Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft
File:                     2D8A5D8A34E265B308F626454D8A6E920C65D608.mft (raw, json)
Hash identifier:          iqhrGkJ30AuhxmoZRaVYPVl+YE0LZZ3Xkv9vXdFKSeg=
Subject key identifier:   37:25:86:7E:7D:17:5A:B0:32:B2:16:2E:AA:38:D5:E5:7C:91:63:77
Authority key identifier: 2D:8A:5D:8A:34:E2:65:B3:08:F6:26:45:4D:8A:6E:92:0C:65:D6:08
Certificate issuer:       /CN=2D8A5D8A34E265B308F626454D8A6E920C65D608
Certificate serial:       1F5B4011F018091AF54F664C643DD735D57E4B7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft
Manifest number:          1D
Signing time:             Thu 03 Jul 2025 04:12:12 +0000
Manifest this update:     Thu 03 Jul 2025 04:07:12 +0000
Manifest next update:     Tue 08 Jul 2025 12:21:12 +0000
Files and hashes:         1: 2D8A5D8A34E265B308F626454D8A6E920C65D608.crl (hash: 7tz/gB8l8QPqiao+gLsfqX4v0hZnN+dMdjP6EHy6mXA=)
                          2: 323830333a3539303a3a2f33322d3332203d3e20323732393634.roa (hash: ZtjREPCj/eeu/E9mBRi9OvFD2ENA47U6yaCq0Q6c32c=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.crl
                          rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Jul 2025 12:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:5b:40:11:f0:18:09:1a:f5:4f:66:4c:64:3d:d7:35:d5:7e:4b:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D8A5D8A34E265B308F626454D8A6E920C65D608
        Validity
            Not Before: Jul  3 04:07:12 2025 GMT
            Not After : Jul  8 12:21:12 2025 GMT
        Subject: CN=3725867E7D175AB032B2162EAA38D5E57C916377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e9:66:3e:bf:70:cd:ff:c4:bb:64:2c:7d:04:
                    d3:34:6a:ad:6e:7f:63:0b:d5:e1:33:09:35:76:ed:
                    99:3b:23:20:21:36:36:c8:8d:6f:34:4f:c1:32:96:
                    79:b1:f2:a5:36:e5:db:9d:14:6d:e7:5f:08:32:cc:
                    4e:0a:82:f7:83:6e:5b:8e:df:3b:49:33:7d:f5:34:
                    d8:e2:a3:6b:56:92:6c:7c:1a:67:25:a1:06:90:91:
                    2b:a7:4f:51:60:c7:3d:18:3d:df:f6:95:73:f0:d1:
                    a2:1e:06:dd:97:60:14:a7:36:f9:3d:c3:e3:53:b2:
                    f0:f2:29:0c:1e:19:89:e9:0e:c3:d8:2a:16:27:bb:
                    ed:5f:a2:bf:0a:87:38:e0:cb:cb:30:5f:3e:e9:4c:
                    91:63:6a:21:e5:3e:27:ea:d2:af:26:6d:16:b3:51:
                    95:65:31:68:1e:1c:32:87:9e:75:ed:f4:8e:b9:50:
                    22:77:48:08:f7:ef:69:7e:92:60:a6:b0:6e:be:9e:
                    3e:33:be:f7:54:d9:45:7e:bb:53:26:ed:6d:0c:74:
                    21:b0:80:d6:48:4a:bc:61:5f:e8:73:1b:31:80:55:
                    64:0a:54:b9:c5:11:fc:41:c9:f9:72:77:51:9e:74:
                    1c:32:02:c7:7e:00:6a:88:d1:1e:84:b1:91:85:0a:
                    9b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:25:86:7E:7D:17:5A:B0:32:B2:16:2E:AA:38:D5:E5:7C:91:63:77
            X509v3 Authority Key Identifier:
                keyid:2D:8A:5D:8A:34:E2:65:B3:08:F6:26:45:4D:8A:6E:92:0C:65:D6:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86AF7F5A91E2D9513088A1BAA9E8B8D786BC52A7FBCFCCA73D29C6BB6ADD62C0/0/2D8A5D8A34E265B308F626454D8A6E920C65D608.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d3:f0:f9:1a:28:5e:e8:bf:21:3c:99:fc:de:55:b0:7a:a1:
         7c:19:d0:16:eb:98:12:55:db:fa:96:75:25:56:97:a9:85:b1:
         34:76:bd:04:aa:29:ee:32:b2:02:08:e1:ae:69:e2:a4:a6:d8:
         be:d3:40:88:53:69:8f:d5:34:2f:44:11:a9:32:6a:30:79:9a:
         80:da:0a:71:f1:95:d9:9a:ea:65:17:04:3f:5d:52:9c:0c:d7:
         58:8b:98:c3:dd:27:d2:5e:3c:94:37:6c:eb:1c:ba:8f:1c:ad:
         00:c4:91:0b:bb:6c:25:e5:cd:5e:06:07:8d:56:6d:03:c7:b9:
         00:f8:92:d4:ea:d7:e3:ce:7e:ee:d2:ef:ae:f3:c3:16:a5:f6:
         94:eb:15:0b:6c:0a:79:65:3f:fe:20:b1:b1:92:77:a0:17:d6:
         df:ef:f1:70:a0:e0:98:b0:25:58:05:f8:9e:d3:f5:3f:30:79:
         0e:d3:9f:53:2b:95:d8:06:3e:58:d8:33:c0:2e:54:70:64:a5:
         8c:50:b8:72:9c:df:4e:5c:38:57:67:7a:fe:7a:d7:87:46:8a:
         0a:74:12:a1:b8:ce:d0:0d:b0:e2:7d:eb:2d:21:92:87:4d:0a:
         f3:11:20:80:ec:75:cd:b7:20:2a:ee:2f:9c:65:0f:3b:4a:c3:
         d4:dc:e6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 09:00:12 2025 by rpki-client