Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.mft
File:                     08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.mft (raw, json)
Hash identifier:          maMXdRn21g16Sc65zpPIqj4KwEPGFTKS9eB6RTrMJZA=
Subject key identifier:   C1:B6:1B:14:F1:75:B8:CB:D2:6A:47:FD:15:6F:D3:2C:C3:E8:CD:07
Authority key identifier: 08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D
Certificate issuer:       /CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
Certificate serial:       5F809D3963B98A1C6AC72F6E90A33939222DD945
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.mft
Manifest number:          D1
Signing time:             Fri 04 Apr 2025 22:50:58 +0000
Manifest this update:     Fri 04 Apr 2025 22:45:58 +0000
Manifest next update:     Wed 09 Apr 2025 23:58:58 +0000
Files and hashes:         1: 323830333a626265303a6130303a3a2f34302d3430203d3e20323730303838.roa (hash: 72sXmF4b2QjIi5iTgNafa/lNCdgPDcngDypuvQHZmuY=)
                          2: 323830333a626265303a3930303a3a2f34302d3430203d3e20323730303838.roa (hash: agE0M0lFtQc1VANpkHA6fajhH2henOEPVncqTPZduXg=)
                          3: 323830333a626265303a3530303a3a2f34302d3430203d3e20323730303838.roa (hash: Uzb66kDA0olA6Gt40tYeuZbuGLMhY3BOA0MSMUlNmQI=)
                          4: 3137302e302e382e302f32342d3234203d3e20323632353839.roa (hash: WokL6H9V0FMkbyu5IEZdyih9I/fBTX9aBLyXtAg2N9s=)
                          5: 08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl (hash: PWwVS72VeTuXn/rxdwQkxusrIJ0tZXhkIWyP1gR/HgE=)
                          6: 323830333a626265303a6630303a3a2f34302d3430203d3e20323730303838.roa (hash: eAf2ZQ77Qs2bxfokzka5p0VzhIZvsCKr6m9j0JFQmB0=)
                          7: 3137302e302e392e302f32342d3234203d3e20323730303838.roa (hash: 7LN0OQnsmAXvYStNmVOiIvjNkgFfua6RqoHMout/whc=)
                          8: 323830333a626265303a3730303a3a2f34302d3430203d3e20323730303838.roa (hash: o7NrEuniVWzoQAY2qF07C3VrwLtcPb89+eqsYRONXDM=)
                          9: 3137302e302e31302e302f32332d3234203d3e20323730303838.roa (hash: 4s3gQDqcbPI8adEPc7kwY9EDessEOFtG4oBbM9SOR9M=)
                          10: 323830333a626265303a3330303a3a2f34302d3430203d3e20323730303838.roa (hash: 8h2uDdgfaZ4MbK3x3qz2dsLdU7kQsgQN4HrefxIXDE4=)
                          11: 323830333a626265303a316230303a3a2f34302d3430203d3e20323730303838.roa (hash: c/0nkhG3ptBHgrvXChIXWxmEYuQUNUuDqTnycGmFMNs=)
                          12: 323830333a626265303a6430303a3a2f34302d3430203d3e20323730303838.roa (hash: 5MWmdHAFjNELGAGH+Zqqf6q31kqFKYyPkkHsDhh9SHc=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:80:9d:39:63:b9:8a:1c:6a:c7:2f:6e:90:a3:39:39:22:2d:d9:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
        Validity
            Not Before: Apr  4 22:45:58 2025 GMT
            Not After : Apr  9 23:58:58 2025 GMT
        Subject: CN=C1B61B14F175B8CBD26A47FD156FD32CC3E8CD07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3d:dd:c0:c6:cd:f7:45:be:e2:62:2a:a4:89:
                    d0:ec:1b:61:a4:19:71:88:13:4b:5f:f0:ae:22:59:
                    86:ba:c5:2b:e5:c8:34:e9:a1:59:28:73:e5:47:09:
                    06:79:4a:30:28:78:99:fc:d7:f0:55:b6:7c:40:e3:
                    de:11:71:4d:81:fa:48:e4:01:97:f3:8e:6a:6f:e3:
                    fe:63:3a:61:24:43:a3:f9:17:68:df:f6:92:fb:2b:
                    e1:22:a9:28:e3:95:58:12:79:d4:45:1e:34:54:5f:
                    de:07:27:53:6b:f5:99:1a:c6:4c:c6:aa:30:be:47:
                    0e:eb:12:2e:20:77:30:cd:90:07:de:22:d4:10:70:
                    c3:4d:d0:cf:25:1a:9f:bc:42:25:ae:21:c4:d7:89:
                    8d:a1:1c:9f:78:84:97:4c:2d:55:bc:be:8c:b4:4f:
                    ec:43:ad:eb:c5:77:f3:b1:cf:56:04:11:c7:a1:c6:
                    fe:9b:1d:3d:4a:e9:d2:ff:86:2a:c7:9a:f0:45:9e:
                    31:f5:8a:65:13:63:ea:59:61:46:8e:d7:62:fb:91:
                    6b:df:41:78:da:24:fc:b5:e9:0b:32:35:1f:67:1e:
                    f3:76:a6:ae:63:c5:15:81:35:8b:c1:d9:61:25:5d:
                    7d:76:54:da:b4:f2:3e:da:70:d8:35:16:29:8c:03:
                    60:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B6:1B:14:F1:75:B8:CB:D2:6A:47:FD:15:6F:D3:2C:C3:E8:CD:07
            X509v3 Authority Key Identifier:
                keyid:08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:1d:8b:c8:45:bb:a9:0d:77:2c:0d:e4:7c:e9:43:9d:26:00:
         a0:66:8f:4c:d7:6e:a6:81:09:00:7c:96:10:1f:a2:67:bc:3e:
         89:aa:c9:72:48:eb:9c:4f:19:f7:36:9d:15:6c:47:eb:87:37:
         66:aa:42:ff:38:2d:d0:b5:0a:c5:58:e3:20:1c:35:b4:fc:37:
         36:a5:ba:d8:2b:83:c2:f9:82:6a:3c:c0:52:41:a4:d7:17:e5:
         eb:21:4c:e9:2a:9e:8a:aa:23:77:44:3c:1b:0d:b4:5a:94:87:
         dd:4d:f4:43:a0:bd:9f:3e:9e:b8:86:77:b0:b5:05:5a:75:0e:
         bb:a6:1f:54:dd:24:33:4d:81:c2:9c:d0:ae:34:68:e9:aa:30:
         32:76:6a:81:00:b1:51:3d:c8:38:2d:d7:9c:5e:08:1b:b7:f5:
         4c:6f:42:47:5f:91:9c:0f:50:d6:ac:6e:64:bb:00:85:c0:2c:
         ca:11:a6:0a:99:12:80:cc:23:70:96:e5:5f:f3:f5:a5:b4:11:
         ee:a6:81:08:4b:74:0e:1a:0b:87:72:5c:66:75:df:38:a5:e2:
         11:c8:32:e3:da:45:98:71:91:97:0d:03:ce:ae:81:36:c0:76:
         05:2c:58:84:6c:46:d3:9f:41:e1:bb:99:ed:cf:07:4a:e8:10:
         0c:ec:de:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:12:49 2025 by rpki-client