Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
File:                     AA2338B66632D823F77072125112B5BF1F721769.mft (raw, json)
Hash identifier:          g17hTOOhsp+nujcovT5ipz0E3MqrZ6F23oefpCy+piM=
Subject key identifier:   F3:FC:97:4B:57:A1:53:1F:05:B9:4A:92:3B:4B:03:C9:F5:A5:53:04
Authority key identifier: AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
Certificate issuer:       /CN=AA2338B66632D823F77072125112B5BF1F721769
Certificate serial:       4BDDDF617C86493F580B5773DC69ED3245A2A543
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
Manifest number:          010A
Signing time:             Fri 22 Aug 2025 17:35:07 +0000
Manifest this update:     Fri 22 Aug 2025 17:30:07 +0000
Manifest next update:     Wed 27 Aug 2025 14:07:07 +0000
Files and hashes:         1: 34352e3233372e3232302e302f32332d3233203d3e20323636383139.roa (hash: nOCJFysz8C8bWJVMRkvOCViuUCqzB1SjNWhFC7y70bc=)
                          2: 34352e3233372e3232302e302f32342d3234203d3e20323636383139.roa (hash: S7FRt48mlJQdhRUBKeeOjWo5otOru6pXI07NZVe+lsM=)
                          3: AA2338B66632D823F77072125112B5BF1F721769.crl (hash: GgCiAbgNZAAAkuSJuu4a63rpMQWCh94qPuUVnM12yuQ=)
                          4: 34352e3233372e3232332e302f32342d3234203d3e20323636383139.roa (hash: H8ah+1UhN/eq5WKFT0vmFxrRSA6J3Cu5+ERJLv9mNDM=)
                          5: 34352e3233372e3232322e302f32332d3233203d3e20323636383139.roa (hash: PMUAqmCu4jLgGE4W1UfcbQhDKwanax0we0RQX2/iKas=)
                          6: 34352e3233372e3232302e302f32322d3232203d3e20323636383139.roa (hash: 5GwF/yG9sdY75vW2Fj///TOVFJ4fRdCrLcvD0MbMXqY=)
                          7: 34352e3233372e3232322e302f32342d3234203d3e20323636383139.roa (hash: eoL7Y795RnrMWZUw7U8PkLtY0w5+OUPQ52ffjZRRUqE=)
                          8: 34352e3233372e3232312e302f32342d3234203d3e20323636383139.roa (hash: /elfOjbQfF2fPsMe6mNPua2FvaMW9MN/Vs+BX6OZ9K4=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl
                          rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:dd:df:61:7c:86:49:3f:58:0b:57:73:dc:69:ed:32:45:a2:a5:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA2338B66632D823F77072125112B5BF1F721769
        Validity
            Not Before: Aug 22 17:30:07 2025 GMT
            Not After : Aug 27 14:07:07 2025 GMT
        Subject: CN=F3FC974B57A1531F05B94A923B4B03C9F5A55304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7f:38:4c:32:0d:2b:78:ab:9e:ee:66:9f:aa:
                    1d:63:7c:63:ba:43:d4:3b:fe:95:19:42:80:70:dd:
                    af:ba:06:0d:8f:87:27:ae:ce:6a:00:df:4e:02:13:
                    b9:20:bb:f7:cd:85:6d:c7:3e:1c:e7:6c:da:ee:89:
                    f2:ac:30:70:f6:88:83:51:29:2d:9e:4d:dc:e9:3f:
                    60:24:d0:da:83:41:64:af:ab:03:5c:e3:b0:78:60:
                    3d:38:a4:39:27:92:ff:f6:d0:4c:a0:a2:4d:be:63:
                    b3:14:4f:bc:97:3d:64:f4:1f:4f:86:6c:54:33:41:
                    82:86:fd:7b:c7:c4:25:6c:b8:77:79:02:b5:ee:cd:
                    43:c5:e9:d5:e7:4d:b9:87:ea:95:e7:3e:61:8b:13:
                    9d:e3:5b:51:0e:e2:4a:46:d9:74:9a:3a:21:b4:34:
                    fe:f5:ef:e7:8c:55:9b:3f:58:0f:e9:45:a4:19:d3:
                    bf:f4:75:01:3e:2b:25:c6:77:be:4f:5e:9a:c3:37:
                    cb:e9:8d:dc:48:a8:f2:01:f3:21:27:fc:3a:ce:74:
                    e5:a1:df:09:ba:f8:9a:66:f6:62:dd:ae:a4:2d:7b:
                    43:30:20:1f:67:bb:b4:27:e3:ac:3c:08:6e:b4:99:
                    76:cf:fa:4f:f2:dd:ce:79:0a:27:82:76:17:c0:b2:
                    51:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FC:97:4B:57:A1:53:1F:05:B9:4A:92:3B:4B:03:C9:F5:A5:53:04
            X509v3 Authority Key Identifier:
                keyid:AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:40:d3:0f:0f:f2:a0:b3:d6:ca:19:5d:b5:91:8c:b6:e7:ea:
         b1:db:00:1c:bd:13:d8:1f:dd:21:95:86:9f:19:d7:61:b0:bc:
         35:5d:28:ac:e5:f1:50:16:54:e7:49:3a:f5:cd:e5:07:22:e6:
         fd:3e:df:fe:95:a6:2c:91:fb:32:c0:14:30:74:14:fb:42:e0:
         55:38:04:d0:bc:64:fe:c3:ef:bf:e2:a1:53:ec:bb:5f:fc:7a:
         72:de:07:6d:0d:50:e2:97:f6:1a:bc:21:8d:04:85:ae:20:a7:
         bb:22:46:af:07:21:6c:74:3c:d8:aa:77:38:d5:99:a5:68:74:
         b5:bf:b6:b8:1f:17:8e:79:6c:0c:78:8c:68:84:17:33:b4:5a:
         ab:f2:88:f0:7e:10:53:22:a5:94:df:71:40:91:cb:b4:4e:79:
         b7:79:ad:c9:22:1c:10:3b:95:57:bb:a2:9c:25:ac:b4:38:d7:
         a7:35:a2:df:ef:66:3e:e2:fb:88:f7:36:7a:6b:13:d3:bf:1f:
         34:02:a3:aa:af:9a:7e:66:90:64:4f:85:01:a1:26:fb:c7:14:
         bd:f6:4d:72:be:42:64:30:f6:e3:17:d9:1b:8d:88:50:1f:66:
         50:4d:4b:f6:31:c6:09:ae:29:65:81:3e:2a:84:2e:0c:42:db:
         ee:57:fd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:00:20 2025 by rpki-client