Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.mft
File:                     6849B5A5EAE77557BB150A5044601E12FBB39CE9.mft (raw, json)
Hash identifier:          6KPWFeAfjxAlFB0FTRWR/iqMeM8KkBKzJ7bxEfGbyNo=
Subject key identifier:   45:5A:37:1E:E4:E0:CB:8C:32:60:FC:80:D8:8D:EF:4A:57:05:18:62
Authority key identifier: 68:49:B5:A5:EA:E7:75:57:BB:15:0A:50:44:60:1E:12:FB:B3:9C:E9
Certificate issuer:       /CN=6849B5A5EAE77557BB150A5044601E12FBB39CE9
Certificate serial:       0E4F7B1ECD9DE2E41912348B214D0D48723BDD30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.mft
Manifest number:          E3
Signing time:             Mon 02 Jun 2025 07:53:47 +0000
Manifest this update:     Mon 02 Jun 2025 07:48:47 +0000
Manifest next update:     Sun 08 Jun 2025 05:24:47 +0000
Files and hashes:         1: 3137372e3132342e38342e302f32322d3232203d3e203238343332.roa (hash: FlVYzkL34mQ7qjfyCUio3x9mmpEUK/9lvAFevIK49uM=)
                          2: 3137372e3132342e38352e302f32342d3234203d3e20323730313532.roa (hash: 0mbKu1xZ7+nqKXvTh4RhfqMDUOfUA3NXKTVu2gztBCY=)
                          3: 6849B5A5EAE77557BB150A5044601E12FBB39CE9.crl (hash: vWlwxx02NO7GefsQnxZlxQ32s7oM3Axfd4UY+u0KFuw=)
                          4: 3137372e3132342e38352e302f32342d3234203d3e203238343332.roa (hash: lrm+UIjfmfIuTjoAo4MD9po36+uUreI33kUjSPjMCUk=)
                          5: 3137372e3132342e38362e302f32342d3234203d3e203238343332.roa (hash: 8pY1toGsXrahUyChPa6O5C0oCDA84cukfBrLczJERSg=)
                          6: 3137372e3132342e38372e302f32342d3234203d3e20323730313532.roa (hash: w3pe6/RyMd+225qYh2miIgXUTb4or/xTJT3Gjhfs6/o=)
                          7: 3137372e3132342e38372e302f32342d3234203d3e203238343332.roa (hash: 3wIENJj2AYxWFGWT6DauA/SKsAPbKC0mnOeIUH1PaSk=)
                          8: 3137372e3132342e38342e302f32342d3234203d3e203238343332.roa (hash: Xjpn6s/En9ysoFuWzcfNVXBIc+gfP9h2lwiuQwbX5zQ=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 03:04:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:4f:7b:1e:cd:9d:e2:e4:19:12:34:8b:21:4d:0d:48:72:3b:dd:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6849B5A5EAE77557BB150A5044601E12FBB39CE9
        Validity
            Not Before: Jun  2 07:48:47 2025 GMT
            Not After : Jun  8 05:24:47 2025 GMT
        Subject: CN=455A371EE4E0CB8C3260FC80D88DEF4A57051862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:25:66:9e:64:b0:58:48:cf:b4:0b:84:b2:82:
                    eb:12:99:e0:b5:35:5e:4d:91:da:27:d0:25:52:a2:
                    33:1b:e4:37:0a:ed:c9:e0:13:9c:9d:94:31:84:30:
                    9d:90:1b:04:47:99:05:99:19:d7:f4:8a:c4:57:81:
                    7f:35:8f:ba:77:91:ff:36:d8:9b:c5:86:c9:89:bd:
                    0c:20:0c:c6:b9:94:14:4f:0b:8f:47:b2:fc:79:1b:
                    e7:e3:3a:c1:4d:72:2b:81:f2:f1:19:9a:6b:76:92:
                    5d:20:59:61:84:63:21:94:7c:73:77:57:4a:15:b8:
                    91:eb:3e:22:cf:6d:92:e6:d0:e9:9e:18:fd:e8:b3:
                    05:24:5f:06:b2:90:94:3b:b2:c9:b2:f5:e8:36:6f:
                    6f:92:49:54:25:34:2c:9f:0d:9d:82:3c:57:fe:fb:
                    f8:f3:52:3c:25:61:5e:8a:92:fe:b0:1b:93:51:90:
                    99:81:3a:60:48:4a:ef:58:c1:f1:ce:39:8a:76:f6:
                    5d:a8:a1:24:b6:db:df:a2:d4:5f:6f:3c:a1:4e:23:
                    d8:b5:a1:f4:03:8a:c4:bf:1d:c3:43:5f:40:a1:8f:
                    4a:7c:f8:60:d2:5d:11:9c:66:7f:9f:03:6a:a9:02:
                    9a:f0:81:5b:d5:73:0e:d3:be:d0:70:e5:d7:dd:6b:
                    53:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5A:37:1E:E4:E0:CB:8C:32:60:FC:80:D8:8D:EF:4A:57:05:18:62
            X509v3 Authority Key Identifier:
                keyid:68:49:B5:A5:EA:E7:75:57:BB:15:0A:50:44:60:1E:12:FB:B3:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:85:3e:0a:76:bc:51:c7:0b:a7:06:47:8b:a0:5a:c9:58:ad:
         64:d1:78:e3:02:ec:f1:f9:d8:1d:38:ea:5e:98:f5:49:ee:4b:
         27:e7:b8:0e:e2:ce:ad:a3:f1:8e:8f:1d:9d:9a:55:36:ce:3d:
         6b:a4:0b:30:11:3e:fb:46:d7:f5:57:1e:61:43:25:b8:e7:32:
         4f:31:5a:70:98:c5:f5:e9:6a:81:94:a4:4a:f2:90:c7:c9:ff:
         57:00:b1:96:05:7f:99:49:59:69:8b:cc:2e:92:20:73:12:8c:
         68:44:85:e4:f0:6d:5e:cb:6f:27:18:31:c8:b8:e4:0a:9c:e5:
         e9:d7:28:a4:b0:50:26:f7:a6:b3:01:55:9e:8c:38:60:cf:24:
         60:fc:30:a6:35:36:02:6e:23:2b:3f:15:19:23:e7:9e:62:6b:
         df:f6:5f:77:26:9d:1e:34:05:62:a0:fb:fb:a7:a7:04:6d:ee:
         21:29:6a:f6:99:36:39:76:1b:9e:18:a4:f3:17:b9:7a:4f:6e:
         d6:c5:86:b7:c7:a1:5d:97:4b:6c:51:b3:16:a6:56:ad:5a:f0:
         bb:72:74:bb:63:49:9a:df:5f:fb:14:05:38:a2:48:79:38:8e:
         ab:e1:e9:71:32:ac:24:df:f2:fe:76:ca:4a:c3:79:be:aa:ba:
         b0:63:ee:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:31:34 2025 by rpki-client