Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
File:                     cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft (raw, json)
Hash identifier:          Z9vHg+h9ER28042qiGo79BCgG0I7Ks6vOOrOyTqh20o=
Subject key identifier:   EC:8A:7D:05:FC:EC:E1:A9:0C:14:9C:CB:2F:9E:50:38:4D:20:0C:68
Authority key identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98
Certificate issuer:       /CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798
Certificate serial:       30600684E48372AF7FE9753AB62F45A76996F208
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
Manifest number:          62
Signing time:             Mon 20 Oct 2025 00:50:44 +0000
Manifest this update:     Mon 20 Oct 2025 00:50:44 +0000
Manifest next update:     Fri 24 Oct 2025 00:50:44 +0000
Files and hashes:         1: 79de1a10-540a-49e4-92f2-b8e81488ffd1.roa (hash: 9CB/IJ0q4pKr9d3miRCR6IobKvf5Hq41SXWFbUF5jPU=)
                          2: cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl (hash: o5Bk9VfoRDxQ7XaVDOa81dccoH0e4V2SP2SVwJx49nY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:50:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:60:06:84:e4:83:72:af:7f:e9:75:3a:b6:2f:45:a7:69:96:f2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798
        Validity
            Not Before: Oct 20 00:50:44 2025 GMT
            Not After : Oct 24 00:50:44 2025 GMT
        Subject: serialNumber=bc06d94145d44fa9d7c88abcdccdff8b2e3c1fad9c6f0850301aeafa6a1072d7, CN=7b7e81e4-c981-4cca-be35-ec61f732415c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d8:d1:7b:3e:e3:9f:f1:77:8e:79:f4:92:90:
                    fc:ad:71:ff:19:bf:96:14:ff:31:94:ea:79:32:01:
                    e4:fc:32:d9:73:e7:86:84:7d:38:8a:7b:d9:2f:49:
                    b6:61:66:be:04:6d:c3:1a:28:23:24:22:b9:47:c8:
                    2d:64:66:80:34:ae:8c:e2:81:89:8e:12:31:00:37:
                    03:42:13:5a:8a:7d:ee:de:9c:3d:1e:2b:74:1f:ba:
                    e8:2a:c8:cc:7f:a7:00:8c:85:f3:aa:9e:2b:aa:03:
                    3c:f6:83:e7:5c:1b:44:a6:c0:68:fc:de:b4:89:b7:
                    de:f7:7d:cd:7f:e0:11:55:9f:9b:9c:fd:2d:99:19:
                    d5:7c:39:ac:98:5b:fa:9e:8a:a5:d2:20:50:fc:9f:
                    30:e5:9e:f2:56:9e:10:b4:47:61:15:cf:02:6f:12:
                    ef:32:d5:f6:1d:d1:8c:ff:19:d8:fb:1e:17:05:b0:
                    8e:e3:36:bb:64:26:51:42:e2:ff:01:6e:03:8a:a9:
                    91:a8:ef:70:5f:65:8a:07:79:d9:e5:66:00:70:bf:
                    81:2d:2b:e7:87:00:fe:69:e1:d6:32:70:a9:1c:32:
                    08:e2:4e:89:05:85:19:2d:13:90:a1:cc:3c:72:f9:
                    a8:35:12:81:39:59:ce:9f:34:98:a4:d5:8c:4c:cc:
                    de:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8A:7D:05:FC:EC:E1:A9:0C:14:9C:CB:2F:9E:50:38:4D:20:0C:68
            X509v3 Authority Key Identifier:
                keyid:A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:86:a0:21:99:e2:97:70:25:b7:74:24:d2:48:c6:a8:35:b6:
         78:ef:35:f6:d4:48:da:cc:bf:ed:49:26:4d:f5:75:85:82:0a:
         c7:49:08:65:39:b4:a6:a8:87:c7:e1:fd:72:50:84:83:ac:8c:
         1f:71:55:74:c2:c2:2d:12:f8:8f:13:ef:09:30:2c:80:7a:ec:
         c8:a1:4f:72:56:1f:a0:f3:36:db:c1:78:59:5c:60:e4:c2:1a:
         b8:b7:12:51:e8:19:f0:e3:eb:29:30:ac:fb:94:83:c4:17:52:
         30:01:b6:52:87:7a:c7:c3:5c:b7:d5:e6:91:aa:df:35:46:4b:
         fc:b7:dc:3a:4b:a1:48:07:0a:5c:ca:49:21:a0:0c:de:53:7b:
         e7:0c:d8:27:63:75:7a:15:8c:93:8c:92:b2:e5:ad:7e:c2:1a:
         fe:49:1f:a6:ae:d9:5b:d3:68:9e:e9:30:1e:ef:05:92:41:7c:
         c5:1c:90:84:75:c3:82:f6:51:e1:2b:e9:80:34:84:2a:b3:a1:
         ab:4b:af:90:06:59:db:5c:44:6e:b1:d6:dd:5a:12:0e:3d:6a:
         f2:f3:6b:f1:6f:48:4b:a2:fa:f6:07:61:5e:2f:72:c1:53:2e:
         4a:c0:d3:f9:ff:24:20:4e:70:d4:d8:1a:af:d1:c6:18:f7:13:
         5b:65:1f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:13:24 2025 by rpki-client