Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.mft
File:                     3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.mft (raw, json)
Hash identifier:          AFoO2wmsYUMNfaxxdY884lUmRzlSp4PXZNkxFrFPN1Y=
Subject key identifier:   2E:89:45:53:3C:7B:53:36:27:52:9A:B2:6E:0B:36:68:36:A8:A2:C1
Authority key identifier: 3B:8D:8C:3F:F0:C2:3C:7E:11:E8:96:CB:FF:8B:4E:C6:2D:EA:6D:AC
Certificate issuer:       /CN=3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC
Certificate serial:       6DAEFD82D3737B9F624BE13BDC06ECA88C0DB785
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.mft
Manifest number:          A1
Signing time:             Thu 21 Aug 2025 23:23:29 +0000
Manifest this update:     Thu 21 Aug 2025 23:18:29 +0000
Manifest next update:     Wed 27 Aug 2025 16:49:29 +0000
Files and hashes:         1: 34352e3233392e36382e302f32322d3234203d3e203238353339.roa (hash: weojV1OCMtf9wFio1+L4InJ+6+PbsFJGyo6ZF3Bg2Bw=)
                          2: 3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.crl (hash: 537kWr7mSLyaXGzlz5nz5Fy6uFwFTkzpNWOBUeIHg84=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ae:fd:82:d3:73:7b:9f:62:4b:e1:3b:dc:06:ec:a8:8c:0d:b7:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC
        Validity
            Not Before: Aug 21 23:18:29 2025 GMT
            Not After : Aug 27 16:49:29 2025 GMT
        Subject: CN=2E8945533C7B533627529AB26E0B366836A8A2C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fd:c6:b9:7d:ab:78:1f:9a:ad:4c:37:51:16:
                    21:c0:c4:9a:b7:75:5a:02:23:bd:71:b6:9a:37:fa:
                    2f:ae:85:1d:7e:dc:00:25:2a:6e:85:f1:00:1a:47:
                    31:dc:6d:0f:4f:32:4a:3f:df:3e:7f:c4:1a:a8:f0:
                    e0:06:0a:d7:6b:46:c4:80:e8:74:a3:b0:a1:8c:ce:
                    1a:d7:0f:a4:81:8f:b6:06:a4:93:f3:2d:11:82:95:
                    ac:d7:d9:47:84:3d:63:e2:9d:e2:af:e5:e1:67:60:
                    ed:75:e1:93:3f:75:64:64:1a:45:46:ee:48:4f:84:
                    6c:5a:e7:86:60:4f:ab:93:34:7e:c3:b0:8b:d7:de:
                    58:00:d9:e1:80:2e:7d:04:0a:40:df:ec:e1:e3:1c:
                    78:06:eb:f7:6f:ad:9b:99:d5:b8:a7:72:9c:7e:7d:
                    5f:40:05:98:b0:85:46:60:77:c4:d4:44:04:11:ee:
                    23:01:06:0b:e4:23:c3:90:88:e3:e2:1e:3c:3c:09:
                    d7:6a:3a:35:86:77:32:f3:49:7b:d5:10:97:95:a7:
                    7d:0c:63:5d:95:b1:d6:01:6d:ad:6b:f3:f7:73:80:
                    41:ba:7f:03:39:03:08:b6:4d:27:b5:94:97:f3:29:
                    b5:8c:93:29:06:3d:b1:38:f6:b4:09:8d:71:40:67:
                    db:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:89:45:53:3C:7B:53:36:27:52:9A:B2:6E:0B:36:68:36:A8:A2:C1
            X509v3 Authority Key Identifier:
