Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF2A1BACC04548FD2E125A6E9A7E1F0B21FD5C86D68699704DDAA76D5262199D/0/9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6.mft
File:                     9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6.mft (raw, json)
Hash identifier:          aTF2JkGuNzgLmCjtNZYRoouOp4OwuI+a7bNQpNlp4zM=
Subject key identifier:   A3:02:BC:1C:B3:91:BB:11:03:01:10:88:48:E2:3C:E4:B9:3F:C7:55
Authority key identifier: 9F:47:A2:8F:F4:E2:97:2D:B0:D8:10:8C:83:B0:3F:64:1B:3C:F1:A6
Certificate issuer:       /CN=9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6
Certificate serial:       3B155654B219DC74F04EFBFA4024C46429424F71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BF2A1BACC04548FD2E125A6E9A7E1F0B21FD5C86D68699704DDAA76D5262199D/0/9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6.mft
Manifest number:          CC
Signing time:             Sat 05 Apr 2025 02:53:23 +0000
Manifest this update:     Sat 05 Apr 2025 02:48:23 +0000
Manifest next update:     Thu 10 Apr 2025 17:12:23 +0000
Files and hashes:         1: 3230302e312e372e302f32342d3234203d3e203237393830.roa (hash: +EckyaFxYApGso61Fqh8ybYmrkTKrBYBoM4EqLsmhS8=)
                          2: 9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6.crl (hash: C58gudVjbn2+CKSgfRP697KeO4ljbh3ctB7yss8s7zY=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BF2A1BACC04548FD2E125A6E9A7E1F0B21FD5C86D68699704DDAA76D5262199D/0/9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BF2A1BACC04548FD2E125A6E9A7E1F0B21FD5C86D68699704DDAA76D5262199D/0/9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:15:56:54:b2:19:dc:74:f0:4e:fb:fa:40:24:c4:64:29:42:4f:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6
        Validity
            Not Before: Apr  5 02:48:23 2025 GMT
            Not After : Apr 10 17:12:23 2025 GMT
        Subject: CN=A302BC1CB391BB110301108848E23CE4B93FC755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9f:d3:41:6f:a7:a1:ce:e1:6f:92:61:cb:6f:
                    43:f0:4c:e4:97:49:c4:e6:d2:0e:46:43:fa:df:15:
                    7a:8a:6c:c9:a6:c9:ce:96:d5:06:05:32:0b:8c:57:
                    1c:09:07:7f:40:e3:d7:a0:71:72:b9:1f:14:ca:f4:
                    29:63:bc:6d:8a:fd:aa:22:90:3e:ed:29:3b:8e:51:
                    1f:4f:19:91:90:a9:f9:3e:53:c1:63:5b:1b:a9:4d:
                    65:91:ef:ad:88:b1:82:70:e6:e5:30:f9:d3:89:9f:
                    3d:96:9a:ba:a2:83:a1:8f:fe:22:09:65:54:25:d3:
                    e5:b9:cf:31:63:08:2a:21:9e:3a:bb:01:b0:e9:37:
                    44:ee:26:d9:c2:d0:02:57:5e:4d:26:c5:6f:43:36:
                    51:3d:a4:4a:cc:ba:82:7f:08:82:d7:e2:ce:ff:13:
                    ce:0a:a0:bf:da:88:b4:0b:69:f2:b4:dd:32:77:82:
                    74:93:c6:3c:0b:3a:c7:c3:54:e4:c2:08:a6:9f:67:
                    ca:a0:ef:14:6e:b2:68:07:6a:97:76:c7:d7:7b:ac:
                    81:cc:e1:08:ca:0c:dd:36:a3:5e:dd:b8:1f:44:b8:
                    84:5c:e8:dd:78:de:c1:f8:91:65:6c:90:d0:26:7d:
                    c1:31:d6:92:80:91:c4:ae:fa:e8:fa:fc:30:c8:8b:
                    02:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:02:BC:1C:B3:91:BB:11:03:01:10:88:48:E2:3C:E4:B9:3F:C7:55
            X509v3 Authority Key Identifier:
                keyid:9F:47:A2:8F:F4:E2:97:2D:B0:D8:10:8C:83:B0:3F:64:1B:3C:F1:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BF2A1BACC04548FD2E125A6E9A7E1F0B21FD5C86D68699704DDAA76D5262199D/0/9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF2A1BACC04548FD2E125A6E9A7E1F0B21FD5C86D68699704DDAA76D5262199D/0/9F47A28FF4E2972DB0D8108C83B03F641B3CF1A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:0f:fa:44:59:f8:24:ec:b3:27:7e:d2:33:3b:3a:67:af:5c:
         98:4d:c1:bd:79:05:76:fd:89:f1:14:34:72:cb:1c:0f:71:99:
         20:5a:4d:14:72:6a:64:1e:98:44:08:a2:bd:10:30:a0:11:30:
         90:a7:9c:df:35:be:45:76:c9:35:c6:e8:4d:5e:28:56:e1:6d:
         aa:20:a9:68:cf:65:f4:1c:12:ba:b7:a3:09:66:32:9e:72:72:
         56:63:19:af:bb:fe:09:93:10:10:bc:9b:f2:08:cd:bb:5b:94:
         65:8f:0f:72:5d:9c:34:f1:19:41:c9:0c:30:28:91:d9:c6:28:
         fb:36:27:90:3f:ed:36:9d:df:7b:55:9f:b5:64:05:b1:dd:b0:
         67:09:bb:12:5e:32:07:dc:25:f0:f6:be:49:1c:f0:de:e2:3c:
         97:4f:64:0f:3a:9b:df:46:5a:1c:d1:a9:d6:6f:7c:8b:a3:92:
         fd:30:70:5a:b6:83:61:47:f2:c8:b1:02:b4:82:eb:d7:a7:cf:
         5f:14:d6:ab:4a:da:ce:fe:42:de:05:ed:50:c8:63:95:c0:64:
         5a:9e:0d:56:f7:c8:11:b3:16:86:4e:0d:08:cb:f9:4c:19:7b:
         85:01:0d:f8:de:3e:5a:e4:18:69:67:7b:e8:31:07:c3:ad:a4:
         ad:a2:fb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:58:58 2025 by rpki-client