Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.mft
File:                     3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.mft (raw, json)
Hash identifier:          V0g0Ae/G+2YatyzQwpNBlgatoN4fH48hhZnET5DSiRU=
Subject key identifier:   6B:84:46:34:83:9B:E0:91:B7:05:BA:19:F6:D8:22:2A:E3:96:1B:6B
Authority key identifier: 3C:5B:EE:1B:9E:DB:8C:17:43:2B:2D:9D:EC:31:0E:A3:01:59:86:47
Certificate issuer:       /CN=3C5BEE1B9EDB8C17432B2D9DEC310EA301598647
Certificate serial:       4057636B2147C8CBD65E1D9E68017C6106C9F2C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.mft
Manifest number:          011D
Signing time:             Wed 17 Sep 2025 21:34:24 +0000
Manifest this update:     Wed 17 Sep 2025 21:29:24 +0000
Manifest next update:     Mon 22 Sep 2025 19:01:24 +0000
Files and hashes:         1: 323830333a633239303a3430303a3a2f34302d3430203d3e20323732383534.roa (hash: s7Obro7WG0DKMugZRal8aYbStUUaKmVnXXxzsvKl600=)
                          2: 323830333a633239303a3530303a3a2f34302d3430203d3e20323732383534.roa (hash: 86G3IUs5BJrGgFXrob+HUNSyEKdUEhYwpJxrgcCab1I=)
                          3: 323830333a633239303a3a2f34302d3430203d3e20323732383534.roa (hash: 6lb+Qbcfr2WCQoasm2uq1qbIEkgO7GtxVGYF2M9VqbM=)
                          4: 323830333a633239303a3230303a3a2f34302d3430203d3e20323732383534.roa (hash: qBSFuf8KI90sb++ohHeWqPJIKA8Ag3oz5mwbv2ErseQ=)
                          5: 3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.crl (hash: YXMMQKXLb/Qz22xmATAPi74T2I8jUjFIpyarowNpwKo=)
                          6: 323830333a633239303a3130303a3a2f34302d3430203d3e20323732383534.roa (hash: LmKlFTxcim6cEDip8fkobXqKp4Q7mzEsnMJgj5g988g=)
                          7: 323830333a633239303a3330303a3a2f34302d3430203d3e20323732383534.roa (hash: kziv/jtTBV5ngVHoXOg4SleNxts1fuxq1ZsYi+cW8vk=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Sep 2025 20:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:57:63:6b:21:47:c8:cb:d6:5e:1d:9e:68:01:7c:61:06:c9:f2:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5BEE1B9EDB8C17432B2D9DEC310EA301598647
        Validity
            Not Before: Sep 17 21:29:24 2025 GMT
            Not After : Sep 22 19:01:24 2025 GMT
        Subject: CN=6B844634839BE091B705BA19F6D8222AE3961B6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1a:31:01:0f:92:ef:07:41:23:af:86:e4:8e:
                    b9:1d:f2:2a:f2:bc:52:de:d1:2f:fc:a8:0c:fe:b6:
                    14:43:c2:49:70:d6:1a:74:17:b3:1d:84:dd:12:c2:
                    fb:e0:97:82:5d:da:ff:c0:98:04:89:2e:43:d8:4d:
                    30:a5:0d:7d:00:2a:82:65:89:0e:86:05:de:d4:69:
                    a0:c8:28:b1:5f:31:f8:c0:f2:f6:40:34:23:a5:17:
                    cb:f7:96:0c:55:39:5e:95:11:7a:a3:ec:09:e8:4b:
                    64:f2:64:f5:8b:4d:8b:4e:00:a0:ef:22:1e:3a:9c:
                    7d:7e:73:fe:43:2f:71:d4:b9:74:16:03:aa:a9:4c:
                    92:85:0d:fb:6a:2c:08:5a:f8:0d:73:c0:34:4d:96:
                    d2:e7:85:23:2e:fe:71:a6:cf:d0:5b:07:0a:7c:b2:
                    f2:6c:c8:03:e7:c6:ec:56:9d:b9:8f:8f:e8:93:b4:
                    10:8e:99:65:06:4c:67:c4:eb:33:9b:ff:ef:e1:41:
                    e3:97:43:d0:2e:2a:97:f7:32:e1:c9:63:25:70:49:
                    61:7e:4d:a0:2c:42:b2:df:56:62:cb:36:00:24:65:
                    76:87:d9:5d:33:5b:0b:69:fd:8f:20:93:d4:db:d6:
                    17:ab:c6:74:ca:89:4f:01:40:d2:d6:57:67:1b:ed:
                    fd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:84:46:34:83:9B:E0:91:B7:05:BA:19:F6:D8:22:2A:E3:96:1B:6B
            X509v3 Authority Key Identifier:
                keyid:3C:5B:EE:1B:9E:DB:8C:17:43:2B:2D:9D:EC:31:0E:A3:01:59:86:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:a4:fd:be:c6:82:d2:e0:b9:44:3b:c9:bc:a9:b5:96:d5:92:
         7a:9d:3a:3a:34:fb:44:7a:b5:b7:eb:ea:07:b6:cd:21:c0:48:
         b8:cf:1d:86:56:ba:41:de:15:c5:88:4e:97:97:d6:0b:ff:63:
         15:ba:59:c8:b9:00:e8:36:2d:60:24:2d:b7:67:d5:e7:08:41:
         a1:4a:20:69:8a:fe:15:2e:15:eb:a5:ef:2e:d9:ab:20:d9:06:
         b8:ea:f9:e7:6f:e8:c3:a5:4e:3d:9e:63:9a:4e:46:37:74:67:
         ae:25:ff:e7:7e:d3:49:a3:9d:ba:1b:2d:30:b2:4c:1e:b8:09:
         83:1a:62:8b:7b:61:77:24:bd:34:ef:f6:36:a4:03:2c:a0:2d:
         5a:f7:b9:df:fb:48:6e:68:70:8d:48:f1:e7:15:4b:6b:19:bc:
         f6:1b:d5:09:b5:7d:57:b5:00:29:75:02:cf:07:9e:d0:ae:78:
         8e:4a:63:ec:46:39:3b:bd:dc:12:93:3f:33:86:fd:4f:2e:a8:
         33:e0:77:33:32:19:b8:6a:2b:8b:0a:f7:c6:ed:01:76:20:75:
         0b:e3:46:00:d3:89:dd:95:8d:92:10:8f:01:cd:0b:f6:4d:9a:
         3f:75:73:9c:93:a9:a0:f0:31:94:e8:2d:6d:7f:3f:52:b8:eb:
         de:80:f6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:09:20 2025 by rpki-client