Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.mft
File:                     DB097B1D95BB51C9F513FC53429F30EA207C1549.mft (raw, json)
Hash identifier:          w2A30+JyzPlhDdiJVncuqyTKqGcHr7BKQijdKWY2+uE=
Subject key identifier:   CE:B3:37:5A:8E:5B:40:B0:E5:A1:3C:BD:1A:70:CF:5B:B2:E9:FC:53
Authority key identifier: DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49
Certificate issuer:       /CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
Certificate serial:       3FF5B91AD40F3A3FAE5DABE209AA0E375068D727
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.mft
Manifest number:          D5
Signing time:             Sun 27 Apr 2025 13:04:50 +0000
Manifest this update:     Sun 27 Apr 2025 12:59:50 +0000
Manifest next update:     Fri 02 May 2025 09:14:50 +0000
Files and hashes:         1: 34352e3232382e36372e302f32342d3234203d3e20333935313631.roa (hash: HraPIbFN/b40MckBMOvlXWsJdWO6TwAK0jhvzWAATRo=)
                          2: 3137302e38302e3130382e302f32322d3234203d3e20323633383132.roa (hash: pZV1AngcgUkxZjew1chHba38nAWYB1Vez3/SzMdOpXU=)
                          3: 323830303a6261303a3a2f33322d3438203d3e20323633383132.roa (hash: Hs0JgC03iD6sNsJqLRFyLngERE0P0+zmHDpWFlZtVV0=)
                          4: 323830303a6261303a3a2f33322d3438203d3e20333935313631.roa (hash: bJ1qnuF9XEZV92LWJBy70AhLEZJ3voAufHl3E5VcggI=)
                          5: 34352e3232382e36372e302f32342d3234203d3e20323633383132.roa (hash: LvdtJqEbx/o1SrEXAxVlVParnUNHTxKcsNLBcI/4HUQ=)
                          6: DB097B1D95BB51C9F513FC53429F30EA207C1549.crl (hash: yDXpL03DJxP2cPlAQdWvUbxiiJ1pfXFv49Zban351u4=)
                          7: 3139302e3130332e3137362e302f32322d3234203d3e20323633383132.roa (hash: OtwNaOGPUjqNxakacSNFXK602mO/b1nS62jF3bQNf3E=)
                          8: 3137302e38302e3130382e302f32322d3234203d3e20333935313631.roa (hash: awx3OQax9V/raOxOeaAR/d4JOg1GRTA267TqilF/Yno=)
                          9: 3133382e3138362e3134302e302f32322d3234203d3e20323633383132.roa (hash: mJNDoCn5gBoRyT5F+me24tPSzOeZfy9WM8/vpL45duQ=)
                          10: 3133382e3138362e3134302e302f32322d3234203d3e20333935313631.roa (hash: ShsjkA3eT/wEoMlnpCD6GpDZiGTx8ODvl2pbeJEJJqo=)
                          11: 3139302e3130332e3137362e302f32322d3234203d3e20333935313631.roa (hash: t/ffXsRrk9u5o2AJehvfRiI8paHxT4rS0Psj7ydMGsc=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f5:b9:1a:d4:0f:3a:3f:ae:5d:ab:e2:09:aa:0e:37:50:68:d7:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
        Validity
            Not Before: Apr 27 12:59:50 2025 GMT
            Not After : May  2 09:14:50 2025 GMT
        Subject: CN=CEB3375A8E5B40B0E5A13CBD1A70CF5BB2E9FC53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0c:8d:8c:98:14:ca:87:9e:24:b4:18:84:25:
                    a5:df:06:3f:b8:34:fa:55:f6:e6:e5:5c:0f:08:48:
                    c6:4c:b4:fb:ee:3a:89:97:95:b5:88:39:46:51:26:
                    cd:6c:d8:6a:e8:1f:11:08:8b:b7:47:10:ee:e4:30:
                    ca:e4:ec:ff:13:b0:7c:32:49:18:c0:de:f5:9d:5c:
                    6c:31:0b:4f:a7:61:60:5d:20:f1:6e:45:3c:cc:ac:
                    66:a5:28:16:75:58:32:ba:47:77:8a:9d:6e:5c:52:
                    74:10:24:d9:61:86:8c:64:6e:fc:8e:cc:dd:ed:30:
                    38:11:84:23:f3:3f:83:15:f0:1e:70:f0:c7:8d:ed:
                    f0:1e:97:db:b9:75:e3:fe:85:bd:eb:e9:48:df:d3:
                    7f:32:c4:d7:af:da:0d:0f:96:ed:7d:ca:8a:5d:9a:
                    2a:46:95:21:c6:0e:78:59:34:81:21:63:a4:73:eb:
                    b1:ed:bb:f7:de:83:9e:6c:e7:4a:62:3d:94:06:13:
                    a9:cf:cd:08:e8:df:47:54:48:5e:1d:22:55:b1:1d:
                    9e:d3:36:eb:da:21:21:91:94:a4:1b:c0:dc:bf:4a:
                    da:6a:41:1d:90:87:6c:4f:44:e8:10:9f:e7:a7:29:
                    34:2c:82:39:ed:0c:51:15:6b:10:24:cd:12:b8:76:
                    2b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B3:37:5A:8E:5B:40:B0:E5:A1:3C:BD:1A:70:CF:5B:B2:E9:FC:53
            X509v3 Authority Key Identifier:
                keyid:DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:0f:8a:f2:94:b4:e8:a7:7c:e9:3e:8b:4e:df:a3:22:9d:4a:
         0c:e2:37:38:30:13:3b:57:88:a3:ec:4b:f3:45:07:b0:bd:09:
         94:40:da:e3:42:f0:28:bd:c0:4e:02:18:64:58:1e:1d:ad:84:
         0d:95:f6:e9:02:60:0c:8b:81:c7:a5:d4:8e:e4:67:52:c8:cd:
         dd:6b:87:d9:40:7b:3a:f7:45:58:c0:17:09:f1:af:d4:b3:25:
         a6:bd:bd:86:78:07:0a:d2:c6:6e:7a:c2:28:2f:f6:e5:7a:00:
         10:30:9d:2e:af:f0:28:63:92:fc:44:02:7c:a9:b7:9f:bc:1f:
         6e:3a:23:14:74:9a:8c:3a:f3:35:85:a0:9d:6f:f6:d9:98:4d:
         2d:31:a6:30:f7:31:f0:d1:96:17:9d:f5:00:ab:81:93:69:0e:
         81:3e:cc:8c:32:a2:15:ff:2d:53:12:e0:b1:fc:0e:54:c5:a9:
         46:61:e8:03:44:29:dc:3c:16:28:7a:57:37:56:c0:8d:f5:c9:
         b9:ae:ee:0e:1d:06:94:90:0a:af:4e:a8:89:b4:67:51:58:be:
         68:4e:15:f2:1e:c5:b6:4b:4f:83:3b:69:13:84:f7:26:00:ae:
         7b:83:ff:6a:3d:d4:0f:12:a2:40:05:52:2a:a3:d7:1a:4f:57:
         39:ea:5a:5c
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUP/W5GtQPOj+uXaviCaoON1Bo1ycwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREIwOTdCMUQ5NUJCNTFDOUY1MTNGQzUzNDI5RjMwRUEy
MDdDMTU0OTAeFw0yNTA0MjcxMjU5NTBaFw0yNTA1MDIwOTE0NTBaMDMxMTAvBgNV
BAMTKENFQjMzNzVBOEU1QjQwQjBFNUExM0NCRDFBNzBDRjVCQjJFOUZDNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMDI2MmBTKh54ktBiEJaXfBj+4
NPpV9ublXA8ISMZMtPvuOomXlbWIOUZRJs1s2GroHxEIi7dHEO7kMMrk7P8TsHwy
SRjA3vWdXGwxC0+nYWBdIPFuRTzMrGalKBZ1WDK6R3eKnW5cUnQQJNlhhoxkbvyO
zN3tMDgRhCPzP4MV8B5w8MeN7fAel9u5deP+hb3r6Ujf038yxNev2g0Plu19yopd
mipGlSHGDnhZNIEhY6Rz67Htu/feg55s50piPZQGE6nPzQjo30dUSF4dIlWxHZ7T
NuvaISGRlKQbwNy/StpqQR2Qh2xPROgQn+enKTQsgjntDFEVaxAkzRK4ditlAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUzrM3Wo5bQLDloTy9GnDPW7Lp/FMwHwYDVR0j
BBgwFoAU2wl7HZW7Ucn1E/xTQp8w6iB8FUkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQjFFOTM3NTYwMUYxMjE4MTA4OTRGMDQ2QjNEM0NFQ0VB
NEVDODE2Q0Q1MzAwOTBBMEU5NzE3QjA5M0VCRjQ3LzAvREIwOTdCMUQ5NUJCNTFD
OUY1MTNGQzUzNDI5RjMwRUEyMDdDMTU0OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQjA5N0IxRDk1QkI1MUM5RjUx
M0ZDNTM0MjlGMzBFQTIwN0MxNTQ5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUIxRTkzNzU2MDFGMTIxODEwODk0RjA0NkIzRDNDRUNFQTRFQzgxNkNE
NTMwMDkwQTBFOTcxN0IwOTNFQkY0Ny8wL0RCMDk3QjFEOTVCQjUxQzlGNTEzRkM1
MzQyOUYzMEVBMjA3QzE1NDkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBXD4rylLTop3zpPotO36MinUoM
4jc4MBM7V4ij7EvzRQewvQmUQNrjQvAovcBOAhhkWB4drYQNlfbpAmAMi4HHpdSO
5GdSyM3da4fZQHs690VYwBcJ8a/UsyWmvb2GeAcK0sZuesIoL/blegAQMJ0ur/Ao
Y5L8RAJ8qbefvB9uOiMUdJqMOvM1haCdb/bZmE0tMaYw9zHw0ZYXnfUAq4GTaQ6B
PsyMMqIV/y1TEuCx/A5UxalGYegDRCncPBYoelc3VsCN9cm5ru4OHQaUkAqvTqiJ
tGdRWL5oThXyHsW2S0+DO2kThPcmAK57g/9qPdQPEqJABVIqo9caT1c56lpc
-----END CERTIFICATE-----
Generated at Sun Apr 27 14:50:37 2025 by rpki-client on console.sobornost.net