Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.mft
File:                     84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.mft (raw, json)
Hash identifier:          g+h3Fu3NLxJXZwcr3TleSCvFAyP71k4IxuAXvEjhD2w=
Subject key identifier:   25:37:DE:BE:68:B3:23:AF:CD:49:B0:F6:35:02:DC:F3:75:14:72:0C
Authority key identifier: 84:F2:72:5A:D6:A9:BB:A5:68:3A:F6:D0:B5:3C:99:FA:DF:53:B9:9E
Certificate issuer:       /CN=84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E
Certificate serial:       120E91CD2B2F3D4145B5DC376C291CACF2B0A9B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.mft
Manifest number:          D6
Signing time:             Fri 16 May 2025 01:59:21 +0000
Manifest this update:     Fri 16 May 2025 01:54:21 +0000
Manifest next update:     Wed 21 May 2025 08:18:21 +0000
Files and hashes:         1: 3138312e3137342e3136302e302f32322d3234203d3e203532343638.roa (hash: epkKetI5dXzxUuAbkghuVJTBk5uJni8ZA8eYqrsmOzM=)
                          2: 3133312e3130382e3139322e302f32322d3234203d3e203631353132.roa (hash: Fvj3e91u7Y0/sxzJ9MpIIMRcPIr/vFMBlcUHkT/B50g=)
                          3: 3133312e3130382e3139322e302f32322d3234203d3e203532343638.roa (hash: Vcn2rQG5VXJWl38bbgf0XEoUBm443zVGp2E3rA3jB4k=)
                          4: 3138312e3137342e3136302e302f32322d3234203d3e203631353132.roa (hash: o8qPg2b7aZGcY5WWIfAiKU1QgVQdzpMUUaRqhBlpAMM=)
                          5: 84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.crl (hash: 7zUK3IoSBb6K4FL1+jhMgXYmJz3pEBCXJSdU/sqRnn0=)
                          6: 3138312e3137342e3136302e302f32322d3234203d3e20323633373137.roa (hash: +VA0KkMFEbTmnakY87kR3B0ufvn/HxpUfbNvm8/LJ28=)
                          7: 323830333a6338303a3a2f33322d3438203d3e20323633373137.roa (hash: 81pNJgTtLuqw55P5H5CVxaNxGSYAqh/ZynwXrl+HXno=)
                          8: 3133312e3130382e3139322e302f32322d3234203d3e20323633373137.roa (hash: PpYm4/6YPJOL7ptLv+ypRI7uuQxJE/b7pFO4pARJuJo=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:0e:91:cd:2b:2f:3d:41:45:b5:dc:37:6c:29:1c:ac:f2:b0:a9:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E
        Validity
            Not Before: May 16 01:54:21 2025 GMT
            Not After : May 21 08:18:21 2025 GMT
        Subject: CN=2537DEBE68B323AFCD49B0F63502DCF37514720C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1f:9c:eb:69:9e:68:54:bb:6b:3e:cd:3d:02:
                    87:27:28:24:d8:3f:0e:83:fe:a9:f9:c9:e5:33:c9:
                    af:3a:44:0b:1e:aa:8d:55:5d:73:36:15:2f:15:84:
                    01:3f:07:34:b9:15:27:b9:53:b6:12:4e:54:25:1f:
                    38:83:c8:73:62:55:45:eb:37:8b:3f:40:d6:8a:f6:
                    67:d2:01:c5:c1:d7:5f:ef:bb:de:c5:73:0e:eb:6a:
                    af:b1:26:13:3f:77:df:b7:68:d7:f9:0d:27:16:48:
                    a7:a3:9f:bc:12:a0:6c:b0:1a:35:76:05:08:9c:12:
                    3f:a6:33:10:24:75:62:95:28:ad:39:17:96:fa:88:
                    f8:ad:78:b8:5e:8f:0b:e6:1d:09:3f:f5:49:7d:ea:
                    0d:d0:ad:0f:81:59:88:56:ed:fd:e1:09:8b:b9:93:
                    b1:a0:7e:e4:2d:03:f7:7e:ad:30:ad:a1:05:6f:ab:
                    34:49:77:54:7e:40:40:31:58:d2:d0:af:a8:68:2e:
                    50:70:4f:77:5e:46:df:1f:1a:bd:cc:f5:72:78:38:
                    03:22:a0:0e:c6:23:9c:50:35:6c:2d:6d:8e:66:81:
                    f6:11:8d:25:25:60:1e:ea:ee:e2:c0:6f:fd:d8:07:
                    79:1d:cb:bd:3f:ff:30:75:89:d3:bd:86:80:b8:04:
                    c1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:37:DE:BE:68:B3:23:AF:CD:49:B0:F6:35:02:DC:F3:75:14:72:0C
            X509v3 Authority Key Identifier:
                keyid:84:F2:72:5A:D6:A9:BB:A5:68:3A:F6:D0:B5:3C:99:FA:DF:53:B9:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:0f:61:dc:6d:fa:45:2a:71:e9:89:c0:b2:55:d6:bc:92:98:
         33:b3:df:b9:00:9f:5b:3f:d1:a0:f5:9a:56:af:3a:5a:29:88:
         6f:4b:76:a1:c5:de:51:2d:1b:bb:b3:70:c6:82:3c:e5:72:59:
         5b:f0:5d:bc:20:10:29:a3:2a:42:e3:05:30:19:33:cb:3d:49:
         09:3b:ae:27:0a:35:74:7b:3c:3c:03:f0:f2:a5:1b:70:ad:1a:
         09:61:b9:9b:75:37:23:71:c4:85:b2:1b:db:97:78:a7:75:af:
         d4:5b:62:34:0d:ba:0c:4e:75:10:b8:be:6a:20:33:58:d9:eb:
         ae:c7:08:12:fb:7c:9a:e7:65:34:39:44:5e:b5:96:a0:ac:28:
         25:a1:70:7d:ea:f7:ca:66:97:c4:7c:d9:68:38:1d:3c:1c:33:
         03:4a:60:0f:e1:7a:b0:80:2e:25:00:e4:be:52:25:ab:0d:98:
         9b:fb:1e:60:9b:16:7b:34:6b:b0:73:8b:61:dd:a9:e0:06:4d:
         cc:a7:e9:34:b4:cd:48:24:b4:e2:b1:0d:ec:26:51:45:cd:4a:
         e0:20:30:cb:c5:7f:a5:30:08:65:e2:48:1a:96:26:02:87:f7:
         f2:01:6e:ec:26:68:45:bf:15:58:3e:62:cb:1d:58:9f:80:49:
         57:aa:31:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 07:03:52 2025 by rpki-client