Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.mft
File:                     9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.mft (raw, json)
Hash identifier:          TlZBfQyPfUKyCvt/r03F9QrVaKpkB3RjKeys4KsJPAY=
Subject key identifier:   54:43:A6:21:B3:CD:A5:71:0C:E0:B9:3F:C2:CB:44:CD:EB:D8:7A:A1
Authority key identifier: 9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA
Certificate issuer:       /CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
Certificate serial:       3A2CF1BDA435062A7B9427F9A8B33279075F7EDB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.mft
Manifest number:          D2
Signing time:             Fri 18 Apr 2025 04:40:09 +0000
Manifest this update:     Fri 18 Apr 2025 04:35:09 +0000
Manifest next update:     Tue 22 Apr 2025 05:04:09 +0000
Files and hashes:         1: 323830333a3739303a353030303a3a2f33362d3634203d3e20323733313134.roa (hash: 12+YXDm+9FoxPxZ+nf/yC8NLBainMKh36u4wyxH0lL4=)
                          2: 323830333a3739303a383030303a3a2f33362d3634203d3e20323733313134.roa (hash: xP3vZz8Ta9JtK95By3efH+7rspAbcqOjYm2p3TF8qE0=)
                          3: 323830333a3739303a343030303a3a2f33362d3634203d3e20323733313134.roa (hash: IP4GbEDmj4nHTaQDdhaDexFAeAOoZmaIWeyAe+cu1Sk=)
                          4: 9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl (hash: GhterL69rlPluDRUbpVzqD40qzJEHbp2sHHyUIsQ8ag=)
                          5: 323830333a3739303a3a2f33362d3634203d3e20323733313134.roa (hash: 2+EPp5c2qvpOoY2WslC7hfBNkRzDthuTKTCkWvpTUIQ=)
                          6: 323830333a3739303a333030303a3a2f33362d3634203d3e20323733313134.roa (hash: 8o3g7bKLH+w/XnpVuQBcV7rpyZRWfTCz1/UewjSP+XQ=)
                          7: 323830333a3739303a323030303a3a2f33362d3634203d3e20323733313134.roa (hash: JT2V8ViSLzFq55qfRMzVm3+MBrPxwcezMIqYPsDTzIE=)
                          8: 323830333a3739303a373030303a3a2f33362d3634203d3e20323733313134.roa (hash: 8UW7u8EVzALT/QcFxnSeB4luKAJ4ARKLzxt098HJKj0=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 05:04:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:2c:f1:bd:a4:35:06:2a:7b:94:27:f9:a8:b3:32:79:07:5f:7e:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA
        Validity
            Not Before: Apr 18 04:35:09 2025 GMT
            Not After : Apr 22 05:04:09 2025 GMT
        Subject: CN=5443A621B3CDA5710CE0B93FC2CB44CDEBD87AA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e0:ba:e6:a0:82:87:0d:2f:fc:f5:6f:e9:3b:
                    81:e9:3f:94:8d:31:75:d9:16:d7:40:d9:60:2d:2e:
                    ff:2a:39:58:23:c5:d6:8d:ef:03:bd:d2:65:29:d9:
                    30:f1:d3:92:27:33:a1:62:1e:df:22:dc:5c:8f:70:
                    c9:8f:f5:96:9b:69:77:f9:44:aa:06:96:58:a8:cc:
                    fc:c2:c7:f9:69:b9:09:69:29:2e:48:c6:f2:0e:2e:
                    9f:18:b1:3f:3c:b3:13:a1:97:22:f3:51:23:fd:68:
                    5a:b4:bf:91:3f:55:70:f8:57:02:fd:91:df:22:f2:
                    5a:e4:6c:22:49:fc:ce:d9:da:33:b4:f9:26:42:37:
                    46:f2:1b:8b:95:f9:db:d8:23:6e:42:13:e3:0d:79:
                    89:7b:74:01:86:a4:62:60:11:91:b5:f0:18:3d:00:
                    7a:22:fb:98:54:c7:70:1f:01:54:39:f5:cb:32:58:
                    cc:18:1c:ff:68:b0:52:0b:9d:40:5e:5d:3e:cb:6d:
                    c7:d0:a0:56:f9:46:70:0c:cc:b6:d0:94:59:c9:37:
                    e9:6f:70:0f:c2:77:2c:cc:ac:ed:03:45:35:cb:23:
                    90:18:74:34:ec:f9:4c:b5:9f:4e:d3:88:ad:29:ae:
                    24:8e:67:c3:93:68:4c:d9:1d:31:1a:18:b4:90:1b:
                    13:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:43:A6:21:B3:CD:A5:71:0C:E0:B9:3F:C2:CB:44:CD:EB:D8:7A:A1
            X509v3 Authority Key Identifier:
                keyid:9C:BA:EF:DC:63:E7:4F:3F:18:26:B3:BB:A5:DF:B4:1D:44:A9:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08EF647D2439353922204F65B46993477E686A9D733C958F71AC1332B72080AC/0/9CBAEFDC63E74F3F1826B3BBA5DFB41D44A97BAA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:8c:bd:1b:97:81:82:60:8e:92:83:18:8a:6f:3e:df:55:70:
         36:10:60:48:1a:ce:8e:42:9a:b9:30:74:93:2e:99:54:b4:38:
         ab:62:29:66:f8:69:2c:6b:41:62:df:9a:b2:e6:38:5e:29:e8:
         53:10:af:31:37:3e:a2:5e:8d:23:b8:40:d3:46:9a:ca:73:e8:
         e4:5e:9c:5c:2d:98:2d:81:a5:cc:df:3e:b4:0e:3d:2d:57:2c:
         5a:8e:59:76:a1:bc:1d:4a:b1:d6:6c:19:b3:87:fa:ca:9b:d6:
         37:25:43:25:f8:b0:5e:4e:0b:78:f6:3e:8d:32:f5:dc:00:30:
         21:a4:8a:2c:8d:3c:cf:a6:aa:34:e8:2a:c3:7d:eb:b1:a9:98:
         24:92:8a:ea:d2:77:51:a1:86:19:d4:f9:91:62:dc:a5:9f:1b:
         9b:d3:ee:15:34:9a:86:54:03:73:aa:19:15:db:e2:9d:61:0f:
         c1:79:cc:53:ff:8f:70:64:ff:64:46:66:8c:f0:9a:a5:21:eb:
         3f:47:69:10:66:8b:c6:68:7c:c7:63:b2:51:a1:18:53:48:3a:
         a0:48:99:2d:52:03:ea:3a:05:e8:21:30:23:06:e3:8d:00:15:
         c1:49:47:61:5f:d0:ae:2a:c3:cc:35:a2:80:90:4d:92:bb:cd:
         d8:86:ff:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:47:46 2025 by rpki-client