Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.mft
File:                     90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.mft (raw, json)
Hash identifier:          MScRgcUmy+SA+LD7+nRlG9lfCgcV6pdg1DCIY7eeAEk=
Subject key identifier:   CB:1F:62:4E:B9:86:B2:A9:86:19:75:0D:E0:88:1F:C8:F5:77:4C:99
Authority key identifier: 90:AF:D2:ED:98:6A:4D:AE:86:A4:48:C1:E6:E5:67:CE:33:18:6B:C4
Certificate issuer:       /CN=90AFD2ED986A4DAE86A448C1E6E567CE33186BC4
Certificate serial:       3F8D9E781DBBAD52BC2C53EFDCB329980FBC1F04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.mft
Manifest number:          DF
Signing time:             Mon 02 Jun 2025 14:12:26 +0000
Manifest this update:     Mon 02 Jun 2025 14:07:26 +0000
Manifest next update:     Sun 08 Jun 2025 01:27:26 +0000
Files and hashes:         1: 3137392e302e3138352e302f32342d3234203d3e20323730303437.roa (hash: GyxFFx9WeHLOISGCFimf+ZCvzgD2D8fDofNkKqZcvl0=)
                          2: 3137392e302e3138342e302f32342d3234203d3e20323730303437.roa (hash: xJ3+uZjEvFpOS9R1lHwgmc0wFjMAfz/4TlWXb/xtpts=)
                          3: 3137392e302e3138372e302f32342d3234203d3e20323730303437.roa (hash: uRJ05mwwrs2mUjTG4w7sdIwZZxO0kN9DQjvbv/Limyc=)
                          4: 3137392e302e3138342e302f32322d3232203d3e20323730303437.roa (hash: hcy5DJ8trnwYq4/DItz046iMI/pD2mstXBT1GvS6mvg=)
                          5: 3137392e302e3138362e302f32342d3234203d3e20323730303437.roa (hash: fyRGQzyGeXQb0Hf9HS5woNqwmgif3EEmzwspZ8LZT64=)
                          6: 90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.crl (hash: UTDBtdCzk+2w+93v3XUzRRzphxg11oLuEVqHg6KdJ3g=)
                          7: 3137392e302e3138362e302f32332d3233203d3e20323730303437.roa (hash: GvDnn1iI7gRVFN8m1yG1xi9A45FOzv9354A42cRhB+k=)
                          8: 3137392e302e3138342e302f32332d3233203d3e20323730303437.roa (hash: Tovtnxs0BzC/aG5sMUwxIm+tRF1bT1k8A8YhE0Oqy54=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 01:27:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:8d:9e:78:1d:bb:ad:52:bc:2c:53:ef:dc:b3:29:98:0f:bc:1f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90AFD2ED986A4DAE86A448C1E6E567CE33186BC4
        Validity
            Not Before: Jun  2 14:07:26 2025 GMT
            Not After : Jun  8 01:27:26 2025 GMT
        Subject: CN=CB1F624EB986B2A98619750DE0881FC8F5774C99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5d:17:4b:99:0a:54:b4:21:b8:c5:ba:bd:df:
                    35:8f:68:ee:79:3d:a9:71:a6:2d:a1:90:da:bf:01:
                    b3:4e:38:93:bb:05:1f:88:d9:3a:14:c1:e7:d0:1f:
                    a9:7d:e1:8a:cf:9a:61:5a:ca:d6:90:71:3d:10:7e:
                    76:12:56:ee:76:4a:1d:02:d7:04:37:ca:5e:cf:63:
                    f3:1b:aa:2b:f9:2d:2b:bf:01:8e:1f:b0:52:e4:b4:
                    93:60:64:d9:69:ff:94:70:57:35:72:1b:9a:17:f2:
                    00:bf:a0:8c:13:14:00:e6:c1:5e:47:64:6e:83:0e:
                    b2:3c:92:0a:44:18:46:09:aa:bc:cd:d0:22:9b:a6:
                    d6:ee:ca:cc:52:b8:3d:29:e0:23:f7:a8:55:a6:c8:
                    fa:8f:52:3d:96:33:0b:85:85:ec:48:e4:54:68:36:
                    cf:56:96:9f:d6:6f:a7:05:3b:b6:6f:ae:41:10:7f:
                    98:b9:82:17:93:53:37:f4:aa:27:64:66:be:76:bb:
                    01:44:5a:14:be:98:3e:51:18:45:54:87:f9:22:03:
                    30:dd:a5:f0:1b:e9:9b:6f:f1:47:92:58:0c:19:29:
                    07:65:39:fb:71:e7:81:b8:47:b0:31:4d:83:92:ed:
                    bf:c2:44:f5:f6:c2:fb:bf:40:9b:cc:05:e2:a9:0b:
                    6d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1F:62:4E:B9:86:B2:A9:86:19:75:0D:E0:88:1F:C8:F5:77:4C:99
            X509v3 Authority Key Identifier:
                keyid:90:AF:D2:ED:98:6A:4D:AE:86:A4:48:C1:E6:E5:67:CE:33:18:6B:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:89:3e:1d:a1:12:86:02:ac:03:e1:ca:0f:12:9a:73:c0:ae:
         00:be:a6:39:42:79:6c:5b:c2:9c:b9:f1:f8:25:07:cc:93:2f:
         30:4a:5a:ae:20:be:fa:0b:7c:bb:c5:65:16:ee:5f:75:f0:2c:
         71:b2:fa:7f:26:de:c2:2d:01:63:ef:95:ef:98:78:04:0d:be:
         5d:e6:17:93:c1:28:06:58:f3:d4:ab:fd:6f:44:5c:e9:51:23:
         13:bb:1e:cc:13:cb:93:cb:95:8b:ee:44:b4:de:51:cc:5f:b6:
         88:14:7b:2b:c1:07:89:69:aa:3e:b9:97:81:5e:1a:7e:28:d8:
         b0:78:6b:bc:99:f7:9f:a6:91:95:20:09:13:fe:a0:73:5b:1b:
         dc:7b:31:8b:0f:90:b8:5d:32:fb:c8:15:65:5e:86:47:3e:14:
         36:1b:c8:7a:33:d6:a2:8c:5d:42:40:44:62:c9:cc:49:8b:3a:
         54:3f:1e:57:49:c5:21:ee:99:be:24:97:6c:a1:da:01:72:f2:
         71:dc:39:f8:8b:40:9e:d2:de:14:9c:66:6c:60:24:55:bd:85:
         3a:48:9a:c2:04:b4:0b:83:02:44:df:45:67:e5:40:62:be:02:
         4e:f7:4c:82:67:c4:df:5c:ab:32:e0:3e:01:ee:e8:43:a6:dc:
         9d:f8:6c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:31:10 2025 by rpki-client