Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft
File:                     BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft (raw, json)
Hash identifier:          3DNkD+DM0DlCYThhkTpreq3Y+OW1LBWUxU7eAvQZ1WQ=
Subject key identifier:   5F:3C:21:C5:7C:B1:9B:FC:4B:A7:9E:A0:68:54:02:FB:53:1F:93:1C
Authority key identifier: BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B
Certificate issuer:       /CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
Certificate serial:       642D4397E0D7C2D4B5F340F07B274CD17615F734
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft
Manifest number:          DE
Signing time:             Fri 16 May 2025 17:29:06 +0000
Manifest this update:     Fri 16 May 2025 17:24:06 +0000
Manifest next update:     Wed 21 May 2025 12:14:06 +0000
Files and hashes:         1: 3230302e37342e3235302e302f32342d3234203d3e203238303530.roa (hash: dbtl+9uX7PdG2FA9REeBw158WIFvABX3kOPXdLJyE/Q=)
                          2: 3230302e37342e3235342e302f32342d3234203d3e203238303530.roa (hash: JY8I2y8DKYtW0y3ksx0VtUBjarL88aRVe3sizrByqR0=)
                          3: 3230302e37342e3234382e302f32342d3234203d3e203238303530.roa (hash: dOHLOsSAt9dMYyx6gsP/D/1zl2CueJEIiBzHqVQNr+I=)
                          4: 3230302e37342e3235312e302f32342d3234203d3e203238303530.roa (hash: 2qSj8DllafoL0YTwuGanzeUVSWm1vD7YvLZMrGi6fuA=)
                          5: 3230302e37342e3235332e302f32342d3234203d3e203238303530.roa (hash: DYDiyM1Ja+2morMZBb13l0i1f+QjktuVzIfm4h0iEsM=)
                          6: BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl (hash: okv+mba+blEWKg7aLh+d5qAxWD5LsxdF6NVyWHvJ9V8=)
                          7: 3230302e37342e3235322e302f32342d3234203d3e203238303530.roa (hash: 93aGNsNifP3OVF+eeUqRj4VzNi6ml4CEBm9NizKGCk8=)
                          8: 3230302e37342e3234392e302f32342d3234203d3e203238303530.roa (hash: k/un8zqpTMglunOD4EcoItdRqA0WoCxs4fArTst6BKI=)
                          9: 323830333a323034303a3a2f33322d3332203d3e203238303530.roa (hash: OmlbRyhT/ZJTfY7NLG2Wk/eDNN2JwiK/qbRcXt2tEDQ=)
                          10: 3230302e37342e3235352e302f32342d3234203d3e203238303530.roa (hash: SXF+iCOaXxohlu09DbmzNtLAo1poH9lkJGXGcaHFcJA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:2d:43:97:e0:d7:c2:d4:b5:f3:40:f0:7b:27:4c:d1:76:15:f7:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
        Validity
            Not Before: May 16 17:24:06 2025 GMT
            Not After : May 21 12:14:06 2025 GMT
        Subject: CN=5F3C21C57CB19BFC4BA79EA0685402FB531F931C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a6:84:ef:76:ac:34:dc:d0:ec:29:e3:be:6e:
                    5a:7c:54:fb:a4:c4:7d:53:35:d1:25:ba:91:78:98:
                    ad:83:7f:4e:6e:24:e5:9d:bf:63:29:b8:5e:c7:22:
                    1b:cf:b2:5f:c3:61:bf:32:67:29:0d:9d:a1:f6:c4:
                    0e:0f:7e:17:77:39:11:be:78:f8:4f:63:e9:fb:e9:
                    56:2a:4a:c2:8f:0a:19:ca:89:c2:59:35:fd:b9:31:
                    6f:22:7f:e6:07:7b:81:1f:06:60:08:0d:b1:2c:b0:
                    eb:be:1c:8e:15:4d:48:7c:a1:6f:e7:da:65:9a:71:
                    ff:6e:74:d4:d0:e5:4c:a9:d6:88:96:39:2e:f8:9d:
                    de:a3:c9:ed:42:63:98:fa:74:56:70:86:59:ea:51:
                    0a:7f:25:4d:4c:49:6d:bb:80:44:ae:94:ce:5e:3a:
                    b8:32:6e:7f:49:76:63:33:07:f7:52:f7:f2:14:e3:
