Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34717F05133BDBAF157A2D88A1831560DA2390FADFA1F46F3C42F979B3A6BD7A/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.mft
File:                     217EAB37EEC2C460E29FF931AF05B634C82792CF.mft (raw, json)
Hash identifier:          456s2fTdOzILK9GFMZsAotA2gW0DNce7nxQkPE6n/QQ=
Subject key identifier:   A9:AA:33:E8:31:A1:AB:54:99:B7:FA:78:12:DD:7F:B3:52:ED:FA:29
Authority key identifier: 21:7E:AB:37:EE:C2:C4:60:E2:9F:F9:31:AF:05:B6:34:C8:27:92:CF
Certificate issuer:       /CN=217EAB37EEC2C460E29FF931AF05B634C82792CF
Certificate serial:       374CC9E9162C5583A5A3999D2E2B2E38E4D77822
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34717F05133BDBAF157A2D88A1831560DA2390FADFA1F46F3C42F979B3A6BD7A/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.mft
Manifest number:          0138
Signing time:             Sat 15 Nov 2025 09:58:35 +0000
Manifest this update:     Sat 15 Nov 2025 09:53:35 +0000
Manifest next update:     Wed 19 Nov 2025 14:19:35 +0000
Files and hashes:         1: 217EAB37EEC2C460E29FF931AF05B634C82792CF.crl (hash: QpjpctZPkjeqcRS6gPWErfV2zjX8GGlkJr1VfM8VU2s=)
                          2: 3134382e3231342e302e302f31362d3234203d3e2032373038.roa (hash: XQiUkKBu6wXM+gexa9UmCy1etG815t2gAgit917BbhY=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34717F05133BDBAF157A2D88A1831560DA2390FADFA1F46F3C42F979B3A6BD7A/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34717F05133BDBAF157A2D88A1831560DA2390FADFA1F46F3C42F979B3A6BD7A/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Nov 2025 14:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:4c:c9:e9:16:2c:55:83:a5:a3:99:9d:2e:2b:2e:38:e4:d7:78:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=217EAB37EEC2C460E29FF931AF05B634C82792CF
        Validity
            Not Before: Nov 15 09:53:35 2025 GMT
            Not After : Nov 19 14:19:35 2025 GMT
        Subject: CN=A9AA33E831A1AB5499B7FA7812DD7FB352EDFA29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:dd:69:b5:76:30:2c:57:83:89:49:5f:d2:f4:
                    8d:aa:f2:9f:30:8e:06:50:2b:0c:cc:75:98:3e:9f:
                    6b:9b:0d:07:da:06:fa:fc:4c:8d:7d:89:de:00:1c:
                    a4:e5:e6:bd:ca:5c:0c:22:46:ad:14:95:d5:ae:0d:
                    32:36:30:1a:75:31:92:ba:1c:ab:74:9e:60:0c:89:
                    ec:01:ea:c6:0e:63:7b:36:70:cd:47:3f:b1:35:89:
                    d7:e0:fc:94:57:a0:47:33:aa:cf:bf:15:ab:d0:09:
                    53:e9:73:e1:9e:d5:58:e9:c1:c3:ed:27:15:12:13:
                    22:77:81:9e:f2:2d:e7:64:6f:21:78:e4:45:58:11:
                    97:01:b4:3d:6b:66:23:e1:ef:39:67:50:8b:87:d6:
                    c7:28:da:bc:01:75:d9:d1:e8:eb:25:f9:0b:8f:78:
                    63:b4:2f:64:60:ee:a0:14:19:d1:e8:b8:4e:f3:01:
                    9e:9a:f3:0e:2d:46:f5:b6:ec:73:a7:98:a7:92:21:
                    59:d0:63:96:4a:62:24:b3:cd:22:ea:be:c4:44:a3:
                    9e:52:03:be:85:c9:37:36:68:ae:4b:df:c9:8a:28:
                    72:5f:5b:4c:47:d3:9e:91:ac:68:29:fc:b6:ed:fb:
                    32:5c:45:4b:63:70:e6:a9:bc:9f:70:b3:08:94:77:
                    22:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AA:33:E8:31:A1:AB:54:99:B7:FA:78:12:DD:7F:B3:52:ED:FA:29
            X509v3 Authority Key Identifier:
                keyid:21:7E:AB:37:EE:C2:C4:60:E2:9F:F9:31:AF:05:B6:34:C8:27:92:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34717F05133BDBAF157A2D88A1831560DA2390FADFA1F46F3C42F979B3A6BD7A/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34717F05133BDBAF157A2D88A1831560DA2390FADFA1F46F3C42F979B3A6BD7A/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:5a:7f:3b:de:ad:4a:ea:ad:28:3e:7a:86:0e:26:f6:cb:17:
         49:d9:43:42:b6:fd:6b:5c:55:07:7e:da:98:68:87:b4:f8:e2:
         7d:c9:54:41:35:ff:89:20:bb:bc:87:6c:8e:60:82:4b:98:3b:
         46:d8:dd:63:36:9a:3c:27:23:60:6c:3f:71:ac:af:cb:fd:6b:
         eb:e4:66:52:26:f0:16:59:a7:72:df:1e:8f:d8:72:f5:19:5a:
         ec:83:2a:26:20:4b:f4:62:11:fa:c0:0f:38:5d:0d:5b:e8:37:
         7a:36:53:09:ee:87:29:3c:d8:54:41:2b:0f:5a:82:fd:a5:33:
         7b:e7:ae:ad:5b:0a:22:c9:e2:11:ff:dd:43:ab:02:dc:1d:eb:
         b2:f1:5e:3f:83:ff:48:c1:a4:54:9d:c1:46:97:8f:5f:b4:a3:
         10:d2:fa:3b:cb:7e:90:1b:62:90:0b:ec:e1:54:de:b2:9a:8f:
         02:3d:a7:75:d1:26:39:8c:88:3f:7d:9c:c3:0e:0a:8e:b2:63:
         02:ac:2a:ea:a0:fd:17:c1:b8:c8:62:83:6d:82:13:08:75:d6:
         e4:01:49:5d:b5:36:07:c8:cc:96:7d:35:60:bf:fe:ed:ba:d9:
         69:b5:af:8b:a0:46:4e:ab:22:0c:6e:e7:f9:84:e7:88:2d:ec:
         a8:4d:9b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 16 06:22:16 2025 by rpki-client