Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft
File:                     42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft (raw, json)
Hash identifier:          ZrJXmKMu1Nicle321cv72ookMGxMkkuAhabUf7t2Adg=
Subject key identifier:   D3:0A:02:A1:4E:82:54:C9:2E:1C:C7:AC:DA:D2:37:4F:B9:18:06:95
Authority key identifier: 42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9
Certificate issuer:       /CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9
Certificate serial:       1526424FE305F309F13020DC2A3616A34A237497
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft
Manifest number:          D1
Signing time:             Tue 15 Apr 2025 18:00:13 +0000
Manifest this update:     Tue 15 Apr 2025 17:55:13 +0000
Manifest next update:     Sun 20 Apr 2025 21:22:13 +0000
Files and hashes:         1: 42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl (hash: YrL6orJ1jIwDlJ/4elacumk9LLMgv4M2VrWVyRU+gws=)
                          2: 323830333a353531303a3a2f33322d3634203d3e20323732303330.roa (hash: aEjGzC9WyQcaAq/pDczNBjuThFt4XEwbTDLIcE0Y+Vs=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:26:42:4f:e3:05:f3:09:f1:30:20:dc:2a:36:16:a3:4a:23:74:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9
        Validity
            Not Before: Apr 15 17:55:13 2025 GMT
            Not After : Apr 20 21:22:13 2025 GMT
        Subject: CN=D30A02A14E8254C92E1CC7ACDAD2374FB9180695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c0:15:2c:83:fe:21:50:0b:1a:98:53:43:86:
                    1a:71:43:b3:84:90:17:1e:d4:5f:63:dd:74:67:84:
                    95:3a:52:df:1a:86:44:be:11:19:f0:4d:6f:30:ee:
                    68:a9:bb:34:9e:ab:42:63:57:ca:ba:96:89:71:c9:
                    3f:89:ff:ef:93:c3:2b:a2:ea:ca:91:bc:2a:20:aa:
                    6a:01:cb:60:06:b4:f3:58:d6:54:50:7b:66:37:c1:
                    eb:27:e7:dc:9a:e5:55:83:3b:13:b7:18:9a:ad:5e:
                    c1:f6:03:38:0a:56:e3:0c:60:fc:fe:1a:f5:94:4c:
                    bd:50:81:39:cc:0c:ed:ee:b5:64:a4:a8:0a:68:ec:
                    31:a1:f6:5c:99:7b:5c:a9:83:fe:88:85:87:4b:fe:
                    c0:ba:cc:85:2a:3e:4a:0e:8e:16:8c:7a:29:7b:77:
                    ce:51:44:b4:1f:99:6a:5e:eb:2a:77:5e:50:3e:67:
                    5e:4e:15:fb:f2:1f:65:47:65:21:1d:af:a4:8f:39:
                    91:de:98:01:ed:2b:fc:1b:4d:c7:0d:97:67:41:01:
                    8b:a1:9d:cf:ab:d8:74:98:34:8d:e6:db:c0:f4:e1:
                    a0:d4:e1:5a:8f:aa:96:98:84:c7:5b:e5:e4:77:5e:
                    e1:2f:2d:9e:84:80:f8:97:b9:65:88:da:d9:91:44:
                    1d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0A:02:A1:4E:82:54:C9:2E:1C:C7:AC:DA:D2:37:4F:B9:18:06:95
            X509v3 Authority Key Identifier:
                keyid:42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:c5:df:fb:5c:a9:7f:d6:ee:04:6b:51:a1:89:dd:aa:8a:f9:
         ac:1c:81:fb:e2:0f:4e:62:d0:39:04:97:fa:b3:a5:f4:12:1d:
         7c:70:3b:cc:11:1b:8b:cf:de:6a:2a:56:b1:ed:63:e5:fd:1f:
         1b:07:0d:cd:48:6a:8c:0f:a0:78:6c:f8:f9:f3:bd:07:0b:26:
         5b:67:39:bb:4e:1f:28:88:4d:34:ad:2c:1b:cf:01:eb:9c:09:
         74:d6:1c:f7:4d:35:59:4a:56:5c:8a:30:9a:cc:ec:85:79:de:
         95:d1:11:3b:72:79:b9:68:15:57:a9:50:a3:ee:fe:47:6c:40:
         f4:f3:82:b1:89:52:89:6d:5a:d6:0a:a9:02:d9:fd:4a:ff:8f:
         50:5e:40:b2:ee:2e:88:67:b8:c1:b1:12:1d:6f:6b:8b:5f:88:
         39:29:f0:00:30:29:0a:6b:5d:48:6c:70:39:bd:7b:f3:64:74:
         ab:25:f0:ed:40:33:d2:12:47:98:15:1d:89:fa:85:47:7a:d1:
         b8:05:09:b3:78:c3:75:5b:76:d9:a4:27:bb:e0:c1:cd:b6:d0:
         e9:19:cb:e0:7f:df:24:7a:fe:f3:58:2e:bd:9f:4f:19:85:bf:
         6d:5d:23:a2:b8:91:a2:93:8f:9b:6e:d4:7c:1e:bf:30:d2:47:
         3b:85:34:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:48:42 2025 by rpki-client