Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.mft
File:                     3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.mft (raw, json)
Hash identifier:          3NfYusXrVDhghVO7rVg3SPBbnc6PBilRXhQ9c5XFDu0=
Subject key identifier:   04:0F:45:23:4C:56:A9:50:3E:F2:1C:E7:A1:D7:DF:5D:6E:53:E9:8D
Authority key identifier: 3A:74:8E:67:E7:C3:9A:7A:19:6D:27:CB:2F:4D:E6:C9:B8:3D:42:7A
Certificate issuer:       /CN=3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A
Certificate serial:       544C6A5368FC2895AF0FA89BB5CAAACACB220FCB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.mft
Manifest number:          D2
Signing time:             Mon 28 Apr 2025 15:40:42 +0000
Manifest this update:     Mon 28 Apr 2025 15:35:42 +0000
Manifest next update:     Sat 03 May 2025 03:54:42 +0000
Files and hashes:         1: 34352e372e3231312e302f32342d3234203d3e20323635373239.roa (hash: JKq0VNS2dj5dUGoJEbaEsnEd+MfKvhy4OqexNbP+BTM=)
                          2: 34352e372e3231302e302f32342d3234203d3e20323635373239.roa (hash: 5prloGlhLa609prU+l4pRBE3Hv1cfQP1iPhjf5H8ziI=)
                          3: 3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.crl (hash: E/lHDw2ei9tknKnXtpt4zZ2s2qWIiD95ibGDiN82p4M=)
                          4: 34352e372e3230392e302f32342d3234203d3e20323635373239.roa (hash: d7Afdxd2cErw+La4f1hxJmbYk/nucw4ZwKh8oUr8Ro0=)
                          5: 34352e372e3230382e302f32342d3234203d3e20323635373239.roa (hash: 8RneuREV71QyMQy/cw4hzdNXSxHbHDHsPO4/YBs0U6g=)
                          6: 34352e372e3230382e302f32322d3232203d3e20323635373239.roa (hash: HHsimeyhOXWxzDaGlwK//Eek0hW3ylOLgur7LfJqxEA=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:4c:6a:53:68:fc:28:95:af:0f:a8:9b:b5:ca:aa:ca:cb:22:0f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A
        Validity
            Not Before: Apr 28 15:35:42 2025 GMT
            Not After : May  3 03:54:42 2025 GMT
        Subject: CN=040F45234C56A9503EF21CE7A1D7DF5D6E53E98D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a6:86:7c:4b:5a:99:01:7a:f0:79:a5:f0:29:
                    9c:ab:86:33:92:0e:bf:ce:d5:46:1d:13:43:29:37:
                    7e:1e:b2:f0:ef:dc:39:10:d2:22:47:4c:79:11:b4:
                    92:0f:a4:24:d8:04:fd:4e:de:22:08:fe:f7:2f:46:
                    a7:1b:e8:3c:bd:5b:41:4a:96:0c:84:15:b5:76:66:
                    30:f6:f9:56:4c:5f:e1:4d:75:64:42:30:23:00:4b:
                    be:0c:ae:a6:63:79:c4:cb:87:a2:25:a4:bd:1e:24:
                    71:dd:bf:e1:03:9b:aa:aa:9e:a8:f6:c0:61:66:0c:
                    6c:93:a2:86:3d:d0:89:3e:55:21:87:91:f3:bf:a4:
                    8c:70:43:3f:90:de:31:bd:46:31:d5:40:0a:c2:b4:
                    be:97:f6:1a:7a:0c:f8:ee:9a:3c:95:ca:8f:bf:31:
                    77:4d:d6:6d:f8:4c:c5:96:f8:58:2b:4d:a1:8f:57:
                    05:12:79:cf:8e:92:b9:d2:46:81:43:76:7e:a1:c5:
                    c0:ca:0f:ae:80:c0:55:93:22:22:a4:ad:d5:39:aa:
                    c5:ab:d5:e4:1b:fa:e9:d8:d1:ad:e0:7b:09:f5:69:
                    6b:c2:cb:2b:06:fc:17:52:0c:42:c8:1b:6a:3a:84:
                    8b:14:e2:c9:5b:5a:21:13:84:21:04:b2:8c:c8:54:
                    bf:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:0F:45:23:4C:56:A9:50:3E:F2:1C:E7:A1:D7:DF:5D:6E:53:E9:8D
            X509v3 Authority Key Identifier:
                keyid:3A:74:8E:67:E7:C3:9A:7A:19:6D:27:CB:2F:4D:E6:C9:B8:3D:42:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:2c:9a:3c:0d:d5:de:10:6c:8c:59:1b:9f:8b:9d:4b:a5:a0:
         af:f8:db:99:8e:92:79:8c:4d:5a:5e:0d:c9:6e:c4:03:21:62:
         7e:c5:87:7f:67:f5:2f:47:af:5c:85:4d:64:35:34:89:7b:8f:
         93:39:59:9b:73:03:98:d1:19:c5:f7:75:6b:fd:a3:02:16:46:
         d7:ac:f0:fa:7b:ff:49:7b:f5:9e:ae:9e:54:9b:e4:0b:7a:44:
         74:49:10:7e:e5:48:5e:f1:81:f6:be:b7:5b:12:0d:47:79:a1:
         18:84:0a:fd:cc:17:47:fd:9f:bb:45:16:45:38:e2:c8:95:48:
         70:db:40:5f:9f:7b:02:49:0d:15:1b:e0:61:d1:1b:4e:bf:fc:
         4b:06:dc:fa:37:2a:82:33:83:6c:9c:de:d0:c5:8a:71:42:54:
         80:49:4b:50:be:37:60:68:3f:12:7a:32:7e:78:80:a7:7e:bd:
         2f:7f:16:97:88:ce:f9:2f:b3:4c:ae:19:84:14:41:74:c9:e5:
         20:f6:0d:b8:5e:19:1b:58:b2:4e:25:39:b7:51:72:ab:cb:2b:
         8e:c9:38:79:bd:84:9b:7d:f5:73:e6:6e:92:c4:0e:4b:64:39:
         1b:86:e9:6f:f5:15:47:bd:ad:b8:b0:d8:b8:7a:22:60:23:bd:
         cc:aa:ec:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:50 2025 by rpki-client on console.sobornost.net