Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.mft
File:                     208A6A9014A4D9F040F76110276AD236D1F5C14E.mft (raw, json)
Hash identifier:          vOpZAlBUNhtFFoQeO/sdXAXClfjKEnNZoMni0pA56Z0=
Subject key identifier:   64:B8:B3:7A:72:83:D9:D5:FB:4D:0A:63:B9:05:29:03:77:7B:88:C9
Authority key identifier: 20:8A:6A:90:14:A4:D9:F0:40:F7:61:10:27:6A:D2:36:D1:F5:C1:4E
Certificate issuer:       /CN=208A6A9014A4D9F040F76110276AD236D1F5C14E
Certificate serial:       0CD0E7397D33500A866407C0DA28B3504B14DFE1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.mft
Manifest number:          EF
Signing time:             Thu 10 Jul 2025 05:48:53 +0000
Manifest this update:     Thu 10 Jul 2025 05:43:53 +0000
Manifest next update:     Mon 14 Jul 2025 23:19:53 +0000
Files and hashes:         1: 323830363a3366353a3a2f33322d3332203d3e20323730313837.roa (hash: raPkbGN8o+41tuLZij+Ifemtqlo+SUvZ6oC4WiiMEe4=)
                          2: 208A6A9014A4D9F040F76110276AD236D1F5C14E.crl (hash: u4zD3QPMrWCXX9oECPl0ideKiKnI/ZqOTC+NZtz7a3Q=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Jul 2025 21:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d0:e7:39:7d:33:50:0a:86:64:07:c0:da:28:b3:50:4b:14:df:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208A6A9014A4D9F040F76110276AD236D1F5C14E
        Validity
            Not Before: Jul 10 05:43:53 2025 GMT
            Not After : Jul 14 23:19:53 2025 GMT
        Subject: CN=64B8B37A7283D9D5FB4D0A63B9052903777B88C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1d:90:78:cb:36:8d:8e:e4:42:c2:ee:ca:f1:
                    ad:6e:0f:7b:81:62:79:c9:7b:df:4a:db:ad:2a:43:
                    1c:70:5a:94:40:68:2b:fe:80:14:11:bf:55:92:1e:
                    68:7c:69:f9:44:10:57:52:c6:a9:09:de:5b:39:3d:
                    e2:b4:a4:d7:ca:d6:b2:7f:d7:b8:71:a4:65:9d:1a:
                    4b:02:03:3b:b0:57:ef:2c:ea:23:94:38:40:39:2d:
                    42:da:ed:ef:8e:2e:58:36:2d:ef:90:30:ad:75:5a:
                    6c:f0:bc:43:c7:27:d7:54:77:aa:41:35:62:f1:52:
                    d5:2a:10:13:63:b3:da:30:2f:87:30:a1:34:e9:56:
                    1a:38:e8:ed:41:db:71:3a:93:54:ab:18:1e:fc:41:
                    b1:06:48:87:e0:0a:22:95:bf:e2:ad:25:91:02:73:
                    44:41:49:17:fc:b3:33:1e:2a:66:97:84:9c:17:fd:
                    c3:1c:88:06:12:ca:21:15:c6:4f:75:51:e0:a2:8b:
                    f9:fb:9c:e7:d6:fc:a2:a8:a1:82:62:96:e9:b4:14:
                    23:82:e1:b4:a3:da:20:59:ef:54:33:3d:4b:aa:85:
                    8e:4c:1e:bd:6c:ce:17:94:ec:e6:dd:b4:ae:f3:5b:
                    4c:3b:00:03:b8:6f:b2:14:dc:8f:f5:f8:06:3c:c9:
                    a2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B8:B3:7A:72:83:D9:D5:FB:4D:0A:63:B9:05:29:03:77:7B:88:C9
            X509v3 Authority Key Identifier:
                keyid:20:8A:6A:90:14:A4:D9:F0:40:F7:61:10:27:6A:D2:36:D1:F5:C1:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:5f:94:73:f9:73:fa:db:b3:4e:0c:53:de:09:e4:16:65:f9:
         21:c7:03:ed:5f:34:fa:a4:77:4c:e1:56:e8:02:ac:d7:a4:74:
         d0:87:36:c5:7b:b4:42:ea:9e:98:af:4e:ab:7e:06:4e:68:49:
         57:1c:64:a6:4e:9a:8e:b1:4c:ab:2d:29:87:84:5a:67:04:fb:
         f9:08:0b:32:3d:03:33:59:05:cc:cc:9f:5d:a1:fb:77:15:09:
         79:a9:35:bd:c8:14:5a:1d:ad:ac:30:38:4d:99:bd:b9:f4:73:
         d2:31:8c:d0:08:05:a8:ac:1c:fe:b9:31:c3:dd:b1:25:e8:bc:
         20:1f:43:a5:db:c1:1b:1e:b3:aa:90:d9:bd:9b:50:d8:90:3e:
         6b:be:93:9f:2e:0e:db:97:74:1a:60:7c:6c:46:ce:e9:4c:28:
         ed:1c:a7:b1:d8:28:4f:d7:7e:e0:f7:e2:c2:89:42:b2:26:77:
         0f:08:cc:4d:3c:a4:d1:e1:a7:9d:aa:37:9a:56:b0:86:6a:be:
         75:ee:03:57:2d:f4:63:95:81:fc:d4:9b:d2:e0:6b:8f:ee:8c:
         7c:18:6d:26:29:ba:c5:48:c7:61:78:0c:94:04:61:21:59:2a:
         97:4e:21:e5:b0:6e:2a:fc:66:38:69:8f:5a:77:e1:c5:0a:ac:
         b7:2f:25:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 11:22:49 2025 by rpki-client