Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
File:                     D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft (raw, json)
Hash identifier:          5VexgIG2HSMi4TnyKxmEpi3WOI3lmnNSmRfbLjd82YM=
Subject key identifier:   66:23:A1:EE:12:F3:C9:82:8D:AC:8F:88:B4:82:B7:5A:59:5D:B7:67
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       67D787B3144399B3C8B6A0B44C29FF0384F85A67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
Manifest number:          D1
Signing time:             Sun 13 Apr 2025 21:08:23 +0000
Manifest this update:     Sun 13 Apr 2025 21:03:23 +0000
Manifest next update:     Sat 19 Apr 2025 18:32:23 +0000
Files and hashes:         1: 3136382e3234332e3232332e302f32342d3234203d3e203132313237.roa (hash: 96oUB7aSfISUCaprQimU4je1TitcxVCTeQRSUvovhas=)
                          2: 3136382e3234332e38302e302f32322d3234203d3e20323633323138.roa (hash: x8p6sd6bnQlJ9cEz1kostbVwSbwloADXyOa6pswH7Wk=)
                          3: 3136382e3234332e3137362e302f32302d3234203d3e203137303739.roa (hash: 9Z8TIiwNuCFGgNQwV5jt8vVrrzBhpDEuGfO1FGY5IMc=)
                          4: 3136382e3234332e32342e302f32322d3234203d3e203236363137.roa (hash: lgB3mpTkwO7Zo6PE5NWDWY3rfZlQLDVUA+EK8frxOo4=)
                          5: 3136382e3234332e3131322e302f32342d3234203d3e203237373733.roa (hash: Zlh9xIJpGIe5C9+yQKLBcEUgFQX34Jx/8UXn00qgVEk=)
                          6: 3136382e3234332e38342e302f32322d3234203d3e20323633323138.roa (hash: A7KVKb8ZWKeFMMqSX5Dro8EMKM21wDtKmAUNH6tv8zo=)
                          7: 3136382e3234332e33322e302f32342d3234203d3e203236363137.roa (hash: YZCU+tM/zXi3SyJmqDe70alU+CdEKUHmjK5UpLlOfXU=)
                          8: 3136382e3234332e3137312e302f32342d3234203d3e203236363137.roa (hash: VbKxoSqPZC3u47Y1nGzFqMTXRrw6Cv50Jap+/gPhBBE=)
                          9: 3136382e3234332e3131392e302f32342d3234203d3e203237373733.roa (hash: For23n1hSqTVJchl5F9t+TaU345QFOWw8hXGkLoRCHo=)
                          10: 3136382e3234332e3131352e302f32342d3234203d3e203237373733.roa (hash: 6w1M3Bz8u6yBE90mmXSVkTstGEL/6CMpwNu+5+QBGbk=)
                          11: 3136382e3234332e3232332e302f32342d3234203d3e20323633373833.roa (hash: SOl+Pa+ptSvUcK1PqbJfGGIuUsKtyfnjQQ6IDEjB6ss=)
                          12: 3136382e3234332e32382e302f32322d3234203d3e203236363137.roa (hash: ddR3xX0YSvkJMv4PuEpPid0ovoN+pn4IUYcgdCgvrbI=)
                          13: D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl (hash: lHz0RyTzZiMVqLyjH+z5vo6nI1MR64pr4CR/z2Mpo2c=)
                          14: 3136382e3234332e3131372e302f32342d3234203d3e203237373733.roa (hash: +PpoA+MXLVXrL/0mE9ykAgEcS7eRP1I6ACO5WzpdqvM=)
                          15: 3136382e3234332e3137322e302f32322d3234203d3e203236363137.roa (hash: 8JVO13tin+cSR7aaiQ4OYl8XjXXKZ/6A0uGMnHYFLoU=)
