Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.mft
File:                     9E7F2EB76A05A952625CB92EA40D238CA348F718.mft (raw, json)
Hash identifier:          CFPVX4pgC+fAwPy6dSifmF+cwA147uS5xO9iaoKYDtw=
Subject key identifier:   76:77:5B:D8:9B:80:1C:D9:FE:47:88:BD:DF:8A:5F:F7:63:63:EC:F3
Authority key identifier: 9E:7F:2E:B7:6A:05:A9:52:62:5C:B9:2E:A4:0D:23:8C:A3:48:F7:18
Certificate issuer:       /CN=9E7F2EB76A05A952625CB92EA40D238CA348F718
Certificate serial:       3D61CDDB8AE529C487B582D3170AD44BAAEFC9C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.mft
Manifest number:          D1
Signing time:             Mon 21 Apr 2025 00:15:14 +0000
Manifest this update:     Mon 21 Apr 2025 00:10:14 +0000
Manifest next update:     Fri 25 Apr 2025 21:31:14 +0000
Files and hashes:         1: 3137302e38302e32352e302f32342d3234203d3e203237393831.roa (hash: sllmiP/024PgdI1npYTfAq9H/30TOMS2DwC7oOGtQ+U=)
                          2: 3137302e38302e32372e302f32342d3234203d3e203237393831.roa (hash: aYAvg8k10aW9dP7Fj9v8BXd2e7qGtU+OWOAIdESdQlk=)
                          3: 3230302e302e3138332e302f32342d3234203d3e203237393831.roa (hash: 5TcjF8GjohyAMP6NS+e32QqzvVCjaQtm7FhmtLS3268=)
                          4: 3137302e38302e32362e302f32342d3234203d3e203237393831.roa (hash: 4tmxWgje/NssD+wMjdRqU4gBrg30gFk5YFsKou8Il4o=)
                          5: 3230302e302e3138322e302f32342d3234203d3e203237393831.roa (hash: 78A+AkIfAJ2wuL+p89b/B9Vc3VixGXY7h/SgvV0D0vA=)
                          6: 3137302e38302e32342e302f32342d3234203d3e203237393831.roa (hash: pIW4RaxERzyb3mabYdUmJuJtuX3eWvenOxc7LKOw9jE=)
                          7: 9E7F2EB76A05A952625CB92EA40D238CA348F718.crl (hash: v4wGQeRh/VBiwSGRBttWM90lV2jAB1uyOueuDfh7vSU=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 21:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:61:cd:db:8a:e5:29:c4:87:b5:82:d3:17:0a:d4:4b:aa:ef:c9:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E7F2EB76A05A952625CB92EA40D238CA348F718
        Validity
            Not Before: Apr 21 00:10:14 2025 GMT
            Not After : Apr 25 21:31:14 2025 GMT
        Subject: CN=76775BD89B801CD9FE4788BDDF8A5FF76363ECF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:83:de:c2:1a:39:7f:8d:07:6c:69:83:da:fc:
                    84:bb:0d:d6:61:0a:fb:e6:a3:ba:34:ec:d8:24:56:
                    95:d0:ce:23:51:90:9f:ea:6c:b2:be:e6:ee:20:c2:
                    45:73:47:26:48:c7:c1:88:36:ff:33:94:ec:a6:1e:
                    60:b6:06:21:09:37:3d:f1:2d:c1:f0:b9:e2:30:09:
                    7d:fa:10:b1:5e:b5:33:a6:ee:ed:0d:e9:13:7d:8c:
                    38:a0:62:db:06:02:d5:28:83:37:e6:a4:e4:b0:b1:
                    1f:7e:ce:8e:fc:17:93:66:cd:6c:a5:26:b8:45:fd:
                    51:33:29:f1:cb:8d:cb:22:ab:4e:ca:1e:7a:a9:75:
                    4b:8e:7a:0d:c7:60:fb:cd:0d:fb:0a:17:9d:83:b9:
                    37:e6:7d:3f:6e:6a:41:1f:b3:e0:d0:62:50:5e:43:
                    3e:7f:32:c3:d3:f0:23:5e:94:0d:73:ab:a4:dd:b8:
                    82:78:4d:6b:fe:8c:90:67:ce:e9:45:a4:c1:5c:85:
                    36:6a:8b:52:78:75:38:ba:fd:d6:e9:75:7b:39:45:
                    99:7f:d6:4b:cf:18:2a:ff:ff:96:a0:26:2e:ab:6f:
                    d3:8b:07:db:bd:75:2b:ba:5f:9e:d7:d9:a1:37:36:
                    e4:57:8d:ea:d9:c0:72:18:44:f8:a8:af:2a:9d:8e:
                    71:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:77:5B:D8:9B:80:1C:D9:FE:47:88:BD:DF:8A:5F:F7:63:63:EC:F3
            X509v3 Authority Key Identifier:
                keyid:9E:7F:2E:B7:6A:05:A9:52:62:5C:B9:2E:A4:0D:23:8C:A3:48:F7:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:12:b9:a5:4e:33:41:b9:80:71:a0:07:b3:9c:f2:7e:ec:51:
         a0:e6:e3:fd:f5:77:e0:f1:1a:81:04:8c:21:86:bd:7c:71:c2:
         cb:38:df:94:11:ea:3c:7a:36:b6:12:b3:40:7e:81:34:01:15:
         83:6b:69:95:53:02:87:31:cb:81:f2:e3:7f:66:3d:53:a0:4f:
         26:45:6b:d2:74:56:82:61:48:08:c2:78:93:51:f1:cf:55:9d:
         56:8a:3f:db:a9:e2:56:e9:71:98:c6:5c:63:7c:6e:5e:07:60:
         bf:23:2a:ec:2d:3f:35:25:03:41:ee:90:7c:ec:4e:7f:f9:4e:
         fc:a2:b4:de:e1:9a:33:99:e2:9a:bd:85:f6:3b:12:98:10:78:
         07:25:61:c4:14:9e:ce:f7:dc:eb:49:7f:42:4d:09:86:6d:cd:
         75:38:80:62:0e:81:ed:b5:1a:2e:5a:70:4e:90:d9:bd:45:57:
         ae:57:9e:a4:55:09:f9:94:00:01:44:89:3f:11:bc:82:f4:f9:
         0b:ec:83:33:79:8e:03:cb:a5:53:57:0a:60:2e:40:c7:4b:6c:
         2b:42:aa:7d:a6:38:22:ec:ca:8d:b7:dd:eb:2a:06:1f:5a:48:
         3b:3f:d2:8c:7f:fd:3a:d6:d3:02:f9:f8:74:04:51:39:71:c4:
         4b:8f:12:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:05:30 2025 by rpki-client