Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.mft
File:                     A85589D4CB63F06CB0638FD83DC2356DDD2B6180.mft (raw, json)
Hash identifier:          gtOg3/jAgAl9i0TiLDPOMRW+4vDMOXFm0QlGj3yXFOw=
Subject key identifier:   5A:BB:7E:F0:AA:38:A2:AA:2F:86:A8:EC:2E:93:DC:4F:10:A9:F0:C6
Authority key identifier: A8:55:89:D4:CB:63:F0:6C:B0:63:8F:D8:3D:C2:35:6D:DD:2B:61:80
Certificate issuer:       /CN=A85589D4CB63F06CB0638FD83DC2356DDD2B6180
Certificate serial:       794145AD56A70BC6980940DC168D44C5EF4B5ABF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.mft
Manifest number:          CA
Signing time:             Sun 06 Apr 2025 19:32:30 +0000
Manifest this update:     Sun 06 Apr 2025 19:27:30 +0000
Manifest next update:     Fri 11 Apr 2025 03:06:30 +0000
Files and hashes:         1: 34352e3232352e3138342e302f32322d3234203d3e20323635383531.roa (hash: T+Dja6E+37EVjVckvAQyy2Jf4DvO6wMpk3gstNcYlrc=)
                          2: 34352e3232352e3138342e302f32342d3234203d3e20323635383531.roa (hash: 4SNvI2lGeT6H6sIZ9Nny9tic2HGe8XS41PmGFlAFgFg=)
                          3: A85589D4CB63F06CB0638FD83DC2356DDD2B6180.crl (hash: ybseW+GVDTYP3AMB0eHd6wbP6C7I76XAy6NH5PKopus=)
                          4: 323830333a366132303a3a2f33322d3332203d3e20323635383531.roa (hash: XKxAKGC+Ae0+eBpbIc7FV8BzcTIAbBOwhjO968x5zP4=)
                          5: 34352e3232352e3138352e302f32342d3234203d3e20323635383531.roa (hash: 9/DjF6F2DqZdtHWwC2KoPPwIsrZaA7krMkup+Sx0Gvk=)
                          6: 34352e3232352e3138362e302f32342d3234203d3e20323635383531.roa (hash: lvmIPUVVVDucA4JORXUjNf+hUWvbrYXxgrq8ZKPZJEQ=)
                          7: 34352e3232352e3138372e302f32342d3234203d3e20323635383531.roa (hash: pdZcKOU6AuNSJy/nzOpaaD3u8sc0THK5yqjK9E7a1M0=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:41:45:ad:56:a7:0b:c6:98:09:40:dc:16:8d:44:c5:ef:4b:5a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A85589D4CB63F06CB0638FD83DC2356DDD2B6180
        Validity
            Not Before: Apr  6 19:27:30 2025 GMT
            Not After : Apr 11 03:06:30 2025 GMT
        Subject: CN=5ABB7EF0AA38A2AA2F86A8EC2E93DC4F10A9F0C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:84:09:54:4e:09:b2:62:6b:93:9c:9e:bb:93:
                    34:03:cf:9c:61:b4:e3:da:61:17:c5:a8:06:61:c1:
                    47:16:ae:ee:ed:ac:a3:62:fb:2e:27:e3:90:d3:98:
                    ad:b7:de:2b:69:58:ff:23:8e:29:0a:ce:ce:c4:e7:
                    71:52:fa:eb:50:fb:7d:fe:4e:85:d8:d5:3f:04:47:
                    4d:b5:ad:05:3c:79:1c:38:a7:6c:94:35:95:f3:be:
                    d1:94:ce:d8:28:f8:cf:79:98:da:6c:3f:4d:05:11:
                    f3:96:f6:d2:e9:b4:26:f5:ad:59:98:4f:4a:38:bf:
                    5c:a2:97:4a:a7:98:ba:0c:33:6b:02:e7:77:8c:cb:
                    e5:72:86:56:2a:9d:90:f1:33:51:46:30:00:6c:3d:
                    75:62:56:70:5a:43:a4:6f:fd:5c:6b:bf:5d:a0:c7:
                    31:48:94:a8:bc:5d:a7:9d:6f:b1:46:d1:96:fd:7c:
                    97:ad:9d:7d:3e:cd:39:bf:e1:af:ae:cd:f1:40:74:
                    3f:50:0b:91:3f:d7:67:b5:11:6e:7e:57:66:67:10:
                    89:5a:f5:ba:de:e8:a7:db:ec:bc:ff:14:a3:2a:72:
