Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft
File:                     AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft (raw, json)
Hash identifier:          /fM1hh0N1LtpKIqs6h+sESm5u3n4LirD+8LOArXlxSg=
Subject key identifier:   98:88:5D:30:F4:A9:C5:69:3A:FA:BA:E0:91:08:B3:F7:58:F0:BE:B1
Authority key identifier: AA:71:89:C7:5E:9B:FC:B4:1A:37:6A:F3:33:03:F6:2E:80:9A:D1:DF
Certificate issuer:       /CN=AA7189C75E9BFCB41A376AF33303F62E809AD1DF
Certificate serial:       3B0E8ABF4F8C11C7D2E05BB47C6AE06B94519206
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft
Manifest number:          66
Signing time:             Fri 16 May 2025 01:35:00 +0000
Manifest this update:     Fri 16 May 2025 01:30:00 +0000
Manifest next update:     Wed 21 May 2025 12:57:00 +0000
Files and hashes:         1: 323830313a3135343a3a2f34322d3432203d3e203138373437.roa (hash: PCe48n/hNN6nUgDj6uZfWAC5wPAGIGxQXjZBm4H+CKw=)
                          2: 34352e3232372e352e302f32342d3234203d3e20323636363639.roa (hash: /IRPjpW2Y1I1NfKD0WKlDcMMdCkpkKNHSxQq1SdA5Ws=)
                          3: 323830313a3135343a3a2f34322d3432203d3e2031383030.roa (hash: UpWBj9ONTa/+9aOYO02DwEhbYSFaq2S3swV8AVaaaDo=)
                          4: 323830313a3135343a3a2f34322d3432203d3e20323636363639.roa (hash: cgbsJfGQ/MTGGtOxt3PfchWsk7LSN4vvbwUB6CXb+0Y=)
                          5: AA7189C75E9BFCB41A376AF33303F62E809AD1DF.crl (hash: XfnsdshW1Se4rK1i21aQoIkPtQnipZJdVXcrr6Rq/fo=)
                          6: 34352e3232372e352e302f32342d3234203d3e2031383030.roa (hash: YMzkOV2W9zteVGbvUwYV4ersUMzSznNRyo4zH+H6D9U=)
                          7: 34352e3232372e352e302f32342d3234203d3e203138373437.roa (hash: 6K0/Rv0LRMNb2pltlcKhC3QbeuPUxODSmASkeeReHtQ=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:0e:8a:bf:4f:8c:11:c7:d2:e0:5b:b4:7c:6a:e0:6b:94:51:92:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA7189C75E9BFCB41A376AF33303F62E809AD1DF
        Validity
            Not Before: May 16 01:30:00 2025 GMT
            Not After : May 21 12:57:00 2025 GMT
        Subject: CN=98885D30F4A9C5693AFABAE09108B3F758F0BEB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:04:4b:7d:59:a6:08:2c:54:a4:71:8c:dc:9f:
                    01:86:aa:09:b3:91:5c:f8:48:6c:f8:05:c6:41:bb:
                    20:ed:02:83:4a:1c:07:e7:a5:d6:9d:e6:6b:07:2e:
                    d8:49:cd:2c:99:ac:8e:c4:0d:e2:ae:bf:6b:61:80:
                    8c:ff:eb:55:98:23:23:ea:9a:39:6e:97:d1:0c:cd:
                    52:c2:c8:9a:c0:cb:5b:68:b1:36:ac:06:40:c1:6d:
                    80:14:f6:55:56:5e:a9:0b:95:51:de:ad:0a:ae:df:
                    4e:cb:1a:c7:53:bd:6c:25:b2:1d:b1:c4:e4:36:6e:
                    e8:85:e0:05:ca:a9:33:b6:f9:4b:12:25:ba:41:6c:
                    cc:34:3a:bf:36:1a:73:56:00:31:6a:ba:d3:f4:b0:
                    89:92:fb:5b:5d:ce:11:f1:d3:82:1d:86:59:84:0a:
                    4b:5c:8b:51:f8:dd:1c:2a:eb:e6:4f:06:95:f4:a2:
                    c4:fa:31:18:e7:a5:b2:1a:db:b6:3c:8a:38:38:e4:
                    20:cb:d5:09:87:4e:40:2b:f0:d6:07:c7:2c:51:e4:
                    55:53:a1:28:0f:10:2c:72:28:49:54:df:72:d7:b4:
                    7a:75:51:d0:21:28:9b:74:05:b2:0c:27:03:e9:aa:
                    dd:54:25:1a:b5:0b:5e:58:c7:78:30:fd:f8:81:16:
                    8c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:88:5D:30:F4:A9:C5:69:3A:FA:BA:E0:91:08:B3:F7:58:F0:BE:B1
            X509v3 Authority Key Identifier:
                keyid:AA:71:89:C7:5E:9B:FC:B4:1A:37:6A:F3:33:03:F6:2E:80:9A:D1:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:bc:31:02:f4:00:52:f6:2f:88:4f:27:82:9c:c0:80:a4:1a:
         a7:ae:95:6d:ef:c2:c3:56:7c:0e:38:b8:59:02:25:e7:be:ac:
         0c:cb:7c:45:12:e1:67:51:17:06:f1:8e:9d:7d:5f:73:3b:a7:
         76:7e:e4:d7:28:14:7d:96:98:da:73:0c:12:70:f2:e0:90:9e:
         0f:79:ce:ea:75:bd:5a:20:41:89:74:f2:0c:85:4d:ea:af:2f:
         5e:2f:9a:28:66:5f:5b:f7:6a:5e:91:01:4e:6d:59:f8:ee:5b:
         42:08:81:61:cc:b9:69:fe:de:a6:2d:fb:7d:6a:fd:41:f4:97:
         21:eb:ad:f5:1b:2c:04:54:88:07:b0:ec:98:61:af:c2:8b:bf:
         66:4e:45:85:70:1d:62:d8:2b:93:ed:8e:18:f1:40:3f:68:43:
         38:1d:ec:07:26:de:43:1b:23:5d:4c:d4:fb:b5:5a:bf:b1:89:
         c8:fe:e9:8b:06:25:7f:97:e5:6e:55:99:cc:ba:0c:04:f2:35:
         66:b0:35:3b:51:1a:f1:f5:ca:dd:81:58:4c:84:11:f3:f1:77:
         1e:7e:f0:0e:e7:67:de:ae:1c:80:1a:a1:ad:db:45:9c:f7:f1:
         80:24:78:de:71:f0:87:87:e7:ad:d9:b6:ef:73:af:5a:b7:a7:
         66:05:ad:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:38:26 2025 by rpki-client