Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.mft
File:                     D8D44DD84F3FDBD732870581DB91456D40862FA2.mft (raw, json)
Hash identifier:          NEcjEVfjG6MbNsFTuOgt78rgKUXn8aHqvROvMxFsleo=
Subject key identifier:   61:8C:B9:EC:AD:2B:CA:03:31:6E:78:94:DF:AB:60:8E:04:25:E2:52
Authority key identifier: D8:D4:4D:D8:4F:3F:DB:D7:32:87:05:81:DB:91:45:6D:40:86:2F:A2
Certificate issuer:       /CN=D8D44DD84F3FDBD732870581DB91456D40862FA2
Certificate serial:       25F1DF36C647513654227A68C320914ABFA98BD6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.mft
Manifest number:          0136
Signing time:             Tue 04 Nov 2025 11:24:10 +0000
Manifest this update:     Tue 04 Nov 2025 11:19:10 +0000
Manifest next update:     Sun 09 Nov 2025 20:20:10 +0000
Files and hashes:         1: 323830333a333438303a3a2f33382d3338203d3e203532343139.roa (hash: tGyjAUcwRgzP4j9y1aD5z4mdH6ndlrdk3VB5uQzOkOU=)
                          2: 3230302e33312e3234302e302f32302d3234203d3e203532343139.roa (hash: +7ZT4IxPU3KQDNqsxh75NbK5B83dfZdVwC6wjHsLXZI=)
                          3: 3138312e3139322e36342e302f32302d3234203d3e203532343139.roa (hash: FGrpmTM3XleMEavBe1JWut8jPhQ5Bfe2lg3+PxqwFjY=)
                          4: 323830333a333438303a3a2f33322d3332203d3e203532343139.roa (hash: PY+fkUppUCAZ1gvSPscLpC9yOfR3nIAcmTn10X6hT0Y=)
                          5: D8D44DD84F3FDBD732870581DB91456D40862FA2.crl (hash: x+CY4y5WnVPvVtatY7iGCCR2gt2Um81sttkZM3fuhuE=)
                          6: 323830333a333438303a3430303a3a2f33382d3338203d3e203532343139.roa (hash: 9/+SvF2tdKKJtHn13w4wYH74oN6nuNoKMtv/KOAzrJU=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f1:df:36:c6:47:51:36:54:22:7a:68:c3:20:91:4a:bf:a9:8b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8D44DD84F3FDBD732870581DB91456D40862FA2
        Validity
            Not Before: Nov  4 11:19:10 2025 GMT
            Not After : Nov  9 20:20:10 2025 GMT
        Subject: CN=618CB9ECAD2BCA03316E7894DFAB608E0425E252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c9:bd:5b:09:4f:3c:f4:76:72:7a:09:5a:4f:
                    44:95:be:d7:e6:6c:52:f6:05:c8:f1:97:f6:6a:e8:
                    55:53:95:e3:a6:33:e0:57:bf:15:48:6a:68:6d:a1:
                    0e:0b:38:3d:d2:9f:68:5f:cc:d1:20:4b:c6:42:90:
                    76:24:76:98:50:3b:00:08:4f:bb:11:ec:34:93:2b:
                    df:4d:bc:38:5d:dd:c8:9c:5f:f0:9d:30:a9:4b:0a:
                    e4:7c:aa:f1:33:c5:90:3d:cf:ed:89:c8:4e:e7:18:
                    ce:ef:a5:58:ff:fd:30:0c:5c:7d:fc:75:24:6b:ce:
                    e6:87:79:ba:b1:63:b7:fc:5a:31:70:2b:50:fd:34:
                    6c:f3:46:7d:6c:16:9f:c3:10:e3:38:9c:7b:7b:c9:
                    45:b3:4c:07:5b:a8:cc:a0:de:b9:48:47:c8:4a:58:
                    1d:0b:b5:46:e7:5c:8f:ef:49:e5:74:67:43:33:a0:
                    a2:ad:ab:26:12:a7:20:34:90:e2:43:50:e4:9e:f2:
                    de:bc:45:37:81:46:73:9d:7a:d4:f9:5f:11:5f:a4:
                    34:ab:5e:a2:58:3c:06:ce:59:93:e7:c6:ab:2a:b6:
                    8b:9f:77:91:e9:df:7d:f7:fe:8a:d9:fb:fc:01:05:
                    f2:14:95:a0:d8:93:27:c5:aa:9e:b5:cb:61:ef:63:
                    9e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:8C:B9:EC:AD:2B:CA:03:31:6E:78:94:DF:AB:60:8E:04:25:E2:52
            X509v3 Authority Key Identifier:
                keyid:D8:D4:4D:D8:4F:3F:DB:D7:32:87:05:81:DB:91:45:6D:40:86:2F:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:45:6e:bc:ee:e9:6a:26:19:dd:ca:2a:e0:6f:a9:17:34:e7:
         70:32:d1:50:68:fe:e6:cb:9b:a5:c3:8b:96:a8:d5:14:29:84:
         de:3f:27:5e:2a:d2:96:c2:b3:e2:0f:c4:ba:5d:49:e7:17:22:
         ba:9b:b8:5f:c3:c2:82:d7:bc:48:42:01:69:1f:13:1f:1c:89:
         51:8d:01:98:b4:a4:68:a7:16:e7:21:89:2e:0f:e5:05:84:32:
         d7:a7:5c:9d:51:47:96:80:0c:a0:55:7c:90:ec:4d:b3:0f:bd:
         48:36:0a:1a:79:d4:5a:ee:72:5d:51:89:03:03:2a:93:0d:68:
         b2:4f:f9:0b:9e:45:e3:64:9b:99:49:f7:81:f4:71:f7:bf:33:
         f9:30:b7:80:c3:cb:64:2d:ad:dd:06:26:87:d3:fb:1e:6e:70:
         e9:e4:0e:a0:fa:eb:3b:0c:e3:f4:56:30:95:96:58:a3:7e:bd:
         34:40:6a:ed:10:96:6b:7b:60:e5:db:04:74:c2:8e:70:2c:34:
         e4:c5:82:54:ea:0b:ad:b9:e9:bf:ff:37:07:13:8d:fc:61:08:
         8d:7b:40:86:ed:25:4c:6b:90:6d:3a:f6:d7:e6:6e:68:6d:a7:
         3d:f1:d8:9e:79:69:08:b5:60:dd:1f:e5:78:66:a8:e6:dd:39:
         57:40:45:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:05:39 2025 by rpki-client