Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.mft
File:                     3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.mft (raw, json)
Hash identifier:          p05CZ01drbN0peOolANORKnf0f1uugYcnGy93+4Y5wc=
Subject key identifier:   11:0A:85:C3:B4:C7:54:28:55:FF:FB:01:56:47:03:13:8F:61:52:E5
Authority key identifier: 3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C
Certificate issuer:       /CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
Certificate serial:       1AEB2D50BBB475050A94412751DE123C7975EA3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.mft
Manifest number:          E2
Signing time:             Tue 03 Jun 2025 16:28:11 +0000
Manifest this update:     Tue 03 Jun 2025 16:23:11 +0000
Manifest next update:     Mon 09 Jun 2025 05:28:11 +0000
Files and hashes:         1: 34352e372e36372e302f32342d3234203d3e20323730313433.roa (hash: P6vusT39PTRh/tM4P42ZZ/SwyQPO1gCmMiJdQKJ1uOY=)
                          2: 34352e372e36342e302f32342d3234203d3e20323730313433.roa (hash: WZQOEsY3i8Wa4efV8lplKlgZv+Xy9dkioLdomBF8pl4=)
                          3: 34352e372e36352e302f32342d3234203d3e20323730313433.roa (hash: YgyD+51iPdOdBLW56X7FuGuR1CAulv75IROHXnfLLtQ=)
                          4: 323830363a3364663a323030303a3a2f33352d3335203d3e20323730313433.roa (hash: VlGhYcvnQAKFzCb9awkWyulraYhMTCuu39QxF0Tx13k=)
                          5: 34352e372e36342e302f32322d3234203d3e20323730313433.roa (hash: YY4/mdgzjUgnLmbVDKOy2IEpDvfxlpwOT9Cp4bsjkBA=)
                          6: 323830363a3364663a633030303a3a2f33352d3335203d3e20323730313433.roa (hash: +Aes5COIsGDZcth6BwXOBAfpUzhpU+smQe53lEJin0k=)
                          7: 3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl (hash: F94PiGX8wJWOF91CSyazWmaFfmebzSEcW3cuRPtzqOI=)
                          8: 323830363a3364663a3a2f33352d3335203d3e20323730313433.roa (hash: 6+QXkWdPnW7jJcNVae91CmYjD0yqGCxsu41SOa/Oj00=)
                          9: 34352e372e36342e302f32332d3233203d3e20323730313433.roa (hash: gObaagDJFTnjO+OvDFCLU9PkIvAuu9qweR9d4BTWFy4=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 03:04:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:eb:2d:50:bb:b4:75:05:0a:94:41:27:51:de:12:3c:79:75:ea:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
        Validity
            Not Before: Jun  3 16:23:11 2025 GMT
            Not After : Jun  9 05:28:11 2025 GMT
        Subject: CN=110A85C3B4C7542855FFFB01564703138F6152E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:43:d4:e5:70:a6:b2:65:fb:b8:83:06:ab:ad:
                    f9:25:b9:42:fd:49:77:b9:27:ff:73:35:f5:53:ac:
                    0a:b0:82:2b:db:d8:e9:ae:92:cb:22:cc:15:64:8f:
                    eb:8f:a6:2f:b9:ef:e6:93:22:e1:a2:c7:96:1c:63:
                    8e:44:2f:e1:36:45:1e:3d:d1:39:ef:35:0a:4c:bb:
                    a3:3d:37:18:91:ad:b5:d6:67:8b:55:bd:3c:ba:03:
                    ea:57:dc:c0:46:03:87:29:05:11:9c:17:b7:30:c6:
                    34:38:60:06:94:ee:6b:89:a7:e8:f7:28:2b:84:06:
                    9b:39:88:c7:70:99:45:0d:74:5a:52:f1:92:99:dc:
                    70:43:f4:ae:5c:68:76:92:65:be:5a:f5:f8:5a:fa:
                    84:22:7b:01:63:85:05:bd:64:9a:67:a3:d4:ba:df:
                    90:06:03:36:4e:74:2c:4e:16:6d:fc:7d:c3:da:5f:
                    2d:7e:d2:bc:f2:88:ce:f1:94:58:fa:50:80:3d:ac:
                    5c:cd:e8:b3:77:a8:df:37:b7:b0:ec:83:3b:c2:f0:
                    2b:9e:77:3e:b2:02:33:2b:f1:35:6c:97:0a:bf:6d:
                    cd:1c:ae:c6:3b:4a:7c:9f:de:b4:22:3d:d0:5a:41:
                    29:d0:e3:71:d5:5a:eb:1d:e4:8d:e7:fe:5f:29:27:
                    c6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0A:85:C3:B4:C7:54:28:55:FF:FB:01:56:47:03:13:8F:61:52:E5
            X509v3 Authority Key Identifier:
                keyid:3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:bb:37:e7:b3:a1:04:3f:79:c1:10:ab:5f:c4:2e:f6:86:86:
         a0:ef:98:f3:d6:ba:23:11:ce:64:86:8f:f0:48:91:3a:3b:ee:
         46:57:65:d5:9b:33:d9:72:68:55:4c:b0:70:b3:9c:32:a7:ee:
         54:62:a9:ad:e6:ba:47:4e:ff:86:f4:3f:29:e2:73:c5:f6:6d:
         10:07:ca:a3:12:b2:ef:01:20:a7:58:ac:c3:6a:ad:19:ec:7c:
         83:17:fc:7f:0c:c3:80:1c:5e:a1:42:ad:49:7b:a0:d2:ba:37:
         7b:43:c7:fc:b9:e5:98:e6:28:c0:66:80:d1:82:51:d2:e9:36:
         b8:fa:c7:55:48:2a:f1:84:fd:2f:d8:98:ef:c0:e8:c3:a7:a7:
         bf:c4:d5:c3:6d:ef:ee:6c:3e:48:66:b9:df:6d:bb:87:4b:d9:
         da:97:19:e5:eb:57:e7:4c:d7:c3:b8:a3:74:e0:d6:26:5d:ad:
         29:b4:ef:cd:36:04:40:d1:ba:7f:5e:6f:46:cc:87:79:ab:18:
         e6:2e:ed:bd:2d:8a:7c:6a:c1:62:38:54:f0:b4:ed:92:85:51:
         2f:84:52:ce:c3:14:b4:b4:9f:81:76:cd:f2:60:de:36:2b:e1:
         67:38:32:47:cd:fb:44:d9:9b:72:f6:46:1c:21:9d:e4:7e:07:
         ac:2f:dd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:31:02 2025 by rpki-client