Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.mft
File:                     208A6A9014A4D9F040F76110276AD236D1F5C14E.mft (raw, json)
Hash identifier:          0QzdiDiXXR1v91XYRCZJjvCFW2gBErZaejYePe09tcE=
Subject key identifier:   78:C7:27:9F:97:6C:28:A1:FC:71:90:08:F1:DE:6D:BF:E9:3D:DD:60
Authority key identifier: 20:8A:6A:90:14:A4:D9:F0:40:F7:61:10:27:6A:D2:36:D1:F5:C1:4E
Certificate issuer:       /CN=208A6A9014A4D9F040F76110276AD236D1F5C14E
Certificate serial:       11321A7B7F3822595F8B848300642B2564B39E39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.mft
Manifest number:          0122
Signing time:             Sat 18 Oct 2025 13:53:57 +0000
Manifest this update:     Sat 18 Oct 2025 13:48:57 +0000
Manifest next update:     Thu 23 Oct 2025 17:18:57 +0000
Files and hashes:         1: 208A6A9014A4D9F040F76110276AD236D1F5C14E.crl (hash: tVXvV1BmKOMZOIvdoCyX9Sh8ZV4UlgOb/5D9bWMx7gk=)
                          2: 323830363a3366353a3a2f33322d3438203d3e20323730313837.roa (hash: VFAlc0cePVLu4upHkJORWa3QVlOImUDpD1tBIBNFF7Q=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 17:18:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:32:1a:7b:7f:38:22:59:5f:8b:84:83:00:64:2b:25:64:b3:9e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208A6A9014A4D9F040F76110276AD236D1F5C14E
        Validity
            Not Before: Oct 18 13:48:57 2025 GMT
            Not After : Oct 23 17:18:57 2025 GMT
        Subject: CN=78C7279F976C28A1FC719008F1DE6DBFE93DDD60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:85:13:c8:8d:4e:7c:b3:87:3e:ac:d3:f7:cc:
                    44:22:b1:30:a7:7e:86:c2:16:94:81:8c:ef:82:a0:
                    7d:59:65:ed:00:5f:ae:5d:b0:7d:b0:17:3b:13:8a:
                    4d:c0:61:75:3f:b0:f6:a6:cc:a0:30:1b:d3:80:ec:
                    17:29:85:7f:13:2a:d0:ff:20:98:ca:7e:cc:98:db:
                    33:58:35:0d:de:e5:47:7c:8c:68:65:14:bf:da:fd:
                    eb:7a:d2:fe:af:ab:e7:16:d1:90:62:84:93:a0:b6:
                    80:51:7e:44:24:82:b8:02:50:97:26:11:a6:ba:d8:
                    95:32:b3:4d:07:c8:77:2b:b0:19:15:b9:65:0a:c2:
                    2d:b2:ac:ac:b7:3b:f4:c3:24:04:82:35:4a:10:08:
                    e4:f0:3e:63:74:f4:5d:f5:31:01:d8:5a:a2:67:cb:
                    a0:a2:82:3c:61:55:f5:4a:59:66:ed:fe:7f:0a:8c:
                    bb:d3:9a:62:3f:85:19:4a:36:39:c2:36:ef:bc:1d:
                    fe:b3:27:37:24:ad:68:95:73:f6:d9:ce:d3:b1:87:
                    18:81:7e:03:71:4e:1b:3d:99:42:e2:f0:72:67:eb:
                    b3:10:4c:a9:59:56:4f:55:fe:4a:86:74:da:93:96:
                    36:be:ec:e8:7e:c3:b1:26:e6:e7:77:0d:b0:5c:1a:
                    69:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C7:27:9F:97:6C:28:A1:FC:71:90:08:F1:DE:6D:BF:E9:3D:DD:60
            X509v3 Authority Key Identifier:
                keyid:20:8A:6A:90:14:A4:D9:F0:40:F7:61:10:27:6A:D2:36:D1:F5:C1:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:9e:55:68:bd:6d:e2:61:3f:58:79:0f:6d:fd:50:7a:5a:5f:
         b4:ee:e3:71:f4:33:1c:22:f4:d9:83:6d:e8:79:5a:cd:9a:21:
         4d:f9:89:17:39:a0:a5:8a:0a:2f:dc:65:7a:44:2c:02:78:d0:
         06:c4:55:88:a1:37:4f:01:38:c8:3f:18:59:80:7b:f4:a1:2e:
         98:87:c0:d1:f4:5d:8c:2f:a4:b1:89:1c:7f:82:53:16:aa:a1:
         ae:6f:bc:00:71:5d:76:7d:8e:e1:17:2a:ff:e2:6f:7f:27:e8:
         0b:a9:05:62:be:cf:6e:9e:30:38:06:01:c6:f3:96:98:bf:a1:
         e3:45:84:80:ae:23:60:84:e1:21:5c:00:92:52:9b:6d:3b:25:
         d3:f2:1a:ec:0e:12:17:39:2f:d1:9e:34:b4:82:f4:bd:f1:b5:
         6f:0e:bf:26:ce:2d:ce:ef:d5:1b:b1:02:83:aa:7c:8e:06:34:
         f3:86:37:54:5b:19:7c:2e:ad:31:e5:ef:69:c5:4a:27:e0:77:
         98:9f:18:b9:c5:91:8e:d3:26:a7:3b:75:c5:ef:ff:ad:b9:81:
         9e:f6:d6:a5:0a:12:7f:d6:2b:4d:33:f4:af:07:91:9c:d5:09:
         bb:6a:f4:e2:2b:04:8b:fb:66:10:f6:ea:14:78:bd:16:3d:94:
         2a:c4:dd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:28:15 2025 by rpki-client