Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.mft
File:                     84FDCF40130E9D686F7A3657DA80EA0B09868A48.mft (raw, json)
Hash identifier:          eAfLkLVsr4VzVjJgNU6r689UtI2eLamvB5/EV5i4tcs=
Subject key identifier:   35:71:42:5B:8F:89:1B:DF:4B:FC:97:DE:C9:59:AD:3F:89:C9:A3:D1
Authority key identifier: 84:FD:CF:40:13:0E:9D:68:6F:7A:36:57:DA:80:EA:0B:09:86:8A:48
Certificate issuer:       /CN=84FDCF40130E9D686F7A3657DA80EA0B09868A48
Certificate serial:       494D0C363A725011E80DA48028440B388D96CA69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.mft
Manifest number:          CB
Signing time:             Fri 18 Apr 2025 04:40:11 +0000
Manifest this update:     Fri 18 Apr 2025 04:35:11 +0000
Manifest next update:     Tue 22 Apr 2025 10:09:11 +0000
Files and hashes:         1: 84FDCF40130E9D686F7A3657DA80EA0B09868A48.crl (hash: hwRaBuS6Zvq4Z16LoplRPjvUA20gswjEi6RUZv7GgJI=)
                          2: 323830333a343639303a3a2f33322d3438203d3e20323732383930.roa (hash: 3VLpL0Yy4sPmw2IQ3BPtSJN08kD17G4hoXyMXMj0l0w=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 10:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:4d:0c:36:3a:72:50:11:e8:0d:a4:80:28:44:0b:38:8d:96:ca:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84FDCF40130E9D686F7A3657DA80EA0B09868A48
        Validity
            Not Before: Apr 18 04:35:11 2025 GMT
            Not After : Apr 22 10:09:11 2025 GMT
        Subject: CN=3571425B8F891BDF4BFC97DEC959AD3F89C9A3D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:54:8b:b8:fd:b1:f7:f6:9f:d3:43:07:89:d6:
                    bc:87:6a:fd:ad:b9:5b:36:a5:8b:fd:fe:68:d7:77:
                    d3:22:c5:45:c2:4f:1f:28:26:bb:84:5b:a5:80:ba:
                    e5:d2:2b:1e:cf:a8:06:38:13:ce:8b:9e:db:27:8e:
                    56:a4:67:95:91:d5:40:82:04:84:86:02:71:10:7f:
                    80:70:80:65:41:3e:0c:b8:f6:24:c5:53:59:e8:ef:
                    a7:ad:02:f1:3e:35:11:3c:1d:45:71:6a:27:0b:e9:
                    46:04:ab:9c:72:08:2f:bc:db:27:8a:34:6e:07:4e:
                    ed:c7:f5:14:c2:64:b8:ee:40:86:d5:fe:c0:58:72:
                    fc:e4:6f:35:a9:42:e2:c4:e1:f0:0c:d8:17:03:10:
                    41:07:16:03:07:bf:0c:e4:c1:44:fc:29:40:3a:90:
                    78:f3:07:e0:2e:50:07:94:54:60:67:0f:d9:2b:09:
                    d4:52:be:89:19:a3:bc:7d:76:eb:d1:3a:d9:7a:a7:
                    4a:3b:c6:51:9e:28:72:47:74:66:ad:7f:a5:90:1c:
                    7f:f8:db:6c:b8:be:5d:13:81:3e:1f:b7:f9:21:0e:
                    47:91:8b:ba:2a:1c:a9:2b:0e:3d:17:4a:30:4f:e6:
                    d3:9c:67:10:2f:b4:a2:51:5c:58:91:89:c7:44:14:
                    a0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:71:42:5B:8F:89:1B:DF:4B:FC:97:DE:C9:59:AD:3F:89:C9:A3:D1
            X509v3 Authority Key Identifier:
                keyid:84:FD:CF:40:13:0E:9D:68:6F:7A:36:57:DA:80:EA:0B:09:86:8A:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:2c:63:d7:fa:4e:ff:7d:31:ed:13:42:9b:69:dd:28:d1:ad:
         df:6f:cc:17:3b:3f:95:0e:e9:48:7f:e0:a8:7e:1c:fa:0c:18:
         44:0e:46:f1:15:8d:04:39:9f:52:08:d4:c7:25:7d:ec:5e:98:
         c7:65:cb:32:b6:71:53:51:76:21:95:34:80:88:0a:dd:71:85:
         f4:f9:ff:03:4d:b2:3a:18:94:09:52:5e:64:2d:4d:ed:21:07:
         0d:75:37:c6:27:df:bc:80:48:51:95:c8:49:5f:5a:cd:8b:00:
         bf:3d:62:a1:c9:d6:2d:4e:65:5b:a9:2f:97:b3:0c:c3:02:07:
         6f:fd:63:ec:21:9d:4e:46:f3:36:7a:50:76:37:5e:cf:1f:d1:
         3a:84:8f:8a:5d:1c:df:1f:76:7f:ed:59:3c:27:18:ad:a5:0a:
         6f:ba:a5:38:07:17:48:31:eb:d6:92:94:11:59:b2:95:e8:9b:
         85:b6:2b:d4:24:67:14:85:a1:23:d7:83:81:ae:ce:28:c9:b7:
         0b:07:ad:0e:49:ef:64:cc:d7:81:fb:f3:b0:a2:06:a5:66:23:
         b0:83:4d:a6:62:1c:c5:ec:8c:04:d2:50:c2:91:68:d4:28:07:
         4d:e8:6e:32:1b:f9:5d:cc:3c:d8:be:d6:b8:b7:ba:20:9b:9b:
         f9:91:1a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:45:32 2025 by rpki-client