Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.mft
File:                     90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.mft (raw, json)
Hash identifier:          7TZr5VAfx4P2KEGphJTbbGL2IrQ3zjfPMCMX+0mxbdY=
Subject key identifier:   7C:C5:9F:6B:C7:47:17:DB:D9:E2:30:9B:41:B0:C7:F5:78:07:22:89
Authority key identifier: 90:AF:D2:ED:98:6A:4D:AE:86:A4:48:C1:E6:E5:67:CE:33:18:6B:C4
Certificate issuer:       /CN=90AFD2ED986A4DAE86A448C1E6E567CE33186BC4
Certificate serial:       5A1574767507B1637AB0B5F6A9983D0EEC1EF7B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.mft
Manifest number:          C3
Signing time:             Sat 05 Apr 2025 13:09:24 +0000
Manifest this update:     Sat 05 Apr 2025 13:04:24 +0000
Manifest next update:     Thu 10 Apr 2025 11:22:24 +0000
Files and hashes:         1: 3137392e302e3138362e302f32332d3233203d3e20323730303437.roa (hash: GvDnn1iI7gRVFN8m1yG1xi9A45FOzv9354A42cRhB+k=)
                          2: 3137392e302e3138342e302f32342d3234203d3e20323730303437.roa (hash: xJ3+uZjEvFpOS9R1lHwgmc0wFjMAfz/4TlWXb/xtpts=)
                          3: 3137392e302e3138372e302f32342d3234203d3e20323730303437.roa (hash: uRJ05mwwrs2mUjTG4w7sdIwZZxO0kN9DQjvbv/Limyc=)
                          4: 3137392e302e3138352e302f32342d3234203d3e20323730303437.roa (hash: GyxFFx9WeHLOISGCFimf+ZCvzgD2D8fDofNkKqZcvl0=)
                          5: 90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.crl (hash: owlOCCUGWUWm0Pn2S9Qe34PkRgTp65yd0cFVLkSjckM=)
                          6: 3137392e302e3138362e302f32342d3234203d3e20323730303437.roa (hash: fyRGQzyGeXQb0Hf9HS5woNqwmgif3EEmzwspZ8LZT64=)
                          7: 3137392e302e3138342e302f32332d3233203d3e20323730303437.roa (hash: Tovtnxs0BzC/aG5sMUwxIm+tRF1bT1k8A8YhE0Oqy54=)
                          8: 3137392e302e3138342e302f32322d3232203d3e20323730303437.roa (hash: hcy5DJ8trnwYq4/DItz046iMI/pD2mstXBT1GvS6mvg=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:15:74:76:75:07:b1:63:7a:b0:b5:f6:a9:98:3d:0e:ec:1e:f7:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90AFD2ED986A4DAE86A448C1E6E567CE33186BC4
        Validity
            Not Before: Apr  5 13:04:24 2025 GMT
            Not After : Apr 10 11:22:24 2025 GMT
        Subject: CN=7CC59F6BC74717DBD9E2309B41B0C7F578072289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1a:87:bf:e9:1b:18:41:98:d4:92:d2:b9:c9:
                    bd:f3:c8:4f:81:58:a1:5e:5b:bf:ff:41:71:fc:94:
                    34:46:ec:ac:21:96:d4:b6:27:3a:3a:51:90:2d:f8:
                    2c:ce:b0:11:b4:0f:df:d4:50:a4:cd:ee:17:eb:33:
                    70:fb:2d:d1:e2:ba:81:fb:41:b6:d2:24:4b:87:de:
                    79:66:c0:89:0d:a2:cb:f0:bd:56:50:fe:6e:01:59:
                    a8:34:01:78:8a:cc:4a:ef:5a:2b:de:03:a9:68:42:
                    a4:13:18:6d:2f:b6:ee:5c:eb:b4:4c:55:fe:62:9c:
                    57:80:87:24:84:f4:40:6e:52:f8:5b:9c:33:16:bc:
                    35:53:38:5b:ab:83:f8:f9:0c:25:b1:38:6e:9c:50:
                    d4:8f:c9:04:a8:b6:45:2a:88:26:c4:16:4b:16:35:
                    9f:8a:50:3e:cb:63:68:a2:89:cc:67:04:75:b0:d9:
                    fc:e9:71:70:20:86:72:2f:28:1e:ee:10:c4:08:fc:
                    e0:b0:dc:d5:ea:d7:4a:4c:84:01:a9:a6:66:0b:7f:
