Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.mft
File:                     B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.mft (raw, json)
Hash identifier:          VUJ75QCyXmCjG0x3X2zLnR0Gqv/Glcs4u1FsO4c7PxQ=
Subject key identifier:   D9:B6:7F:91:D1:AE:B2:29:79:74:B6:29:5F:95:73:20:16:E6:4C:AF
Authority key identifier: B1:AF:8A:D0:EB:D3:07:77:29:78:AE:5E:FF:E0:CB:D7:07:FC:AE:66
Certificate issuer:       /CN=B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66
Certificate serial:       030299C8D0CC88E4B2A647C29D8BDF083E873F93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.mft
Manifest number:          DE
Signing time:             Thu 15 May 2025 21:46:48 +0000
Manifest this update:     Thu 15 May 2025 21:41:48 +0000
Manifest next update:     Wed 21 May 2025 01:38:48 +0000
Files and hashes:         1: 323830333a643232303a3a2f33322d3438203d3e20323633323338.roa (hash: z8suASAtscWqW0GdXkGenggMQuFU3YkHs4KWvqOY36M=)
                          2: 34352e3232352e34342e302f32322d3234203d3e20323634363638.roa (hash: C02rM+QLfBn4XzXUBUtHONuo3uLk7iEQh8RbAIH6JcA=)
                          3: 323830333a643232303a3a2f33322d3438203d3e203532343638.roa (hash: skZTgXX4/pvkpFU1ERigLoQuhfJfnqqFkoVgBSAxNsM=)
                          4: 34352e3232352e34342e302f32332d3234203d3e20323633323338.roa (hash: YRHbuBajn+P+woG77MROgE5Yz0jy2B3c1Bjc+e4E+Qs=)
                          5: 34352e3232352e34342e302f32332d3234203d3e20323636383830.roa (hash: ZEasK3s2ySvvmeNyDCIZ9twYzztyptk9cV4Gl8nA3gI=)
                          6: 323830333a643232303a3a2f33322d3438203d3e20323636383830.roa (hash: l0WMMqPT63dtfqO0gPul38a2OsI9SKgH8O1l+DOdNPk=)
                          7: 34352e3232352e34342e302f32322d3234203d3e203532343638.roa (hash: L8NLrAmXxMax0wiNv6tQ3agNkrGbX6LC+NBNVU7K+y0=)
                          8: B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.crl (hash: splqpEjIiS+5M/TNYzA8MavVIrRxCT+cHQChQdWQH8Q=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:02:99:c8:d0:cc:88:e4:b2:a6:47:c2:9d:8b:df:08:3e:87:3f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66
        Validity
            Not Before: May 15 21:41:48 2025 GMT
            Not After : May 21 01:38:48 2025 GMT
        Subject: CN=D9B67F91D1AEB2297974B6295F95732016E64CAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5c:a1:8b:8c:9d:c6:70:b7:86:84:df:28:81:
                    5d:ca:af:e3:7d:44:ee:40:1e:23:d4:e1:9a:f8:b8:
                    f3:d8:05:55:af:fc:07:c1:5a:43:0b:3a:6f:8d:7f:
                    0a:ea:15:bf:21:7c:b6:a2:06:5e:d8:3b:a6:ca:4c:
                    9c:8f:fe:a8:6b:7b:5d:0a:b9:d7:17:1d:16:f2:b8:
                    a9:eb:d2:ea:61:aa:3f:43:c0:6d:21:d2:75:1b:2d:
                    b9:54:f9:cc:b3:02:2b:54:7e:b4:d6:68:67:d7:0e:
                    c8:50:14:fd:0c:e6:ad:72:7b:63:4f:31:a5:71:6f:
                    5d:dc:43:8c:fe:4c:bc:f8:af:87:33:d1:c9:8b:2c:
                    8e:b4:17:a9:30:53:e2:71:e1:ef:fc:46:80:3a:33:
                    55:59:2d:7c:96:6c:f2:80:ee:32:b7:0b:78:d1:0e:
                    df:30:e1:52:9f:ec:2c:26:7c:80:a3:8b:ee:23:62:
                    77:55:74:9d:9e:b5:c3:5d:1c:38:ca:86:0b:06:f9:
                    b8:9d:e9:2d:23:57:2b:66:e6:96:ca:1a:68:83:d7:
                    1f:c8:95:f8:2b:d1:75:cd:a5:25:b8:2d:c9:49:79:
                    38:6e:69:de:5c:b1:c8:f3:bb:2d:04:0d:96:76:bf:
                    58:9f:65:95:19:b9:68:0f:14:fb:2c:55:1c:d0:d5:
                    04:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B6:7F:91:D1:AE:B2:29:79:74:B6:29:5F:95:73:20:16:E6:4C:AF
            X509v3 Authority Key Identifier:
                keyid:B1:AF:8A:D0:EB:D3:07:77:29:78:AE:5E:FF:E0:CB:D7:07:FC:AE:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:cd:46:ea:3d:76:82:c7:46:c4:37:76:8a:c7:f2:c1:6c:29:
         59:ed:1a:7e:ea:77:c7:13:a5:70:c8:9f:6f:04:b0:1d:9e:80:
         9a:84:94:38:e4:78:3f:bb:2f:c4:58:7f:cd:42:29:fd:9d:01:
         09:71:c3:86:0f:6b:8f:44:7c:c1:1b:ae:30:d7:99:8e:9c:f8:
         18:60:f4:e1:ff:27:2c:ce:3f:c0:e0:cd:79:11:80:a9:b1:73:
         a6:be:12:83:71:8f:d4:14:c1:f0:41:64:fa:5e:7e:88:ab:b7:
         68:1d:36:5d:89:be:d8:10:80:47:e6:35:43:4f:cb:5d:71:69:
         10:ed:27:b8:f6:de:73:d6:39:0e:91:3d:ea:9d:be:3b:af:fc:
         da:d3:5a:ec:a6:87:7b:cf:c8:86:e8:01:f4:9a:01:a6:7e:d0:
         fa:fb:40:0a:f1:d2:b6:f7:e5:a6:fd:6d:ad:87:1d:8f:76:ba:
         d7:96:5f:2f:dc:4e:bd:1c:40:64:dc:d5:5b:a4:5d:cb:54:4d:
         77:11:9c:75:e2:01:4e:57:cb:1a:fa:cc:43:dd:86:38:00:5e:
         0b:4d:94:4f:90:73:62:f0:b1:12:dd:40:fc:c3:a0:ee:86:f3:
         38:22:08:9e:ca:59:a3:7f:5d:61:e3:86:39:84:53:df:11:ff:
         e0:70:62:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 03:06:25 2025 by rpki-client