Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.mft
File:                     3ADE8F28C8077395C8518736031DE38C090CDF1B.mft (raw, json)
Hash identifier:          Y6aExDf+Kbhz3+jWghvHdTXhddnCWi4HDFClI0ypcXQ=
Subject key identifier:   FF:AE:9C:4E:4A:D1:7C:7F:C9:18:85:97:92:E5:10:44:AE:18:2C:45
Authority key identifier: 3A:DE:8F:28:C8:07:73:95:C8:51:87:36:03:1D:E3:8C:09:0C:DF:1B
Certificate issuer:       /CN=3ADE8F28C8077395C8518736031DE38C090CDF1B
Certificate serial:       2741A5DC296626D5D00357C3FDDCC7F66CEEA7F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.mft
Manifest number:          010B
Signing time:             Sat 23 Aug 2025 04:47:35 +0000
Manifest this update:     Sat 23 Aug 2025 04:42:35 +0000
Manifest next update:     Thu 28 Aug 2025 10:57:35 +0000
Files and hashes:         1: 323830333a623932303a3a2f33322d3438203d3e20323636363737.roa (hash: sw6nkt9b9iqdr60xcay/FVy4gA8YzFll2pTYR/j7YAM=)
                          2: 3ADE8F28C8077395C8518736031DE38C090CDF1B.crl (hash: QMrBfe0k9o8X58KAm/N3tRqwWqfMKTpuPep730Aj3G4=)
                          3: 34352e3232382e36302e302f32322d3232203d3e20323636363737.roa (hash: r0hGlZXBUymCy1K28MeDZE4GVrXiIBJu45BWGRxhLeo=)
                          4: 34352e3232382e36312e302f32342d3234203d3e20323636363737.roa (hash: Cr+mfnEp6s8Cl1uURFjHdN8leEEuNBOpN/Ii4eTo15o=)
                          5: 34352e3232382e36322e302f32342d3234203d3e20323636363737.roa (hash: /5kIuWFHRsyGt4S72SnDYcqsfae6AmXBCC200cCpdGA=)
                          6: 34352e3232382e36302e302f32342d3234203d3e20323636363737.roa (hash: UOwK4pwMZDmkONDaREtxS5iQCEY4YZ8EwaT8ZuxWXo4=)
                          7: 34352e3232382e36332e302f32342d3234203d3e20323636363737.roa (hash: XhSmqvS8btI6SxWJ0e3cgMmbEBQj/hJhgsvD8vL13xE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:41:a5:dc:29:66:26:d5:d0:03:57:c3:fd:dc:c7:f6:6c:ee:a7:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ADE8F28C8077395C8518736031DE38C090CDF1B
        Validity
            Not Before: Aug 23 04:42:35 2025 GMT
            Not After : Aug 28 10:57:35 2025 GMT
        Subject: CN=FFAE9C4E4AD17C7FC918859792E51044AE182C45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:55:44:e7:0c:4d:37:cc:80:3f:65:ca:ca:ae:
                    0b:64:f5:72:9f:43:ea:a6:3f:cd:e7:74:e7:0f:88:
                    37:b2:9e:00:79:d8:7a:10:a8:eb:55:9e:6f:bf:8c:
                    72:09:15:70:16:b9:27:ca:e5:66:c8:ba:dd:ea:16:
                    94:c7:ad:d1:b6:75:dd:56:1b:21:5e:2e:a1:bc:d4:
                    c2:8c:38:3a:f4:40:2f:b5:5f:18:36:d0:ac:ba:d5:
                    fe:59:33:d3:36:3a:58:82:a1:dc:52:64:27:5c:db:
                    15:7b:2a:ef:e7:01:20:1c:40:eb:f3:42:f7:ad:94:
                    0b:8b:85:47:55:cb:39:12:f9:13:c6:3a:2e:00:35:
                    0b:c6:a4:a1:c2:a1:c4:77:83:a2:a6:c2:ce:63:cc:
                    2a:41:4c:92:6d:ee:f5:2a:fd:80:9e:97:e2:0c:8f:
                    50:cf:74:36:cf:a9:9b:00:ce:15:0c:24:41:62:d6:
                    48:67:63:ae:73:fb:ad:d6:52:53:a1:ca:a6:50:29:
                    fe:d1:8d:56:60:54:9f:31:8e:b5:7b:1b:52:9f:f9:
                    04:cf:4f:7a:0a:3d:f8:6c:f8:76:7c:a6:41:a5:87:
                    8a:ff:ca:28:e6:76:a2:79:3c:1c:73:e0:49:07:f0:
                    74:73:37:f4:3f:71:93:02:78:d6:55:16:36:b9:c7:
                    f8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AE:9C:4E:4A:D1:7C:7F:C9:18:85:97:92:E5:10:44:AE:18:2C:45
            X509v3 Authority Key Identifier:
                keyid:3A:DE:8F:28:C8:07:73:95:C8:51:87:36:03:1D:E3:8C:09:0C:DF:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:d2:2d:de:5b:81:be:e4:73:b3:c9:04:ea:13:99:13:8e:7e:
         23:80:f1:4c:c6:b3:5e:4d:e9:48:03:e9:f2:1f:f9:cb:98:20:
         c9:8f:a0:9c:d2:26:d0:fb:7d:56:fa:a2:d1:72:8f:49:b8:ad:
         10:b3:b7:f5:82:3c:f9:7a:dc:65:d1:b2:65:73:f3:69:49:60:
         02:7d:93:f1:3e:83:a1:b4:a1:79:54:25:6f:09:ea:5d:10:20:
         70:f1:74:43:dc:b2:e2:db:2a:15:e5:b6:09:11:78:19:a8:12:
         74:cc:01:44:72:4b:f1:18:f1:b5:2b:b4:44:12:21:8f:10:1e:
         fe:01:06:c8:51:c6:08:b3:6a:64:91:fc:3e:b5:01:70:0e:a2:
         d6:10:89:e4:82:57:3c:ea:2f:ef:44:77:d7:53:63:ed:40:92:
         7e:59:c5:59:de:3c:24:d8:59:81:ef:87:95:8f:2f:81:c8:8e:
         77:12:c2:17:f2:cb:1c:8e:1d:0f:10:53:32:02:18:14:65:6a:
         09:26:ce:3d:5c:37:76:38:2a:a7:a3:b1:45:55:17:03:cd:d0:
         31:9d:99:1f:3f:ed:c8:7e:e8:b1:38:db:f4:2d:30:9a:3a:ae:
         ca:e3:50:a0:4f:d9:ea:f9:90:cd:80:04:9b:c2:27:d9:09:13:
         c2:0f:f1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:04:23 2025 by rpki-client