Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.mft
File:                     191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.mft (raw, json)
Hash identifier:          tcIvOsAehlEXKyS+Dq7da1MlJC6YEQwnUjSZVJgJy9Y=
Subject key identifier:   04:A2:E7:CA:3C:83:55:8D:3C:F6:9E:8E:8F:45:58:65:59:8D:68:01
Authority key identifier: 19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F
Certificate issuer:       /CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
Certificate serial:       3DD3DDBCBAA871C042DBDEF8E2867AD9A8864C61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.mft
Manifest number:          D4
Signing time:             Mon 21 Apr 2025 06:03:39 +0000
Manifest this update:     Mon 21 Apr 2025 05:58:39 +0000
Manifest next update:     Sat 26 Apr 2025 21:18:39 +0000
Files and hashes:         1: 3139302e3131302e3136302e302f32302d3234203d3e203237393031.roa (hash: EtECXZvbMuhXgB5yw/T6T4FnEzjs/mtwSimwV4hguIw=)
                          2: 3137302e3135302e3135362e302f32322d3234203d3e203237393031.roa (hash: COiu4A9VKN9cvd2cfBjJ9s4X43DFiH64vVTRz3DtbPg=)
                          3: 3139302e3130322e3232342e302f31392d3234203d3e203237393031.roa (hash: Nv4OwumkJPyROfByLTPgzXBrkFCwDiFTY/Zx1nYF4zo=)
                          4: 3139302e3131342e33322e302f31392d3234203d3e203237393031.roa (hash: CAsNxnJdETaefGOxTix7+WH9QbUznD9FaNfZr+JHETk=)
                          5: 3230302e37332e3132302e302f32312d3234203d3e203237393031.roa (hash: Mc8n8RHF6psRybuPNN511o3UqMW3fKciIu1ktFkaeww=)
                          6: 3133312e3232312e3136342e302f32322d3234203d3e203237393031.roa (hash: 9ZCZauS/boX5qc2VzGsc8lJESmcOkTTD8JuFqcwo6Ls=)
                          7: 3137392e36302e36342e302f31392d3234203d3e203237393031.roa (hash: fiwXEXgm8f2qAZ/2khz+nisDzfQAJ5ztN2gsxxPQerc=)
                          8: 323830333a633630303a3a2f33322d3438203d3e203237393031.roa (hash: QTzkscgdkCD/6mD0zEQNV93FIRIjgqp/ZqT8DEH5818=)
                          9: 3137302e38322e3138382e302f32322d3234203d3e203237393031.roa (hash: uDlHsPPC2jExPRu1dRB+Rn5KmHVytPJpkBlxxIeMxiI=)
                          10: 3139302e352e33322e302f31392d3234203d3e203237393031.roa (hash: wAj5Qe2STJweOc4vaiJ1+QsKASKPXpWLminCsiScb9Q=)
                          11: 3133382e39392e3232342e302f32322d3234203d3e203237393031.roa (hash: kMvg8etczBJNCKxsuxbLFa6Cp4s5tXO3gG1isPxX+6c=)
                          12: 3230372e3234382e3139322e302f31392d3234203d3e203237393031.roa (hash: JGKHnt/C0JirwdocJb+4PgMtDpbDdY+rrYAIz/X2F1Y=)
                          13: 3136372e3235302e35322e302f32322d3234203d3e203237393031.roa (hash: LT2uvHTsFjD/yB84xJ/lYjsHTBdHtXzZcPnRu+GVEow=)
