Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft
File:                     85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft (raw, json)
Hash identifier:          Y+7s6I1ntzzZqBAjR0kMJB75bRoW5nCPUP3mFZYH7C0=
Subject key identifier:   E2:27:0B:D0:AB:C8:25:F2:25:54:92:7D:BA:9D:8C:5C:0F:20:0C:10
Authority key identifier: 85:BF:38:FA:43:8F:4F:87:24:58:ED:36:42:3D:1A:A7:F8:5D:B5:2A
Certificate issuer:       /CN=85BF38FA438F4F872458ED36423D1AA7F85DB52A
Certificate serial:       1DF3ED1D214C9399DAC54425F31D040A5C79B7D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft
Manifest number:          D6
Signing time:             Mon 28 Apr 2025 06:00:02 +0000
Manifest this update:     Mon 28 Apr 2025 05:55:02 +0000
Manifest next update:     Fri 02 May 2025 15:10:02 +0000
Files and hashes:         1: 3134332e3235352e3134302e302f32322d3332203d3e2033333536.roa (hash: MqH42Le/ed4yNYsE6a77hPHZefxUhkuA5XftVC1HJoA=)
                          2: 3134332e3235352e3134302e302f32322d3332203d3e20323032.roa (hash: iELmHJwsG+l1ZasdyrShOYPUsPM1pBySWGoOb/dgvgg=)
                          3: 323830333a363934303a3a2f33322d3438203d3e203631353132.roa (hash: HN6UpAOBFqqfg2gwL4pZ20HlcViH2AJsXmYHgG/N0FE=)
                          4: 3134332e3235352e3134302e302f32322d3234203d3e203631353132.roa (hash: 8DSvH0bx8+mrRuK0l0Xa7OZQNmjEdgLFHgRTRoU/+kI=)
                          5: 34352e3136312e3233362e302f32322d3234203d3e203631353132.roa (hash: wsO0hgTtuuQvAYC72J3jazl1/BtkkYzhIpuBnyoLj2w=)
                          6: 85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl (hash: 3kNqX9psXGQJ/BJUL4FKjHtB9ouVYm1+ZTJyApnID0I=)
                          7: 3134332e3235352e3134302e302f32322d3332203d3e20323033.roa (hash: q1oh8/P8ip+Ohs6EMJKSELVlnM2QeXJQaDX3gvwzgs4=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f3:ed:1d:21:4c:93:99:da:c5:44:25:f3:1d:04:0a:5c:79:b7:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85BF38FA438F4F872458ED36423D1AA7F85DB52A
        Validity
            Not Before: Apr 28 05:55:02 2025 GMT
            Not After : May  2 15:10:02 2025 GMT
        Subject: CN=E2270BD0ABC825F22554927DBA9D8C5C0F200C10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:65:77:1b:1e:33:69:8e:74:1c:8d:a4:2c:fb:
                    88:8c:ac:0f:c8:d7:0c:1c:a1:33:4c:1e:cc:1b:ca:
                    75:ba:2f:05:2e:93:f8:f2:73:95:8b:d6:f4:7f:1a:
                    91:6d:1c:2b:dc:ed:67:09:aa:71:dd:87:eb:86:b6:
                    a3:31:00:1c:64:99:7a:5d:97:81:ae:a1:ae:a4:e7:
                    16:af:65:4a:1e:f0:92:99:18:09:4d:7b:74:9d:03:
                    db:7f:69:5e:3f:59:5f:64:bf:b2:77:75:ca:92:ab:
                    5c:80:9a:df:32:6d:7f:10:25:2f:6e:87:a5:50:52:
                    69:21:78:9c:48:e3:df:77:b1:a8:73:a2:87:13:1a:
                    12:cb:0c:44:b1:6f:60:c4:f4:c0:ce:db:dd:0b:44:
                    8e:23:0c:38:30:c0:d2:b0:03:0f:a4:d0:a4:2c:16:
                    82:aa:6a:3a:4c:2d:cd:79:55:7e:c6:14:89:02:7f:
                    5a:99:47:4a:7c:05:b3:53:67:8b:44:47:d7:73:dd:
                    ae:3a:02:c9:fd:3b:db:d2:ea:27:ee:89:82:5e:9b:
                    f5:a0:a4:ad:56:b0:93:e8:2b:ca:2b:6b:12:ba:3e:
                    a9:7a:81:f2:06:74:7b:7e:9e:d6:ab:7c:d1:ca:db:
                    b5:d2:de:80:c6:5e:86:e7:86:c7:c6:5d:df:27:78:
                    09:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:27:0B:D0:AB:C8:25:F2:25:54:92:7D:BA:9D:8C:5C:0F:20:0C:10
            X509v3 Authority Key Identifier:
                keyid:85:BF:38:FA:43:8F:4F:87:24:58:ED:36:42:3D:1A:A7:F8:5D:B5:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ed:c6:00:a8:ce:43:77:11:07:c2:c8:0f:bf:36:2f:1c:4a:
         eb:ca:03:ec:40:50:9f:18:ba:82:d9:bd:11:11:21:05:9c:96:
         74:45:8c:ac:f9:e6:8f:58:ed:90:6d:32:67:d8:57:91:10:ad:
         0c:d1:d4:07:84:16:dd:67:eb:4c:d4:dd:6b:c3:12:12:76:8f:
         b9:13:b8:40:57:2b:90:e3:02:65:6d:11:bc:c8:d8:66:7b:30:
         91:47:89:95:3b:ca:ab:b2:07:a0:c7:0c:d6:54:3c:55:d8:e1:
         57:7a:ce:42:3c:fb:c8:73:01:25:f7:ae:67:6c:e0:30:51:bd:
         d6:b2:8c:0f:89:e9:20:3b:27:e1:db:9e:8c:1b:ae:62:c0:81:
         70:ca:4f:ba:f6:9e:6b:40:54:2e:7b:fb:42:79:17:6e:42:cd:
         1e:5a:6a:71:8c:48:4a:6c:31:4e:91:db:e1:f3:06:24:ec:5d:
         7a:0c:22:09:16:c5:2e:cb:33:57:2a:3d:53:8b:84:1e:d3:99:
         bc:e8:e2:39:5c:55:be:77:5f:49:df:02:19:c2:68:19:95:ae:
         1f:b3:41:92:16:6a:0a:e1:02:e7:c7:21:28:44:54:a0:b8:3c:
         1b:e9:34:36:07:0a:fd:65:a6:96:90:dc:53:49:fa:2f:2d:92:
         81:89:35:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:21 2025 by rpki-client on console.sobornost.net