Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
File:                     2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft (raw, json)
Hash identifier:          7EGrZB40A/nHUcPy7JVOWTAjcOeGuw6tvx7p9rp9w0o=
Subject key identifier:   75:8D:74:55:7F:52:B9:3C:5F:FB:17:91:A0:B7:49:DA:E5:FF:FC:04
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Certificate issuer:       /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial:       7CCBFA05DEC5A39A9827B04DB7BD82D109237606
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
Manifest number:          D3
Signing time:             Thu 24 Apr 2025 15:12:26 +0000
Manifest this update:     Thu 24 Apr 2025 15:07:26 +0000
Manifest next update:     Wed 30 Apr 2025 06:06:26 +0000
Files and hashes:         1: 3139312e39372e37332e302f32342d3234203d3e20323633323039.roa (hash: F99/y4RLHeC/gFpIHo23IJHsKRTmwkbjybF9i4vcSVg=)
                          2: 3139312e39372e37362e302f32342d3234203d3e20323633323039.roa (hash: jcyd112aMwnX4VPkxV+cS/nLKwlfRo+g4FgD9M36FcQ=)
                          3: 3139312e39372e37302e302f32342d3234203d3e20323633323039.roa (hash: 5PSvzyS4nwqODKk4sXnbEwfKiPmj8ugbkWh0CDarUeI=)
                          4: 3139312e39372e37302e302f32332d3233203d3e20323633323039.roa (hash: NzlSFFgSOjJScuEs76Q/BLYtMSU1AvDuOBr4CNOQ7hs=)
                          5: 3139312e39372e37362e302f32322d3232203d3e20323633323039.roa (hash: x8OuoKaq5uQ7nMsD6DahwLTOaI7S1+Ww/wFPbvJbd5M=)
                          6: 3139312e39372e37312e302f32342d3234203d3e20323633323039.roa (hash: /Zub1c74HInvU5T44xAP2cHnRXZWrMf0/mKvbS0ICPs=)
                          7: 3139312e39372e37342e302f32342d3234203d3e20323633323039.roa (hash: uxGbGIQ6MF16Xl3SaV0E8T5Xszc+nT2pTzSbAtGdmDs=)
                          8: 3139312e39372e36382e302f32342d3234203d3e20323633323039.roa (hash: 0SMsdhWMlWHUqu7BGHqUj6cPBx+/vv8eEUN54pGX3A8=)
                          9: 3139312e39372e37322e302f32342d3234203d3e20323633323039.roa (hash: fmtAxtxZEkIPiwuPhTwakkXlcyqbN2xi2qXLQSeosJk=)
                          10: 3139312e39372e36382e302f32322d3232203d3e20323633323039.roa (hash: Wj+9YuYKzt0oJbrfmDtWRF/tNGOi66YkT0Qd5IkIV+g=)
                          11: 3139312e39372e37322e302f32332d3233203d3e20323633323039.roa (hash: An+2f2shr7cycbHH2vN08nIw9kN18TM6tXVrS32EPn0=)
                          12: 3139312e39372e37382e302f32332d3233203d3e20323633323039.roa (hash: sajrtudz4HHTAi7ImNn0eQy9zH7ky2X/+KIW98rv2qA=)
                          13: 3139312e39372e36382e302f32332d3233203d3e20323633323039.roa (hash: VkYPkQHNTgb1iN4ahJLMe0owznaJpzXMd/cHdieqdgk=)
                          14: 3139312e39372e37352e302f32342d3234203d3e20323633323039.roa (hash: G9IuGCNpuB2iku9GtFrguz+nXhDrRPoIe9UuUpRxSyg=)
                          15: 3139312e39372e36392e302f32342d3234203d3e20323633323039.roa (hash: oh+QZn/AMkY+eUa7BT2log2iTCWyDwwpbkyA1Wl7whw=)
                          16: 3139312e39372e37322e302f32312d3231203d3e20323633323039.roa (hash: gnMq26wnHjaM+8BUXMygy2rFL6NyQUQNV462jcc0y/4=)
                          17: 3139312e39372e37342e302f32332d3233203d3e20323633323039.roa (hash: gSvz2XV3a977eXO7rZLfDJuDKxlwEtrJkE0S+oJ74ZM=)
                          18: 3139312e39372e37372e302f32342d3234203d3e20323633323039.roa (hash: uMRzStgCKh0f7KuUa7ZaTs50AZukfvwU8cfNWZzY5w0=)
                          19: 3139312e39372e37322e302f32322d3232203d3e20323633323039.roa (hash: BHxvr4lrS2O7bYbvXDsPXA/DXKlD9R9/iKum3VJjGrw=)
