Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.mft
File:                     AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.mft (raw, json)
Hash identifier:          CpJw3MBl55MCi0uU2MqYpcWhre5PUxQRg6NwduHQsUE=
Subject key identifier:   38:F7:36:C8:C1:23:04:C7:8C:CD:C7:A0:C1:C7:71:EC:AD:3E:0C:00
Authority key identifier: AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3
Certificate issuer:       /CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
Certificate serial:       50F16A03555B167B030C697B5ABE048176BF0DD3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.mft
Manifest number:          CF
Signing time:             Fri 04 Apr 2025 11:29:08 +0000
Manifest this update:     Fri 04 Apr 2025 11:24:08 +0000
Manifest next update:     Wed 09 Apr 2025 21:12:08 +0000
Files and hashes:         1: 3230302e38352e3132392e302f32342d3234203d3e20323731393036.roa (hash: D86Zi6VV+nBB/x3W83/Z27fVwfS5jBRLXipcCWEvREM=)
                          2: 3230302e38352e3134312e302f32342d3234203d3e20323034363535.roa (hash: dUDEvYgqIStjcsBq3FTPdHt3r73uVqW2HXbPjP3qj9w=)
                          3: 3230302e38352e3132382e302f32342d3234203d3e20323731393036.roa (hash: Fo0urELH1hdsqSIPunOplK/MHsj//tefkcuifoqECWE=)
                          4: 3230302e38352e3133302e302f32342d3234203d3e20323731393036.roa (hash: Cn7RbvHKERkpW2NPWoc4JvBzMa5n3N2bFGFH0TFJTX4=)
                          5: 3230302e38352e3132382e302f32312d3234203d3e20323731393036.roa (hash: uOHcKNXg5QJhaKC/+6pMfoV+Rm0Je7sIfFJVGMOaL9A=)
                          6: 3230302e38352e3133332e302f32342d3234203d3e20323731393036.roa (hash: Ypso3ys1PVwGgrCj3GTjYZuaUxaaL9woGSWtyKDdLW0=)
                          7: 3230302e38352e3134332e302f32342d3234203d3e20323731393036.roa (hash: 9NP/qLXn94xeePSynUXEHf5lLCpdv3lTav9I8/hYi9g=)
                          8: AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl (hash: Xd8+TrqQJEgbYUy/y2D/zHQgj3rYz2mGBJSzYOquKyM=)
                          9: 3230302e38352e3134322e302f32342d3234203d3e20323131333937.roa (hash: CT5Hj5Y4kRNO5ZxKt1UlHIGeZSvonJwBCnJdnH69gAc=)
                          10: 3230302e38352e3133352e302f32342d3234203d3e20323732393133.roa (hash: zjrkY5FH/PeUZG5AdMWZCLOjAvMkOl4ci/uEH8GqzEc=)
                          11: 3230302e38352e3133322e302f32342d3234203d3e20323731393036.roa (hash: 2euAAzGz+0ZKL6NaVmZgZSK2mnR0wyCNhrKZOcrK7bM=)
                          12: 3230302e38352e3133342e302f32342d3234203d3e20323731393036.roa (hash: GOUgeB9qbPsRESgmQKzHpbByuUIFItUpa5VvGphIk4U=)
                          13: 3230302e38352e3133312e302f32342d3234203d3e20323731393036.roa (hash: khexnd4MI2gNNwoPnPHS47zLooGn1gc3mrfeKvKfmzQ=)
