Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.mft
File:                     525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.mft (raw, json)
Hash identifier:          su5f60zYqd9AJK9Ed7OvItE50eKVEUsHq6QsY4Ey8Wo=
Subject key identifier:   6B:EB:04:89:FC:C1:4F:A2:4A:63:7B:B4:42:44:64:75:5E:F4:2A:21
Authority key identifier: 52:5E:7F:EF:A7:2B:2D:28:F3:90:78:F1:EA:D5:16:5F:A4:34:A3:AB
Certificate issuer:       /CN=525E7FEFA72B2D28F39078F1EAD5165FA434A3AB
Certificate serial:       0962A9A3A68573F7426C067B897A93E688891D1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.mft
Manifest number:          CA
Signing time:             Sat 05 Apr 2025 20:28:40 +0000
Manifest this update:     Sat 05 Apr 2025 20:23:40 +0000
Manifest next update:     Thu 10 Apr 2025 22:20:40 +0000
Files and hashes:         1: 525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.crl (hash: 9hhOIZ/lSzDaOpqDhgizcfsdLMqXiPyzxwna9OgGM6A=)
                          2: 34352e3137332e3139322e302f32322d3234203d3e20323637373938.roa (hash: ku7Pegns5rb3/J+L9k67+lDukcl7gRSw3iomKYF8FW4=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:62:a9:a3:a6:85:73:f7:42:6c:06:7b:89:7a:93:e6:88:89:1d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=525E7FEFA72B2D28F39078F1EAD5165FA434A3AB
        Validity
            Not Before: Apr  5 20:23:40 2025 GMT
            Not After : Apr 10 22:20:40 2025 GMT
        Subject: CN=6BEB0489FCC14FA24A637BB4424464755EF42A21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ec:4c:04:ac:25:f5:96:74:1b:18:11:6a:63:
                    98:12:54:4b:63:32:2f:cb:46:53:74:da:8e:3f:3b:
                    63:54:a6:1e:57:ad:9c:d9:90:c6:84:0d:6e:22:d7:
                    e7:00:71:23:22:d2:93:8c:d8:0b:78:67:7b:9a:d0:
                    5e:3a:26:46:6b:54:74:9f:d8:65:2d:fc:b8:c5:25:
                    29:ac:1e:49:18:a4:f4:4d:32:b2:b7:32:97:15:65:
                    d4:28:20:3c:4a:a0:95:1c:2e:80:e9:d6:a6:9b:f3:
                    c9:5a:40:86:5a:ca:68:4d:10:17:f3:82:a6:95:23:
                    20:47:a4:af:6f:04:b6:6a:c3:66:ea:99:be:9a:79:
                    27:fc:c1:24:af:18:e5:8f:66:68:66:53:0e:b0:72:
                    04:90:ea:88:c1:65:63:1c:78:2c:93:df:cd:98:2e:
                    75:01:84:79:40:07:28:50:8c:e3:59:f5:ab:fd:5d:
                    8c:47:16:3f:0a:00:1d:26:12:af:6b:0d:11:11:22:
                    d9:20:ba:7c:dd:3d:36:8b:c7:0a:cd:c4:89:ff:1e:
                    5d:bf:0d:b5:90:58:46:a8:f7:3f:69:3e:a3:cd:c3:
                    23:38:63:c3:9e:29:67:97:b5:8a:f5:72:0f:c3:f3:
                    d7:d1:00:6b:f1:a9:cd:e0:ea:44:a0:0f:ed:36:db:
                    96:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EB:04:89:FC:C1:4F:A2:4A:63:7B:B4:42:44:64:75:5E:F4:2A:21
            X509v3 Authority Key Identifier:
