Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.mft
File:                     08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.mft (raw, json)
Hash identifier:          iajPvF0vnsXXyEtKeL0qerJlOUcjGlksc5nMJ9kIdxE=
Subject key identifier:   04:F0:21:EC:D0:C4:32:46:12:9A:5D:B3:F1:99:C8:08:F1:11:E3:AC
Authority key identifier: 08:BC:91:A7:FB:FD:34:E8:D2:39:11:A2:D0:56:0C:2B:D1:84:DE:11
Certificate issuer:       /CN=08BC91A7FBFD34E8D23911A2D0560C2BD184DE11
Certificate serial:       2B9824ED04E309CE85F9ACFD3EBC84B8978C9A3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.mft
Manifest number:          0137
Signing time:             Thu 06 Nov 2025 12:05:54 +0000
Manifest this update:     Thu 06 Nov 2025 12:00:54 +0000
Manifest next update:     Wed 12 Nov 2025 07:17:54 +0000
Files and hashes:         1: 34352e372e3134302e302f32342d3234203d3e20323731383136.roa (hash: UvmjTTtLSwZcj9dHB88b6xzVKk8Tykovv+yomNpBzYA=)
                          2: 323830333a343831303a3a2f33322d3332203d3e20323731383136.roa (hash: 1xEvJufL4G/ZIVYCmKS3ZZvs+pS64a8J/0s6MMwzs/U=)
                          3: 08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.crl (hash: EqXDapdRkknTOL7ZgnmYFSffLj4xI1hST7S0vCgGq/c=)
                          4: 34352e372e3134332e302f32342d3234203d3e20323731383136.roa (hash: xNWKxwpST1ftvF8sYWkLow13CqG9nErgnh+OSYvXhXI=)
                          5: 34352e372e3134322e302f32342d3234203d3e20323731383136.roa (hash: OttO71Y+uAw+I5OZhdVQHem1BOR5AQD7+Xy8YygYKqQ=)
                          6: 34352e372e3134312e302f32342d3234203d3e20323731383136.roa (hash: NVVpq/NvEgpvfLQFUDG3MV2YH3gOaF6quo5HOAO8VHU=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 11 Nov 2025 18:10:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:98:24:ed:04:e3:09:ce:85:f9:ac:fd:3e:bc:84:b8:97:8c:9a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08BC91A7FBFD34E8D23911A2D0560C2BD184DE11
        Validity
            Not Before: Nov  6 12:00:54 2025 GMT
            Not After : Nov 12 07:17:54 2025 GMT
        Subject: CN=04F021ECD0C43246129A5DB3F199C808F111E3AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8c:85:70:e8:ef:a2:c0:fd:db:bd:f9:9d:f9:
                    f7:28:76:0b:85:6a:b5:90:08:0a:6d:99:76:2e:de:
                    41:a6:a6:f3:a5:17:e2:5e:61:c0:cd:d9:24:4d:48:
                    9f:73:0d:6f:e4:7a:91:a9:fb:bb:56:db:ad:77:09:
                    64:79:1a:92:7b:78:86:15:21:1d:4a:ee:22:37:64:
                    f5:68:47:49:cc:30:12:e2:e8:7f:ed:58:a7:14:f8:
                    c7:7f:fc:0a:ee:46:af:1d:b4:95:91:1c:13:e0:2d:
                    8d:c8:97:0d:34:7d:73:df:1a:02:ee:81:54:d7:30:
                    05:4c:27:3a:a6:45:74:22:20:ee:ce:8c:7f:20:10:
                    96:ea:ce:81:93:ce:cd:3a:86:53:f8:0a:ac:8e:d0:
                    bd:be:be:b6:3a:33:7e:9b:6c:0d:4b:63:aa:ab:78:
                    57:1b:f9:d3:ba:13:09:a2:9f:85:4b:8e:43:6d:4c:
                    6f:9c:43:db:ac:26:a6:b9:b2:99:12:10:a1:9d:20:
                    23:b8:78:3e:9e:4f:45:27:57:c7:a5:98:24:a9:2f:
                    6f:5c:ed:1a:47:b1:dc:09:45:e7:c7:51:47:88:a2:
                    d7:40:c1:e2:02:00:d8:02:3b:81:9e:9a:ff:f4:99:
                    a3:87:59:71:12:30:df:94:e2:01:cd:ff:1c:42:98:
                    91:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F0:21:EC:D0:C4:32:46:12:9A:5D:B3:F1:99:C8:08:F1:11:E3:AC
            X509v3 Authority Key Identifier:
                keyid:08:BC:91:A7:FB:FD:34:E8:D2:39:11:A2:D0:56:0C:2B:D1:84:DE:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:aa:db:3e:cd:04:0e:7e:10:29:9f:8b:9b:fc:0c:7c:26:79:
         b4:fb:27:6f:12:bf:37:84:06:34:ac:e7:45:6a:7e:e0:2d:59:
         a1:f5:9a:f3:ae:e1:a0:4f:b0:e2:3f:02:ba:f2:44:44:e5:42:
         cd:39:a2:cc:16:10:78:f4:83:5b:d0:ef:d8:37:06:d4:b6:0a:
         5d:3d:5e:98:0d:c7:2f:99:c2:72:6f:6a:ca:0c:79:fb:7b:31:
         1f:ff:b7:d0:45:d4:1f:32:1c:bb:c2:f0:ac:3c:7f:c8:8c:2a:
         92:16:a6:bb:8e:71:f5:ba:a3:57:30:48:19:5a:8c:f6:e7:77:
         a8:96:3a:4f:11:80:e0:e6:95:fc:ee:ac:b3:b5:d8:6c:0e:4e:
         e5:af:1d:02:82:5c:81:54:c1:72:9f:f1:21:28:ac:55:a7:d3:
         8b:ad:33:55:83:12:72:ff:8a:2d:5e:47:cf:ce:14:6b:d9:c4:
         86:2b:ba:c3:a8:c2:5b:dd:a5:4e:f7:48:de:75:58:9b:50:c7:
         d7:cc:dd:8a:76:97:1f:9a:36:8a:48:83:7d:c2:0a:b9:38:a1:
         2a:68:4d:09:13:aa:32:86:65:29:d1:b8:7c:a6:fe:86:d0:f9:
         e4:de:2c:38:69:f0:94:ba:c9:a4:63:b6:16:b9:06:88:b5:1e:
         21:17:2f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 15:15:01 2025 by rpki-client