                    ee:7c:aa:dd:a7:07:3e:dd:e0:73:26:79:67:5a:92:
                    55:2b:33:c5:a9:b8:63:e2:f3:61:cc:56:c1:ae:3b:
                    7c:19:c4:f4:1f:32:86:9a:cd:12:b2:dc:ab:78:68:
                    88:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C5:9F:6B:C7:47:17:DB:D9:E2:30:9B:41:B0:C7:F5:78:07:22:89
            X509v3 Authority Key Identifier:
                keyid:90:AF:D2:ED:98:6A:4D:AE:86:A4:48:C1:E6:E5:67:CE:33:18:6B:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:8e:28:73:38:09:dc:b4:75:85:41:ff:b1:cb:e9:34:ef:40:
         2c:74:60:e2:25:c1:41:c7:c3:b5:b8:fc:b5:a3:d0:86:d2:14:
         48:93:d2:40:a2:5a:f5:68:73:e9:ef:d1:38:ed:39:b2:b7:ea:
         0b:91:2f:9d:09:9f:88:42:c3:1d:7c:ed:92:25:94:92:50:5f:
         a8:98:05:6b:1f:7c:a9:87:f1:70:f3:a9:1a:07:fe:a8:c8:ea:
         fe:64:2e:db:25:58:7c:8c:1d:89:bc:e6:51:7a:5e:8e:ce:55:
         cb:21:2a:40:eb:3b:4d:21:54:41:ff:41:63:f1:6b:10:29:1c:
         c4:0d:22:75:04:6b:64:64:d9:5e:9a:30:4e:08:3b:02:8b:07:
         77:c3:89:ff:87:5d:46:69:20:5c:5a:a4:48:11:26:74:34:7d:
         60:fd:3f:5b:12:06:71:cc:6f:4a:8d:ad:76:26:2c:2b:e4:d6:
         e8:51:09:46:0f:41:2a:af:fc:ff:31:b7:3b:07:2f:e8:ae:12:
         f8:19:9f:14:fd:cf:a9:4b:d5:dc:66:b8:a6:3f:58:2e:22:a5:
         ad:2a:ca:47:39:70:dc:0f:3f:b6:80:0e:50:82:33:fb:aa:da:
         54:b5:4e:37:f0:00:ee:d1:e9:c8:94:c1:69:03:ef:1f:57:c6:
         b9:9c:4b:fb
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUWhV0dnUHsWN6sLX2qZg9Duwe97kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBBRkQyRUQ5ODZBNERBRTg2QTQ0OEMxRTZFNTY3Q0Uz
MzE4NkJDNDAeFw0yNTA0MDUxMzA0MjRaFw0yNTA0MTAxMTIyMjRaMDMxMTAvBgNV
BAMTKDdDQzU5RjZCQzc0NzE3REJEOUUyMzA5QjQxQjBDN0Y1NzgwNzIyODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaGoe/6RsYQZjUktK5yb3zyE+B
WKFeW7//QXH8lDRG7KwhltS2Jzo6UZAt+CzOsBG0D9/UUKTN7hfrM3D7LdHiuoH7
QbbSJEuH3nlmwIkNosvwvVZQ/m4BWag0AXiKzErvWiveA6loQqQTGG0vtu5c67RM
Vf5inFeAhySE9EBuUvhbnDMWvDVTOFurg/j5DCWxOG6cUNSPyQSotkUqiCbEFksW
NZ+KUD7LY2iiicxnBHWw2fzpcXAghnIvKB7uEMQI/OCw3NXq10pMhAGppmYLf+58
qt2nBz7d4HMmeWdaklUrM8WpuGPi82HMVsGuO3wZxPQfMoaazRKy3Kt4aIivAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUfMWfa8dHF9vZ4jCbQbDH9XgHIokwHwYDVR0j
BBgwFoAUkK/S7ZhqTa6GpEjB5uVnzjMYa8QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRjNDNDY4RkYyRDI2QUZGNkRDOTZCQzQ0OUVEMTc0QzlC
NUYwMTlFMEVEMkRGMDlGRjlEQjdDMjhERjY5NjY0LzAvOTBBRkQyRUQ5ODZBNERB
RTg2QTQ0OEMxRTZFNTY3Q0UzMzE4NkJDNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MEFGRDJFRDk4NkE0REFFODZB
NDQ4QzFFNkU1NjdDRTMzMTg2QkM0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUYzQzQ2OEZGMkQyNkFGRjZEQzk2QkM0NDlFRDE3NEM5QjVGMDE5RTBF
RDJERjA5RkY5REI3QzI4REY2OTY2NC8wLzkwQUZEMkVEOTg2QTREQUU4NkE0NDhD
MUU2RTU2N0NFMzMxODZCQzQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCajihzOAnctHWFQf+xy+k070As
dGDiJcFBx8O1uPy1o9CG0hRIk9JAolr1aHPp79E47Tmyt+oLkS+dCZ+IQsMdfO2S
JZSSUF+omAVrH3yph/Fw86kaB/6oyOr+ZC7bJVh8jB2JvOZRel6OzlXLISpA6ztN
IVRB/0Fj8WsQKRzEDSJ1BGtkZNlemjBOCDsCiwd3w4n/h11GaSBcWqRIESZ0NH1g
/T9bEgZxzG9Kja12Jiwr5NboUQlGD0Eqr/z/Mbc7By/orhL4GZ8U/c+pS9XcZrim
P1guIqWtKspHOXDcDz+2gA5QgjP7qtpUtU438ADu0enIlMFpA+8fV8a5nEv7
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:52:03 2025 by rpki-client