Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
File:                     2D420DA52C4FED64C64081F978E8485CD8161A81.mft (raw, json)
Hash identifier:          fbJHFYUsPnc1DJTU16R40VLk9WLqaYKgfmy/1rXPb18=
Subject key identifier:   B3:55:3A:E3:40:20:A1:C7:BC:41:AC:CB:EF:F1:23:9E:B4:3D:F7:B1
Authority key identifier: 2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81
Certificate issuer:       /CN=2D420DA52C4FED64C64081F978E8485CD8161A81
Certificate serial:       53C3BD03E6697AFAC83C10A5EDB4194CD114828E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
Manifest number:          0125
Signing time:             Sun 19 Oct 2025 02:21:48 +0000
Manifest this update:     Sun 19 Oct 2025 02:16:48 +0000
Manifest next update:     Thu 23 Oct 2025 03:13:48 +0000
Files and hashes:         1: 34352e3137332e302e302f32322d3234203d3e203631343531.roa (hash: GGuVym2kL4T0FmdZd9rq4sGSSWcGiS/epeSrSrFw9qw=)
                          2: 3134382e3232322e3135362e302f32332d3234203d3e203631343531.roa (hash: /Z7LPAsuTjZ5cwTBvnVpQcKSEa9rH/diyzx0Hq8W+6o=)
                          3: 3134382e3232322e3135392e302f32342d3234203d3e203631343531.roa (hash: 1oYXiRs6rlIee7gSCsds1xIN8M3Wto/5rLLuEM7RJ/4=)
                          4: 3134382e3232322e3134342e302f32312d3234203d3e203631343531.roa (hash: rZzDnwa0MPMnAUQI/T5MjhsAO3J26Ue6xAm2FQO/eiA=)
                          5: 2D420DA52C4FED64C64081F978E8485CD8161A81.crl (hash: 8d4XLImpc9gYutctunNYocfYvC0TIjg32dpCg31k194=)
                          6: 323830333a633036303a3a2f33322d3332203d3e203631343531.roa (hash: y+kZpxvB2vqV6FoA3lmooqJCJtir3RHk1ikwbeAOmdU=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 03:13:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c3:bd:03:e6:69:7a:fa:c8:3c:10:a5:ed:b4:19:4c:d1:14:82:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D420DA52C4FED64C64081F978E8485CD8161A81
        Validity
            Not Before: Oct 19 02:16:48 2025 GMT
            Not After : Oct 23 03:13:48 2025 GMT
        Subject: CN=B3553AE34020A1C7BC41ACCBEFF1239EB43DF7B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4f:15:98:f2:40:e2:99:2b:d7:79:07:85:23:
                    5b:43:f5:f8:39:d3:86:8b:5b:4a:bc:b3:f5:15:b3:
                    86:2f:2e:b2:55:24:2d:cf:72:53:3e:c7:a8:a7:79:
                    fa:5a:f4:9d:a9:87:d3:13:02:18:10:2b:b5:15:61:
                    03:4e:79:b1:ca:69:5b:6b:31:9e:3c:c0:5c:a2:df:
                    6d:3e:51:49:32:a8:51:9f:d9:c1:1b:e0:f1:a9:15:
                    99:b1:08:57:ee:c5:3d:8e:30:72:d8:68:76:d4:e5:
                    e3:51:d9:45:a1:25:ba:3f:1a:89:be:c7:f3:dc:6c:
                    0d:aa:5b:43:39:89:bc:3b:49:96:bc:29:87:53:39:
                    71:f9:c1:ec:f7:54:c0:82:4e:a4:6c:da:fe:14:6b:
                    71:15:79:9f:7b:d7:fd:75:92:3e:5d:87:ce:7c:0d:
                    c6:7e:29:1c:7d:28:fc:07:7a:28:41:ad:c8:cc:90:
                    ca:6a:24:90:58:42:6b:78:d2:da:25:ea:ba:3f:09:
                    a2:e2:fe:17:80:ae:9f:30:a4:67:5a:48:f7:5a:89:
                    f0:d0:2f:d8:3a:ae:f2:1d:70:ed:da:c8:66:b7:b0:
                    43:c0:75:9c:a7:c9:7d:fb:19:09:7a:9e:b4:4d:75:
                    de:e3:0c:2f:39:7c:30:19:96:da:65:f9:40:43:ee:
                    41:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:55:3A:E3:40:20:A1:C7:BC:41:AC:CB:EF:F1:23:9E:B4:3D:F7:B1
            X509v3 Authority Key Identifier:
                keyid:2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:1a:b3:9c:2b:4b:83:7d:48:cf:97:56:f7:c6:1e:d6:df:59:
         d0:01:8b:eb:56:36:07:43:78:df:71:07:8a:9e:a9:45:d7:e6:
         92:8a:5a:4b:38:f9:ee:da:57:33:b5:13:5f:f1:73:1c:38:94:
         c2:4e:f1:82:0a:34:ca:65:82:a3:af:af:78:95:79:df:d3:9c:
         08:a5:2a:d6:df:84:97:8b:e8:8f:4f:7e:be:71:b9:4b:8c:d4:
         ca:2b:c3:b7:18:ac:34:45:6a:fc:1d:95:37:4a:cc:67:60:f2:
         e4:5e:87:ce:cd:df:f9:ac:3d:fb:a4:5a:04:df:11:d3:a5:04:
         8b:ca:89:8e:47:71:2a:43:68:c3:14:40:23:80:db:b0:93:4e:
         dd:1d:ca:89:44:90:ac:e0:aa:92:80:89:e6:65:06:51:af:93:
         f4:bf:0d:64:3a:3f:1f:29:81:32:cb:e2:1d:3c:52:01:ea:ef:
         1a:5a:64:85:d8:42:0e:35:ee:c5:24:0f:2a:e4:59:d7:ab:83:
         08:91:2b:1e:2e:c4:30:b9:25:4f:e9:16:e4:f7:a8:7b:08:61:
         10:51:6c:ab:d2:1d:79:2e:ec:a0:e6:32:12:11:82:2a:3e:a1:
         26:1e:8f:9a:9c:61:0c:17:de:7b:40:db:65:5f:19:58:54:81:
         ce:26:ce:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:45:43 2025 by rpki-client