Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft
File:                     2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft (raw, json)
Hash identifier:          B5RGZ1lRbNiNFKeqDwSKQ5nGZ+X0nVGGIRyaO68riB4=
Subject key identifier:   43:0E:1B:ED:CB:DE:BE:90:90:6D:1F:77:EF:06:BA:B4:38:E7:6F:20
Authority key identifier: 2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89
Certificate issuer:       /CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589
Certificate serial:       71BDD627411F490FA1AA29A5FDED25DBA941DD4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft
Manifest number:          0184
Signing time:             Tue 28 Apr 2026 20:25:30 +0000
Manifest this update:     Tue 28 Apr 2026 20:20:30 +0000
Manifest next update:     Mon 04 May 2026 04:11:30 +0000
Files and hashes:         1: 2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl (hash: Xw2VRTXRI4Lypc4a51IWm4Zf3uuWdVvzqGWsBVVs354=)
                          2: 323830333a666265303a3a2f33322d3438203d3e20323730303932.roa (hash: 2yEIjUF2fEPUL86o8w4pwk+eVelS5xc2STIvqPSnONM=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 04 May 2026 04:11:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:bd:d6:27:41:1f:49:0f:a1:aa:29:a5:fd:ed:25:db:a9:41:dd:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589
        Validity
            Not Before: Apr 28 20:20:30 2026 GMT
            Not After : May  4 04:11:30 2026 GMT
        Subject: CN=430E1BEDCBDEBE90906D1F77EF06BAB438E76F20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4a:6d:54:6c:b0:eb:35:ed:96:a2:26:01:80:
                    72:a3:19:0a:5e:2b:b3:1a:2b:05:f8:c6:5a:1e:75:
                    4e:b6:50:1a:06:36:29:0e:dc:83:ea:3b:b6:47:57:
                    4c:a0:dd:e5:64:68:5f:d2:39:8e:1f:1c:eb:7e:64:
                    93:1b:83:09:9b:44:3d:37:e4:ba:e1:68:3e:5e:71:
                    06:84:f7:74:0f:ef:2f:63:8c:3c:91:83:d8:0c:22:
                    6a:ad:db:8f:36:f3:19:9c:01:fa:ed:29:d1:a8:d8:
                    42:cc:87:c8:25:35:e2:c3:6b:17:dc:d5:0c:55:07:
                    0d:22:70:ed:4c:ab:83:de:b1:3e:ad:10:0f:51:a6:
                    07:3b:3d:ea:1e:1e:cc:8b:6d:b4:2b:82:bb:45:b1:
                    8a:f5:fb:9f:44:3b:ea:d2:ba:98:44:62:ca:78:b5:
                    96:c5:6a:44:5c:97:24:d7:7f:1b:ff:c3:8d:d2:3f:
                    7d:f8:d8:76:f3:df:09:5d:72:0c:57:e1:f8:ba:e5:
                    a9:b2:43:97:bd:3a:64:f4:20:5c:b8:50:d5:60:9d:
                    d8:d3:22:3e:1a:6d:de:39:e9:48:b2:09:84:75:db:
                    bd:21:0d:44:85:24:6b:ba:b8:4f:9a:54:52:1d:dd:
                    68:8a:d2:4a:7e:a3:79:87:28:60:a7:12:84:93:a9:
                    49:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:0E:1B:ED:CB:DE:BE:90:90:6D:1F:77:EF:06:BA:B4:38:E7:6F:20
            X509v3 Authority Key Identifier:
                keyid:2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a5:f2:80:d1:63:62:5e:9e:6d:e4:69:20:07:78:c3:f0:2a:
         79:03:c7:94:b7:3a:f9:8f:ef:2f:20:66:db:05:62:2d:ef:be:
         c1:ca:bb:ff:ed:4c:2c:25:ea:c6:23:1c:97:c9:35:ab:ff:e1:
         67:41:3a:f0:90:ea:78:9c:d2:96:7e:23:d8:9b:b3:88:91:1f:
         25:76:5c:8b:1c:59:ba:65:22:0c:df:84:1a:a9:4c:49:2b:05:
         25:08:f7:cd:26:07:ea:0e:ed:b8:3a:6f:4d:5c:96:ad:19:42:
         44:51:9a:55:95:87:49:b8:3c:ad:4d:f5:16:6a:cc:ad:24:af:
         14:b4:00:18:19:d3:5c:77:7b:0f:38:59:d9:a4:b3:fa:28:8a:
         0f:84:c0:93:5c:4c:a8:96:35:b0:75:68:02:80:97:68:91:59:
         bd:93:87:22:9a:06:bb:3b:d1:f2:74:2c:f7:ce:78:28:ba:ba:
         4c:9c:56:db:a8:02:e4:21:6f:59:2e:d0:b9:7a:e9:62:59:7c:
         7d:4b:2d:c4:da:d2:e8:6a:64:51:a2:fb:bc:ee:c0:66:65:e5:
         c6:d9:c8:59:0b:a1:0c:7f:8d:80:d8:1a:53:07:b1:52:42:03:
         8b:9f:a2:27:de:8f:e0:f5:b4:c1:56:3a:c6:2a:17:5e:a4:fc:
         8d:ea:0d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 05:51:15 2026 by rpki-client