Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.mft
File:                     0A97B7D9DBD270A56064B560E32C46A5E2BD857D.mft (raw, json)
Hash identifier:          I0JeEn0zhSnd3C762KDmwM2zxvgo2c5C5sRRm15f6b8=
Subject key identifier:   D9:61:8F:6E:77:DC:93:8E:A7:03:A9:B2:45:14:82:C7:6C:98:CB:EC
Authority key identifier: 0A:97:B7:D9:DB:D2:70:A5:60:64:B5:60:E3:2C:46:A5:E2:BD:85:7D
Certificate issuer:       /CN=0A97B7D9DBD270A56064B560E32C46A5E2BD857D
Certificate serial:       67D14D84F79E45652AB3491DB2804A268F271DFE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.mft
Manifest number:          D2
Signing time:             Tue 22 Apr 2025 01:15:03 +0000
Manifest this update:     Tue 22 Apr 2025 01:10:02 +0000
Manifest next update:     Sun 27 Apr 2025 06:56:02 +0000
Files and hashes:         1: 34352e3138392e3139382e302f32342d3234203d3e20323639383538.roa (hash: 41SOVAodcLKyryMiH1QxQTtYKkrqbxoQgUAQXwth9BY=)
                          2: 34352e3138392e3139392e302f32342d3234203d3e20323639383538.roa (hash: C3IX2Ld4McOnmmoQVxQacw/eOCRCKY6ZhhRNBqlXkp0=)
                          3: 34352e3138392e3139372e302f32342d3234203d3e20323639383538.roa (hash: WIggVM1yi48ELLS46jHgJqM5lqF55JMqa6uoxRasWig=)
                          4: 0A97B7D9DBD270A56064B560E32C46A5E2BD857D.crl (hash: kvJ/JIyQ+Gu5VhRUaHlNS+qdkXPnXBo3oi7e1B4iE8U=)
                          5: 34352e3138392e3139362e302f32322d3232203d3e20323639383538.roa (hash: QqOAGWp08U34ckYPMhETMjIGHRx7qgeH6jP3fxVt52Y=)
                          6: 34352e3138392e3139362e302f32342d3234203d3e20323639383538.roa (hash: hAF4R+hD0YTTUSsp8hohgdmpSs18UeLNslce1gQ0WDo=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:d1:4d:84:f7:9e:45:65:2a:b3:49:1d:b2:80:4a:26:8f:27:1d:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A97B7D9DBD270A56064B560E32C46A5E2BD857D
        Validity
            Not Before: Apr 22 01:10:02 2025 GMT
            Not After : Apr 27 06:56:02 2025 GMT
        Subject: CN=D9618F6E77DC938EA703A9B2451482C76C98CBEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9f:1c:4f:dc:6c:20:57:a5:2f:93:98:f6:72:
                    73:50:f6:be:7b:f3:7c:8c:3a:47:9d:95:e2:a1:e8:
                    72:d5:c7:ef:29:43:55:a2:44:b3:39:1a:b9:2e:f8:
                    c5:a2:eb:05:45:0f:09:cf:6e:df:a9:fa:a8:7a:14:
                    7b:c3:40:65:7d:03:08:93:f1:e8:91:11:1c:56:d9:
                    e4:8e:30:4b:59:d0:7b:91:f7:2e:f6:a3:81:2e:b4:
                    c9:ea:61:1b:69:dc:51:34:f3:85:69:e3:5a:41:e4:
                    da:12:81:d6:9b:6c:de:5b:d0:ab:0e:7b:4d:c5:5a:
                    b1:2f:2c:05:29:7b:33:ee:4f:7d:7c:f2:ca:e7:13:
                    cf:33:04:36:94:d3:e5:ab:9e:5d:1e:bc:5d:64:93:
                    35:07:a6:d8:00:ef:03:33:4e:82:ba:ce:0c:95:99:
                    88:4b:12:4e:80:f9:5e:6e:77:7c:fe:1f:9f:5c:1f:
                    ed:9c:f6:26:ee:19:6e:e8:45:26:13:7a:46:7b:8c:
                    b2:c0:d5:f0:42:48:43:bf:80:43:c6:42:39:a8:ef:
                    4a:2b:c9:97:23:86:5f:a4:e1:aa:8f:58:2d:35:23:
                    e6:3a:95:68:bb:4f:6a:d3:e3:30:34:be:a0:0a:0d:
                    2b:de:68:2c:c9:c6:0b:e8:53:a1:c1:91:74:98:40:
                    0e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:61:8F:6E:77:DC:93:8E:A7:03:A9:B2:45:14:82:C7:6C:98:CB:EC
            X509v3 Authority Key Identifier:
                keyid:0A:97:B7:D9:DB:D2:70:A5:60:64:B5:60:E3:2C:46:A5:E2:BD:85:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:f0:cf:32:3d:5c:14:1b:36:70:d1:90:6e:4a:57:3c:db:7e:
         99:be:47:90:61:da:c3:b7:b1:1c:7a:cf:22:23:bc:65:e5:ec:
         8d:c4:04:90:f3:10:1b:72:d5:8b:d0:0b:e6:d1:d4:c9:25:98:
         ac:18:da:88:cf:f0:b5:6a:6d:0d:02:e3:cd:c2:e7:a7:d5:8e:
         b2:9e:4f:d4:be:c0:6f:e7:8a:e2:05:40:21:51:c4:97:1c:b1:
         53:d3:7a:fc:de:6e:e9:dd:6a:6e:71:9f:79:de:57:0e:a0:79:
         d5:96:f4:ac:c6:f1:87:d6:56:3b:bb:ec:f4:f1:17:b0:64:5a:
         cd:2b:b9:4c:66:4b:52:aa:35:2b:33:d6:49:0d:81:f9:a1:e5:
         03:5f:ee:a0:88:db:db:6f:9d:22:26:44:c5:b9:53:f0:5a:1f:
         5b:a0:74:01:c2:ce:e9:84:7d:82:7f:b8:de:a4:c2:25:ed:5c:
         b5:58:56:96:38:40:b0:39:81:8c:68:fa:fd:6f:f6:80:49:d6:
         9d:c6:47:4d:8f:31:e2:f5:b0:d6:60:02:2d:01:04:59:8a:6c:
         f5:5d:11:e3:f8:94:b0:27:4e:2b:d7:f5:2d:6e:75:04:8e:c1:
         b6:42:59:c9:d7:40:c4:89:39:01:50:2c:ff:35:05:f1:2e:1c:
         73:87:86:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:13:03 2025 by rpki-client