Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
File:                     AA2338B66632D823F77072125112B5BF1F721769.mft (raw, json)
Hash identifier:          7xv7SfP+SnlWgQXCzSdua15KnvPcWijdE3bQ+SUV5rU=
Subject key identifier:   B9:56:15:A7:92:58:A2:55:E8:3F:98:12:FE:15:9E:84:B1:2E:E8:CB
Authority key identifier: AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
Certificate issuer:       /CN=AA2338B66632D823F77072125112B5BF1F721769
Certificate serial:       707930CB7DCE0AD295F9B8CE5232E7609C0920BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
Manifest number:          0129
Signing time:             Sun 19 Oct 2025 19:18:27 +0000
Manifest this update:     Sun 19 Oct 2025 19:13:27 +0000
Manifest next update:     Fri 24 Oct 2025 21:37:27 +0000
Files and hashes:         1: 34352e3233372e3232302e302f32342d3234203d3e20323636383139.roa (hash: S7FRt48mlJQdhRUBKeeOjWo5otOru6pXI07NZVe+lsM=)
                          2: 34352e3233372e3232302e302f32332d3233203d3e20323636383139.roa (hash: nOCJFysz8C8bWJVMRkvOCViuUCqzB1SjNWhFC7y70bc=)
                          3: 34352e3233372e3232322e302f32332d3233203d3e20323636383139.roa (hash: PMUAqmCu4jLgGE4W1UfcbQhDKwanax0we0RQX2/iKas=)
                          4: 34352e3233372e3232332e302f32342d3234203d3e20323636383139.roa (hash: H8ah+1UhN/eq5WKFT0vmFxrRSA6J3Cu5+ERJLv9mNDM=)
                          5: 34352e3233372e3232322e302f32342d3234203d3e20323636383139.roa (hash: eoL7Y795RnrMWZUw7U8PkLtY0w5+OUPQ52ffjZRRUqE=)
                          6: 34352e3233372e3232302e302f32322d3232203d3e20323636383139.roa (hash: 5GwF/yG9sdY75vW2Fj///TOVFJ4fRdCrLcvD0MbMXqY=)
                          7: 34352e3233372e3232312e302f32342d3234203d3e20323636383139.roa (hash: /elfOjbQfF2fPsMe6mNPua2FvaMW9MN/Vs+BX6OZ9K4=)
                          8: AA2338B66632D823F77072125112B5BF1F721769.crl (hash: Bmxqlmm8Ah9BwLKp5rsP5yr09LeD27IcjS46qObaZDs=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl
                          rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:79:30:cb:7d:ce:0a:d2:95:f9:b8:ce:52:32:e7:60:9c:09:20:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA2338B66632D823F77072125112B5BF1F721769
        Validity
            Not Before: Oct 19 19:13:27 2025 GMT
            Not After : Oct 24 21:37:27 2025 GMT
        Subject: CN=B95615A79258A255E83F9812FE159E84B12EE8CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:65:68:52:10:39:fb:28:98:60:80:81:e7:52:
                    52:58:e4:5f:ac:22:42:1a:38:e4:65:70:06:76:63:
                    fc:af:f4:60:a5:68:9c:61:d8:5e:26:21:1a:be:41:
                    52:dd:6e:5f:8d:53:5a:da:72:ac:64:0f:63:63:03:
                    28:57:c5:02:41:f0:37:80:ac:1b:80:f4:bd:40:a6:
                    90:e4:d8:d4:2c:c8:17:6b:ec:f0:4b:a6:57:b2:da:
                    9d:0d:60:fd:87:1e:f2:dc:ee:bb:59:22:30:7a:8d:
                    4a:b1:ed:74:3c:cf:eb:36:fe:d3:f1:eb:c6:8d:ba:
                    86:03:af:f6:92:d0:22:be:30:d3:8d:84:e5:b3:b8:
                    f4:e7:ad:1d:c4:a4:7d:36:d5:64:b4:83:e1:f3:99:
                    d9:3a:21:e4:b9:88:ee:16:31:57:3c:38:63:00:bf:
                    61:56:e0:d5:d8:57:48:83:9c:2d:18:f9:75:50:9a:
                    39:61:80:04:2e:6e:51:92:8c:49:1c:f9:8b:79:7f:
                    79:fc:ab:c7:36:4a:d2:8e:85:10:5d:8f:00:71:dc:
                    04:0b:4f:da:c3:e8:25:3f:c8:1b:b0:6e:f0:45:fc:
                    90:11:4c:81:22:f3:e0:69:45:1a:60:47:90:9b:8a:
                    54:3f:c2:d9:c4:11:a3:12:a2:38:e0:e3:60:42:c0:
                    83:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:56:15:A7:92:58:A2:55:E8:3F:98:12:FE:15:9E:84:B1:2E:E8:CB
            X509v3 Authority Key Identifier:
                keyid:AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ef:f3:92:9e:6d:41:ee:f1:f9:69:74:e2:6a:f2:a3:fb:b1:
         f8:6f:2c:54:6e:59:ec:da:c7:ab:f0:66:1e:c9:3d:a1:a3:b0:
         40:bf:35:bf:1e:14:7e:3b:b8:65:bd:02:08:c8:04:89:c3:7f:
         83:5c:62:8e:c2:48:4e:50:88:05:8f:af:8f:73:1d:90:86:e3:
         8a:90:29:97:ac:ed:5f:49:cd:40:22:c0:de:88:95:7e:ef:28:
         da:cb:37:84:fe:1d:1c:68:f0:a1:32:e8:b3:80:d8:8d:6e:c7:
         0d:90:48:cc:83:3e:cf:32:fc:60:ce:99:00:e8:62:ee:9e:4b:
         52:5d:dd:89:56:e2:f0:be:4c:99:3c:68:c1:f9:e4:c7:02:58:
         65:68:3b:5e:fe:93:bd:9f:6d:b3:a2:ec:53:48:49:75:bd:1c:
         af:dd:e9:95:30:e8:49:d7:f6:44:1b:5a:14:56:14:d3:71:19:
         b7:7b:d5:c8:5a:fe:85:94:4b:aa:a3:51:b9:a5:72:7c:24:f8:
         b1:8d:e4:68:cf:eb:2a:0f:53:a5:12:d0:c9:cc:19:91:8c:ee:
         a3:78:33:b5:4c:eb:40:24:e1:9b:a7:90:28:e7:48:3a:bc:a1:
         07:42:97:89:69:08:f5:6d:97:c4:59:30:a9:58:17:75:b8:62:
         5d:17:b2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:33:38 2025 by rpki-client