Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.mft
File:                     DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.mft (raw, json)
Hash identifier:          iHK1juf/os+QW4V68lju5FEkSozgXcXv9ApWCJQl2PY=
Subject key identifier:   A2:0C:0B:7C:F0:C3:02:9F:A5:DA:FA:E2:0A:64:31:E4:9B:3B:AC:7B
Authority key identifier: DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6
Certificate issuer:       /CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
Certificate serial:       28BD319295D62BA9B477511534025B125FB69FC5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.mft
Manifest number:          D9
Signing time:             Tue 13 May 2025 22:08:29 +0000
Manifest this update:     Tue 13 May 2025 22:03:29 +0000
Manifest next update:     Mon 19 May 2025 14:23:29 +0000
Files and hashes:         1: 3133382e3230342e31342e302f32342d3234203d3e20323633363831.roa (hash: MWOHNAINqIpvAsHq+HjgU6OlOgBIAtOhg5xlFIxwVYg=)
                          2: 34352e3233362e3137322e302f32332d3234203d3e20323633363831.roa (hash: NQpkaVH4qciZUusyh8Ty0nVRh/xzHX3AhyPPqeJExhQ=)
                          3: 3133382e3230342e31332e302f32342d3234203d3e203431303935.roa (hash: CRfyEzhMymqZ64luc/meDUgM0EKhF7s/bF5hKK+tbdc=)
                          4: 3133382e3230342e31322e302f32342d3234203d3e20323733303030.roa (hash: 5UGom+yzEtZyFKaNNyOfkfCMBvW7jGXinZw00JUwarE=)
                          5: 3133382e3230342e31332e302f32342d3234203d3e20323633363831.roa (hash: 8Cg3JZRZHvLx4wHamdd7Q1q76e2gPXnRCIt28ov0hqE=)
                          6: 323830333a633234303a3a2f33322d3430203d3e203431303935.roa (hash: IOww2sxuN84dxsf4sS4VIYx6oqNxcykpoaG7UN2h21c=)
                          7: 323830333a633234303a313030323a3a2f34382d3438203d3e20323633363831.roa (hash: eXN8gJwjIDvbsrReH0g60Dnp7Zm4q3gnpVsHFvEgCx0=)
                          8: DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl (hash: lyZ2l9/3Zi3z4xIrDpt8j4+SNe0VjSZ17hWKQlu5KyA=)
                          9: 3133382e3230342e31352e302f32342d3234203d3e20323633363831.roa (hash: JG9m5lxDPFXGGbUXDWCJsfACRKBFXbuatUXt9U59rww=)
                          10: 3133382e3230342e31352e302f32342d3234203d3e203431303935.roa (hash: +x4snRpMugw87hf+BfxY0Q8F8yhrnaYI/C8/O0Is1aU=)
                          11: 34352e3233362e3137322e302f32332d3234203d3e203431303935.roa (hash: n5EYRecE7sYISOb528cU9lxABxXEttzlPXmieKzzMRA=)
                          12: 3133382e3230342e31342e302f32342d3234203d3e203431303935.roa (hash: gWdppglAMx9gEJKv+Db7qOgqFUZSFd0IM+z+VG0Fnyk=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 May 2025 20:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:bd:31:92:95:d6:2b:a9:b4:77:51:15:34:02:5b:12:5f:b6:9f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
        Validity
            Not Before: May 13 22:03:29 2025 GMT
            Not After : May 19 14:23:29 2025 GMT
        Subject: CN=A20C0B7CF0C3029FA5DAFAE20A6431E49B3BAC7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:29:0e:e3:99:66:c2:f8:3e:45:6d:58:a8:4c:
                    bf:d5:e1:14:51:57:39:09:d6:1a:74:f0:fd:5b:21:
                    fd:11:e2:78:dc:a4:2e:0d:72:34:6c:41:0b:5a:d0:
                    05:e1:db:3f:c1:e4:27:2d:ac:45:53:fe:ab:dd:01:
                    5c:b7:70:23:f1:1d:6b:b3:08:8a:ac:16:96:d9:f9:
                    c2:7d:37:98:5d:12:49:76:aa:c5:f8:af:f5:6b:77:
                    93:c7:50:59:09:fc:78:07:2b:f2:d2:1c:7c:fd:c4:
                    54:85:c2:82:24:1f:70:ba:46:e1:ec:4d:56:dc:c0:
                    79:fa:3e:2a:8c:a6:83:be:99:dc:59:00:df:54:f5:
