Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft
File:                     DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft (raw, json)
Hash identifier:          t8WIvu2xElvV4r7l9ULLcf91L1QFUbutcOQrmDAinXw=
Subject key identifier:   88:C0:6E:4B:F9:82:D4:C9:1B:B8:35:00:96:DE:79:B2:64:4E:71:D6
Authority key identifier: DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29
Certificate issuer:       /CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29
Certificate serial:       2B1D39633B7568AE19E9774516AECD80CB99E2DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft
Manifest number:          CC
Signing time:             Sun 06 Apr 2025 15:25:04 +0000
Manifest this update:     Sun 06 Apr 2025 15:20:04 +0000
Manifest next update:     Sat 12 Apr 2025 01:25:04 +0000
Files and hashes:         1: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl (hash: m2fd4aPBIhTF8QdvR1jsQq87dVJq2tb/s2Tw10krKbE=)
                          2: 34352e3136342e32322e302f32342d3234203d3e203233343730.roa (hash: 575QiKowVCRz4op0BzHVRduNC7OYEq4japp+XRIL7j0=)
                          3: 34352e3136342e32312e302f32342d3234203d3e203238343233.roa (hash: N4blcjVjqMg5+0KZqMMvh7CB3XoZbmxPRVjQGrPRzqM=)
                          4: 34352e3136342e32332e302f32342d3234203d3e203238343233.roa (hash: YyWmCsp0UJbZ4TVXBcJMApdIvA7n4vdYZzo0YPmZLuw=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:1d:39:63:3b:75:68:ae:19:e9:77:45:16:ae:cd:80:cb:99:e2:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29
        Validity
            Not Before: Apr  6 15:20:04 2025 GMT
            Not After : Apr 12 01:25:04 2025 GMT
        Subject: CN=88C06E4BF982D4C91BB8350096DE79B2644E71D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:31:0c:c5:d5:a8:30:ac:8f:ae:6a:a9:f3:a2:
                    91:71:a0:83:3b:6c:ac:2e:59:9e:65:4c:b6:18:4a:
                    6b:92:e0:86:55:69:d2:f6:04:f9:51:fa:8c:28:43:
                    a0:f1:c2:1d:4c:ec:07:95:1b:52:7b:02:ba:17:9a:
                    22:fe:4d:7e:76:17:6b:c4:9e:09:74:d6:eb:db:42:
                    4e:46:89:6d:d2:33:4d:5a:59:7e:8d:8e:8c:77:7d:
                    98:94:4e:61:3a:32:7b:e7:c2:7a:43:16:be:c4:77:
                    e1:52:9a:4b:08:af:51:74:18:b9:7d:00:1a:da:84:
                    55:0c:17:0a:0e:67:af:41:69:90:fd:fa:c5:ac:2b:
                    e4:cc:7f:e2:29:c7:99:25:34:18:77:0e:45:d0:60:
                    dd:37:5a:81:13:54:59:a5:95:c8:bc:ce:c8:c0:01:
                    16:9e:c5:71:71:72:5f:96:33:27:ba:b5:69:52:28:
                    1c:df:a4:0f:2b:88:ba:85:7a:1c:a3:a9:f5:be:ec:
                    4f:e2:c3:07:08:e7:e3:f1:66:dc:d6:dd:4c:99:53:
                    bc:69:b7:ee:10:82:c8:51:12:48:92:90:9e:15:4d:
                    94:7f:2e:2d:1d:e9:94:ad:bf:ab:7a:57:94:ed:a8:
                    16:81:a1:b0:6f:16:56:ea:70:98:05:4d:0c:72:7f:
                    0e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C0:6E:4B:F9:82:D4:C9:1B:B8:35:00:96:DE:79:B2:64:4E:71:D6
            X509v3 Authority Key Identifier:
                keyid:DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:40:d3:48:2f:84:7d:f5:0a:80:88:7e:a1:3f:79:6f:84:25:
         55:1e:c9:45:f2:64:04:ee:4d:d0:b8:23:2c:17:38:3a:94:ed:
         1e:a7:00:44:70:b9:53:28:a4:d4:a2:38:4c:f6:3a:e4:cf:49:
         0d:f1:09:f6:e2:7c:29:a2:da:00:55:de:f8:94:22:a8:e4:aa:
         b1:4a:94:66:b8:59:f1:03:45:b6:e0:ba:58:9e:27:3a:83:1f:
         fc:a0:96:b9:e6:66:7e:07:45:ac:b0:4e:0e:8e:4b:e8:4d:4d:
         b6:33:95:ec:b0:c0:d3:26:87:f2:1d:66:b0:ac:43:69:47:b3:
         a3:21:74:54:1a:a5:25:d1:f4:7f:01:ad:40:cd:81:9a:5f:d0:
         e7:f6:bb:00:24:a3:42:48:46:c3:1b:79:1e:77:7d:5e:76:cb:
         3b:54:56:0a:1e:61:e5:33:ae:fb:2e:32:ba:fc:7b:a5:36:23:
         b1:c5:9e:f0:97:c5:67:1c:b3:29:62:df:04:71:bf:dc:63:72:
         16:85:28:13:88:66:1a:3a:22:29:af:24:23:66:59:ab:2d:be:
         35:b0:ae:f9:94:d4:f2:96:97:85:fc:54:5e:b8:ae:21:1b:1d:
         d7:7e:98:ea:14:7b:71:de:3e:25:8b:bb:7d:6a:b9:64:08:e9:
         4b:4c:73:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:56:47 2025 by rpki-client