Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft
File:                     42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft (raw, json)
Hash identifier:          oTD7pj78SOcNy8N67W3rUabnehj616WjTRPxaziut0U=
Subject key identifier:   B1:FB:7D:89:A8:7E:10:0A:34:49:04:12:E9:15:81:BA:4B:FE:2D:BE
Authority key identifier: 42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9
Certificate issuer:       /CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9
Certificate serial:       238A9A1FA81AE3C203D9AF0D7C2B711C1DDD53F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft
Manifest number:          E0
Signing time:             Fri 16 May 2025 22:57:13 +0000
Manifest this update:     Fri 16 May 2025 22:52:13 +0000
Manifest next update:     Thu 22 May 2025 15:54:13 +0000
Files and hashes:         1: 323830333a353531303a3a2f33322d3634203d3e20323732303330.roa (hash: aEjGzC9WyQcaAq/pDczNBjuThFt4XEwbTDLIcE0Y+Vs=)
                          2: 42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl (hash: 4DLvbHbpM1CrAsob+d17n8HpcoQJ6yo22BrV4QvDDtU=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 23:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:8a:9a:1f:a8:1a:e3:c2:03:d9:af:0d:7c:2b:71:1c:1d:dd:53:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9
        Validity
            Not Before: May 16 22:52:13 2025 GMT
            Not After : May 22 15:54:13 2025 GMT
        Subject: CN=B1FB7D89A87E100A34490412E91581BA4BFE2DBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:db:ab:a2:84:96:c2:a1:41:02:0d:d3:ef:df:
                    61:79:6e:cd:df:2e:8c:33:ba:ee:fc:a4:bb:e8:87:
                    7a:65:09:20:c0:a2:12:37:6b:6d:aa:81:8d:4a:4b:
                    6f:94:01:06:26:a6:37:bf:c8:21:99:6b:74:f2:6f:
                    09:32:ad:9d:93:d2:74:11:fc:14:51:a6:e5:04:f8:
                    5c:cd:e1:c6:4f:32:ea:2a:3a:68:d7:b3:29:a9:3c:
                    92:04:1c:77:d6:41:11:a3:5b:36:fe:ea:6a:3d:98:
                    63:73:25:ae:fe:4c:bc:77:d5:3c:5b:ac:c6:6f:d2:
                    84:1c:ec:6a:0b:2f:0b:bc:72:a5:76:14:4a:29:d9:
                    0a:c0:fd:d4:72:18:7d:a4:17:86:c6:2c:5d:a6:5b:
                    c6:7a:5e:2d:b6:bb:b7:a3:f6:a1:b1:1f:e5:54:4c:
                    50:53:65:af:c1:43:17:05:d6:d4:ce:54:33:fb:54:
                    ba:c6:15:cb:f6:95:41:6e:e9:35:e5:7e:66:86:3f:
                    44:cd:3f:93:45:71:67:55:24:f8:39:65:f3:1a:cf:
                    62:b7:2a:64:88:5c:39:9b:ea:f5:63:0d:53:f0:fb:
                    a5:5c:19:1e:e2:e1:0b:0b:95:4b:71:2c:c1:e2:bc:
                    bd:64:3f:08:a8:01:aa:21:65:5f:8a:f9:8a:56:36:
                    78:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FB:7D:89:A8:7E:10:0A:34:49:04:12:E9:15:81:BA:4B:FE:2D:BE
            X509v3 Authority Key Identifier:
                keyid:42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:7b:82:f1:b9:f3:ee:5d:30:ce:26:fc:c2:e6:94:2c:a6:21:
         09:81:5f:31:10:85:09:ba:ac:86:2a:09:fa:b5:77:b5:e3:62:
         82:11:a0:32:4c:7c:c9:fd:93:64:af:c8:0b:72:53:5f:bc:55:
         72:f5:89:9b:aa:4a:16:24:40:63:df:60:94:97:64:72:ae:17:
         bf:6b:b5:fc:99:45:73:7d:26:e5:b5:ae:db:19:d9:4f:42:84:
         03:7b:a8:99:aa:1f:51:52:72:d6:22:85:a5:1c:7d:02:a7:4b:
         36:62:50:e0:f3:c9:39:bf:47:f3:dd:4b:4b:a5:66:3d:cb:a1:
         b9:70:53:04:a4:7b:49:ae:f9:0a:f0:db:54:de:8e:9b:3a:54:
         d4:80:62:52:0a:f9:94:66:84:f9:15:49:0d:50:48:8a:c3:a3:
         01:2c:5e:28:e5:0c:84:65:04:3d:c9:57:a7:46:85:86:7c:80:
         2e:e4:6a:fb:56:ec:99:55:34:94:38:d4:02:8f:2a:af:78:c6:
         35:22:4c:6f:ab:1b:21:49:07:6b:40:19:ae:16:8d:c8:b3:5d:
         64:59:b9:7d:00:7f:8b:c1:90:db:fd:fe:35:ba:07:08:bc:84:
         cf:a1:18:d2:65:80:46:53:b0:ff:65:8d:93:f4:72:ba:52:82:
         3f:8b:94:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 07:59:48 2025 by rpki-client