                    5f:86:bc:8e:1d:93:64:b5:07:44:cc:23:d0:36:5d:
                    3b:68:7d:50:19:6c:25:77:30:61:a9:e6:46:54:a1:
                    37:51:38:bd:25:6f:85:ad:ee:79:da:f9:bd:db:37:
                    19:2f:be:b9:f8:bb:32:4f:fd:9b:fd:93:db:f8:6e:
                    ea:48:71:f1:ea:9c:f5:5f:f7:79:6f:81:fa:35:98:
                    07:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3C:21:C5:7C:B1:9B:FC:4B:A7:9E:A0:68:54:02:FB:53:1F:93:1C
            X509v3 Authority Key Identifier:
                keyid:BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:68:94:da:2c:77:4e:ca:1d:e7:69:6e:3f:ff:fc:d3:0c:ff:
         4b:d6:9c:79:75:61:3c:7e:b0:d5:26:5e:39:5d:4d:9f:a2:ec:
         88:fd:2e:f9:00:85:81:80:db:a0:8e:72:e1:73:81:b7:4d:af:
         88:57:aa:26:dc:33:a0:8c:19:8c:68:02:2d:1e:d2:03:ef:d1:
         d2:41:88:2a:47:96:98:95:05:d8:0d:33:84:66:69:e3:2d:ec:
         98:b8:a9:dd:74:35:fc:10:d9:c5:d8:7d:ed:dc:7d:15:c7:d8:
         47:12:fc:d0:a7:8b:e3:87:53:b1:2b:97:51:7c:77:f6:bf:a5:
         d4:cd:20:17:00:b3:ea:86:46:a8:c7:84:d2:26:ae:1b:4d:fa:
         82:fb:7b:41:57:2a:a3:f7:c4:14:02:e4:fe:d4:cc:60:6a:f3:
         2a:a8:e3:5c:cf:e5:ed:d4:4f:63:35:ab:f5:be:4d:7b:39:5d:
         b2:0f:7f:fa:5a:41:79:62:ee:11:32:12:5c:db:88:28:6d:50:
         ea:be:dc:71:ad:e0:66:4e:37:9e:09:17:ed:b1:20:30:6c:ee:
         df:bb:ae:ab:d5:5e:36:2b:f1:9f:87:64:30:30:bd:21:60:95:
         91:ef:a0:d1:83:b7:5f:2a:7a:a1:ed:2e:3b:52:48:53:ec:24:
         94:20:dd:25
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUZC1Dl+DXwtS180DweydM0XYV9zQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ1QzhCM0I5RjVBRDFFMTIyNTkwQjNBOEM4NDlCNjdD
RTA5QjUwQjAeFw0yNTA1MTYxNzI0MDZaFw0yNTA1MjExMjE0MDZaMDMxMTAvBgNV
BAMTKDVGM0MyMUM1N0NCMTlCRkM0QkE3OUVBMDY4NTQwMkZCNTMxRjkzMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdpoTvdqw03NDsKeO+blp8VPuk
xH1TNdElupF4mK2Df05uJOWdv2MpuF7HIhvPsl/DYb8yZykNnaH2xA4Pfhd3ORG+
ePhPY+n76VYqSsKPChnKicJZNf25MW8if+YHe4EfBmAIDbEssOu+HI4VTUh8oW/n
2mWacf9udNTQ5Uyp1oiWOS74nd6jye1CY5j6dFZwhlnqUQp/JU1MSW27gESulM5e
Orgybn9JdmMzB/dS9/IU41+GvI4dk2S1B0TMI9A2XTtofVAZbCV3MGGp5kZUoTdR
OL0lb4Wt7nna+b3bNxkvvrn4uzJP/Zv9k9v4bupIcfHqnPVf93lvgfo1mAePAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUXzwhxXyxm/xLp56gaFQC+1MfkxwwHwYDVR0j
BBgwFoAUvVyLO59a0eEiWQs6jISbZ84JtQswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RjM5QTg5Qjg5RjlCMzM0MTczMzg3QjIxMzk2Q0RBQ0JG
NDM4NDcxNzFEQjMyMTkxQkFFOTQxODU0OUI1OUY0LzAvQkQ1QzhCM0I5RjVBRDFF
MTIyNTkwQjNBOEM4NDlCNjdDRTA5QjUwQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRDVDOEIzQjlGNUFEMUUxMjI1
OTBCM0E4Qzg0OUI2N0NFMDlCNTBCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEYzOUE4OUI4OUY5QjMzNDE3MzM4N0IyMTM5NkNEQUNCRjQzODQ3MTcx
REIzMjE5MUJBRTk0MTg1NDlCNTlGNC8wL0JENUM4QjNCOUY1QUQxRTEyMjU5MEIz
QThDODQ5QjY3Q0UwOUI1MEIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAvaJTaLHdOyh3naW4///zTDP9L
1px5dWE8frDVJl45XU2fouyI/S75AIWBgNugjnLhc4G3Ta+IV6om3DOgjBmMaAIt
HtID79HSQYgqR5aYlQXYDTOEZmnjLeyYuKnddDX8ENnF2H3t3H0Vx9hHEvzQp4vj
h1OxK5dRfHf2v6XUzSAXALPqhkaox4TSJq4bTfqC+3tBVyqj98QUAuT+1MxgavMq
qONcz+Xt1E9jNav1vk17OV2yD3/6WkF5Yu4RMhJc24gobVDqvtxxreBmTjeeCRft
sSAwbO7fu66r1V42K/Gfh2QwML0hYJWR76DRg7dfKnqh7S47UkhT7CSUIN0l
-----END CERTIFICATE-----
Generated at Sat May 17 14:55:37 2025 by rpki-client