Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.mft
File:                     533F533C8354549C5674B43113DA207BD7EF1A31.mft (raw, json)
Hash identifier:          aAC6YQlENnftN08hOeprGBdRK2epDSeYmfsWRKu5+L8=
Subject key identifier:   36:2D:4E:31:43:4F:4B:DA:DB:DF:82:15:C0:75:A7:46:94:92:D7:2F
Authority key identifier: 53:3F:53:3C:83:54:54:9C:56:74:B4:31:13:DA:20:7B:D7:EF:1A:31
Certificate issuer:       /CN=533F533C8354549C5674B43113DA207BD7EF1A31
Certificate serial:       15B20B2D2AFCD77E3E08BD38B7EC83CD006D453D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.mft
Manifest number:          D4
Signing time:             Mon 28 Apr 2025 10:42:52 +0000
Manifest this update:     Mon 28 Apr 2025 10:37:52 +0000
Manifest next update:     Fri 02 May 2025 22:56:52 +0000
Files and hashes:         1: 323830333a386638303a3a2f33322d3332203d3e20323633383239.roa (hash: 2u0dftYB47kjwXQ/8bRf/ZNymxq4PxtCGh2sxIxGJfU=)
                          2: 3133382e3231392e37322e302f32322d3232203d3e20323633383239.roa (hash: 2AUMtLQZ7aZkrGKLCLHuDL7ZIJ9UUb1Nh45366eDHQc=)
                          3: 3133382e33362e3133362e302f32322d3232203d3e20323633383239.roa (hash: cIresJVe1MgQzlCQQZUPcrYXf60vw1shBDDKb68VppI=)
                          4: 3137302e38322e302e302f32322d3232203d3e20323633383239.roa (hash: dTQM4w8XXyA/lFw/sG22dD2nZolOt+ZucUQCj38hrd0=)
                          5: 533F533C8354549C5674B43113DA207BD7EF1A31.crl (hash: 5MimcCMZ2u1fxEwba/1z/HbyB3QniyYNOS4ijOsRR3s=)
                          6: 3136382e3138312e3232382e302f32322d3232203d3e20323633383239.roa (hash: 3Ta2XuaMw6SgnwP6Td6U16cGQxfTPeyf7tBj9ki/4/0=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b2:0b:2d:2a:fc:d7:7e:3e:08:bd:38:b7:ec:83:cd:00:6d:45:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533F533C8354549C5674B43113DA207BD7EF1A31
        Validity
            Not Before: Apr 28 10:37:52 2025 GMT
            Not After : May  2 22:56:52 2025 GMT
        Subject: CN=362D4E31434F4BDADBDF8215C075A7469492D72F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d0:be:b6:74:bd:81:23:3e:6a:0e:96:ae:ad:
                    36:ad:11:f6:08:9e:ed:17:93:00:ef:81:af:14:e2:
                    3e:65:4a:8b:71:a6:c3:4c:b9:5c:a3:2d:74:66:3b:
                    f4:a7:05:69:bd:3e:e2:d5:0b:46:9a:c9:f2:5b:e3:
                    f0:37:b2:cd:70:26:4c:35:e3:04:50:89:d4:61:2e:
                    06:c9:ea:e2:6a:53:78:22:f1:f4:03:11:3e:3d:9f:
                    ec:56:77:1d:01:41:e4:31:a2:ea:3b:db:1f:93:69:
                    50:ef:5f:5d:e3:87:54:03:0a:c4:44:f0:9e:46:e4:
                    f4:c9:c4:d6:36:55:72:2f:a0:b0:81:d9:cb:66:6c:
                    92:61:30:bf:e9:b1:51:f6:7c:15:ab:6c:20:d3:63:
                    35:cb:c3:21:72:89:48:f4:2e:a1:c7:47:36:89:fd:
                    a9:75:e5:32:6f:73:4b:85:9e:18:03:de:76:1f:ec:
                    ed:e8:48:18:c9:2c:c4:97:c6:72:c9:26:ff:e5:86:
                    c4:3a:dd:e1:9f:b8:b6:6f:ab:ea:98:7d:b7:24:01:
                    d1:48:65:66:44:b9:33:83:3c:99:05:6e:4c:a1:84:
                    7a:d2:ad:09:bf:df:60:a4:aa:3b:08:72:4c:bc:6e:
                    8a:6b:64:54:4c:03:b9:67:1e:fe:f9:78:ee:69:e8:
                    80:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:2D:4E:31:43:4F:4B:DA:DB:DF:82:15:C0:75:A7:46:94:92:D7:2F
            X509v3 Authority Key Identifier:
                keyid:53:3F:53:3C:83:54:54:9C:56:74:B4:31:13:DA:20:7B:D7:EF:1A:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:d6:cc:a1:c1:35:2c:b5:6f:c0:cc:bd:47:f1:53:ab:53:f9:
         f7:44:6a:43:40:44:39:48:65:25:f7:60:e2:8d:e2:b9:4c:3e:
         a8:b3:93:f5:b4:de:81:79:21:ca:48:9e:89:70:12:78:7a:c4:
         d1:02:1e:9b:96:36:c6:1d:b6:80:a8:a8:d9:df:5d:38:00:cd:
         30:65:ef:85:c1:b0:73:61:b1:30:c1:ca:87:77:1b:38:36:6a:
         5c:ff:c2:83:28:f7:32:0e:2a:8f:f7:91:a4:b3:52:80:c0:e4:
         83:be:f1:83:2a:c3:60:17:fb:29:bc:39:37:0c:5e:b3:81:87:
         54:b1:bb:71:a7:22:43:57:5a:1c:95:09:68:09:a4:3c:e2:af:
         0c:3b:7e:71:ea:00:75:3f:4b:57:7c:2e:f4:d2:e3:d2:e4:32:
         6d:7b:ec:ba:28:93:7b:b6:23:7a:6e:0a:93:9e:f2:95:93:2c:
         7a:2a:21:4a:c0:c9:95:5c:84:a2:ac:db:95:9e:2a:7a:d7:13:
         ab:12:e9:ba:d1:c0:4a:8a:ce:2b:11:22:bc:88:5d:99:f0:1c:
         36:10:00:1d:9d:03:68:f3:10:2a:b4:a0:c1:22:e8:2a:75:f9:
         c3:ff:80:02:6c:e0:9a:df:b8:3c:76:dd:60:fb:28:54:b7:8a:
         9d:c7:87:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:51 2025 by rpki-client on console.sobornost.net