Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
File:                     CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft (raw, json)
Hash identifier:          2QVD7CXvtJJuPGj/U7mX+UHExertF49+tFcDeWTNYHc=
Subject key identifier:   F1:D3:05:78:2F:BE:D6:74:7E:48:56:4D:92:F0:B1:92:67:8D:C4:66
Authority key identifier: CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9
Certificate issuer:       /CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9
Certificate serial:       19310FA1CFFF1C10F526EBF2D7A44317A5020DEC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
Manifest number:          0136
Signing time:             Tue 04 Nov 2025 22:04:51 +0000
Manifest this update:     Tue 04 Nov 2025 21:59:51 +0000
Manifest next update:     Mon 10 Nov 2025 21:52:51 +0000
Files and hashes:         1: 34352e3136302e31322e302f32322d3234203d3e203631353033.roa (hash: rGf/Ot8vpc4bXLZjtJMeJ64W68zetCQCjBNpV60KJLk=)
                          2: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl (hash: zljPDuQua3LStF1yAAs2EDiT/JsnSAB5vaoE79GMiQQ=)
                          3: 34352e3136302e31322e302f32322d3234203d3e20323635373033.roa (hash: MAJxrDm1ex5gG0+qVfg9yJc6ZorOreLgA5tyBVAPd0o=)
                          4: 34352e3136302e31322e302f32322d3234203d3e20323636383730.roa (hash: vb7Kyf31JcU4K7h1whk05luNX6Z6SSjkjzD3prLXHAE=)
                          5: 34352e3136302e31322e302f32322d3234203d3e20323639373333.roa (hash: a8Us3kI8SkWGmqoxEMJdOuQDpMUk4xinBahinzFU9DU=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:31:0f:a1:cf:ff:1c:10:f5:26:eb:f2:d7:a4:43:17:a5:02:0d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9
        Validity
            Not Before: Nov  4 21:59:51 2025 GMT
            Not After : Nov 10 21:52:51 2025 GMT
        Subject: CN=F1D305782FBED6747E48564D92F0B192678DC466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:76:ed:89:b0:30:46:d0:ec:c5:bd:75:ea:45:
                    1b:59:97:61:20:2c:5a:57:80:bf:54:d8:aa:a7:10:
                    24:bd:64:7e:19:68:99:24:6f:34:d6:3a:6f:e5:81:
                    86:d5:b8:dc:27:5b:ba:30:fe:40:f4:ed:ad:35:58:
                    a2:bc:b1:c5:22:0a:00:f5:3e:23:ad:04:e8:b2:1c:
                    ed:cc:ad:44:b7:f5:e5:36:c5:3b:c0:50:ee:32:c6:
                    ab:6a:b2:1f:95:3f:a3:f5:98:91:e5:88:5a:05:8b:
                    36:93:dd:64:3f:95:34:4a:63:98:41:3d:01:9f:fb:
                    14:c3:c7:19:83:ce:a6:ca:98:e3:d1:79:f9:7c:18:
                    47:07:1f:db:f0:a4:02:91:61:1e:b1:4a:be:32:6d:
                    ef:4f:7c:9b:0a:4c:2f:84:fa:b7:ae:82:a0:ef:21:
                    83:45:8f:07:e6:be:64:bf:1b:f0:09:ec:44:e1:9d:
                    74:a9:cc:96:09:96:e1:0d:28:3d:13:7d:a0:3e:26:
                    4f:16:07:1d:17:c9:fd:3c:40:39:93:75:b7:1a:c3:
                    b1:65:40:c0:00:d7:cf:29:d8:dd:4f:2a:be:4e:28:
                    11:db:b0:03:b0:a4:10:e6:41:b3:62:8a:c1:42:51:
                    89:69:d7:a8:ee:39:08:dc:e5:6f:cc:6e:7e:85:2b:
                    bb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D3:05:78:2F:BE:D6:74:7E:48:56:4D:92:F0:B1:92:67:8D:C4:66
            X509v3 Authority Key Identifier:
                keyid:CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:e3:d2:2f:67:5c:a1:bf:8a:b5:e5:8c:f7:5c:c7:74:c7:9c:
         a8:cd:16:43:2d:12:2a:76:b5:d0:a2:4c:1b:35:39:77:7b:f4:
         6d:da:78:0e:61:0c:c3:97:05:a7:59:16:15:9b:3c:1c:d5:90:
         9b:78:fc:e5:11:6e:0e:b2:59:96:8d:f1:cd:95:de:be:7d:fd:
         e9:7c:4f:7d:77:25:af:e7:b5:63:5c:a7:06:f1:ce:10:8f:18:
         4e:9d:23:c5:54:e2:1a:32:55:c8:2f:b0:22:89:f4:fb:83:a8:
         7f:83:9c:05:fc:55:74:01:3b:15:b0:c2:27:96:81:7f:6a:89:
         fd:d0:2d:84:08:cf:2b:12:53:bd:38:70:f6:71:44:f3:0e:cc:
         37:f3:70:3e:67:03:df:71:4b:0f:c9:28:88:89:33:dd:a8:97:
         8a:cd:6f:7e:87:dc:88:6d:ce:fc:40:44:36:97:70:d1:93:9c:
         54:79:e1:7a:fa:c2:fd:c7:0e:03:f3:33:0c:69:99:16:4e:c1:
         74:c1:40:ba:af:a7:fd:d8:f4:19:b5:41:95:05:73:3f:62:b8:
         dd:90:35:e8:31:5c:ce:19:53:48:27:49:51:35:ac:ab:11:52:
         45:e9:71:04:fc:9f:44:85:39:c3:32:33:c7:94:05:d4:20:66:
         3a:ea:7f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:49:47 2025 by rpki-client