                          14: 3230302e38352e3134302e302f32342d3234203d3e20323732393133.roa (hash: HA0gPdWmlQ8NT29R5jO2MUUeo21fkCMBVrbV80IO4Gs=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f1:6a:03:55:5b:16:7b:03:0c:69:7b:5a:be:04:81:76:bf:0d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
        Validity
            Not Before: Apr  4 11:24:08 2025 GMT
            Not After : Apr  9 21:12:08 2025 GMT
        Subject: CN=38F736C8C12304C78CCDC7A0C1C771ECAD3E0C00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ef:61:cf:6d:71:41:0d:48:49:05:e4:65:bb:
                    12:49:98:6a:7e:fa:92:30:57:5f:af:82:e0:f2:48:
                    28:d5:74:a4:a1:c2:88:25:96:ab:f1:00:c8:f3:10:
                    51:27:ce:c8:13:6b:53:34:d0:29:c1:5c:64:dd:fe:
                    9a:c5:ef:42:32:ee:83:7d:27:90:c6:8e:37:5e:2f:
                    81:a7:c0:2e:1f:7a:6a:a6:f7:c4:0d:52:79:86:ae:
                    bb:b2:6c:6a:3b:c5:d6:fc:48:67:b3:d3:b0:3f:4c:
                    97:d1:da:56:f2:8d:20:40:2b:eb:de:7c:3b:a0:82:
                    01:5e:dc:37:08:d8:76:b1:29:9f:af:d5:ee:b5:d7:
                    03:00:14:49:65:ef:3c:d1:8f:bd:26:ff:e3:44:26:
                    3d:c9:4b:91:62:ff:ce:29:4e:f7:2a:a2:fc:e0:62:
                    a5:2c:dc:44:cf:6f:47:c5:60:78:e5:cf:47:9f:09:
                    d9:b1:06:1c:97:08:2a:66:33:88:74:59:1b:0a:03:
                    f2:2f:9b:75:7b:6d:ea:bc:8d:d3:81:26:51:b5:65:
                    79:ab:c9:dc:b1:49:46:fe:72:7b:98:e3:30:3f:c7:
                    81:80:2f:f8:9f:dc:b5:c6:2e:e9:c1:79:55:c3:d7:
                    4a:61:ac:c7:c3:a8:d2:50:f4:62:a8:03:ea:2d:13:
                    35:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F7:36:C8:C1:23:04:C7:8C:CD:C7:A0:C1:C7:71:EC:AD:3E:0C:00
            X509v3 Authority Key Identifier:
                keyid:AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ad:b3:85:a9:7f:f7:7c:fa:8e:b5:48:a7:56:26:c9:54:9e:
         bd:dd:13:ed:9e:58:43:56:06:4d:ea:72:51:cf:a6:31:5f:f5:
         b7:c2:76:fa:f8:b2:fa:61:ad:d2:81:75:ff:f2:ff:a2:73:ac:
         c1:40:d0:40:27:d6:1e:30:a2:8c:0d:02:2c:16:49:c9:46:9d:
         9b:91:6f:0c:45:f7:7b:bc:87:74:ac:f4:57:a5:f5:81:d5:26:
         d9:17:19:05:6f:87:cc:d3:40:cb:f2:4a:bd:15:c6:5b:8b:1a:
         15:76:0f:42:25:2e:6e:f0:b8:1c:1d:73:bd:e0:28:89:c4:c6:
         f5:0f:c5:dd:f3:d6:ac:40:2f:28:ba:38:90:b4:09:48:ec:aa:
         46:91:01:ec:ec:b6:ff:f5:20:d8:25:fe:8e:56:de:2e:7d:00:
         05:e8:7a:df:2a:a2:22:0e:30:40:a7:d5:e7:37:f8:28:1b:34:
         72:c7:d7:2d:fa:cf:69:12:a3:d8:e5:b2:de:58:fd:b5:2d:b5:
         7d:aa:67:0b:ab:34:5e:15:2d:a9:21:9b:cc:ca:f8:ea:d6:95:
         27:66:be:f8:1b:3b:ad:d4:02:81:24:6d:e7:4f:3b:61:be:98:
         e8:4a:1f:fb:d2:48:27:06:fb:b5:f7:92:ba:9d:54:2d:cf:ef:
         d2:91:e6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:58:48 2025 by rpki-client