Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft
File:                     5021716DB872AFEA302E881734C3D03B1DCE1384.mft (raw, json)
Hash identifier:          gOEcg1T9c3LnPqKamXcaf77+W7lzAsYiWZdHdDaTSxc=
Subject key identifier:   57:D5:27:6D:EC:A7:F3:4E:D4:A7:A2:7D:05:A3:96:AC:29:6B:33:50
Authority key identifier: 50:21:71:6D:B8:72:AF:EA:30:2E:88:17:34:C3:D0:3B:1D:CE:13:84
Certificate issuer:       /CN=5021716DB872AFEA302E881734C3D03B1DCE1384
Certificate serial:       1031D49BCF87988152967385F0DB922B8C4A8063
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft
Manifest number:          CA
Signing time:             Sun 13 Apr 2025 09:36:37 +0000
Manifest this update:     Sun 13 Apr 2025 09:31:37 +0000
Manifest next update:     Thu 17 Apr 2025 17:43:37 +0000
Files and hashes:         1: 5021716DB872AFEA302E881734C3D03B1DCE1384.crl (hash: A9k9nIlbNcCViSWolFHs8nnriQC2r5v2V1SqFoqnUa0=)
                          2: 323830333a613339303a3a2f33322d3438203d3e20323733303135.roa (hash: 2oSwKrz6vwox7aQCuIM+FoLcJChYMj4MeA8HE/N/tRY=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 17:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:31:d4:9b:cf:87:98:81:52:96:73:85:f0:db:92:2b:8c:4a:80:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5021716DB872AFEA302E881734C3D03B1DCE1384
        Validity
            Not Before: Apr 13 09:31:37 2025 GMT
            Not After : Apr 17 17:43:37 2025 GMT
        Subject: CN=57D5276DECA7F34ED4A7A27D05A396AC296B3350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b0:a2:f4:8c:2b:38:f1:cb:ce:42:99:60:b4:
                    aa:b9:e0:46:17:c8:69:1f:90:04:dd:79:82:76:96:
                    8e:91:bf:41:4a:34:a1:9f:3f:53:63:b2:f9:0d:67:
                    78:17:f7:7b:a1:e1:6d:7a:21:9d:ee:06:a4:58:08:
                    e9:f2:19:3b:ff:ec:06:60:5c:82:30:75:e2:11:09:
                    21:ab:81:2c:7d:83:51:a2:f0:09:e9:c4:c1:c2:64:
                    16:6c:a2:3a:eb:de:b7:07:59:cb:07:16:a9:7e:46:
                    3a:d1:6d:78:a8:12:9d:ce:b3:60:12:95:13:fd:ec:
                    01:82:40:61:4e:01:fe:ac:3f:ea:ee:a2:18:00:fb:
                    fc:9d:f5:f3:34:f6:f9:f0:31:70:f2:6a:09:58:42:
                    c4:39:d5:c3:70:d0:cc:9b:c0:ab:11:21:8f:f7:a2:
                    43:b2:35:4c:fc:89:3d:89:5b:5f:2b:db:3e:f8:30:
                    dc:c7:15:8b:bf:36:a9:86:a9:b3:75:c6:98:70:0e:
                    01:61:7e:95:6b:5f:b1:47:37:34:2f:39:4c:70:af:
                    fd:97:75:15:47:87:1a:57:14:74:94:14:17:f1:91:
                    ca:63:79:4a:ff:7f:91:26:44:0a:14:d4:e1:1a:a1:
                    48:ff:e4:dd:c7:60:ec:e8:e6:d6:4d:4e:aa:0a:f6:
                    56:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D5:27:6D:EC:A7:F3:4E:D4:A7:A2:7D:05:A3:96:AC:29:6B:33:50
            X509v3 Authority Key Identifier:
                keyid:50:21:71:6D:B8:72:AF:EA:30:2E:88:17:34:C3:D0:3B:1D:CE:13:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5021716DB872AFEA302E881734C3D03B1DCE1384.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5297B7078FB1B521006D751A32A2AC35F614617522484F887E5E77A2CFC75257/0/5021716DB872AFEA302E881734C3D03B1DCE1384.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:37:02:98:9c:e5:73:46:e7:a8:2e:a1:cb:dc:90:eb:3a:a9:
         b6:c4:4d:82:66:32:3e:27:3e:20:62:95:e1:10:e1:32:7e:31:
         07:7f:46:61:d7:be:69:70:92:03:4d:33:91:0b:68:c0:f6:86:
         42:5f:d8:2d:79:d5:5e:cd:3a:97:7c:c2:aa:53:03:75:7b:26:
         7b:39:77:40:35:99:d0:6c:94:8b:2f:63:d6:c3:49:fa:f9:c5:
         56:fa:74:97:48:fb:d1:18:85:49:22:00:c0:ba:4f:ca:88:4f:
         f0:d7:08:ad:44:51:3a:7f:18:50:c6:31:08:0d:34:e9:16:7d:
         55:1e:b9:90:59:25:3c:b6:62:a2:0a:a5:27:bb:61:a3:60:d1:
         58:b0:88:81:4b:98:e1:96:98:12:83:22:4c:a9:12:54:b2:fb:
         bb:e8:43:dc:e6:9a:01:28:0f:76:6b:fe:e9:91:19:81:ae:4f:
         20:2e:b6:f5:6d:7e:f7:50:6e:4b:c8:d6:f9:26:d1:ec:4f:7f:
         2e:ed:e5:49:bd:52:cc:9a:e0:a7:3f:0e:43:0e:b6:18:e7:75:
         7e:56:c2:b5:1b:7a:d6:6a:f9:75:5b:c6:a1:1b:10:67:8d:ef:
         a4:76:0b:a3:27:d6:07:56:51:78:00:80:e0:3c:8b:fb:46:3c:
         7e:d6:bd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----