                keyid:52:5E:7F:EF:A7:2B:2D:28:F3:90:78:F1:EA:D5:16:5F:A4:34:A3:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:86:84:f8:3d:b1:86:6d:b4:86:be:27:a5:63:9e:33:b9:59:
         88:3e:33:5e:3a:5c:a4:4d:34:94:d7:e4:8a:34:46:2f:05:f4:
         c5:4e:7e:68:bb:7a:af:99:3d:78:8f:0e:ae:88:5c:89:4b:bf:
         ca:91:e1:a8:87:23:21:ef:c0:ac:95:bc:33:16:28:5f:9d:02:
         bf:b7:7d:60:4a:6c:79:92:c4:8d:db:27:01:49:5a:32:fa:c6:
         55:c6:c3:79:ff:7a:2f:ce:61:f6:61:68:a4:64:ec:b2:2d:1b:
         a4:67:35:dd:9d:9d:ee:3a:e2:cd:4a:2e:90:a9:ac:d8:f9:45:
         2c:b7:1e:7b:56:75:14:d7:c2:97:75:34:40:46:29:e9:83:6e:
         87:0e:7b:b0:bf:d0:50:36:f6:5c:ed:7d:3c:f8:a1:e6:a5:61:
         78:01:ec:d7:b3:2f:79:e6:1e:68:1f:17:95:20:f8:f7:20:52:
         a6:ed:f0:60:04:53:c8:b6:a6:5d:14:cd:c5:eb:6e:bc:5a:f5:
         ca:81:16:d8:06:6b:4b:fb:c3:0d:bd:ce:e4:73:b3:94:51:72:
         61:34:b4:0d:0a:c9:2d:92:11:40:c6:4e:cf:18:81:d5:cc:49:
         46:ed:df:5a:4a:62:7d:e9:5e:db:4f:c6:69:75:24:28:2a:ca:
         05:50:51:39
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUCWKpo6aFc/dCbAZ7iXqT5oiJHR0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTI1RTdGRUZBNzJCMkQyOEYzOTA3OEYxRUFENTE2NUZB
NDM0QTNBQjAeFw0yNTA0MDUyMDIzNDBaFw0yNTA0MTAyMjIwNDBaMDMxMTAvBgNV
BAMTKDZCRUIwNDg5RkNDMTRGQTI0QTYzN0JCNDQyNDQ2NDc1NUVGNDJBMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN7EwErCX1lnQbGBFqY5gSVEtj
Mi/LRlN02o4/O2NUph5XrZzZkMaEDW4i1+cAcSMi0pOM2At4Z3ua0F46JkZrVHSf
2GUt/LjFJSmsHkkYpPRNMrK3MpcVZdQoIDxKoJUcLoDp1qab88laQIZaymhNEBfz
gqaVIyBHpK9vBLZqw2bqmb6aeSf8wSSvGOWPZmhmUw6wcgSQ6ojBZWMceCyT382Y
LnUBhHlAByhQjONZ9av9XYxHFj8KAB0mEq9rDRERItkgunzdPTaLxwrNxIn/Hl2/
DbWQWEao9z9pPqPNwyM4Y8OeKWeXtYr1cg/D89fRAGvxqc3g6kSgD+0225bnAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUa+sEifzBT6JKY3u0QkRkdV70KiEwHwYDVR0j
BBgwFoAUUl5/76crLSjzkHjx6tUWX6Q0o6swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MzA3N0FFOUJEQTU2RkFGQ0Q5QjNEODVCQUY2MDdCRjM0
MEFCNDY0RTFFMUYyODQyQjA0MDBGRDU2MjU4MkRELzAvNTI1RTdGRUZBNzJCMkQy
OEYzOTA3OEYxRUFENTE2NUZBNDM0QTNBQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MjVFN0ZFRkE3MkIyRDI4RjM5
MDc4RjFFQUQ1MTY1RkE0MzRBM0FCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzMwNzdBRTlCREE1NkZBRkNEOUIzRDg1QkFGNjA3QkYzNDBBQjQ2NEUx
RTFGMjg0MkIwNDAwRkQ1NjI1ODJERC8wLzUyNUU3RkVGQTcyQjJEMjhGMzkwNzhG
MUVBRDUxNjVGQTQzNEEzQUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBShoT4PbGGbbSGvielY54zuVmI
PjNeOlykTTSU1+SKNEYvBfTFTn5ou3qvmT14jw6uiFyJS7/KkeGohyMh78Cslbwz
FihfnQK/t31gSmx5ksSN2ycBSVoy+sZVxsN5/3ovzmH2YWikZOyyLRukZzXdnZ3u
OuLNSi6QqazY+UUstx57VnUU18KXdTRARinpg26HDnuwv9BQNvZc7X08+KHmpWF4
AezXsy955h5oHxeVIPj3IFKm7fBgBFPItqZdFM3F6268WvXKgRbYBmtL+8MNvc7k
c7OUUXJhNLQNCsktkhFAxk7PGIHVzElG7d9aSmJ96V7bT8ZpdSQoKsoFUFE5
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:07:33 2025 by rpki-client