Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B8A6852509063BC47A67DB0CEB49FD6F1B2A1CA17E32B7834AC9895375A7399/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.mft
File:                     C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.mft (raw, json)
Hash identifier:          wiU9fXfk7yEEPnrMJkpV1zR2zBQciJGWRVC/bLBj/Tg=
Subject key identifier:   DD:4D:43:1D:67:B5:C3:9A:53:2B:06:53:EE:17:54:56:1C:38:B0:3F
Authority key identifier: C2:3C:6D:A8:7C:DE:76:54:CE:5B:5A:DD:EC:74:8B:19:EE:F5:EE:1A
Certificate issuer:       /CN=C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A
Certificate serial:       0DA7FFC0521C361BB213FE76992782934A19B4EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B8A6852509063BC47A67DB0CEB49FD6F1B2A1CA17E32B7834AC9895375A7399/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.mft
Manifest number:          42
Signing time:             Thu 26 Mar 2026 01:37:18 +0000
Manifest this update:     Thu 26 Mar 2026 01:32:18 +0000
Manifest next update:     Mon 30 Mar 2026 22:32:18 +0000
Files and hashes:         1: C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.crl (hash: 19H7li4CW1JvRYlKPorVzuY3xjTA4tZuCAXIKZupvSg=)
                          2: 323830333a346631303a3a2f33322d3438203d3e20323732313138.roa (hash: cfqpMesVtTCJW/gXILlWyOfzQXanZJn3CLqfjz47nrA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B8A6852509063BC47A67DB0CEB49FD6F1B2A1CA17E32B7834AC9895375A7399/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B8A6852509063BC47A67DB0CEB49FD6F1B2A1CA17E32B7834AC9895375A7399/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a7:ff:c0:52:1c:36:1b:b2:13:fe:76:99:27:82:93:4a:19:b4:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A
        Validity
            Not Before: Mar 26 01:32:18 2026 GMT
            Not After : Mar 30 22:32:18 2026 GMT
        Subject: CN=DD4D431D67B5C39A532B0653EE1754561C38B03F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2c:1a:8c:f3:8f:81:d9:f1:60:9b:05:69:af:
                    5b:d9:34:5c:a9:ed:b0:32:29:5a:a6:60:1b:87:b3:
                    c0:5b:b4:49:04:9c:f4:33:08:71:3f:2b:fc:ae:e2:
                    f3:05:e2:37:13:d0:9f:4b:22:22:0b:c4:1f:7d:b9:
                    c3:3b:34:cc:ee:04:0a:04:f5:ba:d1:ec:a8:24:ba:
                    0a:53:69:6a:8d:93:1b:b1:86:9a:65:25:21:fa:42:
                    f1:c2:7f:6b:21:f0:c4:1d:aa:d4:d1:85:cb:c9:c7:
                    e7:66:d5:ce:19:a4:a8:f1:ae:da:53:98:84:35:3b:
                    29:81:1e:e7:52:f5:51:49:8c:5a:cb:07:c5:b7:a6:
                    62:3c:f7:c4:6c:c2:39:2c:c3:6d:2c:92:a6:4b:c9:
                    c4:5f:7b:c7:4a:b9:e8:6b:92:0a:34:6a:d6:2c:30:
                    91:a1:a5:6a:d6:b8:4a:72:f2:6a:8f:01:2c:e0:dc:
                    73:7b:16:7f:aa:dd:a0:1f:38:16:65:7c:07:72:7d:
                    a8:af:66:9f:91:e8:ff:a8:db:72:7f:5e:27:db:c5:
                    92:34:d1:ae:17:5c:58:f8:6a:73:a8:91:26:fc:21:
                    a8:31:1e:f1:41:2e:cf:37:e4:29:f2:a3:e2:5b:ee:
                    f4:b0:fb:79:19:a6:3f:0d:a4:0d:24:d4:a5:7d:5f:
                    55:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4D:43:1D:67:B5:C3:9A:53:2B:06:53:EE:17:54:56:1C:38:B0:3F
            X509v3 Authority Key Identifier:
                keyid:C2:3C:6D:A8:7C:DE:76:54:CE:5B:5A:DD:EC:74:8B:19:EE:F5:EE:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B8A6852509063BC47A67DB0CEB49FD6F1B2A1CA17E32B7834AC9895375A7399/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B8A6852509063BC47A67DB0CEB49FD6F1B2A1CA17E32B7834AC9895375A7399/0/C23C6DA87CDE7654CE5B5ADDEC748B19EEF5EE1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:41:ef:ed:2b:c3:00:a4:2d:59:ab:50:71:96:ef:29:6d:6e:
         47:54:ce:84:33:3b:49:f2:50:fa:1a:cd:51:72:36:e3:7b:00:
         44:0b:cf:03:76:a4:a3:e4:ce:d0:4b:e5:d8:29:c0:50:6b:ef:
         af:4e:57:b5:9a:88:61:4a:91:5f:9e:38:c2:6e:e1:f8:bb:fd:
         48:b4:8e:f4:c8:46:71:23:11:6c:44:51:09:9d:96:f2:2b:3b:
         40:9a:58:1e:54:75:04:5b:89:c6:44:80:7a:6c:bb:c4:36:c5:
         05:20:5e:a4:19:06:6f:81:f8:9a:9d:ae:61:cc:dd:cf:6f:f5:
         94:c7:11:0f:0a:48:8c:96:a8:5d:93:f2:4b:0c:e0:2e:51:42:
         e6:34:6e:3e:5f:8e:dd:73:f7:80:ef:32:55:dc:b0:b6:45:04:
         5c:9a:be:38:df:ac:c3:ac:3b:d6:90:f0:8e:bb:02:ff:df:a9:
         d7:12:0f:13:69:d9:91:7e:dd:28:0f:f4:00:71:1e:3d:41:6f:
         f4:1a:e7:f7:43:15:43:82:8a:49:fb:1e:7e:a2:0a:0b:ed:2b:
         40:a8:70:24:e6:4c:bb:de:49:34:38:c7:69:70:c4:c7:f5:ae:
         bd:ba:0c:45:a8:96:72:28:ff:df:fd:5b:39:40:bb:81:dc:c6:
         1c:95:e9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:10:08 2026 by rpki-client