Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft
File:                     958AE74C7555B3A115DBFFC8840395CE219F59B5.mft (raw, json)
Hash identifier:          4OiBUn1IaVs79tiVoUe6pM0dyfuqqhwrT7Gq31cATVU=
Subject key identifier:   96:D2:1F:F6:D4:DF:C4:79:4C:DD:50:2C:1E:D1:15:45:9E:7A:A2:FC
Authority key identifier: 95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5
Certificate issuer:       /CN=958AE74C7555B3A115DBFFC8840395CE219F59B5
Certificate serial:       223B3003C31A1F2F8016E6B7F82796466980CC7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft
Manifest number:          F4
Signing time:             Thu 03 Jul 2025 13:17:48 +0000
Manifest this update:     Thu 03 Jul 2025 13:12:48 +0000
Manifest next update:     Mon 07 Jul 2025 17:08:48 +0000
Files and hashes:         1: 3139322e3134312e34302e302f32342d3234203d3e20323635373934.roa (hash: 1eatcISrRWEjiJa/p7xBX6b+4bgRrTHTtU+86eOUpvs=)
                          2: 323830333a653032303a3a2f33322d3332203d3e20323635373934.roa (hash: kte3CTPUXYYiPA/2fZyA0RgagBOOb+s0KWpcd0MjF1Y=)
                          3: 3139322e3134312e34302e302f32322d3232203d3e20323635373934.roa (hash: wrwjTyh9pOptnNw9f/Tc7oUs2AyzWXt8NtoMFsZcyT4=)
                          4: 3139322e3134312e34332e302f32342d3234203d3e20323635373934.roa (hash: lFMPHHji0WkM/od00nWsQTxJbZLHB08h94Wr7OzPf/o=)
                          5: 958AE74C7555B3A115DBFFC8840395CE219F59B5.crl (hash: ePf3ixOE9rHQaLTdUuYpCLt64bPGLuv4ivWQJohMveY=)
                          6: 3139322e3134312e34312e302f32342d3234203d3e20323635373934.roa (hash: DsrrF+UUK1Q1sB6PvCAllfUXQz6xxhErCjiWOoHEOPc=)
                          7: 3139322e3134312e34322e302f32342d3234203d3e20323635373934.roa (hash: diXk1/Gtwc/ZoVUL78ZJK+xf8Tc+NqK2dFhbBJwjjXQ=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 17:08:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:3b:30:03:c3:1a:1f:2f:80:16:e6:b7:f8:27:96:46:69:80:cc:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958AE74C7555B3A115DBFFC8840395CE219F59B5
        Validity
            Not Before: Jul  3 13:12:48 2025 GMT
            Not After : Jul  7 17:08:48 2025 GMT
        Subject: CN=96D21FF6D4DFC4794CDD502C1ED115459E7AA2FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e9:53:58:a2:87:72:d8:52:30:48:76:41:80:
                    22:8c:16:cb:b4:58:bc:fc:ae:8d:49:d7:06:1a:55:
                    2e:57:fa:b7:5b:30:3f:38:16:7f:68:c6:7f:61:7f:
                    b4:eb:8f:48:1f:1a:a1:cd:45:ca:e8:74:f1:19:1b:
                    1c:85:6c:40:04:4a:f8:da:c0:07:53:dc:28:ff:ab:
                    8f:fc:a0:ff:2d:40:8b:cb:d7:5e:a3:8a:46:de:22:
                    44:b5:d4:23:c7:5c:50:fc:a4:f4:c0:7b:2e:4b:d5:
                    43:f6:8a:80:07:53:2c:d4:27:eb:30:a7:27:41:18:
                    c2:37:82:fa:f0:8e:f3:35:6d:60:29:49:42:0b:b5:
                    51:dc:6d:fb:39:54:ee:67:64:ad:2d:a8:42:79:bc:
                    00:6b:80:8f:22:e8:96:6d:bf:7e:e0:da:a4:4f:f7:
                    5a:f0:ef:36:47:68:f4:49:ef:dd:bd:00:c7:12:f3:
                    10:ce:69:1e:f7:7a:53:5b:a5:95:ca:bd:16:cd:3f:
                    ca:36:57:a5:58:90:01:5a:46:ce:fc:18:21:2d:c0:
                    2d:4d:8d:43:dc:2b:19:e8:1a:c4:1d:26:fa:97:1a:
                    59:27:82:8f:df:3c:b3:94:26:df:71:ac:e8:e8:0a:
                    24:6e:f3:1b:0a:29:d0:08:2f:5c:c6:fb:d0:df:20:
                    6b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D2:1F:F6:D4:DF:C4:79:4C:DD:50:2C:1E:D1:15:45:9E:7A:A2:FC
            X509v3 Authority Key Identifier:
                keyid:95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:9f:41:e9:23:76:98:f2:24:36:ec:f7:6a:86:18:a6:37:a3:
         f1:d1:13:e7:28:45:ec:74:2f:d3:4b:9f:d0:2f:4d:2a:29:8e:
         ca:4b:64:4c:d9:01:88:16:f7:70:9e:8f:9e:73:09:59:1c:28:
         e0:70:ed:6d:38:54:3d:c4:4f:e3:f0:48:dc:9e:b4:01:50:1d:
         2b:9c:6a:e9:88:24:ad:37:00:3f:7d:3b:78:70:80:a9:77:6a:
         79:ed:65:65:d7:a1:09:6b:26:cc:85:61:1e:1e:4f:9a:86:2d:
         95:2a:0a:c1:c0:89:3b:5c:15:25:4b:a6:a7:39:30:ce:b7:12:
         1f:a4:22:5e:f8:c6:78:62:96:01:00:76:25:e4:dc:aa:83:4d:
         ba:c3:e3:41:d2:50:f4:72:93:56:62:df:8a:34:ed:a6:a0:65:
         1a:82:f3:2f:6b:8e:8d:b5:a5:10:cf:67:fe:0b:4a:c3:ba:c3:
         c9:7c:fd:fe:e6:96:f3:ed:ad:a8:a6:33:b1:f8:e6:6b:41:79:
         91:a8:99:52:7c:a8:c1:0a:e7:27:88:db:b7:65:53:47:b6:27:
         87:1d:bd:a1:76:ec:4a:b3:ff:1e:ac:38:0e:5e:f5:cf:50:b3:
         8f:8a:d5:e4:37:d1:2c:a4:07:bd:6f:19:d6:34:e0:04:cf:c0:
         51:41:f9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:22:32 2025 by rpki-client