Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.mft
File:                     597B422C63F4E901AB522655E1EDFD64C35BD133.mft (raw, json)
Hash identifier:          kbkyNTXRQDgZZ6tAvO3fly9RNUi+yOz5D8/f4oGAGdI=
Subject key identifier:   52:8A:2B:07:96:BC:B5:09:40:26:0D:98:B1:9F:E5:59:1E:1E:EE:B2
Authority key identifier: 59:7B:42:2C:63:F4:E9:01:AB:52:26:55:E1:ED:FD:64:C3:5B:D1:33
Certificate issuer:       /CN=597B422C63F4E901AB522655E1EDFD64C35BD133
Certificate serial:       012402FE4248D7DD59EE07AA367136FA2BE0022C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.mft
Manifest number:          0134
Signing time:             Mon 03 Nov 2025 03:10:14 +0000
Manifest this update:     Mon 03 Nov 2025 03:05:14 +0000
Manifest next update:     Sat 08 Nov 2025 20:05:14 +0000
Files and hashes:         1: 3139302e3130332e32382e302f32322d3234203d3e20323634363238.roa (hash: Cd55MHsAKVIu4e0ymDmPye0lOO6ATQ8GPoT/nPjgKGQ=)
                          2: 3139302e38392e33302e302f32332d3234203d3e20323634363238.roa (hash: KhXKx5dvbEtfbuQNY+8EKd83f5T7zYmsARmgbPEql94=)
                          3: 3139302e3132302e3234382e302f32312d3234203d3e20323634363238.roa (hash: F1xVgce7EzEJjFLYDi93pcV3xy6rzj+QBl3lBXxELwY=)
                          4: 3139302e38392e32392e302f32342d3234203d3e20323634363238.roa (hash: QGu+sC4ZY/13AwhpK6x9pa6Sm8jmiUbyCdWRDJfG+oU=)
                          5: 3139302e382e3136342e302f32322d3234203d3e20323634363238.roa (hash: SC3Dk/QoQplZk7v3ipWS7g+w5zavuo+h83ht30/CUAs=)
                          6: 597B422C63F4E901AB522655E1EDFD64C35BD133.crl (hash: zqEeKhkdNGV0gU75k8bwIbuo5e7+scGTf7P5pAdLD4A=)
                          7: 323830333a633030303a3a2f33322d3438203d3e20323634363238.roa (hash: cEomYy0mhmbMcV4Ba3ZckWzEsFdtuQWq0XtZA61WqJA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 08 Nov 2025 20:05:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:24:02:fe:42:48:d7:dd:59:ee:07:aa:36:71:36:fa:2b:e0:02:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597B422C63F4E901AB522655E1EDFD64C35BD133
        Validity
            Not Before: Nov  3 03:05:14 2025 GMT
            Not After : Nov  8 20:05:14 2025 GMT
        Subject: CN=528A2B0796BCB50940260D98B19FE5591E1EEEB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:43:1b:7b:91:6f:fa:46:d3:d4:91:5c:ea:52:
                    f1:0c:f7:9f:a9:7a:54:c9:d6:5e:2f:d7:56:93:a4:
                    4f:d5:22:a1:d7:32:03:60:41:9b:02:d1:92:60:0f:
                    38:6b:17:6d:db:3c:52:8d:39:51:c8:39:d0:25:ce:
                    ca:34:c4:13:8c:20:ab:e3:00:4f:12:e1:23:2f:c6:
                    dc:f4:91:59:16:0c:d6:b8:1f:56:c3:76:3d:a4:de:
                    70:e6:ce:f0:7b:ac:63:96:1b:66:38:02:de:f5:49:
                    d6:e5:70:24:1b:4f:cc:a8:1f:3a:26:e7:d0:46:e6:
                    39:7b:e2:e5:72:c8:a2:a8:87:40:1d:33:ea:4e:16:
                    26:90:81:3e:1e:17:68:f1:d4:13:5b:ee:9f:4e:6d:
                    27:a5:09:e5:d8:85:09:a8:3f:83:3d:3d:ee:a2:f1:
                    31:1e:26:e8:5e:32:da:25:91:74:d7:5c:ae:6c:3f:
                    a6:bc:d6:18:b0:76:d1:0d:db:31:14:00:b5:31:71:
                    70:e6:9f:c8:99:bc:ae:27:2d:bd:d9:71:4e:48:ee:
                    66:7e:36:6a:89:be:76:16:2a:c9:cc:47:d9:15:5f:
                    33:9d:d8:e4:53:f8:d3:cb:25:83:c2:2d:a9:24:60:
                    7c:49:5e:e3:86:b1:0c:2e:8c:ea:2c:66:bb:96:85:
                    c9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8A:2B:07:96:BC:B5:09:40:26:0D:98:B1:9F:E5:59:1E:1E:EE:B2
            X509v3 Authority Key Identifier:
                keyid:59:7B:42:2C:63:F4:E9:01:AB:52:26:55:E1:ED:FD:64:C3:5B:D1:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:f7:0e:bb:4b:10:fd:fd:68:01:fe:14:56:ae:fb:ea:eb:34:
         c8:7f:a0:20:35:a6:0e:58:0d:2e:26:b4:9b:25:cc:99:e6:21:
         82:c5:fa:31:70:2b:ea:b5:3e:cd:46:5d:e8:fc:84:1d:4b:95:
         e5:54:f6:63:e2:52:ef:1d:7e:85:af:4d:b3:c8:92:80:c8:8a:
         cc:cb:bb:10:8e:67:d1:88:da:ae:08:94:9c:14:c4:40:cb:83:
         bb:d1:3e:d5:8a:b9:b0:f2:63:d6:97:aa:bd:be:72:c5:31:3a:
         11:31:4e:23:e3:8f:35:4a:f0:0b:fd:29:b8:ba:05:06:ff:3b:
         c0:b2:89:ec:e4:48:db:2f:10:3c:08:68:79:14:c0:94:6f:50:
         d6:11:22:4e:37:20:94:ed:f9:e3:e1:fe:0a:fc:90:63:bf:ca:
         7b:34:a0:21:5c:2b:d0:41:50:19:e9:1b:ba:a3:64:e3:b2:3d:
         8f:a8:a4:a7:bd:f1:2c:c2:03:19:68:2b:fb:31:5a:d9:a3:76:
         57:94:50:de:3e:b0:ee:64:a8:77:83:69:9a:ca:92:db:92:56:
         07:80:b7:c3:c9:fc:19:4b:58:a3:25:4e:6d:36:bc:5a:e8:8f:
         b1:6b:58:07:43:9b:7d:60:3f:1e:a7:af:57:85:09:ac:21:ee:
         8a:5a:c0:0b
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUASQC/kJI191Z7geqNnE2+ivgAiwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTk3QjQyMkM2M0Y0RTkwMUFCNTIyNjU1RTFFREZENjRD
MzVCRDEzMzAeFw0yNTExMDMwMzA1MTRaFw0yNTExMDgyMDA1MTRaMDMxMTAvBgNV
BAMTKDUyOEEyQjA3OTZCQ0I1MDk0MDI2MEQ5OEIxOUZFNTU5MUUxRUVFQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Qxt7kW/6RtPUkVzqUvEM95+p
elTJ1l4v11aTpE/VIqHXMgNgQZsC0ZJgDzhrF23bPFKNOVHIOdAlzso0xBOMIKvj
AE8S4SMvxtz0kVkWDNa4H1bDdj2k3nDmzvB7rGOWG2Y4At71SdblcCQbT8yoHzom
59BG5jl74uVyyKKoh0AdM+pOFiaQgT4eF2jx1BNb7p9ObSelCeXYhQmoP4M9Pe6i
8TEeJuheMtolkXTXXK5sP6a81hiwdtEN2zEUALUxcXDmn8iZvK4nLb3ZcU5I7mZ+
NmqJvnYWKsnMR9kVXzOd2ORT+NPLJYPCLakkYHxJXuOGsQwujOosZruWhclZAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUUoorB5a8tQlAJg2YsZ/lWR4e7rIwHwYDVR0j
BBgwFoAUWXtCLGP06QGrUiZV4e39ZMNb0TMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQUU4OEUxODk1QTFBQTQyRDVBMTBBN0VEMzg5QTBCQUNG
RDdCNDg3NENCQUI4NkE3Qjc5MEE3OEMxNDU3RUZDLzAvNTk3QjQyMkM2M0Y0RTkw
MUFCNTIyNjU1RTFFREZENjRDMzVCRDEzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OTdCNDIyQzYzRjRFOTAxQUI1
MjI2NTVFMUVERkQ2NEMzNUJEMTMzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUFFODhFMTg5NUExQUE0MkQ1QTEwQTdFRDM4OUEwQkFDRkQ3QjQ4NzRD
QkFCODZBN0I3OTBBNzhDMTQ1N0VGQy8wLzU5N0I0MjJDNjNGNEU5MDFBQjUyMjY1
NUUxRURGRDY0QzM1QkQxMzMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCi9w67SxD9/WgB/hRWrvvq6zTI
f6AgNaYOWA0uJrSbJcyZ5iGCxfoxcCvqtT7NRl3o/IQdS5XlVPZj4lLvHX6Fr02z
yJKAyIrMy7sQjmfRiNquCJScFMRAy4O70T7Virmw8mPWl6q9vnLFMToRMU4j4481
SvAL/Sm4ugUG/zvAsons5EjbLxA8CGh5FMCUb1DWESJONyCU7fnj4f4K/JBjv8p7
NKAhXCvQQVAZ6Ru6o2Tjsj2PqKSnvfEswgMZaCv7MVrZo3ZXlFDePrDuZKh3g2ma
ypLbklYHgLfDyfwZS1ijJU5tNrxa6I+xa1gHQ5t9YD8ep69XhQmsIe6KWsAL
-----END CERTIFICATE-----
Generated at Tue Nov 4 05:40:39 2025 by rpki-client