Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0040B6D98C8FC62E4F905B39B9DF76CC2EB749047E0AA77992F9653B1AC3790/0/99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.mft
File:                     99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.mft (raw, json)
Hash identifier:          dh0qadiOfQaJbIf1xZ+GtB5OlqjE9Q8vAlKii+JiOGg=
Subject key identifier:   56:D1:5F:14:08:12:60:3D:D9:3F:D9:D6:3D:F8:1F:E9:AF:9F:D7:2F
Authority key identifier: 99:D2:8F:03:5C:FB:F2:9F:CC:EA:3B:81:80:0F:0A:FA:AB:00:72:2A
Certificate issuer:       /CN=99D28F035CFBF29FCCEA3B81800F0AFAAB00722A
Certificate serial:       6025444CC6CDBAA27463A359452A4B4C6844BC27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0040B6D98C8FC62E4F905B39B9DF76CC2EB749047E0AA77992F9653B1AC3790/0/99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.mft
Manifest number:          D3
Signing time:             Sun 27 Apr 2025 11:43:53 +0000
Manifest this update:     Sun 27 Apr 2025 11:38:53 +0000
Manifest next update:     Fri 02 May 2025 18:48:53 +0000
Files and hashes:         1: 323830333a646531303a3a2f33322d3332203d3e20323731393738.roa (hash: 7sFRCltbJlt7DXey3iSsGe1gRFgWgqjlykEnfARWfeg=)
                          2: 99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.crl (hash: LtY0rXYLEBnJ6/bs/O5ElO60gaDafGS0Cg6kVSE61Fw=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0040B6D98C8FC62E4F905B39B9DF76CC2EB749047E0AA77992F9653B1AC3790/0/99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0040B6D98C8FC62E4F905B39B9DF76CC2EB749047E0AA77992F9653B1AC3790/0/99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:25:44:4c:c6:cd:ba:a2:74:63:a3:59:45:2a:4b:4c:68:44:bc:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D28F035CFBF29FCCEA3B81800F0AFAAB00722A
        Validity
            Not Before: Apr 27 11:38:53 2025 GMT
            Not After : May  2 18:48:53 2025 GMT
        Subject: CN=56D15F140812603DD93FD9D63DF81FE9AF9FD72F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d5:c5:f6:f6:14:74:da:d2:0f:d6:24:70:d6:
                    6a:fc:ae:5f:c4:c9:69:87:ad:61:e0:28:bf:04:01:
                    7d:7e:c4:f9:e5:3d:34:cc:86:d7:0f:8a:17:7c:8b:
                    2d:73:2f:b4:50:3a:e8:06:b7:56:7a:f8:b4:5b:bd:
                    4c:6c:06:bc:e7:cd:c7:52:0e:0f:a1:bb:fe:76:24:
                    13:25:42:8f:95:db:d7:10:03:18:47:98:60:ec:8b:
                    81:47:df:ad:27:4b:e6:78:80:75:63:99:7d:7d:f7:
                    18:d5:43:96:bf:8a:93:5e:14:03:04:f2:f1:81:b9:
                    55:bd:0e:28:62:bf:3e:38:81:03:01:c7:79:3e:83:
                    42:e7:77:28:90:e0:60:d9:61:3f:e9:db:53:c7:de:
                    31:7b:55:06:52:25:70:d3:cb:8d:4b:fd:56:7d:39:
                    99:95:a9:22:fc:92:b8:2f:75:e4:0f:9e:cc:68:38:
                    6d:ed:47:be:87:51:7c:fe:0e:1c:d2:1e:75:d1:fc:
                    26:7a:61:ea:2b:81:44:1e:f8:70:52:0d:ee:f2:a9:
                    fa:a7:76:9b:e7:ac:0b:c8:dd:11:b6:0c:72:05:67:
                    8a:ea:25:a6:2f:18:c9:9d:00:da:ab:ab:be:47:09:
                    d7:25:09:eb:af:38:18:d1:26:19:c3:e9:cb:55:31:
                    00:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D1:5F:14:08:12:60:3D:D9:3F:D9:D6:3D:F8:1F:E9:AF:9F:D7:2F
            X509v3 Authority Key Identifier:
                keyid:99:D2:8F:03:5C:FB:F2:9F:CC:EA:3B:81:80:0F:0A:FA:AB:00:72:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0040B6D98C8FC62E4F905B39B9DF76CC2EB749047E0AA77992F9653B1AC3790/0/99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0040B6D98C8FC62E4F905B39B9DF76CC2EB749047E0AA77992F9653B1AC3790/0/99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:ea:32:b9:f2:33:9d:4c:1b:71:19:17:9f:a5:d7:84:62:44:
         9e:e5:cb:41:06:96:10:b6:37:98:ed:a3:a7:b7:9c:71:34:30:
         55:fc:0a:2b:3b:6b:b3:ff:62:c1:50:b2:45:f5:1b:77:0d:c7:
         91:80:cb:92:84:3b:74:59:0b:ad:a7:0e:63:7a:b4:3d:8d:18:
         c6:94:a9:18:ee:03:c0:3f:de:82:bc:ad:44:68:38:2e:36:46:
         ee:0b:a2:46:0a:bb:0d:42:18:9b:f7:b4:b2:ee:86:be:00:f7:
         73:80:14:33:a8:e4:15:b7:d4:6e:cd:75:32:fc:82:53:29:ba:
         db:91:8e:5c:75:bb:0e:1b:10:27:89:75:fb:27:f0:25:04:54:
         d9:9a:ef:5c:3a:ca:8b:f4:0d:f1:39:23:57:14:33:91:84:9c:
         79:90:81:9d:3e:d8:83:48:9f:50:85:c0:2c:35:66:43:a3:75:
         e1:c9:12:13:fe:a5:d6:7b:ee:70:19:19:0e:92:d4:85:aa:f1:
         23:4c:06:23:c4:df:0c:f0:d0:78:df:37:60:e7:40:1b:81:86:
         8b:a5:6e:c6:6c:7b:1b:c2:ef:b1:8f:0b:8b:f8:f1:98:b6:be:
         9d:d3:7e:dd:7e:60:eb:a4:1c:33:66:2b:70:1b:ab:a5:0a:e0:
         44:1b:6a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:50:37 2025 by rpki-client on console.sobornost.net