Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.mft
File:                     FF591A13316346A2BCEF07F6DF8D44DD0250F841.mft (raw, json)
Hash identifier:          U/JAZN7p3r9jlYwbvrmJO3KtkgFXTMsXOVfYm467RIo=
Subject key identifier:   42:FD:6E:BB:00:74:76:8E:29:F2:7B:E0:D3:E6:59:97:C4:AE:F9:3E
Authority key identifier: FF:59:1A:13:31:63:46:A2:BC:EF:07:F6:DF:8D:44:DD:02:50:F8:41
Certificate issuer:       /CN=FF591A13316346A2BCEF07F6DF8D44DD0250F841
Certificate serial:       16E24AFCA18376EFF4C764A9B7B02ADCF621AC42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.mft
Manifest number:          B8
Signing time:             Tue 29 Jul 2025 18:27:27 +0000
Manifest this update:     Tue 29 Jul 2025 18:22:27 +0000
Manifest next update:     Sun 03 Aug 2025 14:24:27 +0000
Files and hashes:         1: 3230302e302e39322e302f32332d3234203d3e203238333934.roa (hash: KIAINCVXWi16ODipuPi8LpywZN07lABefP1ISKZluXE=)
                          2: 323830363a3231373a3a2f33322d3438203d3e203238333934.roa (hash: t8tQAxHK5SM0hJcnJTUNhCO83Gm9y+i54W9HMI+9QI0=)
                          3: FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl (hash: 88FW6Ge4a+PyVwRgjxTTJZGTXR3zQvVIc0qulzSzqKc=)
                          4: 3230302e302e39302e302f32332d3234203d3e203238333934.roa (hash: dsNqsIRLppipfiK97wDbOfVrZDkGOJmmC7ZfbZLOODI=)
                          5: 3133382e3235352e36302e302f32322d3234203d3e203238333934.roa (hash: N66mU5uJs32JivTi2W6CcithMD57RUBysR4Giw1J7JI=)
                          6: 323830363a3231373a3a2f33322d3332203d3e203238333934.roa (hash: FXknVxNPT5LYbdPpdHBuWLg+h+5sHKCVghfPHeZGevY=)
                          7: 3137302e3234352e3138382e302f32322d3234203d3e203238333934.roa (hash: kjGxhRSboyoxdVbo+qay7VTDzNqCoExfsGaSS4CipDA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 03 Aug 2025 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e2:4a:fc:a1:83:76:ef:f4:c7:64:a9:b7:b0:2a:dc:f6:21:ac:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF591A13316346A2BCEF07F6DF8D44DD0250F841
        Validity
            Not Before: Jul 29 18:22:27 2025 GMT
            Not After : Aug  3 14:24:27 2025 GMT
        Subject: CN=42FD6EBB0074768E29F27BE0D3E65997C4AEF93E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:75:90:4e:46:76:4e:7f:5a:9a:13:50:da:33:
                    f6:bb:33:26:62:9e:33:d2:3c:2b:42:44:a2:be:d1:
                    f4:92:20:16:96:2a:d5:d9:a3:c9:6c:fc:6f:fd:53:
                    e0:27:68:64:f9:c4:cc:ca:df:32:12:20:89:96:68:
                    9b:9f:70:09:0d:64:9c:e1:03:67:6b:0e:87:82:43:
                    5b:f5:ed:0f:e6:46:55:cc:88:c7:8d:b9:4d:96:15:
                    b5:a1:9f:e2:60:22:43:f1:2f:a4:eb:c0:20:0c:8f:
                    b3:61:25:87:2e:76:88:e6:da:1c:f7:6c:f4:4f:8f:
                    7c:73:0a:72:b5:15:6c:20:14:ac:aa:e0:6a:00:19:
                    3f:49:b9:b9:f4:3e:04:65:f9:80:b1:cf:a5:2d:ae:
                    1f:5b:ee:e4:6d:ad:9b:dd:65:a5:a1:5f:cc:ee:49:
                    ee:71:b0:a3:07:8c:9c:8f:4e:45:08:ca:d2:92:1f:
                    a6:4e:82:33:81:8d:1e:57:27:1b:08:32:4d:81:66:
                    f0:9a:c9:ea:cc:91:92:26:8f:22:62:5c:bb:45:d6:
                    d5:b3:f8:01:a9:68:f4:9d:0c:1e:b1:80:a1:73:61:
                    4e:e3:65:fd:81:64:4c:23:0f:d8:83:72:d4:c6:7c:
                    02:dc:85:c9:b3:1e:e1:02:91:79:38:fa:4f:38:26:
                    7e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FD:6E:BB:00:74:76:8E:29:F2:7B:E0:D3:E6:59:97:C4:AE:F9:3E
            X509v3 Authority Key Identifier:
                keyid:FF:59:1A:13:31:63:46:A2:BC:EF:07:F6:DF:8D:44:DD:02:50:F8:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:c1:cf:78:40:1f:a8:0f:60:88:2b:1d:13:2d:df:48:e5:51:
         03:87:30:56:86:28:6d:08:4e:de:7a:97:1c:be:41:6f:b5:76:
         82:0c:ec:43:99:54:aa:8d:c3:de:7b:9b:47:de:18:eb:70:a6:
         73:73:c5:8f:77:47:90:b3:0d:7e:46:10:1a:fc:9f:a6:8a:18:
         72:8a:98:e4:af:2b:79:e2:8e:50:01:cc:f2:af:fa:59:97:c9:
         fb:a5:d5:7f:9d:5e:07:32:5e:dc:65:5e:f9:02:82:96:44:00:
         ea:af:a6:19:ce:85:7b:f0:76:00:57:96:77:f3:ec:d7:79:14:
         05:aa:8c:55:e8:b4:4f:65:c0:08:62:c2:48:17:ac:40:12:6c:
         86:6b:c6:b9:73:8f:62:46:f7:ad:46:72:42:f2:4a:8d:b5:47:
         39:11:3f:78:32:46:6c:47:92:93:7f:6d:30:5b:5e:e1:e5:1a:
         79:26:3a:73:c1:8d:48:61:84:60:81:34:1f:24:39:e1:fa:29:
         40:bd:d3:d3:80:98:c3:46:c9:6c:41:9a:81:79:84:75:44:85:
         2e:c3:b5:be:8c:de:44:bc:df:03:d6:7c:7a:0a:16:e7:6b:a2:
         fe:ff:2d:20:df:c8:b7:07:d4:7e:eb:35:19:91:48:5d:ba:aa:
         b9:1d:6c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 10:15:46 2025 by rpki-client