Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.mft
File:                     3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.mft (raw, json)
Hash identifier:          xvv45IUEqSNXX0YL2k0XNvreimU4NjBIqz32/2Lnr1w=
Subject key identifier:   3D:65:7E:51:D4:12:C6:F0:E5:46:65:0A:12:B0:E5:20:F6:D5:92:7E
Authority key identifier: 3F:40:D9:6A:4F:BB:BE:F5:8B:DC:1A:8A:02:AB:0D:89:B2:B1:62:92
Certificate issuer:       /CN=3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292
Certificate serial:       02803317936321E95196F5598F55BC134E322E68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.mft
Manifest number:          CB
Signing time:             Sun 06 Apr 2025 01:26:36 +0000
Manifest this update:     Sun 06 Apr 2025 01:21:36 +0000
Manifest next update:     Fri 11 Apr 2025 15:53:36 +0000
Files and hashes:         1: 323830333a363239303a3a2f33322d3438203d3e203131343135.roa (hash: +OJuAxO9oIuqd8u/QwjBwcoCX475li84PbtNpgnIxXk=)
                          2: 323830333a363239303a3a2f33322d3438203d3e20323632353839.roa (hash: KYAan4yBbnUS/a31gPdBaKLS2+DyKm4O9NJzapnDqWw=)
                          3: 323830333a363239303a3a2f33322d3438203d3e203532343638.roa (hash: NyQpJ6JuIl0kmA6+iXTMZlYH09vbNzRGL+GZD/knMCs=)
                          4: 3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.crl (hash: pfw4Xuy/ixnW0RpUZ+zIxVG4GXhwgKn/iQ1cwTRAWhY=)
                          5: 323830333a363239303a3a2f33322d3438203d3e20323732383539.roa (hash: klNw1nZqutim71aOsjj3ACTiBo4bV6Nn0Rj4yTdFrV0=)
                          6: 323830333a363239303a3a2f33322d3438203d3e203631343631.roa (hash: mW1mlQHctzA3s5G9rZWvUPn/Mt6qdb6dYSYEUQBbbNI=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:80:33:17:93:63:21:e9:51:96:f5:59:8f:55:bc:13:4e:32:2e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292
        Validity
            Not Before: Apr  6 01:21:36 2025 GMT
            Not After : Apr 11 15:53:36 2025 GMT
        Subject: CN=3D657E51D412C6F0E546650A12B0E520F6D5927E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:39:3c:7c:cc:e7:aa:50:22:88:0c:68:c2:ff:
                    e2:4f:b6:c4:17:33:7c:38:62:06:f6:4d:44:4c:50:
                    29:5e:b1:a4:75:d0:bc:c0:b6:7d:57:8e:33:c2:99:
                    d1:ea:51:3b:7e:9d:fb:cd:77:85:0c:76:03:ae:f2:
                    69:c7:2b:b3:de:50:fc:d8:c4:6e:0b:66:12:af:4a:
                    bf:87:a3:2b:82:80:68:b4:74:d8:17:81:bd:8e:6a:
                    66:77:c9:e3:5a:97:47:cc:03:51:3c:ed:7a:28:b2:
                    8d:f2:b1:f6:ef:b9:62:12:b4:04:c2:e4:ce:09:b3:
                    db:4e:2e:2c:cd:3f:3a:dc:54:5b:9d:3f:b4:ae:e6:
                    3e:8e:15:d5:a8:9f:29:ba:15:ad:5c:e5:4b:21:23:
                    fe:ed:9b:0e:66:6a:06:55:f1:7a:79:27:f1:a0:7f:
                    bd:c8:91:1e:8f:3f:59:1a:a9:5e:f1:d5:7e:ba:2a:
                    5f:95:1a:06:38:fa:76:20:59:7e:01:b4:82:96:3b:
                    e7:25:cd:f4:4d:f6:26:35:a3:5a:ea:26:fe:f0:94:
                    26:3d:bd:31:01:5d:1f:66:ef:ae:f3:c5:9d:36:57:
                    9b:e6:16:e1:da:04:af:49:d8:26:16:9e:46:a8:78:
                    e9:20:fd:23:d6:51:62:cf:28:97:4a:73:91:26:29:
                    31:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:65:7E:51:D4:12:C6:F0:E5:46:65:0A:12:B0:E5:20:F6:D5:92:7E
            X509v3 Authority Key Identifier:
                keyid:3F:40:D9:6A:4F:BB:BE:F5:8B:DC:1A:8A:02:AB:0D:89:B2:B1:62:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:c5:c9:c1:90:6e:c4:b1:14:1b:6a:27:f2:cd:c7:f9:13:8d:
         d8:14:6d:40:db:58:b1:9a:fc:a7:d8:4d:20:e8:8a:04:c5:1f:
         13:9e:f6:41:25:ea:7e:87:20:7a:16:45:08:14:82:52:7a:3b:
         81:59:cf:1e:99:96:3b:d7:0c:55:df:61:63:90:0d:1f:90:4b:
         46:a4:c1:71:c4:da:43:a5:8d:27:5b:32:5a:24:c2:3a:f2:a9:
         c3:f1:a7:b1:f6:07:b6:aa:0c:2e:22:44:cb:d7:20:45:07:a6:
         f4:3c:27:84:34:0f:9e:71:6c:42:83:2f:e7:6f:e8:4c:f5:35:
         17:b6:ff:50:67:3e:96:79:c5:11:ae:eb:2e:ed:4b:bd:b3:84:
         f1:27:d7:a8:b4:94:45:8c:d9:d1:c2:3a:2e:6d:25:e7:3a:c1:
         70:69:b1:bd:7d:3c:52:d7:b0:d3:a8:c8:ba:7b:17:69:7b:72:
         d9:e7:7e:b2:a0:d5:05:47:75:9b:4a:f6:cc:6e:6f:4a:1b:d6:
         d3:c2:ae:bc:b0:a5:63:0e:6b:84:5e:46:01:2b:2d:96:41:c1:
         a5:a5:4f:b4:b6:d4:84:9e:dc:a0:28:dd:ae:50:06:a6:1d:6e:
         9d:cc:52:c0:96:0b:de:6f:9c:e9:44:26:07:59:5f:9d:43:3d:
         09:06:99:9e
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUAoAzF5NjIelRlvVZj1W8E04yLmgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y0MEQ5NkE0RkJCQkVGNThCREMxQThBMDJBQjBEODlC
MkIxNjI5MjAeFw0yNTA0MDYwMTIxMzZaFw0yNTA0MTExNTUzMzZaMDMxMTAvBgNV
BAMTKDNENjU3RTUxRDQxMkM2RjBFNTQ2NjUwQTEyQjBFNTIwRjZENTkyN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtOTx8zOeqUCKIDGjC/+JPtsQX
M3w4Ygb2TURMUClesaR10LzAtn1XjjPCmdHqUTt+nfvNd4UMdgOu8mnHK7PeUPzY
xG4LZhKvSr+HoyuCgGi0dNgXgb2OamZ3yeNal0fMA1E87Xooso3ysfbvuWIStATC
5M4Js9tOLizNPzrcVFudP7Su5j6OFdWonym6Fa1c5UshI/7tmw5magZV8Xp5J/Gg
f73IkR6PP1kaqV7x1X66Kl+VGgY4+nYgWX4BtIKWO+clzfRN9iY1o1rqJv7wlCY9
vTEBXR9m767zxZ02V5vmFuHaBK9J2CYWnkaoeOkg/SPWUWLPKJdKc5EmKTEFAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUPWV+UdQSxvDlRmUKErDlIPbVkn4wHwYDVR0j
BBgwFoAUP0DZak+7vvWL3BqKAqsNibKxYpIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRjFBOTAzNTQ1MjQ4ODU1RkYyMTg1RjI0QTMxRjFGQjlG
RUIyNUFGRUUzQURCMENCODJEQzk3NTg0NkU4Nzg1LzAvM0Y0MEQ5NkE0RkJCQkVG
NThCREMxQThBMDJBQjBEODlCMkIxNjI5Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRjQwRDk2QTRGQkJCRUY1OEJE
QzFBOEEwMkFCMEQ4OUIyQjE2MjkyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0YxQTkwMzU0NTI0ODg1NUZGMjE4NUYyNEEzMUYxRkI5RkVCMjVBRkVF
M0FEQjBDQjgyREM5NzU4NDZFODc4NS8wLzNGNDBEOTZBNEZCQkJFRjU4QkRDMUE4
QTAyQUIwRDg5QjJCMTYyOTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBhxcnBkG7EsRQbaifyzcf5E43Y
FG1A21ixmvyn2E0g6IoExR8TnvZBJep+hyB6FkUIFIJSejuBWc8emZY71wxV32Fj
kA0fkEtGpMFxxNpDpY0nWzJaJMI68qnD8aex9ge2qgwuIkTL1yBFB6b0PCeENA+e
cWxCgy/nb+hM9TUXtv9QZz6WecURrusu7Uu9s4TxJ9eotJRFjNnRwjoubSXnOsFw
abG9fTxS17DTqMi6exdpe3LZ536yoNUFR3WbSvbMbm9KG9bTwq68sKVjDmuEXkYB
Ky2WQcGlpU+0ttSEntygKN2uUAamHW6dzFLAlgveb5zpRCYHWV+dQz0JBpme
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:57:22 2025 by rpki-client