                          14: 191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.crl (hash: NMhUjntJy/myN4gOVYSc45cujXRz9WstFPwS9Nvrvw4=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d3:dd:bc:ba:a8:71:c0:42:db:de:f8:e2:86:7a:d9:a8:86:4c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
        Validity
            Not Before: Apr 21 05:58:39 2025 GMT
            Not After : Apr 26 21:18:39 2025 GMT
        Subject: CN=04A2E7CA3C83558D3CF69E8E8F455865598D6801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:20:98:e9:d4:e5:30:cb:7a:39:d9:d6:a6:ad:
                    de:f7:96:7e:19:2b:91:19:6c:e1:7d:cb:37:ff:d1:
                    6e:7b:d6:aa:63:31:73:f0:48:42:05:e9:e0:45:32:
                    3a:d8:f6:bf:f0:21:bf:e9:15:65:7e:da:2d:f7:c4:
                    f9:1a:9d:33:af:c6:90:97:b6:8f:28:e3:55:d5:a7:
                    f0:36:1d:a2:d3:54:6e:cd:91:44:91:1d:bb:71:bc:
                    3d:15:60:bb:43:a6:21:d2:86:53:a0:be:79:69:71:
                    bb:05:6e:9e:ad:fb:e3:88:45:75:69:86:41:d3:26:
                    9c:0b:e1:b1:92:67:79:b5:8a:dc:9d:ac:34:e0:0d:
                    2a:ca:9d:a4:e8:34:51:24:f7:77:a3:6e:28:0b:76:
                    6b:8f:b7:cc:3d:93:6d:76:72:67:5d:a9:8e:d3:88:
                    cb:8d:9e:11:da:26:e7:1c:fb:de:f4:39:52:11:d3:
                    da:10:7b:3e:79:c9:6a:76:42:7a:d7:69:b2:c1:23:
                    36:27:61:23:59:76:1b:e3:74:ff:a2:89:d4:e1:b9:
                    c7:14:b7:6d:06:2d:2d:30:0a:7c:4c:9d:38:d2:c4:
                    b2:b0:d9:f3:15:3b:30:fc:f6:eb:f6:e9:65:16:1c:
                    ee:7e:34:fe:65:f1:64:6e:97:62:47:a1:f4:ad:c5:
                    84:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A2:E7:CA:3C:83:55:8D:3C:F6:9E:8E:8F:45:58:65:59:8D:68:01
            X509v3 Authority Key Identifier:
                keyid:19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:0c:03:1c:d7:ea:0e:f3:f8:64:9e:a7:02:e2:e2:fd:d0:db:
         26:50:7f:e5:91:54:1e:af:83:e9:b8:0e:c1:3a:83:d7:b7:fa:
         76:be:d0:7e:9b:67:fa:89:7d:18:f9:e9:9c:a8:c5:54:6f:8f:
         89:ef:03:ed:99:63:1b:de:b8:8e:47:de:33:6c:3c:a3:2a:40:
         52:22:5c:36:2f:5d:7a:0d:54:29:d8:6f:57:c2:b9:85:01:16:
         b0:7c:ac:b8:e2:8d:5e:da:a4:93:85:c7:c7:b7:7a:8a:2e:11:
         a1:81:83:a7:ab:b4:b0:6e:98:b9:f2:81:27:e5:5f:bd:b7:4e:
         34:c8:16:3f:e6:c4:da:bc:83:7d:4c:df:a7:28:69:4b:de:0f:
         ef:2d:12:49:00:cd:bd:b1:b6:d4:38:d1:b0:a7:9a:a2:58:9a:
         8b:cf:ff:59:fd:77:76:4c:89:16:27:2c:10:dc:50:5f:09:06:
         44:db:32:de:27:21:20:c6:b6:25:57:bc:6d:d1:93:0e:dc:72:
         40:ab:9b:7a:c4:b3:51:d1:09:9d:cc:64:aa:cc:0e:dc:c5:bf:
         39:25:2a:c4:b2:03:28:e4:f5:4e:03:3a:c4:c8:4c:fb:c1:7a:
         ef:a3:a9:10:2e:0e:85:f5:0f:21:b9:bb:d6:5d:2e:b0:a3:b5:
         e1:ce:a2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 08:55:06 2025 by rpki-client