                    cc:fb:cf:a5:5c:7c:e0:aa:94:fd:25:ef:5e:8b:c5:
                    64:4d:6b:7b:1b:0c:f8:13:31:51:86:54:4d:2c:f8:
                    66:ee:26:f6:53:b1:61:1a:56:99:12:55:75:84:92:
                    9d:ca:10:bc:9b:01:a5:9f:58:df:75:8f:15:1a:60:
                    84:3d:f0:9a:d7:de:db:5f:9a:53:2c:7e:69:db:5a:
                    b3:3a:dd:db:5d:f6:d2:ad:07:1b:c1:b2:f8:7d:0c:
                    f4:f1:26:9f:4a:b4:c2:bf:41:00:f4:3e:25:90:00:
                    3c:08:81:75:17:ba:14:cd:11:89:9c:6a:6f:4a:b5:
                    22:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:0C:0B:7C:F0:C3:02:9F:A5:DA:FA:E2:0A:64:31:E4:9B:3B:AC:7B
            X509v3 Authority Key Identifier:
                keyid:DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:d4:7a:c9:08:d1:21:6f:3f:41:4d:20:0f:fc:11:19:2f:03:
         0f:66:7a:2b:c9:a1:16:0e:16:88:13:f6:20:6b:f1:8e:66:2f:
         20:7e:85:49:5f:ae:dc:cc:f3:25:36:27:3e:91:d9:33:27:90:
         e6:a0:06:e1:aa:c8:1a:bf:9b:47:19:77:a1:3d:e9:eb:96:1a:
         bd:a0:ee:a0:cf:13:00:26:78:8f:ec:1f:6b:c8:94:45:db:5b:
         ce:c0:51:55:c3:59:3e:8d:88:0c:f8:68:84:ba:db:ec:5d:ac:
         04:05:58:04:19:f1:73:2c:47:c2:8d:16:d8:35:91:1c:64:10:
         0c:55:dd:6c:22:aa:29:7e:51:41:ca:65:63:86:75:f4:18:97:
         34:54:08:8f:f0:50:3f:bc:6b:f2:97:d2:60:fa:f2:4c:69:4d:
         ea:40:5e:74:c6:ab:ae:c9:88:b0:98:d5:74:5a:dc:c3:d3:e2:
         82:59:bb:c2:33:0b:41:7d:af:a3:a0:4a:3b:7f:92:b7:f6:af:
         4b:2d:53:61:cd:cf:ee:28:f6:02:61:9b:5a:64:51:52:96:32:
         29:f9:ee:fc:a7:1f:50:be:e2:e1:b9:6e:59:49:b8:69:d4:7d:
         a4:6a:8d:09:0b:49:90:8a:ca:41:4e:a8:6e:2e:ce:60:60:ef:
         5a:1d:15:bd
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUKL0xkpXWK6m0d1EVNAJbEl+2n8UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENEM0YwRTRFRTA0M0M1QkE5ODU4QTg5QjVBNjBFN0ZG
MkQzNTVDNjAeFw0yNTA1MTMyMjAzMjlaFw0yNTA1MTkxNDIzMjlaMDMxMTAvBgNV
BAMTKEEyMEMwQjdDRjBDMzAyOUZBNURBRkFFMjBBNjQzMUU0OUIzQkFDN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEKQ7jmWbC+D5FbVioTL/V4RRR
VzkJ1hp08P1bIf0R4njcpC4NcjRsQQta0AXh2z/B5CctrEVT/qvdAVy3cCPxHWuz
CIqsFpbZ+cJ9N5hdEkl2qsX4r/Vrd5PHUFkJ/HgHK/LSHHz9xFSFwoIkH3C6RuHs
TVbcwHn6PiqMpoO+mdxZAN9U9cz7z6VcfOCqlP0l716LxWRNa3sbDPgTMVGGVE0s
+GbuJvZTsWEaVpkSVXWEkp3KELybAaWfWN91jxUaYIQ98JrX3ttfmlMsfmnbWrM6
3dtd9tKtBxvBsvh9DPTxJp9KtMK/QQD0PiWQADwIgXUXuhTNEYmcam9KtSIJAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUogwLfPDDAp+l2vriCmQx5Js7rHswHwYDVR0j
BBgwFoAU3NPw5O4EPFuphYqJtaYOf/LTVcYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNTJGRDZBNkE0NkI3ODI4QjQ0RDYyRjdFMEFCNTIyMTZD
NUU2RUVBRDhERThGNzg5RjlBMEM4RDExOTVBOTRDLzAvRENEM0YwRTRFRTA0M0M1
QkE5ODU4QTg5QjVBNjBFN0ZGMkQzNTVDNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQ0QzRjBFNEVFMDQzQzVCQTk4
NThBODlCNUE2MEU3RkYyRDM1NUM2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTUyRkQ2QTZBNDZCNzgyOEI0NEQ2MkY3RTBBQjUyMjE2QzVFNkVFQUQ4
REU4Rjc4OUY5QTBDOEQxMTk1QTk0Qy8wL0RDRDNGMEU0RUUwNDNDNUJBOTg1OEE4
OUI1QTYwRTdGRjJEMzU1QzYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAW1HrJCNEhbz9BTSAP/BEZLwMP
ZnoryaEWDhaIE/Yga/GOZi8gfoVJX67czPMlNic+kdkzJ5DmoAbhqsgav5tHGXeh
Penrlhq9oO6gzxMAJniP7B9ryJRF21vOwFFVw1k+jYgM+GiEutvsXawEBVgEGfFz
LEfCjRbYNZEcZBAMVd1sIqopflFBymVjhnX0GJc0VAiP8FA/vGvyl9Jg+vJMaU3q
QF50xquuyYiwmNV0WtzD0+KCWbvCMwtBfa+joEo7f5K39q9LLVNhzc/uKPYCYZta
ZFFSljIp+e78px9QvuLhuW5ZSbhp1H2kao0JC0mQispBTqhuLs5gYO9aHRW9
-----END CERTIFICATE-----
Generated at Wed May 14 22:15:05 2025 by rpki-client