Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.mft
File:                     DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.mft (raw, json)
Hash identifier:          fATlYwVQFk9WUUCwDwoYvKCmuUFqXAQlS3yDwB1yXnk=
Subject key identifier:   29:7D:3A:FD:12:BC:ED:A0:E7:AB:F0:62:AA:A5:66:26:99:B1:03:A3
Authority key identifier: DD:74:39:3A:EC:4E:41:A4:1C:6F:1F:D0:2E:0D:9D:28:06:ED:9D:5A
Certificate issuer:       /CN=DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A
Certificate serial:       49AA59A67C0B2BC0031A9D65B94108A7FBC94806
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.mft
Manifest number:          D4
Signing time:             Sun 27 Apr 2025 01:27:51 +0000
Manifest this update:     Sun 27 Apr 2025 01:22:51 +0000
Manifest next update:     Thu 01 May 2025 19:10:51 +0000
Files and hashes:         1: 323830333a636332303a3a2f33322d3332203d3e20323634363638.roa (hash: dTk3OiJ6UrS0s4KkZfsMHvjt/J6RcX6ttXOYoWfB9eQ=)
                          2: 34352e37312e33362e302f32322d3234203d3e203532343638.roa (hash: ZQ/iGIMlrJKCQ3XFKyTv4EdpWvvX1r5Jm5qh/tW8U48=)
                          3: DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.crl (hash: EYv4/jNmE/bWY5VAFcJJcVpOkYx7Y3SKa6kI+gJqQwM=)
                          4: 34352e37312e33362e302f32322d3234203d3e20323634363638.roa (hash: BWFPGzPKwRv8djR5Py/+0nYxCCVZKh24HPi9pBQFMDs=)
                          5: 323830333a636332303a3a2f33322d3332203d3e203532343638.roa (hash: Rc5GyfeKiWedtLYcpadlhz2T0yhmuDLKu5Lom5UEwf0=)
                          6: 34352e37312e33382e302f32342d3234203d3e203237393437.roa (hash: b/C7X31DF8XnnwR2vZ4AoiCaKMnwptXF+oFbeMm8ilE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:aa:59:a6:7c:0b:2b:c0:03:1a:9d:65:b9:41:08:a7:fb:c9:48:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A
        Validity
            Not Before: Apr 27 01:22:51 2025 GMT
            Not After : May  1 19:10:51 2025 GMT
        Subject: CN=297D3AFD12BCEDA0E7ABF062AAA5662699B103A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5e:73:cc:98:52:34:5d:f9:56:45:60:80:d0:
                    c7:ab:b3:d6:ee:15:c3:26:97:39:84:65:09:f4:1b:
                    49:76:bc:26:b6:bb:40:d2:81:a7:00:84:c7:e1:a2:
                    33:ab:ac:ab:ad:80:df:e6:68:6c:5c:72:4e:9c:bf:
                    e3:4f:06:67:06:89:2c:14:0a:06:a8:9e:8b:c7:bf:
                    50:2e:d7:db:5d:ed:4d:19:9b:02:5e:2e:a6:af:c3:
                    36:b7:b6:24:82:42:bf:a6:06:79:6f:9d:07:5a:24:
                    86:c0:d5:c3:35:d7:7c:9d:52:e4:60:7d:fc:17:c7:
                    ac:15:d7:d0:68:37:a0:a7:9a:e1:72:0f:ef:fd:f0:
                    ee:a6:8a:94:c6:6d:6b:ca:19:d4:55:c3:63:73:73:
                    59:00:8b:07:13:b4:fd:ef:8d:c3:9b:9a:42:34:30:
                    7e:a4:0d:12:98:54:9d:51:09:3a:2d:df:9e:94:38:
                    e4:80:f1:2f:1a:c6:37:1b:7f:99:eb:c9:da:07:8c:
                    1c:c4:0f:77:df:df:7f:da:7d:d0:60:00:24:39:cb:
                    46:e3:78:5d:1f:08:63:9e:ea:5c:e7:65:fd:dd:c2:
                    73:f2:06:04:18:31:07:a9:aa:af:7c:97:9d:72:53:
                    9f:b7:a6:d8:e9:48:4c:bd:d4:b4:b2:b6:16:3e:5f:
                    6a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7D:3A:FD:12:BC:ED:A0:E7:AB:F0:62:AA:A5:66:26:99:B1:03:A3
            X509v3 Authority Key Identifier:
                keyid:DD:74:39:3A:EC:4E:41:A4:1C:6F:1F:D0:2E:0D:9D:28:06:ED:9D:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:f5:19:6c:3d:35:c2:e9:ec:6a:69:57:31:7b:dd:3d:15:f7:
         24:f3:af:cd:ed:ca:bf:e2:5c:b4:fe:ba:3a:f9:3f:ec:12:08:
         d6:8f:34:17:6f:53:c9:e6:6d:0f:83:6e:f4:c6:76:42:91:1f:
         70:1d:47:3d:a0:9f:23:af:5d:74:d9:19:ef:4d:5e:84:e5:33:
         d0:1c:7b:ae:53:0c:b5:02:79:c7:e1:6d:c4:b9:5f:83:4a:57:
         63:ce:4e:b5:64:9a:19:5b:6e:51:ea:37:ff:13:de:90:b5:6e:
         04:e8:5b:c0:d8:c0:8e:87:f4:1a:c6:f0:4e:9a:5a:74:3c:93:
         05:88:2d:74:92:db:42:3d:7e:0a:31:af:46:ce:18:0b:49:c0:
         f6:bd:4a:0f:5a:0b:ba:13:d5:46:ac:1d:10:32:84:ff:f7:2e:
         6d:9e:5c:37:09:6f:c9:d4:5a:8b:f4:2a:a0:80:5a:8a:05:30:
         9b:58:5b:c7:7d:90:2a:27:f4:c2:1e:45:e3:5c:76:02:b5:c3:
         8a:37:3c:27:27:2d:f3:73:60:3f:dd:e7:11:d0:2a:4c:93:89:
         d3:91:c5:1b:3a:10:23:21:49:9b:0e:c1:dc:6b:75:35:24:b4:
         ee:48:8a:bd:26:4b:3d:8a:17:f4:7d:fb:88:72:a3:7b:92:5f:
         43:b8:6f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:58:31 2025 by rpki-client