                          16: 3136382e3234332e37322e302f32312d3234203d3e20383334.roa (hash: A7M3OcLr1Q6UBmt62hXDHcLKc2zoOH8TqhWizAK+ujk=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:d7:87:b3:14:43:99:b3:c8:b6:a0:b4:4c:29:ff:03:84:f8:5a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: Apr 13 21:03:23 2025 GMT
            Not After : Apr 19 18:32:23 2025 GMT
        Subject: CN=6623A1EE12F3C9828DAC8F88B482B75A595DB767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:68:6b:9a:f8:b0:3a:7e:3a:d9:dc:04:8c:0f:
                    2e:07:5c:c7:52:ff:f9:93:ec:6d:ed:bd:60:bc:9f:
                    30:5b:38:ff:c8:4a:1c:54:54:5a:52:cc:26:e6:70:
                    db:e3:ee:d9:9d:ca:0f:fb:94:09:2f:39:b3:4f:c4:
                    79:1f:2c:27:28:b9:40:7b:a3:37:0c:c3:c6:d4:83:
                    fe:90:f6:12:1c:1e:13:e5:0c:a9:93:7f:8a:0d:f4:
                    8d:90:0f:67:3c:aa:d5:75:0e:a0:b8:f2:15:f7:e6:
                    fb:6d:01:32:41:5b:a1:47:28:5c:76:46:3c:14:63:
                    5d:09:bb:8d:ae:44:91:ba:5e:b1:d6:05:b7:17:4b:
                    ca:e3:9a:76:a2:5c:9c:4c:a7:db:fd:c1:1e:49:8f:
                    ef:6c:57:2d:9b:b6:84:05:82:ad:86:d9:d0:b1:dd:
                    73:bf:ba:4e:b0:a2:32:99:0b:6a:dd:43:e2:fd:82:
                    5f:bb:c1:d0:9a:ef:48:dc:30:51:54:c7:82:bc:c2:
                    6e:18:66:06:93:ff:97:01:ac:81:32:32:b8:0b:e2:
                    a2:90:fb:e6:6b:7b:d4:dc:52:c3:b0:af:6d:11:16:
                    c0:9f:17:58:ca:6a:18:39:84:d8:f2:86:26:a4:1f:
                    75:79:55:d9:1b:c0:60:2d:44:d1:cb:9b:b2:c2:5b:
                    b7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:23:A1:EE:12:F3:C9:82:8D:AC:8F:88:B4:82:B7:5A:59:5D:B7:67
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:b4:d6:0f:39:b3:16:cc:21:b6:d0:18:8b:2c:4a:f7:e4:ce:
         5b:89:1b:da:f4:67:b2:3a:16:bd:e5:a0:d9:d9:04:d1:c2:a1:
         dd:49:60:5e:71:2f:8d:31:c4:06:b6:47:c8:fe:f0:40:d2:c0:
         13:8e:8b:96:4c:ca:be:b4:c2:82:e1:21:4e:de:f3:1b:b2:1c:
         20:49:92:ad:04:0b:02:24:31:c9:bf:4c:6f:c8:3f:1b:c0:07:
         c1:c7:83:3b:fb:4e:03:e5:a0:7a:0a:f4:b0:fe:d4:57:3d:79:
         c8:de:03:23:76:ef:5b:ef:08:15:f5:6a:65:df:95:02:22:ad:
         6c:00:72:1c:26:93:eb:8d:cd:ac:0d:1d:fb:31:2c:38:03:6e:
         f6:79:c6:9b:2d:02:5e:ed:48:7e:b2:bc:ec:22:88:04:70:54:
         92:08:95:9a:dd:f8:dc:56:3c:e5:05:4e:ed:bf:1e:bc:6d:12:
         3a:e3:ac:5e:03:0e:ad:da:37:8b:22:db:27:65:f2:4a:26:e3:
         38:64:70:b2:12:f4:67:0c:29:cc:8a:67:9a:43:81:b9:1a:af:
         5c:55:7e:26:27:70:97:3d:b6:69:48:0f:ea:27:fd:f0:f7:73:
         d5:c7:9c:97:72:31:68:a6:61:c2:39:a0:64:f8:b4:aa:ea:f7:
         68:63:b2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:51:40 2025 by rpki-client