Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/677CEC9F1C4060755422FE75661CBC3718515578.mft
File:                     677CEC9F1C4060755422FE75661CBC3718515578.mft (raw, json)
Hash identifier:          KzZd5Ef7XkqJf9izyHpTwHKVS89ZgyHontFMBwZ3H94=
Subject key identifier:   4D:ED:BF:9E:49:68:F4:68:E8:E6:54:BB:2F:D8:1A:AE:35:A0:05:5A
Authority key identifier: 67:7C:EC:9F:1C:40:60:75:54:22:FE:75:66:1C:BC:37:18:51:55:78
Certificate issuer:       /CN=677CEC9F1C4060755422FE75661CBC3718515578
Certificate serial:       28C1BE96A53AA0A0C193D890B5AC7846EE709320
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/677CEC9F1C4060755422FE75661CBC3718515578.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/677CEC9F1C4060755422FE75661CBC3718515578.mft
Manifest number:          D1
Signing time:             Sun 27 Apr 2025 13:55:21 +0000
Manifest this update:     Sun 27 Apr 2025 13:50:21 +0000
Manifest next update:     Sat 03 May 2025 04:46:21 +0000
Files and hashes:         1: 323830303a6364303a3a2f33322d3438203d3e2036353638.roa (hash: WB8QLwOXJOTdOKfKwSe2fXCo2sWJ7iWKboLY+tW2t1I=)
                          2: 677CEC9F1C4060755422FE75661CBC3718515578.crl (hash: xZTklKmw9WMdxT6ya1FnvuZRNq2JFZ/aqXQNiS4y+qY=)
                          3: 3139302e3132392e3136302e32342f32392d3239203d3e20323730303233.roa (hash: k54VrD//DukORTlPdMCfK1wbaJzmEDfq0bmZxbZnLGk=)
                          4: 3230302e38372e302e302f31362d3234203d3e2036353638.roa (hash: fyycUzhi87G/c5t+pxvHrU6ihf/GXb7UasZyP2vlc3k=)
                          5: 3139302e3132392e302e302f31362d3234203d3e2036353638.roa (hash: 3jjeW6FryOPn/WRFhDup/IzP3lXypYtdIWVH3R7RCBM=)
                          6: 3138312e3131352e3132382e302f31372d3234203d3e2036353638.roa (hash: BPX6mftAdppMG8m+qy+4nlrhobB/d2Lku1plsMw0Zpc=)
                          7: 3136382e3230352e39362e302f32322d3234203d3e2036353638.roa (hash: i+9LTDKJKZSoAyJD8Ixk3E8BSUNFYs4Z4qaZMCvmKus=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/677CEC9F1C4060755422FE75661CBC3718515578.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/677CEC9F1C4060755422FE75661CBC3718515578.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/677CEC9F1C4060755422FE75661CBC3718515578.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c1:be:96:a5:3a:a0:a0:c1:93:d8:90:b5:ac:78:46:ee:70:93:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677CEC9F1C4060755422FE75661CBC3718515578
        Validity
            Not Before: Apr 27 13:50:21 2025 GMT
            Not After : May  3 04:46:21 2025 GMT
        Subject: CN=4DEDBF9E4968F468E8E654BB2FD81AAE35A0055A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d3:17:8a:05:68:a1:78:b6:7b:83:f7:cc:3c:
                    0d:08:1b:98:5c:7f:0b:b3:2b:33:12:5e:84:b1:c4:
                    c9:45:ff:36:09:e1:05:7a:86:f8:b8:79:75:53:18:
                    ba:54:8b:bf:09:ca:85:fe:76:dd:60:d1:c2:7c:52:
                    23:b2:01:38:32:2f:49:ec:6a:ed:b2:3e:74:ba:90:
                    c1:97:7b:c2:61:86:b9:a8:ee:21:05:49:53:f6:ed:
                    ad:2f:fe:e0:33:5a:b3:ee:ee:ad:aa:7c:97:9d:17:
                    e6:7a:70:b3:c9:1c:e4:51:71:06:b0:c5:a2:f7:1a:
                    98:3d:07:7d:99:ab:f0:c9:fd:24:41:a5:5b:95:11:
                    e6:d7:d9:ed:5e:a5:d3:74:3e:59:6e:ae:9d:1b:9d:
                    e9:d7:03:b6:b4:35:a5:6f:37:90:73:e2:4f:e4:2f:
                    c4:31:09:62:4a:f8:08:70:ca:fb:0c:a0:f7:50:c0:
                    06:ce:fd:41:3e:9f:c8:a8:c2:b0:2d:08:a0:ba:8f:
                    a7:57:96:d6:7a:64:cc:57:56:d5:d8:88:f0:61:d7:
                    64:52:e3:f4:e8:e3:ff:2e:09:2d:8f:f4:4b:70:44:
                    33:c7:96:fa:91:98:f5:37:b4:a1:4d:2b:3c:bc:8e:
                    82:99:8d:5f:fa:38:0c:a0:5b:7d:2d:3f:57:58:d5:
                    cf:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:ED:BF:9E:49:68:F4:68:E8:E6:54:BB:2F:D8:1A:AE:35:A0:05:5A
            X509v3 Authority Key Identifier:
                keyid:67:7C:EC:9F:1C:40:60:75:54:22:FE:75:66:1C:BC:37:18:51:55:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/677CEC9F1C4060755422FE75661CBC3718515578.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/677CEC9F1C4060755422FE75661CBC3718515578.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/677CEC9F1C4060755422FE75661CBC3718515578.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:dc:12:14:80:e5:58:71:e4:2c:02:67:ef:2e:3c:41:c4:a9:
         9e:f4:27:d6:4b:8c:19:fb:37:58:f0:54:d6:ae:6b:9a:4b:57:
         56:28:4f:e4:19:c2:53:c5:45:1b:7c:42:3e:31:b3:91:61:4d:
         6b:dd:9f:72:ed:08:41:b3:b6:72:61:50:18:55:a3:bf:67:73:
         96:06:89:47:f5:db:01:34:68:8c:f5:ac:83:36:d1:75:8e:5b:
         74:ec:8b:50:89:03:89:49:4e:58:d2:2c:d2:fe:09:fd:88:b9:
         64:0e:df:92:3a:1e:3f:b2:07:78:c9:54:a1:10:f2:d0:e3:70:
         73:d2:04:6c:5e:0f:6d:53:5f:7b:37:be:22:0b:05:78:dc:96:
         12:6a:e6:01:a0:10:2c:05:0e:64:00:e7:a6:fe:c4:3b:05:56:
         2c:d1:60:f6:b4:e6:b4:0b:7f:25:c0:97:da:f1:2e:84:1b:ed:
         5f:ce:56:eb:34:1e:b0:31:2a:fc:d9:85:aa:6c:27:c9:b3:9b:
         62:30:45:3b:07:6f:3b:4e:5b:a0:fb:5d:2f:92:29:d0:3f:c5:
         ca:c3:d6:1e:f9:08:54:2e:64:a5:5b:ac:3d:17:07:0a:b8:5a:
         eb:2e:8b:b0:1a:b3:bc:cc:75:63:65:b7:0a:57:28:6e:46:ab:
         33:99:e6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:04:00 2025 by rpki-client on console.sobornost.net