                    79:ca:ef:88:f2:1c:73:c6:f3:47:40:e8:e8:a3:4b:
                    c5:f4:a2:b7:2a:8b:83:e6:21:c2:7a:3d:b5:ce:fa:
                    f2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:BB:7E:F0:AA:38:A2:AA:2F:86:A8:EC:2E:93:DC:4F:10:A9:F0:C6
            X509v3 Authority Key Identifier:
                keyid:A8:55:89:D4:CB:63:F0:6C:B0:63:8F:D8:3D:C2:35:6D:DD:2B:61:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:39:f4:69:46:8e:3a:9a:17:05:84:57:13:7c:17:07:67:31:
         97:26:c4:ac:01:e7:3c:07:1b:1e:87:ba:f7:a9:9f:91:fc:1c:
         84:d8:3f:f3:bf:d8:93:27:13:27:b6:69:ba:a6:09:85:5c:56:
         ef:65:59:e7:01:59:b3:90:52:81:c3:45:15:98:94:19:1e:3e:
         eb:77:d3:10:ef:27:ff:be:ef:c9:11:a1:2e:59:95:4a:11:b3:
         89:66:fb:d5:2a:3d:e9:cb:1f:73:2c:b7:98:b6:03:7a:57:72:
         0f:68:62:5f:85:76:9b:76:fe:b9:3c:08:3e:24:24:ae:c0:2a:
         17:7f:ee:d4:c2:fd:b8:e5:3d:94:74:49:80:9b:eb:2b:07:16:
         2f:5d:f4:87:59:36:67:14:f6:d7:9a:8b:53:24:a3:26:15:e9:
         b9:1e:ba:ee:8d:d9:d0:d6:75:de:f5:9b:38:b2:03:7f:fc:71:
         17:a0:17:9b:ac:74:1b:27:90:9e:d3:78:27:40:1e:47:5b:2d:
         b2:65:e4:b3:e6:e2:cc:08:45:13:09:aa:2c:f6:e0:c3:07:22:
         56:71:5b:e7:cf:f6:52:ca:15:b0:83:05:67:4f:ca:e2:ed:29:
         8c:9f:84:79:db:fd:37:73:00:67:c9:f4:4a:46:0a:a6:fe:2a:
         6b:16:39:7e
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUeUFFrVanC8aYCUDcFo1Exe9LWr8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTg1NTg5RDRDQjYzRjA2Q0IwNjM4RkQ4M0RDMjM1NkRE
RDJCNjE4MDAeFw0yNTA0MDYxOTI3MzBaFw0yNTA0MTEwMzA2MzBaMDMxMTAvBgNV
BAMTKDVBQkI3RUYwQUEzOEEyQUEyRjg2QThFQzJFOTNEQzRGMTBBOUYwQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGhAlUTgmyYmuTnJ67kzQDz5xh
tOPaYRfFqAZhwUcWru7trKNi+y4n45DTmK233itpWP8jjikKzs7E53FS+utQ+33+
ToXY1T8ER021rQU8eRw4p2yUNZXzvtGUztgo+M95mNpsP00FEfOW9tLptCb1rVmY
T0o4v1yil0qnmLoMM2sC53eMy+VyhlYqnZDxM1FGMABsPXViVnBaQ6Rv/Vxrv12g
xzFIlKi8Xaedb7FG0Zb9fJetnX0+zTm/4a+uzfFAdD9QC5E/12e1EW5+V2ZnEIla
9bre6Kfb7Lz/FKMqcnnK74jyHHPG80dA6OijS8X0orcqi4PmIcJ6PbXO+vLPAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUWrt+8Ko4oqovhqjsLpPcTxCp8MYwHwYDVR0j
BBgwFoAUqFWJ1Mtj8GywY4/YPcI1bd0rYYAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMUI3NzAwRTJGRTA3ODVCNEI2NTBGQjZCN0IxQjM1REU4
REFGQzkzQTMxODQxOEVGMTEyODAxODMyQ0RCQTczLzAvQTg1NTg5RDRDQjYzRjA2
Q0IwNjM4RkQ4M0RDMjM1NkRERDJCNjE4MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BODU1ODlENENCNjNGMDZDQjA2
MzhGRDgzREMyMzU2REREMkI2MTgwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTFCNzcwMEUyRkUwNzg1QjRCNjUwRkI2QjdCMUIzNURFOERBRkM5M0Ez
MTg0MThFRjExMjgwMTgzMkNEQkE3My8wL0E4NTU4OUQ0Q0I2M0YwNkNCMDYzOEZE
ODNEQzIzNTZEREQyQjYxODAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBXOfRpRo46mhcFhFcTfBcHZzGX
JsSsAec8Bxseh7r3qZ+R/ByE2D/zv9iTJxMntmm6pgmFXFbvZVnnAVmzkFKBw0UV
mJQZHj7rd9MQ7yf/vu/JEaEuWZVKEbOJZvvVKj3pyx9zLLeYtgN6V3IPaGJfhXab
dv65PAg+JCSuwCoXf+7Uwv245T2UdEmAm+srBxYvXfSHWTZnFPbXmotTJKMmFem5
HrrujdnQ1nXe9Zs4sgN//HEXoBebrHQbJ5Ce03gnQB5HWy2yZeSz5uLMCEUTCaos
9uDDByJWcVvnz/ZSyhWwgwVnT8ri7SmMn4R52/03cwBnyfRKRgqm/iprFjl+
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:02:54 2025 by rpki-client