Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.mft
File:                     9E7F2EB76A05A952625CB92EA40D238CA348F718.mft (raw, json)
Hash identifier:          16FOVZCL4mqjIlHj7G5BcWoNWHEJFW4daayjrJTMr24=
Subject key identifier:   06:75:DA:F0:04:74:D3:5D:84:76:FB:F4:F9:9F:14:A3:44:20:77:E9
Authority key identifier: 9E:7F:2E:B7:6A:05:A9:52:62:5C:B9:2E:A4:0D:23:8C:A3:48:F7:18
Certificate issuer:       /CN=9E7F2EB76A05A952625CB92EA40D238CA348F718
Certificate serial:       2E0CDDC2D9C3865BC1E31B48241B51F4F7BAECBC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.mft
Manifest number:          D4
Signing time:             Sun 27 Apr 2025 06:40:58 +0000
Manifest this update:     Sun 27 Apr 2025 06:35:58 +0000
Manifest next update:     Fri 02 May 2025 22:00:58 +0000
Files and hashes:         1: 3137302e38302e32352e302f32342d3234203d3e203237393831.roa (hash: sllmiP/024PgdI1npYTfAq9H/30TOMS2DwC7oOGtQ+U=)
                          2: 3230302e302e3138332e302f32342d3234203d3e203237393831.roa (hash: 5TcjF8GjohyAMP6NS+e32QqzvVCjaQtm7FhmtLS3268=)
                          3: 3137302e38302e32362e302f32342d3234203d3e203237393831.roa (hash: 4tmxWgje/NssD+wMjdRqU4gBrg30gFk5YFsKou8Il4o=)
                          4: 3230302e302e3138322e302f32342d3234203d3e203237393831.roa (hash: 78A+AkIfAJ2wuL+p89b/B9Vc3VixGXY7h/SgvV0D0vA=)
                          5: 9E7F2EB76A05A952625CB92EA40D238CA348F718.crl (hash: kmptY3rTsoLWcbgy6BkwxWfdolcPopj1eWRBnloFb88=)
                          6: 3137302e38302e32372e302f32342d3234203d3e203237393831.roa (hash: aYAvg8k10aW9dP7Fj9v8BXd2e7qGtU+OWOAIdESdQlk=)
                          7: 3137302e38302e32342e302f32342d3234203d3e203237393831.roa (hash: pIW4RaxERzyb3mabYdUmJuJtuX3eWvenOxc7LKOw9jE=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:0c:dd:c2:d9:c3:86:5b:c1:e3:1b:48:24:1b:51:f4:f7:ba:ec:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E7F2EB76A05A952625CB92EA40D238CA348F718
        Validity
            Not Before: Apr 27 06:35:58 2025 GMT
            Not After : May  2 22:00:58 2025 GMT
        Subject: CN=0675DAF00474D35D8476FBF4F99F14A3442077E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b1:f9:1a:bb:36:88:bf:9e:f1:8f:36:bb:61:
                    54:1b:17:e3:7b:7a:2f:8f:51:5a:15:8a:25:53:d8:
                    e5:60:a6:13:44:6f:78:ae:c1:8e:7e:24:73:22:c9:
                    b1:65:9c:44:1d:81:0d:0e:ed:59:d0:6e:04:6a:00:
                    87:db:8e:70:c6:98:4e:24:a3:f5:33:e8:86:35:13:
                    4a:f6:5f:35:26:09:ed:53:69:4f:42:ff:d7:f7:ff:
                    65:bf:a7:27:25:8a:2d:dd:60:86:dd:b3:13:df:1e:
                    b8:d2:b5:4d:6d:b1:bf:b6:b7:0f:1a:2c:2f:33:fe:
                    de:7c:86:f8:fa:28:bc:03:74:10:5f:8f:8e:63:56:
                    d2:0a:3a:27:f2:32:8e:94:60:8c:8c:6e:3c:d2:c2:
                    40:f7:2c:fa:b2:d5:44:71:63:04:ed:fd:02:03:da:
                    39:e3:6d:9f:94:04:3b:e5:f1:ba:53:51:92:0e:cc:
                    b6:a0:29:38:b6:a9:bb:ee:a7:52:3a:f6:b6:38:66:
                    29:84:22:3e:fb:a2:14:7a:e4:49:5c:f9:8f:6a:b6:
                    3c:fa:65:45:26:05:df:6a:72:e1:59:fa:c4:52:f9:
                    65:b2:f8:c8:bd:9b:a9:43:9e:1b:7c:62:6d:45:01:
                    ff:ab:eb:17:5f:c2:1d:d3:89:46:8f:88:ba:e4:eb:
                    ae:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:75:DA:F0:04:74:D3:5D:84:76:FB:F4:F9:9F:14:A3:44:20:77:E9
            X509v3 Authority Key Identifier:
                keyid:9E:7F:2E:B7:6A:05:A9:52:62:5C:B9:2E:A4:0D:23:8C:A3:48:F7:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:23:98:13:6c:4a:be:34:d1:a4:7e:6b:d9:a6:10:d2:86:3c:
         f9:6b:ea:14:4f:6d:e4:e2:36:b9:ef:a9:ce:26:de:93:ff:fe:
         ab:d1:71:e2:cf:90:9e:5e:c9:f2:0e:a1:a4:2a:bb:66:8a:63:
         e8:6d:94:6b:7d:62:a2:3f:de:9a:ab:d5:22:9c:e9:cc:53:e8:
         33:6f:04:ee:3b:70:92:73:5e:d0:f9:f9:8a:66:02:6b:ef:bc:
         d8:f6:95:91:7f:fc:cc:89:60:65:25:a4:ce:b7:81:0c:03:68:
         4d:b7:db:67:e7:b5:0a:1c:e9:2e:2e:36:41:71:dc:cd:eb:c2:
         f4:0d:47:20:94:91:37:3b:73:cf:3b:8f:61:0c:81:ea:52:7a:
         68:1a:33:69:85:76:70:0b:9b:da:17:de:04:4a:0d:8f:36:e9:
         22:4a:96:f6:35:d8:9b:65:14:38:4b:c9:18:fb:a4:0a:14:0e:
         95:9d:e5:f3:ad:d1:dc:c6:12:7c:bd:41:3c:73:41:43:25:41:
         d7:05:73:dc:c7:55:30:7e:f7:31:68:43:36:7f:7c:22:1b:b8:
         6a:55:f7:3a:c4:27:69:5c:ee:3a:04:20:39:7a:67:5e:f5:0f:
         9a:d9:ce:11:90:6f:a2:45:73:88:e8:a7:53:83:56:26:3d:1a:
         d2:d4:69:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:28 2025 by rpki-client on console.sobornost.net