Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
File:                     AA2338B66632D823F77072125112B5BF1F721769.mft (raw, json)
Hash identifier:          HJhH2JxGDhtxN1rJ65B7GMgM3WTHSNjQPJeaDE8TjRI=
Subject key identifier:   8A:3D:AA:33:F1:D3:BF:61:CA:58:04:F8:D2:33:38:BA:57:22:ED:5F
Authority key identifier: AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
Certificate issuer:       /CN=AA2338B66632D823F77072125112B5BF1F721769
Certificate serial:       03D491B217B5A572EEF0337F1407AF4CDA38F014
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
Manifest number:          CF
Signing time:             Tue 22 Apr 2025 11:36:19 +0000
Manifest this update:     Tue 22 Apr 2025 11:31:19 +0000
Manifest next update:     Sun 27 Apr 2025 17:52:19 +0000
Files and hashes:         1: 34352e3233372e3232312e302f32342d3234203d3e20323636383139.roa (hash: /elfOjbQfF2fPsMe6mNPua2FvaMW9MN/Vs+BX6OZ9K4=)
                          2: 34352e3233372e3232322e302f32342d3234203d3e20323636383139.roa (hash: eoL7Y795RnrMWZUw7U8PkLtY0w5+OUPQ52ffjZRRUqE=)
                          3: 34352e3233372e3232302e302f32332d3233203d3e20323636383139.roa (hash: nOCJFysz8C8bWJVMRkvOCViuUCqzB1SjNWhFC7y70bc=)
                          4: 34352e3233372e3232302e302f32342d3234203d3e20323636383139.roa (hash: S7FRt48mlJQdhRUBKeeOjWo5otOru6pXI07NZVe+lsM=)
                          5: 34352e3233372e3232332e302f32342d3234203d3e20323636383139.roa (hash: H8ah+1UhN/eq5WKFT0vmFxrRSA6J3Cu5+ERJLv9mNDM=)
                          6: AA2338B66632D823F77072125112B5BF1F721769.crl (hash: uyr5D0dZtLL1n+ugyzadrSm+8K9vjbQf5gmOGOsqXGQ=)
                          7: 34352e3233372e3232302e302f32322d3232203d3e20323636383139.roa (hash: 5GwF/yG9sdY75vW2Fj///TOVFJ4fRdCrLcvD0MbMXqY=)
                          8: 34352e3233372e3232322e302f32332d3233203d3e20323636383139.roa (hash: PMUAqmCu4jLgGE4W1UfcbQhDKwanax0we0RQX2/iKas=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl
                          rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d4:91:b2:17:b5:a5:72:ee:f0:33:7f:14:07:af:4c:da:38:f0:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA2338B66632D823F77072125112B5BF1F721769
        Validity
            Not Before: Apr 22 11:31:19 2025 GMT
            Not After : Apr 27 17:52:19 2025 GMT
        Subject: CN=8A3DAA33F1D3BF61CA5804F8D23338BA5722ED5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a9:1c:a2:e2:4e:f2:8d:94:c7:c0:01:4f:db:
                    22:ec:a6:3c:e5:56:2e:e4:57:81:5f:95:d0:ae:9f:
                    6b:36:66:87:e5:f7:0b:9f:6c:a1:48:8f:2a:64:56:
                    bb:00:dd:03:e7:2c:73:37:69:12:93:8b:48:93:a2:
                    00:4d:55:a3:c5:51:5c:db:66:03:21:7b:9a:fa:fc:
                    8c:ee:29:d6:3a:3f:9a:67:e4:d1:d5:2f:fe:c5:ce:
                    22:55:ed:61:3e:03:1b:b9:df:1a:9c:25:5b:3b:ae:
                    ed:f2:39:d6:98:3f:8d:6c:11:18:b4:6d:88:29:33:
                    d9:9f:b8:da:95:f1:d5:01:f6:81:58:3c:f5:f5:f2:
                    1c:6c:c4:1c:53:38:fd:b8:86:a9:bd:64:35:ba:26:
                    ee:9c:ae:2c:3b:e5:1d:6e:12:02:80:47:21:28:a5:
                    0d:12:4d:fe:f7:8f:cd:81:68:d7:69:4b:4a:1b:5e:
                    a8:7f:b8:50:eb:48:a6:fc:3f:04:bd:a1:91:d1:4b:
                    f4:88:f1:83:67:3e:1d:95:0d:07:50:7e:2c:03:52:
                    9a:dd:59:03:29:2c:08:51:89:1a:78:d7:15:98:59:
                    e3:91:33:94:26:8c:bb:16:92:43:08:b8:40:4d:5d:
                    30:2c:26:a8:07:f3:a4:ea:31:39:7c:59:c6:8f:02:
                    9b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3D:AA:33:F1:D3:BF:61:CA:58:04:F8:D2:33:38:BA:57:22:ED:5F
            X509v3 Authority Key Identifier:
                keyid:AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:f2:25:78:3a:1d:62:a2:ef:30:da:c8:c4:9d:71:b2:8a:5b:
         e8:27:f6:f0:b1:0d:92:ad:7b:7d:8b:09:1a:1c:cb:e9:73:39:
         7c:7d:20:58:4c:1f:bc:e0:ba:67:99:26:0a:e1:6b:ad:e0:a3:
         2a:01:54:3a:04:06:0a:da:16:5b:40:e1:a4:ea:dc:19:71:a5:
         88:be:fe:d9:10:a7:eb:df:ee:1b:e5:ff:2b:fd:54:58:74:2f:
         7a:48:26:23:74:df:03:87:de:b2:01:eb:7c:ae:f0:b2:ff:d1:
         e6:57:4d:96:cc:d0:fa:bd:d6:85:53:20:0a:95:aa:8a:c7:1c:
         05:92:0e:25:59:72:81:37:b5:3f:da:d8:bf:ae:8c:d8:bb:d6:
         dd:c9:ce:16:5e:f1:64:9d:e7:f6:8b:58:0c:94:1e:a8:7c:f5:
         9b:13:c2:a3:4a:c4:54:5d:2d:c3:a4:35:56:9f:68:79:43:56:
         39:a6:b9:cc:ea:eb:79:59:c3:3b:ef:72:31:57:13:f3:b4:31:
         35:a2:ad:3d:fa:cc:ca:ca:19:80:71:f8:df:b0:5f:a0:9e:ed:
         e4:b4:c1:72:6d:ef:be:35:61:75:58:72:6b:09:c7:a5:f3:10:
         e1:d9:2e:7f:98:e9:2e:4d:6d:11:17:e9:95:93:31:c8:10:78:
         3b:8c:a4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:38:05 2025 by rpki-client