Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft
File:                     CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft (raw, json)
Hash identifier:          eiryG0XUBznIe9VHZGCyWt5/npjR0AOSFOkyPW+G4z8=
Subject key identifier:   8E:4A:7C:5A:DF:2E:D7:15:54:FA:9F:92:FE:70:68:23:6D:03:7A:7A
Authority key identifier: CB:54:1D:B7:3D:99:5A:E5:5C:80:8A:0E:77:CB:FF:87:3C:CA:E4:4F
Certificate issuer:       /CN=CB541DB73D995AE55C808A0E77CBFF873CCAE44F
Certificate serial:       7733C1FDD0EB78936A70BCBCD55377C7B5249E5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft
Manifest number:          0132
Signing time:             Sun 19 Oct 2025 12:44:20 +0000
Manifest this update:     Sun 19 Oct 2025 12:39:20 +0000
Manifest next update:     Sat 25 Oct 2025 08:07:20 +0000
Files and hashes:         1: 3137302e302e31322e302f32322d3234203d3e20323633313537.roa (hash: I1spZtmjli5MIwwNOJwdw/M5IEaUcgYj0x1Wd2NiQeY=)
                          2: CB541DB73D995AE55C808A0E77CBFF873CCAE44F.crl (hash: SFARBW2mZRo34dWJY6wKwct1uz0ULgFKxL48EUfW4Mw=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:33:c1:fd:d0:eb:78:93:6a:70:bc:bc:d5:53:77:c7:b5:24:9e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB541DB73D995AE55C808A0E77CBFF873CCAE44F
        Validity
            Not Before: Oct 19 12:39:20 2025 GMT
            Not After : Oct 25 08:07:20 2025 GMT
        Subject: CN=8E4A7C5ADF2ED71554FA9F92FE7068236D037A7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:31:df:6a:64:c1:17:ee:df:d8:1d:f7:13:ff:
                    00:13:30:5f:46:71:af:73:bc:ad:be:be:78:e5:97:
                    85:b4:dc:36:05:57:64:99:f2:5e:5c:95:3c:ef:16:
                    25:28:7d:e4:35:f5:0a:e9:0e:ef:38:7b:8a:c1:c2:
                    90:5b:ca:c3:8d:c9:44:56:c4:be:7c:bc:e8:4b:85:
                    16:ba:46:55:b1:7c:2b:d1:30:e3:8b:98:16:8a:25:
                    bd:f7:78:e9:01:f1:12:8e:61:89:84:08:cc:08:60:
                    bd:4f:20:c3:41:a4:60:ab:dd:2b:a0:ed:38:04:00:
                    5d:6e:92:ce:cf:62:15:96:fe:f3:74:f6:8c:32:42:
                    bc:d5:a6:b1:d1:57:44:30:8a:1e:81:2e:e4:f5:6e:
                    3d:b3:4d:86:96:76:2d:4f:be:85:10:be:1c:dc:0b:
                    12:51:25:4b:59:be:7d:8c:db:a9:d4:30:51:57:73:
                    74:9e:d7:47:4a:15:ed:75:da:ae:99:47:82:d2:35:
                    e6:65:f5:fc:8a:5d:fc:59:61:72:e3:8b:51:30:fc:
                    7b:8c:c9:f8:2d:a3:63:b4:54:90:88:41:88:39:65:
                    13:91:3e:92:82:9c:b1:51:58:be:67:2b:5e:fb:b4:
                    9c:0d:45:ca:b8:6e:05:da:d8:57:b2:d5:3d:0a:37:
                    be:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4A:7C:5A:DF:2E:D7:15:54:FA:9F:92:FE:70:68:23:6D:03:7A:7A
            X509v3 Authority Key Identifier:
                keyid:CB:54:1D:B7:3D:99:5A:E5:5C:80:8A:0E:77:CB:FF:87:3C:CA:E4:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:f7:37:de:0e:f3:21:4c:35:30:75:0b:08:c1:ee:d3:16:f3:
         95:d3:79:d5:af:6f:32:10:d4:98:ec:4f:2e:b8:58:28:5b:fb:
         71:7d:ea:1c:61:bf:09:65:ac:db:cb:31:09:c0:95:b3:23:90:
         98:1a:05:20:24:6b:6a:8a:7c:30:e7:8f:ef:b1:30:32:60:77:
         72:9b:9e:db:67:56:5c:d7:c8:ad:b5:f6:94:80:4e:3b:c0:45:
         5d:e2:d4:02:48:ab:24:20:84:fc:94:c8:39:62:3c:14:61:53:
         6b:f9:73:89:9c:4a:bc:cc:31:ad:eb:64:b4:a3:2d:aa:f0:3b:
         10:b5:11:95:f8:65:f9:43:0b:21:f2:07:d5:d3:42:d4:20:8b:
         e4:3b:62:10:a2:e7:60:48:21:74:50:bf:fe:a8:5a:e7:5a:d2:
         ae:d3:b6:3e:ea:2d:eb:90:13:30:e3:10:a1:7f:fe:10:a4:c0:
         ae:0c:17:79:22:67:2f:01:88:62:7a:81:b3:7f:51:1b:dc:a2:
         35:24:8e:49:16:4b:a0:69:05:95:f7:98:3d:3a:ec:cc:45:c4:
         a1:6c:cb:50:8f:f9:42:53:05:0f:6f:47:b8:97:eb:36:81:f6:
         6e:24:38:b7:6e:71:2e:c6:9a:6e:39:f7:7c:9c:98:cb:62:4f:
         86:33:48:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:26:02 2025 by rpki-client