Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft
File:                     AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft (raw, json)
Hash identifier:          nT1kicJeaiVUZmRZI4VlWq1mUqjll9tgipOmh9Q1+Y8=
Subject key identifier:   F2:F7:DC:AE:41:89:66:5A:8A:93:24:87:9C:9A:53:7D:92:B6:0A:C0
Authority key identifier: AA:71:89:C7:5E:9B:FC:B4:1A:37:6A:F3:33:03:F6:2E:80:9A:D1:DF
Certificate issuer:       /CN=AA7189C75E9BFCB41A376AF33303F62E809AD1DF
Certificate serial:       60EC21D3D3BA712BE6F41CEEA220D471441A9BD8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft
Manifest number:          7E
Signing time:             Wed 02 Jul 2025 15:14:21 +0000
Manifest this update:     Wed 02 Jul 2025 15:09:21 +0000
Manifest next update:     Mon 07 Jul 2025 08:34:21 +0000
Files and hashes:         1: 34352e3232372e352e302f32342d3234203d3e2031383030.roa (hash: YMzkOV2W9zteVGbvUwYV4ersUMzSznNRyo4zH+H6D9U=)
                          2: 323830313a3135343a3a2f34322d3432203d3e203138373437.roa (hash: PCe48n/hNN6nUgDj6uZfWAC5wPAGIGxQXjZBm4H+CKw=)
                          3: 34352e3232372e352e302f32342d3234203d3e203138373437.roa (hash: 6K0/Rv0LRMNb2pltlcKhC3QbeuPUxODSmASkeeReHtQ=)
                          4: 323830313a3135343a3a2f34322d3432203d3e20323636363639.roa (hash: cgbsJfGQ/MTGGtOxt3PfchWsk7LSN4vvbwUB6CXb+0Y=)
                          5: 323830313a3135343a3a2f34322d3432203d3e2031383030.roa (hash: UpWBj9ONTa/+9aOYO02DwEhbYSFaq2S3swV8AVaaaDo=)
                          6: AA7189C75E9BFCB41A376AF33303F62E809AD1DF.crl (hash: 7yCx+nJGLqoVqpt6mikiZAkay2rMqD9L2HScxk5XlC4=)
                          7: 34352e3232372e352e302f32342d3234203d3e20323636363639.roa (hash: /IRPjpW2Y1I1NfKD0WKlDcMMdCkpkKNHSxQq1SdA5Ws=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 08:34:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ec:21:d3:d3:ba:71:2b:e6:f4:1c:ee:a2:20:d4:71:44:1a:9b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA7189C75E9BFCB41A376AF33303F62E809AD1DF
        Validity
            Not Before: Jul  2 15:09:21 2025 GMT
            Not After : Jul  7 08:34:21 2025 GMT
        Subject: CN=F2F7DCAE4189665A8A9324879C9A537D92B60AC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ce:e1:05:95:a3:ce:22:1e:48:5f:a8:cb:9e:
                    ed:85:37:12:ff:af:c1:4a:39:b2:24:c6:88:ce:0e:
                    57:70:60:3d:52:c6:b7:85:5e:d2:fa:66:04:0b:fb:
                    51:e8:41:c3:45:29:77:ff:8b:17:d9:2a:1f:1f:88:
                    19:aa:5f:77:76:0b:b4:fc:7a:17:3c:c6:a6:e2:eb:
                    06:5c:11:98:51:e7:55:0b:b3:73:c8:c9:a5:d6:03:
                    93:e6:75:a2:89:2c:26:8e:e6:45:20:ce:78:92:06:
                    5d:e1:78:61:87:d1:20:f4:ef:e8:c8:93:53:2e:ba:
                    88:41:dc:93:42:87:a6:43:d6:21:24:18:db:9a:8f:
                    7e:82:79:24:20:20:f0:f6:36:58:dc:e7:fe:0a:8d:
                    04:51:a3:b4:a0:04:2e:08:19:e9:1b:df:7d:11:0b:
                    91:36:38:35:bf:4b:5f:75:35:8c:50:1c:9e:53:28:
                    1c:61:1e:50:92:a1:8f:6e:52:5e:1d:a3:42:57:b4:
                    b0:80:18:f8:8f:8c:ff:d7:0b:03:b7:fa:41:85:68:
                    05:04:d2:75:5b:76:ee:08:e9:59:ac:57:c6:26:d5:
                    fa:3a:7b:2e:07:46:a8:67:95:a2:42:f3:a7:af:dc:
                    02:62:40:b5:af:0c:85:b1:d0:6a:25:37:06:c7:f4:
                    3f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F7:DC:AE:41:89:66:5A:8A:93:24:87:9C:9A:53:7D:92:B6:0A:C0
            X509v3 Authority Key Identifier:
                keyid:AA:71:89:C7:5E:9B:FC:B4:1A:37:6A:F3:33:03:F6:2E:80:9A:D1:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:ad:de:da:ee:9e:3c:9b:9f:7d:f3:fe:8c:34:c6:3b:c7:84:
         d3:dd:fe:b6:62:22:d4:2a:06:95:4f:c6:19:57:a0:60:08:be:
         88:54:48:1f:ca:4a:5c:87:ca:31:26:62:1e:d6:54:76:84:b0:
         78:07:79:99:a4:00:0f:78:ed:8c:0e:27:5d:41:49:2a:82:23:
         f9:58:52:78:74:b3:af:b3:65:45:4b:8c:0b:8d:62:5a:61:aa:
         3d:10:93:2f:10:5b:fa:82:70:dd:51:43:4b:1c:87:3a:03:33:
         3b:75:e6:5b:9f:1c:b4:58:1e:52:c5:83:c6:08:b8:38:3a:7c:
         6a:06:aa:21:59:cc:ea:b0:39:51:56:fe:b0:15:76:ca:d7:b1:
         4e:7d:f8:8a:ca:f8:3e:60:c8:d5:a9:df:c1:95:88:cd:f1:31:
         39:cd:4b:3d:83:f0:4e:28:ba:7d:3d:e6:8d:84:15:99:e5:df:
         4c:8f:1a:8e:f2:e1:0a:5a:98:b8:af:c4:46:37:54:a5:33:05:
         e6:68:34:74:ad:75:ba:dd:31:61:f9:af:d1:be:57:09:e8:20:
         89:6a:17:2d:fc:4c:18:e5:a2:b7:cb:02:d5:c2:cb:14:6e:24:
         16:39:23:15:34:6b:1c:c5:89:10:e5:28:4d:20:e5:c1:72:d6:
         98:dd:75:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 00:45:54 2025 by rpki-client