Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FF3FBF2785905E5D567CBC69B581318429CD8F4D7A3D3AADED6C37432832FDC/0/3D4EDB71493212338A6F430E592DC26FF3AD6E45.mft
File:                     3D4EDB71493212338A6F430E592DC26FF3AD6E45.mft (raw, json)
Hash identifier:          09tlHw0DMVYrr3j/UmjidaktpbualFJrjEhLhhHZasY=
Subject key identifier:   47:B5:19:6E:84:E8:35:5B:0D:3A:7D:10:7A:77:66:0B:E9:D1:EF:52
Authority key identifier: 3D:4E:DB:71:49:32:12:33:8A:6F:43:0E:59:2D:C2:6F:F3:AD:6E:45
Certificate issuer:       /CN=3D4EDB71493212338A6F430E592DC26FF3AD6E45
Certificate serial:       02BCEE9745EFBF5C678E6A0BFF926D6F95FC8099
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D4EDB71493212338A6F430E592DC26FF3AD6E45.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FF3FBF2785905E5D567CBC69B581318429CD8F4D7A3D3AADED6C37432832FDC/0/3D4EDB71493212338A6F430E592DC26FF3AD6E45.mft
Manifest number:          A4
Signing time:             Sat 05 Jul 2025 00:53:37 +0000
Manifest this update:     Sat 05 Jul 2025 00:48:37 +0000
Manifest next update:     Wed 09 Jul 2025 09:40:37 +0000
Files and hashes:         1: 323830333a393335303a3a2f33322d3438203d3e20323733383933.roa (hash: ZbU/dQqZCdcYrur7JM4/nvdemF83A/PE0VmdzxrJx80=)
                          2: 3D4EDB71493212338A6F430E592DC26FF3AD6E45.crl (hash: hKRfTH28CwWFjEAcKsynEXVgccmjutOdvkBJA/49Ays=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3FF3FBF2785905E5D567CBC69B581318429CD8F4D7A3D3AADED6C37432832FDC/0/3D4EDB71493212338A6F430E592DC26FF3AD6E45.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3FF3FBF2785905E5D567CBC69B581318429CD8F4D7A3D3AADED6C37432832FDC/0/3D4EDB71493212338A6F430E592DC26FF3AD6E45.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D4EDB71493212338A6F430E592DC26FF3AD6E45.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Jul 2025 09:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:bc:ee:97:45:ef:bf:5c:67:8e:6a:0b:ff:92:6d:6f:95:fc:80:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4EDB71493212338A6F430E592DC26FF3AD6E45
        Validity
            Not Before: Jul  5 00:48:37 2025 GMT
            Not After : Jul  9 09:40:37 2025 GMT
        Subject: CN=47B5196E84E8355B0D3A7D107A77660BE9D1EF52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6e:6d:0f:6d:31:0a:9c:b1:d2:3f:7b:5f:36:
                    fd:8a:52:b7:dd:1c:7f:44:ef:51:40:7c:06:c9:68:
                    f5:2b:84:cd:59:93:54:ae:9d:2d:99:bf:06:34:cf:
                    c5:e5:63:27:07:34:5d:34:89:a9:5d:65:18:16:a9:
                    4e:0e:e8:f7:5d:5b:77:1f:15:eb:c9:16:c6:a5:4f:
                    a4:c7:2a:e2:c0:7b:73:d3:31:65:f6:25:2e:51:c8:
                    c6:01:ea:21:f9:78:60:46:f0:4d:56:b0:e4:fc:5e:
                    b7:2a:35:26:2a:f4:f7:24:61:fc:16:41:b2:7e:e9:
                    e6:00:95:d8:4e:8a:42:13:44:4b:05:c6:c2:7f:d1:
                    0c:05:48:5f:d6:d8:b6:3d:1c:2a:a1:4f:69:3a:0e:
                    31:13:fc:15:b0:3b:c6:8e:ab:69:0a:1f:65:e3:2a:
                    91:94:4d:9a:4e:96:e9:80:6e:66:5a:a4:a1:b8:ff:
                    36:ac:ae:be:68:d6:13:f9:ba:fd:e0:cf:a9:48:de:
                    fb:04:b3:69:5b:bb:f8:b5:a3:4c:18:3b:e4:3c:9b:
                    b5:39:4d:09:29:dd:f4:8f:4c:80:54:cf:58:42:b5:
                    fb:82:67:ca:19:7a:c8:53:0c:22:49:64:c1:23:5b:
                    68:a1:26:25:86:80:d4:15:2b:34:13:6e:d2:33:c9:
                    57:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B5:19:6E:84:E8:35:5B:0D:3A:7D:10:7A:77:66:0B:E9:D1:EF:52
            X509v3 Authority Key Identifier:
                keyid:3D:4E:DB:71:49:32:12:33:8A:6F:43:0E:59:2D:C2:6F:F3:AD:6E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FF3FBF2785905E5D567CBC69B581318429CD8F4D7A3D3AADED6C37432832FDC/0/3D4EDB71493212338A6F430E592DC26FF3AD6E45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D4EDB71493212338A6F430E592DC26FF3AD6E45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FF3FBF2785905E5D567CBC69B581318429CD8F4D7A3D3AADED6C37432832FDC/0/3D4EDB71493212338A6F430E592DC26FF3AD6E45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:25:b5:90:b8:8a:1a:08:ec:3b:49:fa:3a:5b:c5:ee:57:c4:
         8a:9a:a0:04:48:f4:ef:28:bc:d3:1a:94:b0:8c:dd:18:f4:8f:
         31:e0:4b:a6:26:8c:88:a8:1d:db:ba:d9:67:9a:31:ab:20:10:
         f9:0b:a4:af:45:ee:00:a6:f9:00:77:cb:c7:36:b0:9d:1c:6c:
         d4:5f:33:58:40:ff:1f:0a:99:6f:e7:98:c3:49:74:f9:85:cd:
         79:2a:dc:ca:18:db:34:16:39:5b:03:01:62:a9:56:dc:c6:dd:
         67:26:d1:3e:06:a7:92:b0:c7:5b:db:22:7e:bb:da:27:8f:53:
         ab:45:85:ca:ef:35:04:93:25:b8:55:61:82:57:d4:c4:2b:8e:
         8b:84:b4:ab:f9:06:01:b4:d9:51:36:2c:50:f2:6b:f8:d0:a2:
         08:b8:fc:47:f1:20:b5:b0:69:4a:30:e0:c8:08:1d:56:f2:8a:
         78:b5:d6:a6:c7:5b:54:75:e9:87:eb:4e:64:73:47:cc:21:1d:
         95:64:f4:64:1c:55:c6:d1:87:b4:be:70:8f:8d:16:9c:66:2e:
         38:6e:20:47:4b:e6:c5:5e:c3:66:22:1f:59:20:31:89:12:bb:
         4a:db:77:d1:d7:22:22:93:11:57:bd:8c:7b:66:2e:96:19:45:
         21:78:85:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:48:05 2025 by rpki-client