Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.mft
File:                     208A6A9014A4D9F040F76110276AD236D1F5C14E.mft (raw, json)
Hash identifier:          NwiMsOTXwARMqjLlOaqrJGTXAo5/o9OyWRsJMDCtN/g=
Subject key identifier:   66:AF:0F:B6:1E:27:F2:89:A9:15:8C:5E:F6:80:42:F3:08:7F:9C:03
Authority key identifier: 20:8A:6A:90:14:A4:D9:F0:40:F7:61:10:27:6A:D2:36:D1:F5:C1:4E
Certificate issuer:       /CN=208A6A9014A4D9F040F76110276AD236D1F5C14E
Certificate serial:       535F1417109BA3C1610AD759ACC0280C3ACFE9D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.mft
Manifest number:          0123
Signing time:             Mon 20 Oct 2025 17:22:51 +0000
Manifest this update:     Mon 20 Oct 2025 17:17:51 +0000
Manifest next update:     Sun 26 Oct 2025 09:50:51 +0000
Files and hashes:         1: 208A6A9014A4D9F040F76110276AD236D1F5C14E.crl (hash: cy2108z3Bzr4+ccgADOKwxuKpYsd9LkSEqRE1laOE1w=)
                          2: 323830363a3366353a3a2f33322d3438203d3e20323730313837.roa (hash: VFAlc0cePVLu4upHkJORWa3QVlOImUDpD1tBIBNFF7Q=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 26 Oct 2025 09:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:5f:14:17:10:9b:a3:c1:61:0a:d7:59:ac:c0:28:0c:3a:cf:e9:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208A6A9014A4D9F040F76110276AD236D1F5C14E
        Validity
            Not Before: Oct 20 17:17:51 2025 GMT
            Not After : Oct 26 09:50:51 2025 GMT
        Subject: CN=66AF0FB61E27F289A9158C5EF68042F3087F9C03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0e:fa:26:b5:ad:0c:7c:c0:bd:38:aa:30:cf:
                    58:6d:dc:81:fb:61:c5:f3:ba:33:7e:33:f0:79:9d:
                    e3:e9:89:37:81:71:0c:02:fe:20:a6:2c:fd:09:27:
                    40:a8:5d:0d:9a:f9:b5:53:69:7b:d6:5c:bc:f9:02:
                    59:61:b5:d0:dd:27:7d:00:73:82:26:8c:e1:b9:89:
                    e9:6c:2c:e3:8c:4e:55:9c:34:cf:f7:f9:35:8f:d8:
                    c5:ad:8a:52:15:3b:77:3e:65:12:63:f5:46:7d:c9:
                    c5:12:a5:3a:f1:d6:b9:ab:bb:5f:c9:2e:64:ec:0a:
                    28:c0:2e:9c:52:c6:9c:e5:74:69:39:71:aa:07:36:
                    b2:83:34:bb:57:20:57:02:9a:53:38:b9:2c:2d:50:
                    ad:45:c5:9f:c7:d7:c3:8b:16:92:07:2f:8f:fc:42:
                    8c:f1:0d:33:76:fb:ad:a3:18:f3:e2:35:81:4f:7f:
                    da:09:73:28:b3:f7:9e:21:67:98:0d:85:1f:8a:b6:
                    e8:49:85:2d:13:3a:1f:f2:08:08:55:15:31:27:b0:
                    2e:e3:0a:7d:37:61:ba:33:d2:e1:fa:b2:e8:26:5d:
                    77:d5:a2:10:1d:94:c3:9a:45:a8:17:6a:02:5f:24:
                    1e:dc:c7:ea:f7:25:ce:35:69:04:38:aa:96:5a:9f:
                    dc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AF:0F:B6:1E:27:F2:89:A9:15:8C:5E:F6:80:42:F3:08:7F:9C:03
            X509v3 Authority Key Identifier:
                keyid:20:8A:6A:90:14:A4:D9:F0:40:F7:61:10:27:6A:D2:36:D1:F5:C1:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:36:ca:47:b3:28:da:08:49:b0:fb:86:8a:d4:d5:54:51:d4:
         b8:d4:0d:55:71:91:78:5a:b3:43:2b:80:20:7d:8c:c8:3b:b6:
         2a:29:39:02:14:7a:f1:4d:c6:f0:ef:2e:39:0c:bd:c5:d9:61:
         41:d6:e0:db:f4:bd:ee:94:32:9b:ef:c7:59:87:e1:08:57:51:
         4a:a9:0a:4b:8d:5a:a2:de:d5:0c:e1:62:1e:b2:38:42:21:07:
         fc:bb:71:12:56:73:0a:e5:28:45:fa:bf:05:a0:fe:f8:7c:05:
         4f:55:d5:9f:e0:0b:f2:08:85:e4:a2:b5:c6:58:8b:5b:c7:d2:
         ce:3c:ec:e4:f6:fa:6f:63:21:0b:64:95:77:cf:de:92:45:b3:
         52:4c:83:a9:56:96:d6:fb:8b:0f:c4:21:ec:8f:3c:bd:82:a0:
         a0:a5:b1:46:54:fe:44:ad:f9:88:fa:cf:af:d6:ab:7c:66:8c:
         d1:90:95:d4:39:f7:92:b7:24:a9:35:17:5c:e7:b8:3b:57:31:
         a0:12:79:91:ca:a6:1a:ba:e4:a6:ce:60:9b:72:41:ac:d0:47:
         2f:ac:73:d2:62:ae:0c:66:4e:a3:e0:a8:96:50:91:ef:55:90:
         df:8e:8c:b6:63:b9:ee:07:53:a0:ac:1f:52:a7:c6:74:08:2f:
         d1:d8:87:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 17:51:29 2025 by rpki-client