Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.mft
File:                     9B09522889B28F5D8574B9F59BD3C8CD01400081.mft (raw, json)
Hash identifier:          2L0PQkY69AqLExN9Usr3EJEsxK3gHaIjGHndWriDxg8=
Subject key identifier:   28:39:E8:90:ED:AC:6A:4D:29:54:31:B9:51:8E:5D:2A:BF:F5:D5:8D
Authority key identifier: 9B:09:52:28:89:B2:8F:5D:85:74:B9:F5:9B:D3:C8:CD:01:40:00:81
Certificate issuer:       /CN=9B09522889B28F5D8574B9F59BD3C8CD01400081
Certificate serial:       6FE9D28043283CADC6C75076FD7917DB30B40C41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.mft
Manifest number:          D3
Signing time:             Sun 20 Apr 2025 22:49:33 +0000
Manifest this update:     Sun 20 Apr 2025 22:44:33 +0000
Manifest next update:     Sat 26 Apr 2025 00:33:33 +0000
Files and hashes:         1: 3139302e352e3139362e302f32322d3234203d3e203237363530.roa (hash: u/t9wysA171RFRNFn+vBTkkSbcPGRFbrVoExvnhSPp8=)
                          2: 3139302e3131352e3232342e302f31392d3234203d3e203237363530.roa (hash: z+zyNr9MlesHNRrF2Prwj7UfktLxuk97f8VjBUiOqRI=)
                          3: 3139302e352e3230302e302f32312d3234203d3e203237363530.roa (hash: uYTNZlNRiaBx9qBpWu08TLvhrwj6K+JDC4isBYHtiiw=)
                          4: 3139302e352e3139342e302f32332d3234203d3e203237363530.roa (hash: kMnP2P8r22AzQQ6+0+I0l8boeiZy8UXAtSbs9T/1M64=)
                          5: 323830333a666530303a3a2f33322d3634203d3e203237363530.roa (hash: qyumqJk4OsRKHQJckwcYtbzKZp4qExW5EQzsgqt8WeI=)
                          6: 9B09522889B28F5D8574B9F59BD3C8CD01400081.crl (hash: LQgczxBR2xmE4CiqrSljWx7w6cQch1otALrRXyStjpo=)
                          7: 3139302e352e3139322e302f32332d3234203d3e203237363530.roa (hash: CyaSzZTyvZcvwYBH2ZfMlkKH9+JhuvcXzICkFaaW47c=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.crl
                          rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 00:33:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e9:d2:80:43:28:3c:ad:c6:c7:50:76:fd:79:17:db:30:b4:0c:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B09522889B28F5D8574B9F59BD3C8CD01400081
        Validity
            Not Before: Apr 20 22:44:33 2025 GMT
            Not After : Apr 26 00:33:33 2025 GMT
        Subject: CN=2839E890EDAC6A4D295431B9518E5D2ABFF5D58D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ee:15:c7:7f:a2:de:7d:79:68:a1:35:54:42:
                    c3:d6:9d:fd:78:4e:a0:2d:2f:7a:38:ab:01:80:a0:
                    8f:97:e5:ba:b6:9f:da:27:83:bd:4c:fc:da:a5:7e:
                    c1:58:92:ba:05:31:61:ae:91:26:87:88:b1:64:63:
                    7d:81:04:5b:26:70:55:94:7a:2a:dc:cb:ca:8e:18:
                    3c:5a:ac:67:dc:c1:5e:ae:42:8d:87:35:f9:fd:12:
                    f6:50:3c:e0:ba:fe:5b:bd:a7:46:b0:fb:ea:aa:32:
                    be:8e:d2:03:c6:97:69:16:e9:6d:30:cd:54:50:3b:
                    26:a5:f0:f9:59:c0:2f:e1:09:05:aa:15:5b:bc:9c:
                    c4:64:4e:39:68:99:42:5c:40:26:5a:7e:ef:43:97:
                    ec:ed:29:d5:12:71:d2:65:7a:a1:10:9f:39:72:41:
                    90:a2:4c:be:86:57:a6:79:6a:8e:48:78:3d:fe:2b:
                    69:88:8a:a7:ea:81:00:a8:7c:41:c5:8f:a2:8e:38:
                    36:72:46:04:5e:2d:e3:d0:b2:04:f9:25:ae:08:02:
                    22:e9:5c:f8:8f:57:4f:4b:17:37:66:50:74:87:0e:
                    3e:af:db:4c:b7:9f:17:5b:ba:d7:1e:1d:c6:39:64:
                    62:a8:aa:63:e9:0c:63:05:13:c7:65:e5:48:2e:f6:
                    8d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:39:E8:90:ED:AC:6A:4D:29:54:31:B9:51:8E:5D:2A:BF:F5:D5:8D
            X509v3 Authority Key Identifier:
                keyid:9B:09:52:28:89:B2:8F:5D:85:74:B9:F5:9B:D3:C8:CD:01:40:00:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:68:f4:5d:d9:1b:21:24:d0:d6:19:af:bd:63:ca:99:a6:6f:
         f8:73:16:6d:22:ad:e6:2b:65:18:2c:9e:de:69:68:f3:21:4c:
         c1:81:ee:84:f3:ee:71:60:c0:03:d5:d1:6e:b1:6c:ef:3e:10:
         ad:9f:c8:60:14:c4:d3:b3:4d:6f:83:74:98:b8:55:10:4a:e4:
         8a:43:ea:84:3d:f2:1a:33:f6:12:27:da:c8:af:fb:b8:c6:f9:
         fa:1d:bc:af:e3:20:9e:0a:62:c9:00:84:b4:2f:d8:5b:fb:7c:
         8a:4b:3c:47:0d:44:0c:ce:20:22:66:04:62:15:7f:63:9c:f9:
         4a:98:2d:89:2d:2b:c6:63:da:7a:7d:e7:9f:4c:a9:b1:ec:66:
         7d:a7:3c:5b:56:43:d8:a9:61:05:1e:81:8b:5f:ad:6b:62:bf:
         23:a7:2e:29:a8:c2:f1:8e:55:7b:a7:9b:95:ed:1f:13:7c:a4:
         0b:98:14:9d:0d:a2:76:e8:8a:09:30:1b:56:4f:b4:a3:e7:fb:
         5b:40:82:05:89:13:52:14:a3:90:8f:9f:0a:16:da:74:b0:25:
         ca:0f:2e:9a:18:8a:e4:94:36:a8:2f:50:ef:31:1b:77:d6:1e:
         a7:45:da:16:04:85:6e:f2:74:33:4f:7c:d2:6f:1a:f7:b8:5d:
         83:e3:44:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:10:52 2025 by rpki-client