Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.mft
File:                     BF32AEE1B63DB0DF1296575D56FA963E24476012.mft (raw, json)
Hash identifier:          azFr47iIllBbODrHQU5nM8ohcCebz1ROhkKhR40AlHg=
Subject key identifier:   DF:3F:A3:88:BE:85:4C:E2:C2:B9:A0:C2:AB:A2:8C:DA:2B:36:F6:BB
Authority key identifier: BF:32:AE:E1:B6:3D:B0:DF:12:96:57:5D:56:FA:96:3E:24:47:60:12
Certificate issuer:       /CN=BF32AEE1B63DB0DF1296575D56FA963E24476012
Certificate serial:       0671B65A73983972423CAB514A5247E508B9E359
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.mft
Manifest number:          20
Signing time:             Mon 28 Apr 2025 14:25:00 +0000
Manifest this update:     Mon 28 Apr 2025 14:20:00 +0000
Manifest next update:     Sat 03 May 2025 01:33:00 +0000
Files and hashes:         1: BF32AEE1B63DB0DF1296575D56FA963E24476012.crl (hash: 0LcULLYOqMRoQpi/L1fgDe169rTRl4fIPl/Mrq+bH+0=)
                          2: 323830333a323264303a3a2f33322d3334203d3e20323734303438.roa (hash: 4aH4uYkWGE+cc9ahkSEXCeY+Hh6RB/BBL4FOK1r2QC0=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:71:b6:5a:73:98:39:72:42:3c:ab:51:4a:52:47:e5:08:b9:e3:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF32AEE1B63DB0DF1296575D56FA963E24476012
        Validity
            Not Before: Apr 28 14:20:00 2025 GMT
            Not After : May  3 01:33:00 2025 GMT
        Subject: CN=DF3FA388BE854CE2C2B9A0C2ABA28CDA2B36F6BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f9:06:e6:d6:58:ba:b2:ad:6b:d2:f4:29:7d:
                    be:c9:f7:b8:b7:b8:3a:5f:43:b3:5b:4d:e7:2a:b6:
                    84:8e:3d:8c:b3:0f:de:d0:01:56:a3:fb:c4:a7:b9:
                    c6:b9:13:a9:b9:a9:5d:92:53:f8:94:15:ec:ec:41:
                    ac:b8:c8:db:11:90:93:45:42:0f:16:01:a5:99:8b:
                    a9:46:a5:6d:8f:bc:8f:6c:e9:24:8e:10:e0:4b:b9:
                    3d:63:73:94:d5:53:14:c8:d1:5d:12:f0:0f:c4:c9:
                    f8:1f:2c:ca:56:25:cf:68:a5:c6:20:4b:ab:01:c2:
                    12:84:11:05:21:b1:dc:17:72:c4:16:e7:94:be:84:
                    03:3c:0a:68:e5:10:14:13:4b:c8:11:72:ac:bf:2b:
                    bd:b1:fe:bb:e1:bf:8b:36:df:08:07:9d:07:b6:af:
                    79:a0:2f:17:c7:ae:42:e8:ce:e5:c6:c4:11:77:d4:
                    cb:31:99:36:5f:0e:2b:0d:c5:32:db:b4:c4:9a:11:
                    0b:ae:3a:1c:2f:3a:0b:b6:d2:97:43:6c:fa:aa:48:
                    70:56:b8:ac:1c:f2:77:ed:8f:fd:22:e3:41:d5:60:
                    94:03:41:96:68:34:f3:51:c6:fc:ec:5f:ef:8f:6e:
                    48:9b:a1:24:15:00:fc:55:cf:10:f4:ad:23:56:c7:
                    8e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3F:A3:88:BE:85:4C:E2:C2:B9:A0:C2:AB:A2:8C:DA:2B:36:F6:BB
            X509v3 Authority Key Identifier:
                keyid:BF:32:AE:E1:B6:3D:B0:DF:12:96:57:5D:56:FA:96:3E:24:47:60:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:bf:1f:4a:d5:cd:0b:ad:59:56:b5:6c:72:86:c2:8c:13:b2:
         85:65:56:50:2e:d8:22:f8:6e:78:56:90:f9:0e:32:73:4b:fe:
         9d:e6:64:27:20:aa:fa:ec:34:fe:8b:0e:55:c8:d0:f7:db:23:
         79:73:f1:d0:2b:05:0f:d8:69:9f:a5:0e:6f:1b:92:2e:91:89:
         68:1f:05:02:03:a1:fb:0c:ce:39:25:54:4c:b3:a9:b4:04:1d:
         ae:6c:36:a0:58:9d:e4:cf:ef:b1:8e:9c:66:68:54:e7:a9:c2:
         d7:4a:c0:34:a0:2c:0e:02:47:a7:c7:f4:bd:ee:3e:a1:b3:5b:
         62:0a:18:9d:46:01:64:39:ca:32:aa:c2:01:d8:e6:44:d0:a7:
         cb:9c:af:8f:aa:56:cf:95:5e:f9:63:41:e0:12:fc:bd:e8:c0:
         f6:a3:60:08:cc:69:72:c3:be:34:27:51:20:df:c4:47:eb:9a:
         35:28:90:92:ba:8e:85:2d:df:be:8d:f2:da:ea:bd:06:33:c5:
         b2:af:10:cc:07:b5:75:38:ee:88:41:f7:a6:9e:1c:56:04:ec:
         f1:6e:05:88:33:79:61:0e:46:31:f9:88:f6:e2:ba:57:5b:8a:
         c9:e8:a1:a0:69:0c:e4:30:b9:ee:64:38:3f:a5:c7:62:fb:41:
         c0:71:6c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:50 2025 by rpki-client on console.sobornost.net