Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
File:                     cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft (raw, json)
Hash identifier:          R/qotT4O/kF1Al6YVuAlwmOhXOLXgTKQAqF9TyeVVB4=
Subject key identifier:   56:18:3A:FC:7F:D2:12:A8:24:35:16:84:90:B8:79:AE:FE:94:9C:4E
Authority key identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98
Certificate issuer:       /CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798
Certificate serial:       6DDFB46F9B8F05551F4966DFFA2EFD421BE6F63F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
Manifest number:          63
Signing time:             Tue 21 Oct 2025 00:50:58 +0000
Manifest this update:     Tue 21 Oct 2025 00:50:58 +0000
Manifest next update:     Sat 25 Oct 2025 00:50:58 +0000
Files and hashes:         1: 79de1a10-540a-49e4-92f2-b8e81488ffd1.roa (hash: 9CB/IJ0q4pKr9d3miRCR6IobKvf5Hq41SXWFbUF5jPU=)
                          2: cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl (hash: 6f6GNe81/XG6IWpE32HoVCEj61RcAAkXwboB3WMZ5U8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:df:b4:6f:9b:8f:05:55:1f:49:66:df:fa:2e:fd:42:1b:e6:f6:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798
        Validity
            Not Before: Oct 21 00:50:58 2025 GMT
            Not After : Oct 25 00:50:58 2025 GMT
        Subject: serialNumber=39da0342a6ca4648b12fd656e1eb94156110154be041d7368f645608fbbb8db5, CN=7b7e81e4-c981-4cca-be35-ec61f732415c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:91:65:83:1f:7b:14:63:bd:9a:ef:3f:1a:8d:
                    bd:ef:88:38:b6:7a:25:f9:52:55:02:8f:03:77:dd:
                    4c:f8:31:06:f7:21:50:52:29:ce:65:82:6c:23:26:
                    23:fa:7b:dc:e0:c7:14:35:f8:0f:7f:1c:cd:46:b4:
                    69:65:39:14:ae:f5:ae:ad:bf:74:ab:48:c8:a5:ee:
                    98:34:60:b7:3b:f8:10:c5:56:06:f1:d6:bf:b4:d7:
                    d6:53:9c:36:30:e7:3c:2e:4e:3e:2b:1f:43:b2:e2:
                    df:8f:65:f4:9b:fb:e4:26:70:45:d9:19:a1:2d:c3:
                    a7:aa:cf:27:b8:a4:eb:0f:6c:89:ac:4d:c0:3b:ba:
                    7f:88:80:11:09:46:83:a6:83:d1:3c:28:fe:82:a4:
                    03:59:1e:7f:60:ca:a0:ea:9b:8b:e6:ea:22:7f:22:
                    ad:6f:94:82:0d:9d:8c:f2:78:43:65:fc:f3:ad:f7:
                    0e:f1:b5:ff:59:7e:54:29:07:66:1e:a9:89:22:35:
                    17:62:13:9f:8e:e7:38:d1:30:44:d4:48:18:70:fa:
                    6e:4d:7b:dd:fa:38:2b:22:07:94:ed:34:f5:cb:68:
                    c5:78:a8:4c:9d:bd:f2:a7:e4:ef:69:e7:58:90:22:
                    0d:30:47:5a:f4:ab:1b:1e:32:81:a4:c2:86:aa:0b:
                    22:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:18:3A:FC:7F:D2:12:A8:24:35:16:84:90:B8:79:AE:FE:94:9C:4E
            X509v3 Authority Key Identifier:
                keyid:A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:90:5c:32:ab:5b:59:ae:5e:8c:76:db:b9:bf:06:58:8a:ee:
         88:a7:d2:e9:92:9b:c6:26:86:f3:bb:59:b0:7f:d5:47:d2:43:
         06:1c:84:8f:6b:4c:17:e4:aa:c3:08:30:ec:57:05:12:11:cc:
         55:8f:94:ed:50:43:96:69:a1:db:31:88:81:ae:d7:48:c8:fb:
         0c:00:78:a0:d0:dd:4a:91:95:e5:7e:c5:a4:4d:ac:d6:da:34:
         f9:79:54:a4:49:f2:86:04:f7:6f:d7:ff:66:3b:7d:79:ac:5a:
         bc:d3:0f:c2:11:d8:47:d9:dd:4c:37:d8:2c:94:89:4a:f5:80:
         30:f0:21:47:06:61:20:20:5f:d3:4a:d7:c4:d7:c6:37:06:58:
         de:64:ea:9a:99:39:98:fa:1b:37:74:18:74:98:77:43:09:d0:
         dc:e0:f8:08:37:e1:29:cc:98:8e:a2:8a:3d:f9:4a:12:84:89:
         3b:96:91:9a:2f:c3:ce:b6:c4:69:ce:24:08:8b:19:af:3c:e2:
         8a:8d:55:5d:89:6f:92:11:1a:9b:ee:ed:d2:4a:c5:6e:28:11:
         84:73:5c:37:3c:d7:5e:01:2b:50:81:2a:1c:36:fd:7c:a3:9f:
         08:b4:d7:c2:88:78:76:a1:9b:70:5f:fa:87:c9:bf:27:ca:9c:
         b9:f3:8f:c3
-----BEGIN CERTIFICATE-----
MIIFxDCCBKygAwIBAgIUbd+0b5uPBVUfSWbf+i79Qhvm9j8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTJFNzZFOTZDRjA0QTdBMEI5MkIyMTlFNkVDM0JCMUVG
RjlGMTc5ODAeFw0yNTEwMjEwMDUwNThaFw0yNTEwMjUwMDUwNThaMHoxSTBHBgNV
BAUTQDM5ZGEwMzQyYTZjYTQ2NDhiMTJmZDY1NmUxZWI5NDE1NjExMDE1NGJlMDQx
ZDczNjhmNjQ1NjA4ZmJiYjhkYjUxLTArBgNVBAMTJDdiN2U4MWU0LWM5ODEtNGNj
YS1iZTM1LWVjNjFmNzMyNDE1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANqRZYMfexRjvZrvPxqNve+IOLZ6JflSVQKPA3fdTPgxBvchUFIpzmWCbCMm
I/p73ODHFDX4D38czUa0aWU5FK71rq2/dKtIyKXumDRgtzv4EMVWBvHWv7TX1lOc
NjDnPC5OPisfQ7Li349l9Jv75CZwRdkZoS3Dp6rPJ7ik6w9siaxNwDu6f4iAEQlG
g6aD0Two/oKkA1kef2DKoOqbi+bqIn8irW+Ugg2djPJ4Q2X88633DvG1/1l+VCkH
Zh6piSI1F2ITn47nONEwRNRIGHD6bk173fo4KyIHlO009ctoxXioTJ298qfk72nn
WJAiDTBHWvSrGx4ygaTChqoLIoMCAwEAAaOCAocwggKDMB0GA1UdDgQWBBRWGDr8
f9ISqCQ1FoSQuHmu/pScTjAfBgNVHSMEGDAWgBSi526WzwSnoLkrIZ5uw7se/58X
mDAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwEBBIGsMIGpMIGmBggrBgEFBQcw
AoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0Ex
NTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFBQTEwMDc1RjY3
MTY1Qjk4QzRGNEVGQzMvMC9BMkU3NkU5NkNGMDRBN0EwQjkyQjIxOUU2RUMzQkIx
RUZGOUYxNzk4LmNlcjCBlQYIKwYBBQUHAQsEgYgwgYUwgYIGCCsGAQUFBzALhnZy
c3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1l
L2M0NzRkNzc4LTQzY2ItNGMzMC1hZDZhLTM5OTY4Y2JjOTRiYy9jV3kzTE9Yc1Bw
ank2LXA0amxWUVJSRE1kLWMubWZ0MIGIBgNVHR8EgYAwfjB8oHqgeIZ2cnN5bmM6
Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29tL3ZvbHVtZS9jNDc0
ZDc3OC00M2NiLTRjMzAtYWQ2YS0zOTk2OGNiYzk0YmMvY1d5M0xPWHNQcGp5Ni1w
NGpsVlFSUkRNZC1jLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAE
oAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJBcMqtbWa5ejHbbub8GWIruiKfS6ZKb
xiaG87tZsH/VR9JDBhyEj2tMF+Sqwwgw7FcFEhHMVY+U7VBDlmmh2zGIga7XSMj7
DAB4oNDdSpGV5X7FpE2s1to0+XlUpEnyhgT3b9f/Zjt9eaxavNMPwhHYR9ndTDfY
LJSJSvWAMPAhRwZhICBf00rXxNfGNwZY3mTqmpk5mPobN3QYdJh3QwnQ3OD4CDfh
KcyYjqKKPflKEoSJO5aRmi/DzrbEac4kCIsZrzziio1VXYlvkhEam+7t0krFbigR
hHNcNzzXXgErUIEqHDb9fKOfCLTXwoh4dqGbcF/6h8m/J8qcufOPww==
-----END CERTIFICATE-----
Generated at Tue Oct 21 07:09:59 2025 by rpki-client