                keyid:3B:8D:8C:3F:F0:C2:3C:7E:11:E8:96:CB:FF:8B:4E:C6:2D:EA:6D:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:4d:f2:7f:df:93:96:30:a0:a6:d7:58:97:e8:94:79:d1:2a:
         18:b9:e2:f2:94:45:0f:27:26:92:b0:01:95:ed:f8:ca:cb:65:
         08:1b:ba:93:c9:70:91:da:9c:52:86:57:20:f5:57:80:1f:0d:
         df:52:fd:bd:9f:f1:d9:5d:c5:1f:b1:71:0b:d9:e5:66:b8:99:
         96:d5:28:4f:21:c9:a6:79:ab:d1:00:29:8f:a7:bf:a2:d6:22:
         2d:ec:a1:7d:a4:af:54:e7:0a:07:a9:f1:10:e8:54:65:ba:0a:
         e7:91:23:5e:42:eb:38:7b:cb:72:65:16:df:70:15:68:bc:07:
         9f:ab:24:a4:0e:70:1a:99:ea:74:44:1e:66:96:32:06:8e:aa:
         78:f7:70:2f:f6:4b:c7:50:83:13:19:73:d4:1e:c5:cf:9b:a2:
         bf:a8:83:8c:f9:9d:ca:13:83:fe:2f:17:d0:a7:5e:49:60:05:
         d0:ad:81:cd:ee:be:07:df:bb:6e:96:9d:aa:3c:0a:1a:3e:90:
         a2:7b:75:72:1f:fc:b9:ad:1e:f0:e7:9b:18:69:5c:1c:2b:97:
         e1:8b:33:a0:d4:60:b1:bb:92:30:a7:ce:52:ed:b1:04:65:d4:
         c8:93:05:0c:66:9e:cc:ec:0b:58:d5:f9:a9:c2:ca:cc:b1:13:
         21:df:7f:75
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUba79gtNze59iS+E73AbsqIwNt4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I4RDhDM0ZGMEMyM0M3RTExRTg5NkNCRkY4QjRFQzYy
REVBNkRBQzAeFw0yNTA4MjEyMzE4MjlaFw0yNTA4MjcxNjQ5MjlaMDMxMTAvBgNV
BAMTKDJFODk0NTUzM0M3QjUzMzYyNzUyOUFCMjZFMEIzNjY4MzZBOEEyQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv/ca5fat4H5qtTDdRFiHAxJq3
dVoCI71xtpo3+i+uhR1+3AAlKm6F8QAaRzHcbQ9PMko/3z5/xBqo8OAGCtdrRsSA
6HSjsKGMzhrXD6SBj7YGpJPzLRGClazX2UeEPWPineKv5eFnYO114ZM/dWRkGkVG
7khPhGxa54ZgT6uTNH7DsIvX3lgA2eGALn0ECkDf7OHjHHgG6/dvrZuZ1bincpx+
fV9ABZiwhUZgd8TURAQR7iMBBgvkI8OQiOPiHjw8CddqOjWGdzLzSXvVEJeVp30M
Y12VsdYBba1r8/dzgEG6fwM5Awi2TSe1lJfzKbWMkykGPbE49rQJjXFAZ9sbAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQULolFUzx7UzYnUpqybgs2aDaoosEwHwYDVR0j
BBgwFoAUO42MP/DCPH4R6JbL/4tOxi3qbawwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRjZCQUI0MTJBOTBCQTUzQTBGQzFGM0M1NEIyQjE1NDBG
QzJEMTBERTgyMkExOEZERTVFQjA4NkZBOUE4QTg5LzAvM0I4RDhDM0ZGMEMyM0M3
RTExRTg5NkNCRkY4QjRFQzYyREVBNkRBQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQjhEOEMzRkYwQzIzQzdFMTFF
ODk2Q0JGRjhCNEVDNjJERUE2REFDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEY2QkFCNDEyQTkwQkE1M0EwRkMxRjNDNTRCMkIxNTQwRkMyRDEwREU4
MjJBMThGREU1RUIwODZGQTlBOEE4OS8wLzNCOEQ4QzNGRjBDMjNDN0UxMUU4OTZD
QkZGOEI0RUM2MkRFQTZEQUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBPTfJ/35OWMKCm11iX6JR50SoY
ueLylEUPJyaSsAGV7fjKy2UIG7qTyXCR2pxShlcg9VeAHw3fUv29n/HZXcUfsXEL
2eVmuJmW1ShPIcmmeavRACmPp7+i1iIt7KF9pK9U5woHqfEQ6FRlugrnkSNeQus4
e8tyZRbfcBVovAefqySkDnAamep0RB5mljIGjqp493Av9kvHUIMTGXPUHsXPm6K/
qIOM+Z3KE4P+LxfQp15JYAXQrYHN7r4H37tulp2qPAoaPpCie3VyH/y5rR7w55sY
aVwcK5fhizOg1GCxu5Iwp85S7bEEZdTIkwUMZp7M7AtY1fmpwsrMsRMh3391
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:54:37 2025 by rpki-client