:1e:69:fd:51:
                    cf:84:81:9c:a1:78:a9:23:cd:a0:24:ab:f4:fa:39:
                    3d:74:97:49:69:44:28:b7:62:ec:b9:5f:d0:86:cd:
                    e5:d6:18:74:c6:50:1d:f0:0d:aa:01:b1:0a:9f:70:
                    22:b0:e7:0a:08:f9:7e:6a:e7:97:89:04:6f:97:7e:
                    aa:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CA:70:3C:F5:44:8A:18:6E:85:27:27:ED:FE:EB:4E:30:FC:A9:F0
            X509v3 Authority Key Identifier:
                keyid:3F:31:13:B8:1A:F3:FD:24:48:A4:7A:EA:01:68:93:52:57:B9:46:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3F3113B81AF3FD2448A47AEA0168935257B94663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F3113B81AF3FD2448A47AEA0168935257B94663.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3F3113B81AF3FD2448A47AEA0168935257B94663.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:c6:fc:61:0a:09:ca:a2:59:f9:fa:1e:27:f1:cc:01:bd:ec:
         98:54:97:e5:02:b1:47:65:b6:da:a9:50:80:88:93:69:ff:22:
         56:8d:bc:e5:27:01:db:3e:2a:f3:09:0c:a5:f2:5b:3d:16:d0:
         38:9b:e3:7c:0a:b1:72:5d:37:d9:85:53:05:2e:fb:71:65:d2:
         b3:65:12:02:4d:62:29:b4:74:3f:93:38:69:e2:4f:af:49:07:
         24:0c:99:83:29:75:57:a3:76:3d:1c:c4:75:36:9b:be:aa:f0:
         41:db:59:9d:ce:d0:f4:fa:c1:b5:e8:ff:9a:5d:05:ea:bd:55:
         34:a3:05:45:34:37:30:cb:e5:be:75:c7:01:11:26:19:e0:99:
         25:b1:8b:f9:69:50:8a:67:a4:f2:3e:7a:66:fa:4f:d0:e0:8a:
         fa:4f:b8:e0:73:c4:95:cc:b1:2d:bf:26:63:12:cf:c2:d8:89:
         93:33:37:f9:c5:c7:1b:a6:56:0c:7c:16:4d:c2:8f:47:42:7a:
         be:2d:59:49:64:00:6b:4b:0d:54:d4:d7:cf:f6:e9:a4:d6:c2:
         4a:2c:e1:e0:13:5f:f8:8d:b0:26:3a:55:91:26:1e:b0:e4:12:
         ac:a0:d5:2e:10:dc:4a:f0:30:1e:0d:bd:af:bd:0f:f4:1b:ae:
         92:2d:c0:b6
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUUraPqb3NjmUXYJPmUHTRpQ76zuMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YzMTEzQjgxQUYzRkQyNDQ4QTQ3QUVBMDE2ODkzNTI1
N0I5NDY2MzAeFw0yNTA0MjcwNzExMjFaFw0yNTA1MDIwNDIxMjFaMDMxMTAvBgNV
BAMTKDc5Q0E3MDNDRjU0NDhBMTg2RTg1MjcyN0VERkVFQjRFMzBGQ0E5RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyLJrYHhvBIWVGfF2xFDF274HZ
9gwjwyelz/wFfpSYm8iF2PGP+zn7PGkMpJRg+H4C+Wja5z9xMf2qvnZXVnsyeFPQ
UlesCMDBQ/5K4sDWndnHHC8ictYLnRYFPsHGfF/PuHpNxg1afAC/0iTWgZLkPp2t
8kDqpwLQ2hBX9hYfI2Ylmc65BsXdbDLdHMOVyPzHyyA84OroM3yBSDQ/Kc6iqYEj
w9PhltgR888AD3qkUsUzRvS1HcWwuUPhFBANHmn9Uc+EgZyheKkjzaAkq/T6OT10
l0lpRCi3Yuy5X9CGzeXWGHTGUB3wDaoBsQqfcCKw5woI+X5q55eJBG+XfqrTAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUecpwPPVEihhuhScn7f7rTjD8qfAwHwYDVR0j
BBgwFoAUPzETuBrz/SRIpHrqAWiTUle5RmMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRTY3Q0Q4QzkyQjFERTExNEFCNEQzQjIxNTFEODI4QUI4
MzREMDZFOEE4OTBDMUUyNTQ4QjZCQzc0RjdBOUE5LzAvM0YzMTEzQjgxQUYzRkQy
NDQ4QTQ3QUVBMDE2ODkzNTI1N0I5NDY2My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRjMxMTNCODFBRjNGRDI0NDhB
NDdBRUEwMTY4OTM1MjU3Qjk0NjYzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkU2N0NEOEM5MkIxREUxMTRBQjREM0IyMTUxRDgyOEFCODM0RDA2RThB
ODkwQzFFMjU0OEI2QkM3NEY3QTlBOS8wLzNGMzExM0I4MUFGM0ZEMjQ0OEE0N0FF
QTAxNjg5MzUyNTdCOTQ2NjMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCYxvxhCgnKoln5+h4n8cwBveyY
VJflArFHZbbaqVCAiJNp/yJWjbzlJwHbPirzCQyl8ls9FtA4m+N8CrFyXTfZhVMF
LvtxZdKzZRICTWIptHQ/kzhp4k+vSQckDJmDKXVXo3Y9HMR1Npu+qvBB21mdztD0
+sG16P+aXQXqvVU0owVFNDcwy+W+dccBESYZ4JklsYv5aVCKZ6TyPnpm+k/Q4Ir6
T7jgc8SVzLEtvyZjEs/C2ImTMzf5xccbplYMfBZNwo9HQnq+LVlJZABrSw1U1NfP
9umk1sJKLOHgE1/4jbAmOlWRJh6w5BKsoNUuENxK8DAeDb2vvQ/0G66SLcC2
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:27 2025 by rpki-client on console.sobornost.net