Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.mft
File:                     01ED585C7FF695D515C213CCD92F98A26AF818D7.mft (raw, json)
Hash identifier:          XwVfXgQbflJLidZFgRlW+WtWKVjyckSlP1G/2Na8cH4=
Subject key identifier:   7F:B5:42:4C:5E:3F:8C:ED:05:75:32:CF:98:5C:25:DD:39:E0:A9:47
Authority key identifier: 01:ED:58:5C:7F:F6:95:D5:15:C2:13:CC:D9:2F:98:A2:6A:F8:18:D7
Certificate issuer:       /CN=01ED585C7FF695D515C213CCD92F98A26AF818D7
Certificate serial:       6F024C20353AE9915CA1C105487DC7A3C2C98DE2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.mft
Manifest number:          D3
Signing time:             Tue 22 Apr 2025 01:20:05 +0000
Manifest this update:     Tue 22 Apr 2025 01:15:05 +0000
Manifest next update:     Sun 27 Apr 2025 08:08:05 +0000
Files and hashes:         1: 3137302e3234342e3130392e302f32342d3234203d3e203238343038.roa (hash: 5fCwyONeyeji7HZzC4v2AiNjGkxrAUq7NCSPHu/4V6g=)
                          2: 3136372e3234392e3235322e302f32342d3234203d3e203238343038.roa (hash: 00J5sVSy5ChWY1KIIVpm77Ws7PJSJ0lkmHqHcGVQgxk=)
                          3: 3137302e3234342e3130382e302f32322d3232203d3e203238343038.roa (hash: Q0KxeATq9kxvtkH/HTN2jRYKbxWHd9o6so5P6qqtt88=)
                          4: 3136372e3234392e3235322e302f32322d3232203d3e203238343038.roa (hash: 6ncbNM4WoA+W76dLlnGcLjB9WxL23hY3ngPcpu6C30w=)
                          5: 3137302e3234342e3130382e302f32342d3234203d3e203238343038.roa (hash: v5icuOaZjtOwYpZbM1QTtWPo/srEw8zLd2panOrEaww=)
                          6: 3137302e3234342e3131312e302f32342d3234203d3e203238343038.roa (hash: TSviLVCtoLq6m3oEA/cHlZ448hiJKlv2/D0r6d7S+OM=)
                          7: 323830363a3230663a3a2f33322d3332203d3e203238343038.roa (hash: zXiy00wu7LjAOYUl1msOzTqtAuY/Mhm07KLvnFhkDpA=)
                          8: 3137302e3234342e3131302e302f32342d3234203d3e203238343038.roa (hash: +ktf40EOmBBtbSsC+t7MJn2fzDoNZudytHNZTSWKiOU=)
                          9: 3136372e3234392e3235342e302f32342d3234203d3e203238343038.roa (hash: K7YOF5u8W+5WhBA2Hmx9c85DBSyBw+KuVJnqeb90Pl4=)
                          10: 3136372e3234392e3235332e302f32342d3234203d3e203238343038.roa (hash: eK2L+7AR1XS2FmCZgSabXTaeQLUc37RWqT5h4QPeEeE=)
                          11: 01ED585C7FF695D515C213CCD92F98A26AF818D7.crl (hash: m9tTf/+rB5kGVMBqmob8ir4qLSivoEofvJvgHEpux5A=)
                          12: 3136372e3234392e3235352e302f32342d3234203d3e203238343038.roa (hash: zxPM78n63lIY04O4JwVpGeshkTa+Ns3AV/zOwweYVZc=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:02:4c:20:35:3a:e9:91:5c:a1:c1:05:48:7d:c7:a3:c2:c9:8d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01ED585C7FF695D515C213CCD92F98A26AF818D7
        Validity
            Not Before: Apr 22 01:15:05 2025 GMT
            Not After : Apr 27 08:08:05 2025 GMT
        Subject: CN=7FB5424C5E3F8CED057532CF985C25DD39E0A947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:aa:ae:b9:be:b0:87:2e:e5:1d:f1:fa:8e:fa:
                    10:c3:94:87:0b:fc:39:04:76:88:37:ff:77:4e:26:
                    c3:93:9f:e2:e3:49:cb:fc:bb:9d:f3:01:7b:57:5b:
                    92:b5:78:68:fc:07:71:61:ea:d6:90:de:81:9e:dc:
                    50:23:78:42:d6:88:39:58:57:c2:38:52:37:b9:c1:
                    7d:3b:f4:b6:50:10:15:cb:5b:44:ca:d3:77:5c:bf:
                    4f:a8:d1:a6:d2:bd:5c:1d:ac:8f:b1:4f:10:38:7a:
                    22:40:cb:15:59:24:0f:9d:6b:61:de:23:fb:5e:8d:
                    9e:06:23:75:71:d1:d9:fa:33:79:47:cd:7d:1a:db:
                    0f:ce:49:5c:9b:a6:27:0c:8b:9f:c5:ce:51:73:aa:
                    47:93:1a:7d:e1:b4:56:23:22:8d:09:79:80:eb:14:
                    58:8b:e9:0c:2c:f1:26:fd:30:5f:a1:d9:ee:e7:a8:
                    90:ce:95:36:52:28:69:67:80:9e:cd:6d:29:6e:9c:
                    2e:e5:c0:42:09:6b:67:64:fc:b5:17:b3:54:ef:76:
                    15:25:94:3d:2d:9b:b8:63:99:3e:1b:3d:3a:ea:85:
                    1e:28:a1:7e:37:2a:f3:20:6d:54:9b:6e:87:8b:4a:
                    b6:5e:ad:3f:1e:64:18:b3:c4:2f:9d:bd:00:fd:7f:
                    f7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B5:42:4C:5E:3F:8C:ED:05:75:32:CF:98:5C:25:DD:39:E0:A9:47
            X509v3 Authority Key Identifier:
                keyid:01:ED:58:5C:7F:F6:95:D5:15:C2:13:CC:D9:2F:98:A2:6A:F8:18:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:fc:ce:46:02:02:dd:f7:f7:f9:81:55:4e:4a:96:b7:f9:96:
         d4:22:38:d2:9d:62:9b:48:c0:86:02:aa:b7:45:ab:fc:5c:55:
         7c:fb:96:69:0b:1d:2c:45:19:8e:79:2a:22:85:a1:29:3e:65:
         ad:12:70:67:e9:a9:92:2a:d4:64:a1:24:ea:6f:12:d4:59:d9:
         84:29:1f:94:d7:9a:f9:8b:78:1e:30:e4:38:8c:63:e6:90:da:
         17:37:ad:74:42:73:66:01:dd:2b:0f:39:26:29:cb:f6:1d:58:
         b3:f1:22:c1:27:0b:eb:00:3e:f2:23:91:0c:c0:62:0b:56:65:
         18:56:97:3f:be:9e:3a:53:87:4d:ad:8c:e7:36:e5:8a:0d:f8:
         13:82:42:8b:69:5b:ac:81:ac:17:f1:e2:01:8c:af:e6:62:60:
         2b:64:84:7b:99:db:eb:30:5c:04:58:e6:a3:d0:97:dc:13:0c:
         92:bf:55:8d:9a:02:7f:f5:ff:16:79:b2:ab:5b:55:15:d9:57:
         4d:a1:62:b8:85:a7:e2:c7:7f:b7:7d:cf:eb:79:8d:50:f9:8d:
         d5:ff:ba:b0:d4:67:39:96:2d:1e:8d:77:e6:2c:a9:36:82:00:
         5b:5b:0b:e0:5b:24:91:b1:4b:6f:47:98:b0:58:4f:2a:3c:0d:
         21:cd:88:a4
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUbwJMIDU66ZFcocEFSH3Ho8LJjeIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFFRDU4NUM3RkY2OTVENTE1QzIxM0NDRDkyRjk4QTI2
QUY4MThENzAeFw0yNTA0MjIwMTE1MDVaFw0yNTA0MjcwODA4MDVaMDMxMTAvBgNV
BAMTKDdGQjU0MjRDNUUzRjhDRUQwNTc1MzJDRjk4NUMyNUREMzlFMEE5NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiqq65vrCHLuUd8fqO+hDDlIcL
/DkEdog3/3dOJsOTn+LjScv8u53zAXtXW5K1eGj8B3Fh6taQ3oGe3FAjeELWiDlY
V8I4Uje5wX079LZQEBXLW0TK03dcv0+o0abSvVwdrI+xTxA4eiJAyxVZJA+da2He
I/tejZ4GI3Vx0dn6M3lHzX0a2w/OSVybpicMi5/FzlFzqkeTGn3htFYjIo0JeYDr
FFiL6Qws8Sb9MF+h2e7nqJDOlTZSKGlngJ7NbSlunC7lwEIJa2dk/LUXs1TvdhUl
lD0tm7hjmT4bPTrqhR4ooX43KvMgbVSbboeLSrZerT8eZBizxC+dvQD9f/f7AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUf7VCTF4/jO0FdTLPmFwl3TngqUcwHwYDVR0j
BBgwFoAUAe1YXH/2ldUVwhPM2S+Yomr4GNcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRDk2QTEwQTY1MUUwMUMwMzJGN0YyNUFBMjBBRjMxMUJG
RTM2RjA0Nzc2NjA2MTI1RDM3MEE2Mjc3Mjc2RjI5LzAvMDFFRDU4NUM3RkY2OTVE
NTE1QzIxM0NDRDkyRjk4QTI2QUY4MThENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMUVENTg1QzdGRjY5NUQ1MTVD
MjEzQ0NEOTJGOThBMjZBRjgxOEQ3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0Q5NkExMEE2NTFFMDFDMDMyRjdGMjVBQTIwQUYzMTFCRkUzNkYwNDc3
NjYwNjEyNUQzNzBBNjI3NzI3NkYyOS8wLzAxRUQ1ODVDN0ZGNjk1RDUxNUMyMTND
Q0Q5MkY5OEEyNkFGODE4RDcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCC/M5GAgLd9/f5gVVOSpa3+ZbU
IjjSnWKbSMCGAqq3Rav8XFV8+5ZpCx0sRRmOeSoihaEpPmWtEnBn6amSKtRkoSTq
bxLUWdmEKR+U15r5i3geMOQ4jGPmkNoXN610QnNmAd0rDzkmKcv2HViz8SLBJwvr
AD7yI5EMwGILVmUYVpc/vp46U4dNrYznNuWKDfgTgkKLaVusgawX8eIBjK/mYmAr
ZIR7mdvrMFwEWOaj0JfcEwySv1WNmgJ/9f8WebKrW1UV2VdNoWK4hafix3+3fc/r
eY1Q+Y3V/7qw1Gc5li0ejXfmLKk2ggBbWwvgWySRsUtvR5iwWE8qPA0hzYik
-----END CERTIFICATE-----
Generated at Tue Apr 22 23:20:47 2025 by rpki-client