Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EEBFDF801BA68D848913A1C771C5BFF1FBA40FD5F37C4D2C32F2EE76419253DC/0/C0FA3FC1460DC3AE2B0D6B1B743FCB84AFAE13A5.mft
File:                     C0FA3FC1460DC3AE2B0D6B1B743FCB84AFAE13A5.mft (raw, json)
Hash identifier:          d/fXR5HlEMdm0Fx9hdR9vTck2UjLL87J/m6oe4pHhvk=
Subject key identifier:   13:E7:3D:99:70:A0:44:1A:6B:D9:8F:54:A5:A8:68:C8:58:EE:D6:16
Authority key identifier: C0:FA:3F:C1:46:0D:C3:AE:2B:0D:6B:1B:74:3F:CB:84:AF:AE:13:A5
Certificate issuer:       /CN=C0FA3FC1460DC3AE2B0D6B1B743FCB84AFAE13A5
Certificate serial:       7E97D6BF6BFA1854B22D6995B21CA1344C1B0145
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0FA3FC1460DC3AE2B0D6B1B743FCB84AFAE13A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EEBFDF801BA68D848913A1C771C5BFF1FBA40FD5F37C4D2C32F2EE76419253DC/0/C0FA3FC1460DC3AE2B0D6B1B743FCB84AFAE13A5.mft
Manifest number:          D1
Signing time:             Mon 28 Apr 2025 18:57:43 +0000
Manifest this update:     Mon 28 Apr 2025 18:52:43 +0000
Manifest next update:     Sun 04 May 2025 04:44:43 +0000
Files and hashes:         1: 323830313a3138613a3a2f34342d3434203d3e203139343239.roa (hash: HlR+94QS3K2oZgMldCRY1s5AnHMBB4Ku3RjQULHtTRU=)
                          2: C0FA3FC1460DC3AE2B0D6B1B743FCB84AFAE13A5.crl (hash: H/SDjzljjHd0aL5ZJFPIhgQY+yPXOiA34DtbiXYzdvU=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EEBFDF801BA68D848913A1C771C5BFF1FBA40FD5F37C4D2C32F2EE76419253DC/0/C0FA3FC1460DC3AE2B0D6B1B743FCB84AFAE13A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EEBFDF801BA68D848913A1C771C5BFF1FBA40FD5F37C4D2C32F2EE76419253DC/0/C0FA3FC1460DC3AE2B0D6B1B743FCB84AFAE13A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0FA3FC1460DC3AE2B0D6B1B743FCB84AFAE13A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:97:d6:bf:6b:fa:18:54:b2:2d:69:95:b2:1c:a1:34:4c:1b:01:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0FA3FC1460DC3AE2B0D6B1B743FCB84AFAE13A5
        Validity
            Not Before: Apr 28 18:52:43 2025 GMT
            Not After : May  4 04:44:43 2025 GMT
        Subject: CN=13E73D9970A0441A6BD98F54A5A868C858EED616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9e:ab:c2:2b:5c:3a:bb:ec:72:de:2a:92:1e:
                    19:b8:06:ce:3e:83:ad:e7:4e:6d:80:26:49:72:f7:
                    cb:96:43:bf:49:db:82:d6:86:22:14:00:ed:0c:f3:
                    d2:6d:d0:b6:f6:48:72:ba:4d:ec:2b:60:e3:a9:2d:
                    75:1e:38:58:0b:56:c4:16:16:46:c4:17:a1:23:5e:
                    0e:56:de:72:b1:3d:9b:f4:77:6d:ea:a9:3d:c4:9c:
                    cd:dc:f2:bc:15:56:ae:60:ae:78:10:94:eb:fd:71:
                    a6:c1:6c:00:e3:c8:fa:ec:bb:1a:9e:9e:c5:31:53:
                    cf:36:d2:dc:dc:bc:79:08:f2:bb:05:e4:23:32:04:
                    93:5a:51:bf:9f:6c:1d:58:9f:19:ae:00:b7:41:d9:
                    5d:bf:34:55:94:09:21:c0:56:48:10:21:a9:49:97:
                    83:6d:d7:2d:d0:ed:67:b1:2a:6e:9b:7e:42:14:f2:
                    ee:21:a1:3a:e1:4b:60:a1:80:77:5c:12:c5:aa:32:
                    77:71:96:b5:3e:dc:64:85:83:a2:2d:76:98:c2:3c:
                    b9:9f:cb:61:32:96:07:5b:11:32:16:38:69:9d:af:
                    fb:82:52:3c:c2:c6:6f:80:39:c0:ed:1c:86:1a:11:
                    00:6e:27:5c:02:b2:f1:92:9c:61:2d:f4:a6:17:d6:
                    39:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E7:3D:99:70:A0:44:1A:6B:D9:8F:54:A5:A8:68:C8:58:EE:D6:16
            X509v3 Authority Key Identifier:
                keyid:C0:FA:3F:C1:46:0D:C3:AE:2B:0D:6B:1B:74:3F:CB:84:AF:AE:13:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EEBFDF801BA68D848913A1C771C5BFF1FBA40FD5F37C4D2C32F2EE76419253DC/0/C0FA3FC1460DC3AE2B0D6B1B743FCB84AFAE13A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0FA3FC1460DC3AE2B0D6B1B743FCB84AFAE13A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EEBFDF801BA68D848913A1C771C5BFF1FBA40FD5F37C4D2C32F2EE76419253DC/0/C0FA3FC1460DC3AE2B0D6B1B743FCB84AFAE13A5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:4e:0d:a9:b5:40:07:6c:7e:a3:7a:67:66:58:3d:11:19:88:
         7b:21:b4:29:8c:b6:1f:72:9e:20:b9:b1:d2:f3:1f:3d:bc:11:
         4f:f4:f0:3e:7a:4c:42:41:e4:90:a4:38:e6:5d:ac:e6:ad:55:
         91:36:5b:76:af:b1:bb:56:cd:4c:bd:f8:80:8b:e8:91:54:ca:
         d1:95:6d:ae:58:a0:d3:f4:ae:c0:56:c1:1a:9c:77:e2:30:f6:
         a1:b9:71:18:f3:57:b1:76:8f:ae:4f:7c:8c:0b:3a:33:93:7a:
         af:89:3c:fa:9d:10:c2:dd:5a:a0:aa:55:a3:d8:b9:8f:eb:9f:
         29:16:a9:c1:a7:0b:0e:85:ba:7d:09:0d:d8:13:38:ff:5d:1c:
         f8:3f:64:50:66:90:9d:bb:f7:35:50:bd:55:7f:65:1b:28:eb:
         01:c9:62:09:d4:09:a5:63:ea:52:1b:1e:dd:e5:de:b4:b4:1b:
         6d:a8:03:d9:5b:db:b9:35:4b:de:a9:ae:cd:92:bc:57:cf:c4:
         5f:16:76:e6:b8:21:06:cb:e5:36:f1:af:90:88:1c:d3:0d:d1:
         2e:38:e6:6e:55:86:55:13:0f:d6:12:a1:59:70:c1:19:b9:42:
         db:1e:00:e9:36:f4:37:c6:fa:5d:51:ea:8e:77:ca:f8:a4:56:
         32:f0:e3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:40 2025 by rpki-client on console.sobornost.net