Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.mft
File:                     928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.mft (raw, json)
Hash identifier:          Oyx3XFv5QZ0WN5RSE6yqon65CoZIvpoN72dmCn28Sfg=
Subject key identifier:   FF:CC:13:85:7D:46:08:EA:26:3B:13:1B:DA:6A:25:A0:A5:3D:94:9A
Authority key identifier: 92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37
Certificate issuer:       /CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
Certificate serial:       0C97ADBE845511F1CC80ABF6C877795A65CFDCFE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.mft
Manifest number:          D3
Signing time:             Fri 11 Apr 2025 16:17:26 +0000
Manifest this update:     Fri 11 Apr 2025 16:12:26 +0000
Manifest next update:     Wed 16 Apr 2025 23:34:26 +0000
Files and hashes:         1: 928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl (hash: VVpNLotq9ySkYwkKAtZuobW0RQ9DuZ1c9ZFwtB2X628=)
                          2: 3139302e31332e3139322e302f32302d3234203d3e20323731373733.roa (hash: 4fx1VQfhLAq6x8vKLoCXqH+OJNr2qvp7LUGez5LCs4E=)
                          3: 3137392e31382e302e302f31362d3234203d3e20323731373733.roa (hash: xlBVk/wVU1oY091kqv4JqKE+tn648PDALIvg5CofMp4=)
                          4: 323830333a6138303a3a2f33322d3438203d3e20323731373733.roa (hash: sErjkPYL8qS8dO2/Ava0uSs4dMWgG3cKcmWZ+hwsRdE=)
                          5: 323830333a663765303a3a2f33322d3438203d3e20323731373733.roa (hash: lelhNvLQtvkUQgfNVv7Zopr5U3iYB5erOGuX5IVY+x0=)
                          6: 3137392e34392e3232382e302f32322d3234203d3e20323731373733.roa (hash: dSO+uVzC1k4Ko/bbdVfvkOYA5rGIyhx+7RWnbH5nFdg=)
                          7: 3137392e31392e302e302f31362d3234203d3e20323731373733.roa (hash: tZItrZbQmDCBTlWRkGJmVLG0qSliMiAjcs5E7SOE1Fw=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 23:34:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:97:ad:be:84:55:11:f1:cc:80:ab:f6:c8:77:79:5a:65:cf:dc:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
        Validity
            Not Before: Apr 11 16:12:26 2025 GMT
            Not After : Apr 16 23:34:26 2025 GMT
        Subject: CN=FFCC13857D4608EA263B131BDA6A25A0A53D949A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:75:57:79:fd:9f:50:ee:13:a0:a1:67:21:a2:
                    3b:e6:70:9e:68:ab:40:c0:4d:4d:b9:ea:c3:30:a2:
                    dc:80:a2:9b:97:4f:11:43:2e:a7:08:17:bc:d9:61:
                    c0:c0:1c:1e:3b:85:f6:cb:35:3e:ff:4b:d4:80:45:
                    86:f8:d9:54:ef:9c:88:75:67:cc:a7:82:a7:61:99:
                    88:ac:06:67:db:14:6d:8e:36:c4:37:4e:dc:2e:cd:
                    b7:b2:69:60:a9:fa:b3:5e:d1:03:8c:a4:75:60:70:
                    1e:2a:82:5a:1e:c1:92:71:8c:cb:60:4f:ae:5c:cc:
                    d9:e3:f9:fd:67:d7:a3:58:9a:26:c1:bc:a7:af:59:
                    ae:73:35:e8:fc:ad:39:4c:5b:32:e0:29:78:78:58:
                    a7:8f:55:41:6f:ee:ff:f9:48:39:0b:f4:0a:0b:76:
                    15:f6:af:fe:f2:ae:b5:98:87:e2:76:f0:63:b3:df:
                    d1:19:9d:63:f1:0d:aa:1c:f5:7c:ac:9f:46:ac:b7:
                    1b:0b:a0:73:8b:96:70:0b:5f:95:8c:1e:75:f0:3c:
                    e0:94:08:ad:41:7f:7d:b2:a7:11:b3:47:fc:76:87:
                    8a:96:2d:cb:40:7a:25:31:6f:ce:06:ec:31:93:36:
                    a4:b6:90:72:6e:71:42:d6:bc:ac:3d:0f:ce:60:8e:
                    08:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CC:13:85:7D:46:08:EA:26:3B:13:1B:DA:6A:25:A0:A5:3D:94:9A
            X509v3 Authority Key Identifier:
                keyid:92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:8d:f7:36:e1:04:8a:99:8e:89:f6:c3:f9:ce:8e:ca:14:4f:
         70:6f:59:cf:24:b4:04:57:48:d3:51:fe:20:4d:8c:bd:5e:03:
         b2:87:d4:11:f6:5e:79:8e:b0:54:06:b1:e6:24:93:17:01:2d:
         62:76:49:78:d4:67:0b:bd:eb:20:22:4f:9a:a0:e7:00:a2:42:
         5f:e5:91:fc:bf:98:98:95:23:36:00:97:b6:54:72:26:b1:d1:
         a1:a0:a1:3f:7a:61:69:60:89:b4:04:f5:ab:3d:57:0f:3e:fa:
         66:5f:3b:30:91:12:07:19:fa:59:97:a9:7a:cf:8f:7e:cf:47:
         8c:67:e6:37:de:67:75:72:87:1b:a4:fa:57:e8:20:93:dc:d0:
         65:de:95:95:73:84:82:a0:b6:95:95:6e:4a:53:8c:54:51:11:
         75:10:4c:43:01:07:aa:9e:11:c5:7f:07:28:6f:6c:2b:bc:0f:
         5b:f6:49:bb:6a:09:0f:95:32:1b:e8:e0:07:71:58:cf:64:1d:
         f4:8e:88:1f:72:ca:23:a7:df:d0:34:9d:35:3a:4c:3c:a4:40:
         41:11:7a:32:db:82:ff:d4:ec:83:43:a6:85:73:4e:fc:a0:fd:
         cb:0b:fa:9e:06:85:92:b1:4a:c8:40:8b:83:ad:42:56:27:8b:
         ea:85:2a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:23:47 2025 by rpki-client