Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE96160BD7CF7887DC6B4200EADAE7901ACA0A9988EED77ED5749EED57E2B841/0/385D5BC5BD96AA08FBF41C4887360B24A8BF9036.mft
File:                     385D5BC5BD96AA08FBF41C4887360B24A8BF9036.mft (raw, json)
Hash identifier:          LfLIrm7SHbq76Ott5rZzo+8NWonbWMjNUIt0cI3VHtI=
Subject key identifier:   3C:CC:30:6C:FB:B9:BE:50:D0:F0:DF:0F:46:31:B8:9B:4E:E8:CE:12
Authority key identifier: 38:5D:5B:C5:BD:96:AA:08:FB:F4:1C:48:87:36:0B:24:A8:BF:90:36
Certificate issuer:       /CN=385D5BC5BD96AA08FBF41C4887360B24A8BF9036
Certificate serial:       0AC8321F4E73A59C0FC8F62954068E2643053D83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/385D5BC5BD96AA08FBF41C4887360B24A8BF9036.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE96160BD7CF7887DC6B4200EADAE7901ACA0A9988EED77ED5749EED57E2B841/0/385D5BC5BD96AA08FBF41C4887360B24A8BF9036.mft
Manifest number:          D2
Signing time:             Mon 28 Apr 2025 03:02:58 +0000
Manifest this update:     Mon 28 Apr 2025 02:57:58 +0000
Manifest next update:     Fri 02 May 2025 14:07:58 +0000
Files and hashes:         1: 3139302e3132322e3231362e302f32312d3234203d3e20323633323233.roa (hash: mUUbPeVarxyCzf1q/RssuC3G7XkYoNg+jmRlWLpGGZU=)
                          2: 385D5BC5BD96AA08FBF41C4887360B24A8BF9036.crl (hash: KhmV8EVP4ZwflXrT49jNAqFis5N3m/NDvTrH+a73Kpg=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE96160BD7CF7887DC6B4200EADAE7901ACA0A9988EED77ED5749EED57E2B841/0/385D5BC5BD96AA08FBF41C4887360B24A8BF9036.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE96160BD7CF7887DC6B4200EADAE7901ACA0A9988EED77ED5749EED57E2B841/0/385D5BC5BD96AA08FBF41C4887360B24A8BF9036.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/385D5BC5BD96AA08FBF41C4887360B24A8BF9036.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c8:32:1f:4e:73:a5:9c:0f:c8:f6:29:54:06:8e:26:43:05:3d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385D5BC5BD96AA08FBF41C4887360B24A8BF9036
        Validity
            Not Before: Apr 28 02:57:58 2025 GMT
            Not After : May  2 14:07:58 2025 GMT
        Subject: CN=3CCC306CFBB9BE50D0F0DF0F4631B89B4EE8CE12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0c:bc:c9:0a:85:78:e1:48:28:0f:11:7c:3c:
                    ff:25:b5:14:b4:7d:f8:e4:da:63:8b:a9:21:03:f1:
                    18:98:0c:17:af:aa:a1:a1:97:7f:b6:17:6b:a2:2c:
                    0d:68:52:6e:bb:4b:86:36:ae:b4:34:07:46:1b:f9:
                    b8:2d:eb:2a:35:f5:be:4b:7c:f3:a3:7f:24:74:42:
                    7b:d8:1b:16:76:9b:2c:f2:58:1d:2c:01:4a:83:4a:
                    ae:31:53:d4:b3:97:a2:b4:3b:43:87:99:66:d0:24:
                    63:f6:be:26:f8:de:85:d6:96:c4:f0:33:bb:c5:4a:
                    af:17:84:e7:34:06:d4:cb:1d:e0:69:08:08:e5:10:
                    06:76:2d:4e:e6:76:87:7d:1c:ea:c1:b8:64:b7:58:
                    23:0c:16:3f:05:79:d3:f1:46:47:b7:ff:21:ac:7e:
                    f5:a9:22:f3:14:c1:f8:f0:30:af:2d:b7:1d:54:0f:
                    9d:00:42:3d:37:45:5e:36:6f:12:e6:20:59:79:b4:
                    08:25:41:2b:c1:0a:77:d7:e5:1f:7a:05:ff:57:b9:
                    c7:c1:23:07:bb:50:b3:1a:c9:24:79:ad:1a:1e:c8:
                    f5:8a:77:c7:89:16:a7:db:78:2c:8c:4a:3c:0d:d8:
                    ad:33:af:14:8a:4e:23:7f:53:1d:43:3b:be:d7:1b:
                    99:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CC:30:6C:FB:B9:BE:50:D0:F0:DF:0F:46:31:B8:9B:4E:E8:CE:12
            X509v3 Authority Key Identifier:
                keyid:38:5D:5B:C5:BD:96:AA:08:FB:F4:1C:48:87:36:0B:24:A8:BF:90:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE96160BD7CF7887DC6B4200EADAE7901ACA0A9988EED77ED5749EED57E2B841/0/385D5BC5BD96AA08FBF41C4887360B24A8BF9036.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/385D5BC5BD96AA08FBF41C4887360B24A8BF9036.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE96160BD7CF7887DC6B4200EADAE7901ACA0A9988EED77ED5749EED57E2B841/0/385D5BC5BD96AA08FBF41C4887360B24A8BF9036.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:cd:54:f0:56:a0:d4:99:41:2f:66:04:f8:83:34:26:ec:9c:
         aa:78:d4:97:05:94:78:8d:8e:e8:f5:c9:21:2b:30:17:92:aa:
         19:04:9b:61:9d:ea:ad:d6:c9:3a:fc:36:f2:90:76:b0:ba:ec:
         80:96:ea:99:07:0e:c1:82:c6:ca:85:6b:3e:a7:c0:a4:3b:b6:
         c5:db:69:e1:a1:41:cf:2c:bd:16:f0:f5:65:ff:1e:47:30:8e:
         e6:88:09:8c:d9:18:18:5b:f1:37:3f:8a:9f:c8:a3:01:c0:0e:
         e6:4b:50:a5:54:57:5c:9d:06:f4:a8:f1:47:db:9e:23:42:91:
         84:22:e5:25:93:02:a2:75:71:44:49:ed:9e:93:f3:68:d6:ef:
         06:11:58:f9:b0:4c:45:99:eb:d1:06:12:58:80:28:60:6b:b0:
         2e:1e:50:75:24:ec:71:44:87:1d:e5:9a:30:e1:c8:c6:3e:79:
         33:f5:2b:f0:c4:7d:3a:d5:16:27:d5:06:f2:a0:4d:f1:ea:7f:
         b6:49:c5:a4:11:aa:cc:a3:58:c8:19:6a:b6:61:ea:49:ae:90:
         74:46:1e:f3:87:55:bd:3e:8f:c2:2c:88:9a:9e:49:50:e0:ea:
         cf:ff:6f:dc:21:6b:c9:1d:95:12:7d:d1:56:26:13:8a:53:eb:
         e5:29:86:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:21 2025 by rpki-client on console.sobornost.net