Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE4F4B537633F057E5D7A50F05241B24ECB6101701C1CD692F3E7A681925BE62/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.mft
File:                     958A517F1B57F15CAC71A4ABE5A03A21F805ED14.mft (raw, json)
Hash identifier:          9dz4TaEJoZfLNOev9Z7SeEeieJQCsSuIRzGy/Q31KXs=
Subject key identifier:   E7:D7:6A:9F:E1:78:E5:E3:CD:DF:05:8B:CC:B7:3E:42:4D:29:98:9D
Authority key identifier: 95:8A:51:7F:1B:57:F1:5C:AC:71:A4:AB:E5:A0:3A:21:F8:05:ED:14
Certificate issuer:       /CN=958A517F1B57F15CAC71A4ABE5A03A21F805ED14
Certificate serial:       228D34E5C907F0639AD9B56A0CB620E07784B817
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE4F4B537633F057E5D7A50F05241B24ECB6101701C1CD692F3E7A681925BE62/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.mft
Manifest number:          EF
Signing time:             Tue 24 Mar 2026 14:36:52 +0000
Manifest this update:     Tue 24 Mar 2026 14:31:52 +0000
Manifest next update:     Mon 30 Mar 2026 01:22:52 +0000
Files and hashes:         1: 323830333a313064303a3a2f33322d3332203d3e20323733393639.roa (hash: dDVcalpIOxTaQxtVLc9yKzlqwylXZMFTFUE2iRUmGsY=)
                          2: 958A517F1B57F15CAC71A4ABE5A03A21F805ED14.crl (hash: pQquISF6j6dh1dlDelTc0GHve+jsGSPcHWTyK3CKgi8=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE4F4B537633F057E5D7A50F05241B24ECB6101701C1CD692F3E7A681925BE62/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE4F4B537633F057E5D7A50F05241B24ECB6101701C1CD692F3E7A681925BE62/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Mar 2026 17:17:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:8d:34:e5:c9:07:f0:63:9a:d9:b5:6a:0c:b6:20:e0:77:84:b8:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958A517F1B57F15CAC71A4ABE5A03A21F805ED14
        Validity
            Not Before: Mar 24 14:31:52 2026 GMT
            Not After : Mar 30 01:22:52 2026 GMT
        Subject: CN=E7D76A9FE178E5E3CDDF058BCCB73E424D29989D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9a:36:85:98:e3:99:9f:3a:47:49:94:d9:8e:
                    6f:80:22:5f:4d:cb:02:3a:82:e9:d6:cf:9f:22:61:
                    28:0c:11:d7:3e:f9:72:a3:f7:09:b8:de:35:6a:67:
                    40:34:5a:34:63:f2:15:79:2f:20:1d:18:4d:66:d8:
                    b8:6a:5f:b6:4b:65:22:23:34:55:32:d2:a3:eb:33:
                    4e:e4:a4:74:26:ee:75:f3:e4:45:c3:54:0f:08:2f:
                    90:ae:8e:c0:12:8f:04:57:70:0c:55:32:6f:ae:bb:
                    10:c8:40:46:d3:be:d8:38:80:d9:6b:ec:bc:5f:20:
                    32:c1:d9:4a:80:a0:91:6a:ab:21:83:44:0b:59:fe:
                    d6:30:46:17:a6:ab:2d:47:d6:75:24:b9:c2:c3:36:
                    60:7b:a3:38:97:ed:4a:ca:5c:2a:88:a2:27:7d:97:
                    b4:cb:2f:1e:10:ae:c7:42:60:a1:25:4f:cc:cf:6c:
                    ed:7f:f8:0b:bf:fc:24:74:9c:21:90:58:4e:67:79:
                    22:fb:66:50:a4:4f:26:d5:14:98:3f:46:1e:cd:4a:
                    2d:ab:48:f1:5a:ef:60:ba:90:55:63:ad:9e:34:4a:
                    4e:fc:85:f9:a0:a0:38:b2:82:b8:15:a5:95:ac:4a:
                    e9:f4:9c:c8:76:b4:31:4a:72:55:7c:2a:52:dc:2f:
                    5a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D7:6A:9F:E1:78:E5:E3:CD:DF:05:8B:CC:B7:3E:42:4D:29:98:9D
            X509v3 Authority Key Identifier:
                keyid:95:8A:51:7F:1B:57:F1:5C:AC:71:A4:AB:E5:A0:3A:21:F8:05:ED:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE4F4B537633F057E5D7A50F05241B24ECB6101701C1CD692F3E7A681925BE62/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE4F4B537633F057E5D7A50F05241B24ECB6101701C1CD692F3E7A681925BE62/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:9d:6f:75:4c:fb:9b:7f:a3:73:a6:b6:b6:f9:92:24:73:05:
         46:0f:0d:cc:0b:94:58:b3:52:a6:38:0b:27:75:31:d9:73:bb:
         e0:83:11:7d:20:de:d8:4d:65:70:1e:6c:0a:46:ff:4b:6c:e3:
         79:95:cb:75:d4:a6:9d:27:b7:0d:0f:48:34:3e:96:ac:b3:10:
         48:77:09:a4:40:fc:38:68:f6:34:bc:b5:a7:50:80:6a:45:79:
         12:9e:bf:df:95:61:77:41:a0:fb:83:c8:09:7b:01:1f:d9:d6:
         ad:33:9a:3c:d9:e9:29:4f:66:bf:ae:28:24:9f:3b:8c:c8:b8:
         d2:01:ef:c8:67:6a:dd:e3:73:d6:78:d3:04:5d:5e:67:8b:de:
         8f:62:f8:19:d2:66:20:c4:98:e9:64:e2:89:75:f4:f1:35:ff:
         5d:68:32:3f:cf:ed:ff:4d:2c:32:7a:00:c6:ef:4e:c9:e3:b6:
         3e:cb:4b:1f:c4:a9:b2:0f:c8:a5:14:14:8f:98:95:b7:cd:89:
         49:c1:cc:48:52:58:5a:32:7e:59:8d:2a:c2:78:45:71:2d:cc:
         71:30:dc:fa:96:4d:03:83:b2:e9:fd:22:1e:ad:27:00:12:e1:
         85:b8:46:ff:f6:8c:f4:61:79:1f:c9:be:72:b3:36:28:38:f1:
         50:de:54:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:58:14 2026 by rpki-client