Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft
File:                     CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft (raw, json)
Hash identifier:          okNj6SyZxmvp/hwCatBh/HVOjBnyk5thhYCX5gTRHyg=
Subject key identifier:   10:F0:DA:3C:9E:75:4D:64:1C:32:F5:AA:16:BD:7B:41:00:C0:E5:B6
Authority key identifier: CB:54:1D:B7:3D:99:5A:E5:5C:80:8A:0E:77:CB:FF:87:3C:CA:E4:4F
Certificate issuer:       /CN=CB541DB73D995AE55C808A0E77CBFF873CCAE44F
Certificate serial:       64121F5CC5D46DB6F916CAC7AE37C8A90CAB69CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft
Manifest number:          013C
Signing time:             Sun 09 Nov 2025 18:10:33 +0000
Manifest this update:     Sun 09 Nov 2025 18:05:33 +0000
Manifest next update:     Sat 15 Nov 2025 01:08:33 +0000
Files and hashes:         1: CB541DB73D995AE55C808A0E77CBFF873CCAE44F.crl (hash: IQ7TyfqHD5vCQZdnXwBeavwF75VesecFyyWAIrk9OK8=)
                          2: 3137302e302e31322e302f32322d3234203d3e20323633313537.roa (hash: I1spZtmjli5MIwwNOJwdw/M5IEaUcgYj0x1Wd2NiQeY=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Nov 2025 06:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:12:1f:5c:c5:d4:6d:b6:f9:16:ca:c7:ae:37:c8:a9:0c:ab:69:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB541DB73D995AE55C808A0E77CBFF873CCAE44F
        Validity
            Not Before: Nov  9 18:05:33 2025 GMT
            Not After : Nov 15 01:08:33 2025 GMT
        Subject: CN=10F0DA3C9E754D641C32F5AA16BD7B4100C0E5B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b6:48:e3:e3:db:9d:11:75:18:a7:f9:9e:15:
                    69:50:0a:cb:5f:4e:62:7d:17:0d:fa:ad:21:a2:e2:
                    b7:84:82:23:24:fd:5d:7e:65:34:65:b5:f0:1d:34:
                    e8:9e:47:29:eb:33:ba:41:2f:2a:a2:b1:e2:ad:29:
                    54:34:ab:8a:2a:ef:09:84:34:c9:c5:05:9c:46:ae:
                    d3:52:0a:ef:ee:06:75:72:c8:ec:8c:71:33:5d:1e:
                    3e:d2:05:fd:55:c2:09:53:28:72:f7:b2:80:1b:12:
                    1c:45:e2:f2:62:1f:5a:29:b0:cc:bb:a5:6d:01:9b:
                    e4:14:d9:97:c9:87:29:be:9d:67:bb:7b:71:5f:69:
                    e7:57:ad:66:74:fc:31:c1:24:c2:f5:79:8d:01:5c:
                    e8:80:1a:c4:34:e3:a8:5c:2d:3b:ef:66:34:89:7c:
                    2f:e0:e9:fa:6c:54:79:80:51:98:94:7c:ee:ea:09:
                    b4:8c:a9:3f:d0:c2:1f:24:d9:13:93:f1:a9:ef:0f:
                    65:be:0e:e7:cc:88:e3:34:29:86:79:89:d3:7b:1d:
                    56:d6:f4:41:4a:73:40:bb:39:96:9a:88:d4:55:7a:
                    36:1a:f8:ae:fb:2f:f9:8d:a7:61:7c:95:1c:34:34:
                    98:75:60:22:10:78:65:fd:10:96:16:9c:d9:31:47:
                    36:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F0:DA:3C:9E:75:4D:64:1C:32:F5:AA:16:BD:7B:41:00:C0:E5:B6
            X509v3 Authority Key Identifier:
                keyid:CB:54:1D:B7:3D:99:5A:E5:5C:80:8A:0E:77:CB:FF:87:3C:CA:E4:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:5c:03:b1:a8:99:8c:8a:b6:7d:20:e4:53:dd:8c:a0:15:cb:
         b9:fd:f0:2b:53:f8:7c:f5:a8:aa:fd:08:cc:c4:9e:5f:ac:39:
         fd:3e:e2:76:c2:bb:37:51:1c:49:b9:a8:b9:df:88:c6:77:34:
         d9:f8:1c:95:51:7b:a6:44:c3:a7:70:a1:71:e3:a8:9c:79:b8:
         c9:f4:e7:3d:72:42:d1:c4:4c:00:44:2b:38:08:23:d0:6f:a9:
         7a:5e:37:64:85:cf:0d:45:d7:8a:86:fe:93:fa:49:74:de:85:
         db:68:ae:28:86:6b:e1:ca:84:7f:f3:29:c0:06:7b:6b:db:b7:
         61:fc:c4:75:be:91:82:a8:08:d1:4f:c7:20:62:ba:5a:38:a0:
         0b:b3:30:70:d8:6e:d9:83:25:be:ee:f9:57:ca:30:bc:e7:5a:
         90:07:f5:19:86:8c:c0:ec:69:7c:88:59:4f:51:3a:92:3a:44:
         01:8a:5d:a8:e3:62:28:bb:8f:7a:e1:e1:5f:b9:c3:90:2c:6a:
         fd:dd:3f:84:a2:d1:af:52:ab:dc:b9:af:60:82:e4:bd:36:36:
         bc:84:fe:a3:38:79:99:dd:2e:a1:05:83:d2:c2:25:35:6d:1e:
         69:06:79:f1:3f:b6:7a:b1:e3:e6:19:81:0a:56:ac:8a:a1:a2:
         91:d7:c4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 10 14:11:13 2025 by rpki-client