                          20: 3139312e39372e37362e302f32332d3233203d3e20323633323039.roa (hash: wR7hQrD+lFi3zmHiQ3xyS5FXFH5LwFxMwPHpWIVe01Q=)
                          21: 3139312e39372e37392e302f32342d3234203d3e20323633323039.roa (hash: +dKyVJ25k4Qqtr04Z55BxB43jGJ0Zk7/9IzwH+94DTM=)
                          22: 2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl (hash: QwjSGlrsT9UbOLdjTjCkdP1szCVNO3JCqv9vt/+kDew=)
                          23: 3139312e39372e37382e302f32342d3234203d3e20323633323039.roa (hash: nFqekbrNHbpBNVb8AduKROZPOLyIlsOJT/Kz6Q++QlY=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 01:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:cb:fa:05:de:c5:a3:9a:98:27:b0:4d:b7:bd:82:d1:09:23:76:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
        Validity
            Not Before: Apr 24 15:07:26 2025 GMT
            Not After : Apr 30 06:06:26 2025 GMT
        Subject: CN=758D74557F52B93C5FFB1791A0B749DAE5FFFC04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:68:bc:3e:8e:f0:3d:65:19:43:7e:c3:09:53:
                    d9:73:fe:b3:1b:f8:41:44:0c:2f:3c:42:d7:1e:b9:
                    ab:a4:7d:b9:07:d4:33:d2:89:80:81:a9:c5:97:54:
                    0d:47:d0:da:b7:80:a6:05:d5:20:f9:3c:72:60:b0:
                    ab:4e:a3:d7:4f:9b:13:eb:b6:f9:3f:4a:d0:fe:3c:
                    07:c7:5d:df:ac:17:a9:38:27:b5:3f:c8:97:c5:88:
                    1e:dd:37:de:73:f5:03:45:fa:69:64:4b:b0:62:06:
                    68:1c:df:5b:f9:1c:35:45:f4:74:80:c4:66:8b:02:
                    b6:8e:dd:68:74:33:31:a9:a4:e5:b3:2d:88:02:3b:
                    8f:f3:b0:6e:42:33:4f:bf:bc:8d:fe:09:65:1b:85:
                    5a:a4:d0:f3:dc:9a:33:79:35:e9:62:b4:00:54:52:
                    0d:30:aa:ed:eb:52:55:3c:51:1e:1e:73:a9:90:11:
                    68:25:47:72:6b:a9:97:b2:34:45:8e:3f:ab:4d:ff:
                    bb:15:19:c6:d1:7b:f5:f7:24:70:3b:07:53:b4:ef:
                    b2:aa:1d:60:cf:b8:45:44:81:a1:8d:75:b8:be:89:
                    d3:81:ac:7d:ce:8c:55:31:fb:0f:36:6f:56:e6:a7:
                    42:39:5c:0a:e3:0f:72:44:3d:6b:99:16:5a:70:87:
                    29:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8D:74:55:7F:52:B9:3C:5F:FB:17:91:A0:B7:49:DA:E5:FF:FC:04
            X509v3 Authority Key Identifier:
                keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:57:79:c8:f5:fb:f3:3a:91:d5:6a:53:e3:66:82:3a:8e:97:
         c2:e3:db:52:c2:bf:8d:72:78:58:38:ca:66:e1:d8:7c:4e:d6:
         b9:fc:13:29:b9:44:19:cc:a8:9d:d4:6f:4b:52:ab:a2:51:82:
         72:5b:df:24:2d:fd:b4:6d:e4:1d:20:f7:92:23:e0:7a:aa:74:
         df:28:67:85:82:21:c6:44:ec:9d:e3:33:27:d8:81:9f:aa:47:
         ce:62:b3:59:92:19:60:0a:d7:99:25:d3:71:d2:6d:75:00:84:
         e5:7d:a2:07:5e:d6:a2:39:76:8e:c6:4b:1f:5b:9c:28:68:4f:
         dd:6d:9e:e1:59:25:4a:29:e4:5c:fa:22:58:3e:4d:ae:5e:4f:
         fa:6c:7c:31:b3:2a:99:b3:e9:2a:8b:0c:19:8a:9c:45:ad:18:
         7b:e2:24:a8:f5:42:9f:9d:0c:c6:a2:70:a5:bd:39:b3:58:86:
         2e:b4:0c:a0:3a:8e:fe:80:4e:dc:5e:3d:33:89:0d:7d:09:b8:
         62:fe:2c:8f:7d:ce:cc:71:1e:8d:21:40:17:f1:65:aa:fc:56:
         01:9f:97:cb:2b:d9:1e:ae:79:32:8d:6a:7a:2e:61:64:d8:4b:
         07:3a:40:4f:fe:69:c1:56:26:9a:55:b5:18:1e:a3:55:c9:46:
         af:a3:89:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:01:42 2025 by rpki-client on console.sobornost.net