Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.mft
File:                     EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.mft (raw, json)
Hash identifier:          HdgYn2e7/GBALimExs8C5tkhXVhFTfhE8JWuvhD9W9Q=
Subject key identifier:   46:9A:14:0E:F3:6A:78:49:78:D1:FB:ED:0C:6D:6D:0F:1E:8A:FB:51
Authority key identifier: EC:86:9B:AF:B5:A3:88:2F:B7:CB:6D:7F:22:FD:36:68:59:61:C5:B7
Certificate issuer:       /CN=EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7
Certificate serial:       296B2F290F1289835ED4E773A137C41FBE69FEA7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.mft
Manifest number:          CF
Signing time:             Sun 27 Apr 2025 21:04:20 +0000
Manifest this update:     Sun 27 Apr 2025 20:59:20 +0000
Manifest next update:     Fri 02 May 2025 22:30:20 +0000
Files and hashes:         1: 3133312e37322e3234322e302f32342d3234203d3e203532333237.roa (hash: JhACII2hNPj+CUpX/n/UTLxcJoQoiIYpKDhIbvziY68=)
                          2: 3133312e37322e3234312e302f32342d3234203d3e203532333239.roa (hash: 4DXaiuYnfSrGKFRrUrCdDqxhnpt+D2cN4Jj+fvzhyKc=)
                          3: 3138362e3134382e3234302e302f32312d3234203d3e203532333239.roa (hash: GGVX4j3lWjQutn99KGVZtLmABPxDxHvxJM4KmfqFhvI=)
                          4: 3133312e37322e3234332e302f32342d3234203d3e203532333239.roa (hash: Um0u1O+tmhpLEfVskHvXJ/FletzGKkUNgHJr6C5ERf0=)
                          5: 3133312e37322e3234312e302f32342d3234203d3e203532333237.roa (hash: cTzwHNWvzUyPd0SwhrADcxj6rBq+KqLfLbxR9KIvTk4=)
                          6: EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.crl (hash: 28/5wn75hpDWmIiPDhDPSbrOrxO8w8UsOJYgqV5n7r0=)
                          7: 3133312e37322e3234302e302f32332d3234203d3e203532333237.roa (hash: unB+4ILAK+5yszVtQHA0dkiDzd4sRKiZY6aQANPyBx4=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:6b:2f:29:0f:12:89:83:5e:d4:e7:73:a1:37:c4:1f:be:69:fe:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7
        Validity
            Not Before: Apr 27 20:59:20 2025 GMT
            Not After : May  2 22:30:20 2025 GMT
        Subject: CN=469A140EF36A784978D1FBED0C6D6D0F1E8AFB51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6b:de:58:d5:68:46:83:59:89:a6:3e:dc:62:
                    69:99:2f:cb:1b:9d:c6:45:f8:4f:3e:4b:8f:ab:25:
                    85:51:72:16:8c:d6:52:e4:79:69:45:3b:fc:70:92:
                    4d:f0:f8:e0:2c:cf:4e:f7:7c:98:0d:34:10:39:a7:
                    a9:f1:2b:b1:26:8d:87:7e:41:db:5b:4c:1e:31:5e:
                    c9:8e:ae:ec:bf:c0:af:9f:86:4a:0e:65:f3:18:4c:
                    74:12:1a:7e:83:05:47:0f:30:22:7d:b8:ad:f3:4d:
                    ba:eb:24:97:f8:89:7f:7d:74:30:82:01:9e:af:92:
                    2b:44:32:c9:08:6b:31:5f:09:9c:b4:72:e9:61:8b:
                    78:1e:6f:b9:67:6b:88:14:d3:83:05:ce:d7:ac:ee:
                    43:51:d1:c2:1f:ee:75:f9:7d:65:bd:f0:94:d4:b6:
                    a4:27:74:e5:a1:6f:05:be:b4:be:7f:77:74:07:48:
                    22:ef:37:e7:a4:30:86:b2:d3:4f:a1:f9:ed:d6:91:
                    97:d9:63:c1:5d:b8:95:26:5a:d2:d3:f9:6a:6b:50:
                    c0:40:00:9d:ac:7c:8d:be:1f:a2:fe:59:55:41:a5:
                    e8:7d:1d:f4:4b:cc:4a:18:61:31:07:8d:c0:4a:39:
                    9b:64:d4:8e:e5:bb:41:bf:58:10:36:3a:0f:ff:a4:
                    da:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9A:14:0E:F3:6A:78:49:78:D1:FB:ED:0C:6D:6D:0F:1E:8A:FB:51
            X509v3 Authority Key Identifier:
                keyid:EC:86:9B:AF:B5:A3:88:2F:B7:CB:6D:7F:22:FD:36:68:59:61:C5:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:48:2e:fd:17:07:b0:5b:c4:96:ac:88:9b:b8:69:72:ce:f9:
         3c:a7:fd:4f:a3:f7:82:13:e7:57:61:e7:59:8f:30:28:0e:51:
         d0:e3:7c:f4:4e:65:e7:9c:9c:bc:d5:92:b5:cb:8e:14:27:17:
         52:21:30:49:86:65:a9:c2:ca:98:40:03:b7:39:ba:09:42:eb:
         23:c4:9f:95:0a:8e:77:75:5d:96:1a:27:d4:64:9f:b2:f3:b2:
         a2:02:52:91:39:7e:9e:47:92:8c:ad:70:e7:66:90:b0:39:73:
         96:cc:e7:d0:91:bb:86:97:c4:ec:71:47:5b:45:02:4c:84:c7:
         66:54:bd:84:9a:41:26:1b:60:e3:79:0f:00:f0:4e:8b:54:93:
         b8:74:77:af:40:b4:41:00:5c:c6:ea:ee:a5:a7:cd:20:72:66:
         a4:e8:0d:9b:1b:b5:6a:46:c2:67:3a:81:e8:27:a8:c1:10:09:
         b9:f4:64:1a:33:e9:4f:a4:ae:cb:42:90:34:0d:39:a5:06:f7:
         a7:5d:cb:eb:a3:f9:7e:0d:fc:e3:66:82:da:73:7f:c2:e2:80:
         42:3f:91:9f:b3:32:58:45:7e:34:2c:9b:d2:8b:1d:c9:17:f7:
         fd:3f:42:0d:59:d9:42:3c:51:74:c2:e6:38:66:31:eb:a4:a3:
         02:7a:00:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:18 2025 by rpki-client on console.sobornost.net