Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.mft
File:                     D8D44DD84F3FDBD732870581DB91456D40862FA2.mft (raw, json)
Hash identifier:          zafUdwGtPAst3009LwBXJobZleHd17J7jm2Bz39S004=
Subject key identifier:   CE:7F:82:4B:0C:68:9D:D1:F7:86:33:9B:55:EB:E2:11:2F:A3:7E:97
Authority key identifier: D8:D4:4D:D8:4F:3F:DB:D7:32:87:05:81:DB:91:45:6D:40:86:2F:A2
Certificate issuer:       /CN=D8D44DD84F3FDBD732870581DB91456D40862FA2
Certificate serial:       10BE4E6CCECD62483556B509890A02EAA9C37301
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.mft
Manifest number:          D5
Signing time:             Mon 28 Apr 2025 02:37:46 +0000
Manifest this update:     Mon 28 Apr 2025 02:32:46 +0000
Manifest next update:     Sat 03 May 2025 14:00:46 +0000
Files and hashes:         1: 3138312e3139322e36342e302f32302d3234203d3e203532343139.roa (hash: FGrpmTM3XleMEavBe1JWut8jPhQ5Bfe2lg3+PxqwFjY=)
                          2: 3230302e33312e3234302e302f32302d3234203d3e203532343139.roa (hash: +7ZT4IxPU3KQDNqsxh75NbK5B83dfZdVwC6wjHsLXZI=)
                          3: 323830333a333438303a3a2f33382d3338203d3e203532343139.roa (hash: tGyjAUcwRgzP4j9y1aD5z4mdH6ndlrdk3VB5uQzOkOU=)
                          4: D8D44DD84F3FDBD732870581DB91456D40862FA2.crl (hash: qQuPG5kVMQj2youEptaFWrZSPFGnYu796NOLKOzwjt4=)
                          5: 323830333a333438303a3430303a3a2f33382d3338203d3e203532343139.roa (hash: 9/+SvF2tdKKJtHn13w4wYH74oN6nuNoKMtv/KOAzrJU=)
                          6: 323830333a333438303a3a2f33322d3332203d3e203532343139.roa (hash: PY+fkUppUCAZ1gvSPscLpC9yOfR3nIAcmTn10X6hT0Y=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:be:4e:6c:ce:cd:62:48:35:56:b5:09:89:0a:02:ea:a9:c3:73:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8D44DD84F3FDBD732870581DB91456D40862FA2
        Validity
            Not Before: Apr 28 02:32:46 2025 GMT
            Not After : May  3 14:00:46 2025 GMT
        Subject: CN=CE7F824B0C689DD1F786339B55EBE2112FA37E97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e5:65:1e:b9:e1:3c:15:5b:7c:9b:b8:b0:df:
                    12:61:88:3a:e9:cc:a0:b1:63:27:9f:2e:e5:a3:88:
                    5e:ae:8b:e5:93:65:dc:c6:3c:82:6e:91:89:06:46:
                    8e:21:11:89:bb:65:16:f6:67:b7:30:bc:ac:69:ed:
                    1c:74:7e:db:07:5c:34:f4:34:18:b4:f6:ec:50:98:
                    06:01:3e:ad:2a:71:bf:32:2f:78:c7:b9:6e:42:27:
                    29:2d:26:d2:47:b6:4a:b6:86:b1:de:b8:1c:94:bf:
                    c5:34:32:a5:e2:ba:c9:0a:e4:3d:fb:91:f6:6f:de:
                    3a:5e:ad:cc:33:d4:b6:ff:32:f3:32:0e:da:14:82:
                    a2:cf:84:01:e6:c6:45:b8:01:c2:03:cf:b3:19:9b:
                    00:80:9c:34:79:3d:f8:d1:40:f7:1e:42:3f:c6:63:
                    b4:2d:58:47:7c:c8:49:fe:40:67:6d:3e:98:9c:30:
                    c0:9b:7e:78:47:ad:e7:ac:76:cb:a2:dc:29:bc:c0:
                    3f:00:7f:7a:aa:73:3e:32:44:0a:6c:f4:f3:ed:cf:
                    1c:61:76:0e:df:76:aa:de:a0:c4:7f:de:b0:13:d5:
                    41:2a:33:d5:0d:a9:1e:94:c3:95:67:06:96:6d:d0:
                    5b:5b:85:27:15:2c:3e:1e:49:bc:01:64:2f:58:39:
                    78:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7F:82:4B:0C:68:9D:D1:F7:86:33:9B:55:EB:E2:11:2F:A3:7E:97
            X509v3 Authority Key Identifier:
                keyid:D8:D4:4D:D8:4F:3F:DB:D7:32:87:05:81:DB:91:45:6D:40:86:2F:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:51:69:d7:c2:59:0c:13:83:63:12:2f:71:20:4a:57:05:22:
         54:16:03:55:d9:8f:26:40:9a:b1:02:e7:fc:5b:3c:22:c3:78:
         c3:f9:ec:b7:b4:29:b7:f6:c6:7f:36:92:aa:b0:20:d3:b0:c2:
         33:2d:53:4f:dd:18:bb:85:fe:ed:c3:d0:76:e1:db:1f:72:dc:
         d5:2f:51:c5:55:85:52:df:e0:0b:80:1d:e7:0f:fd:16:ae:94:
         fe:31:c9:51:bf:39:cf:cd:4b:bd:76:48:4e:dc:4a:7c:4d:69:
         20:61:d8:aa:a3:4e:53:81:b2:b6:e6:4f:18:f6:06:f4:aa:9f:
         d0:51:a2:8f:68:fb:9c:ec:71:f7:4d:1f:ea:95:71:95:67:47:
         b7:fb:dd:cc:c9:24:d6:ab:00:0e:99:73:9f:47:ec:b3:87:32:
         2e:53:fc:eb:58:c9:c6:83:8b:55:95:c2:80:83:c4:e1:19:d9:
         cd:f5:7a:ed:a4:56:ec:fa:03:3a:d3:ab:46:26:c3:71:55:17:
         ea:ec:bc:a1:2c:68:12:58:87:d1:3d:b3:01:cc:17:a0:28:cb:
         78:4a:63:eb:90:b5:9e:cc:24:80:1a:76:8b:42:59:04:69:77:
         df:33:9e:6b:2e:7e:5e:0f:ae:d4:bf:39:bc:f0:fa:db:4a:0a:
         2f:fb:91:ac
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUEL5ObM7NYkg1VrUJiQoC6qnDcwEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhENDRERDg0RjNGREJENzMyODcwNTgxREI5MTQ1NkQ0
MDg2MkZBMjAeFw0yNTA0MjgwMjMyNDZaFw0yNTA1MDMxNDAwNDZaMDMxMTAvBgNV
BAMTKENFN0Y4MjRCMEM2ODlERDFGNzg2MzM5QjU1RUJFMjExMkZBMzdFOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD5WUeueE8FVt8m7iw3xJhiDrp
zKCxYyefLuWjiF6ui+WTZdzGPIJukYkGRo4hEYm7ZRb2Z7cwvKxp7Rx0ftsHXDT0
NBi09uxQmAYBPq0qcb8yL3jHuW5CJyktJtJHtkq2hrHeuByUv8U0MqXiuskK5D37
kfZv3jpercwz1Lb/MvMyDtoUgqLPhAHmxkW4AcIDz7MZmwCAnDR5PfjRQPceQj/G
Y7QtWEd8yEn+QGdtPpicMMCbfnhHreesdsui3Cm8wD8Af3qqcz4yRAps9PPtzxxh
dg7fdqreoMR/3rAT1UEqM9UNqR6Uw5VnBpZt0FtbhScVLD4eSbwBZC9YOXjdAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUzn+CSwxondH3hjObVeviES+jfpcwHwYDVR0j
BBgwFoAU2NRN2E8/29cyhwWB25FFbUCGL6IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQ0Q2NzgwMTE2N0QwRUYwNzRGRjEzQUU1OTc3QjQyMTY4
N0EyMUYwOERGRDE1NDE1MjE0ODFENEQ4RTM1QTA1LzAvRDhENDRERDg0RjNGREJE
NzMyODcwNTgxREI5MTQ1NkQ0MDg2MkZBMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEQ0NEREODRGM0ZEQkQ3MzI4
NzA1ODFEQjkxNDU2RDQwODYyRkEyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRENENjc4MDExNjdEMEVGMDc0RkYxM0FFNTk3N0I0MjE2ODdBMjFGMDhE
RkQxNTQxNTIxNDgxRDREOEUzNUEwNS8wL0Q4RDQ0REQ4NEYzRkRCRDczMjg3MDU4
MURCOTE0NTZENDA4NjJGQTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBZUWnXwlkME4NjEi9xIEpXBSJU
FgNV2Y8mQJqxAuf8Wzwiw3jD+ey3tCm39sZ/NpKqsCDTsMIzLVNP3Ri7hf7tw9B2
4dsfctzVL1HFVYVS3+ALgB3nD/0WrpT+MclRvznPzUu9dkhO3Ep8TWkgYdiqo05T
gbK25k8Y9gb0qp/QUaKPaPuc7HH3TR/qlXGVZ0e3+93MySTWqwAOmXOfR+yzhzIu
U/zrWMnGg4tVlcKAg8ThGdnN9XrtpFbs+gM606tGJsNxVRfq7LyhLGgSWIfRPbMB
zBegKMt4SmPrkLWezCSAGnaLQlkEaXffM55rLn5eD67Uvzm88PrbSgov+5Gs
-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:21 2025 by rpki-client on console.sobornost.net