Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
File:                     CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft (raw, json)
Hash identifier:          U4uFtDoc+IPX3n3mPn1ox4wEtvzw5jdibU41d2f7Fzo=
Subject key identifier:   3A:23:AF:DF:91:77:5D:D6:D2:36:EB:D2:C0:ED:F9:EE:97:66:FA:E4
Authority key identifier: CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49
Certificate issuer:       /CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
Certificate serial:       36B5573F4E85578E53C865FCACABF01665E1BDA2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
Manifest number:          01A5
Signing time:             Mon 01 Jun 2026 12:58:20 +0000
Manifest this update:     Mon 01 Jun 2026 12:53:20 +0000
Manifest next update:     Fri 05 Jun 2026 22:35:20 +0000
Files and hashes:         1: AS52263.roa (hash: WKSQ3srn5JloSaKCXXsPqvBbre0xIncnu/ZyIWFMlbQ=)
                          2: CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl (hash: cZQ6paMI4F2C7N93p7Tw8zF1/UejImiIjaR94WXZ9ek=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 05 Jun 2026 22:35:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b5:57:3f:4e:85:57:8e:53:c8:65:fc:ac:ab:f0:16:65:e1:bd:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
        Validity
            Not Before: Jun  1 12:53:20 2026 GMT
            Not After : Jun  5 22:35:20 2026 GMT
        Subject: CN=3A23AFDF91775DD6D236EBD2C0EDF9EE9766FAE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:12:20:bf:7e:07:71:0d:72:0d:ce:f9:66:24:
                    c8:35:86:1c:42:14:9a:d4:f7:fd:8e:14:b6:ce:22:
                    a7:58:d2:40:24:94:b4:44:b7:91:dd:e4:8e:30:3b:
                    0b:3b:fa:7d:69:33:5a:5d:a8:0f:51:cc:f1:03:f1:
                    a9:7a:e9:4a:30:7c:59:5c:b2:a9:bc:b6:5a:52:05:
                    28:4a:d0:82:3f:79:0e:33:d5:74:42:d8:05:a6:f7:
                    eb:5e:18:da:3c:2c:5e:44:e0:ef:79:b8:eb:f3:ee:
                    90:e8:51:de:1a:c4:92:18:cb:2f:84:e5:9c:6f:62:
                    c0:41:09:91:37:ac:04:24:45:49:5e:e2:75:5a:31:
                    99:8a:6a:43:78:43:0b:3e:fa:7e:5d:48:fb:6e:04:
                    68:b8:17:da:09:72:8b:00:48:d0:5b:51:cc:1d:a8:
                    33:66:93:2b:fe:81:42:da:87:91:37:77:c8:82:71:
                    6a:89:c0:d7:36:76:8a:72:b7:05:df:63:7d:e4:b7:
                    d4:ed:e8:ef:97:3c:8c:6a:c3:a2:5b:64:70:41:22:
                    25:1a:27:d6:33:d5:a9:d4:a7:90:87:dc:71:b6:83:
                    76:1f:ef:49:ec:0b:9a:f9:d9:70:9b:53:80:2c:1c:
                    c1:73:c4:1f:1a:39:37:43:93:5b:25:7b:f0:2c:c1:
                    39:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:23:AF:DF:91:77:5D:D6:D2:36:EB:D2:C0:ED:F9:EE:97:66:FA:E4
            X509v3 Authority Key Identifier:
                keyid:CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:95:c0:5a:4b:e6:ee:b7:32:17:79:95:48:22:cb:96:e0:17:
         7a:1a:dd:5c:ca:55:88:6d:76:d5:e4:9d:88:cf:1e:ec:fc:41:
         cd:36:24:80:6f:dd:c4:13:4b:59:69:d9:16:9c:56:92:8b:73:
         c9:6b:45:b7:e1:c7:ec:3c:7f:53:ec:68:0c:df:78:ae:ec:c3:
         4c:3b:6a:19:d5:1f:b8:ba:52:d6:d8:a1:a7:c5:26:0d:7e:5d:
         3a:15:0d:14:ce:7f:61:ca:ec:a1:9d:e5:7e:ab:a9:87:38:fa:
         ca:c0:54:5a:e8:8a:47:0a:48:65:53:d1:03:1f:a4:28:2a:bf:
         a3:e4:32:d2:a0:88:6d:74:96:bc:5f:00:4e:d5:7d:6f:17:08:
         f1:60:b5:69:fb:d4:42:de:90:78:73:fe:23:32:32:96:71:03:
         62:42:73:77:31:3f:79:ca:6c:99:32:59:7f:b6:c4:64:e1:86:
         ca:a7:86:c8:0c:a7:ef:f5:c7:11:f3:53:9a:76:b4:ce:16:a6:
         08:2c:98:3a:1b:c9:c2:e6:04:71:6f:92:9a:ae:36:67:4d:99:
         62:40:20:7d:4b:24:9f:8c:2f:79:a4:5e:0c:01:e1:df:89:8f:
         c9:27:62:5d:d3:6f:5f:e3:9c:c1:48:b3:a5:0e:99:03:1e:a6:
         c0:49:59:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 17:11:50 2026 by rpki-client