Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.mft
File:                     3F60989A0240421B9E62F93B598BE390FD6CDCC6.mft (raw, json)
Hash identifier:          y/QWXScBRotc3Vgob0aPSzwfimU1K3Eeq5CkTk7/ObU=
Subject key identifier:   CC:24:9F:15:AA:5C:F9:F2:22:5A:FA:DE:2C:34:04:32:DB:34:AD:02
Authority key identifier: 3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6
Certificate issuer:       /CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
Certificate serial:       0113673CFACEB9AC347267B43D159DA3381792DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.mft
Manifest number:          DF
Signing time:             Mon 02 Jun 2025 08:44:13 +0000
Manifest this update:     Mon 02 Jun 2025 08:39:13 +0000
Manifest next update:     Sun 08 Jun 2025 02:10:13 +0000
Files and hashes:         1: 3230302e31322e3139382e302f32342d3234203d3e203532323734.roa (hash: Z5OgnP1OGaw1vpuRYxlznXQoVHOSMplXvYSlzLrms1c=)
                          2: 3230302e31322e3139372e302f32342d3234203d3e203532323734.roa (hash: wE5KMimIfSYBnx5aCctu49DoANtYWqwnyNUE4h+1T1o=)
                          3: 323830313a303a36323a3a2f34382d3438203d3e203134363138.roa (hash: e1LBCOrN4fY35hXCaddoweFypml+juJh6QYB/54fHnQ=)
                          4: 3230302e31322e3139372e302f32342d3234203d3e203134363138.roa (hash: hP8cqTLx4rWQzL0BlFyF9QS6t211FmbSPX8I/yupCg0=)
                          5: 323830313a303a36333a3a2f34382d3438203d3e203532323734.roa (hash: +r0ApusGAl3PVIfwMGj5LHmPup+aTiuhhpxvca01Le0=)
                          6: 3230302e31322e3139362e302f32342d3234203d3e203136353039.roa (hash: qM3GdwMMbe+gl5UoPNgGtsNDp6qIxxaeZ1iR6u0y7f4=)
                          7: 3230302e31322e3139372e302f32342d3234203d3e203136353039.roa (hash: IUaMOjRTOcUMhHJQQG+iZb6sDsNqdWC3gI5z1HFdOzk=)
                          8: 323830313a303a36323a3a2f34382d3438203d3e203532323734.roa (hash: fBT3cTbKRVE9umjcaX7/fxrwbJe65gFM158/CUlE6fo=)
                          9: 323830313a303a36303a3a2f34382d3438203d3e203532323734.roa (hash: 9oOZAEv4+2ulbpn/YhVdEFSFxkKdbkVqrYKeaZRSBSo=)
                          10: 323830313a303a36323a3a2f34382d3438203d3e203136353039.roa (hash: Xgl3wr6bhRKemEkm1IH87qzFnTPE5cEV6krWlywesFM=)
                          11: 3230302e31322e3139362e302f32342d3234203d3e203532323734.roa (hash: xpMUQk23oaHOjco5y+/saGro2ZCE9jK4dahlFgU83XA=)
                          12: 3230302e31322e3139362e302f32342d3234203d3e203134363138.roa (hash: 1eXIwCDNicCARBUYzQIOOHzqw4VOh1YJnBGO7Lc+A4w=)
                          13: 3230302e31322e3139392e302f32342d3234203d3e203532323734.roa (hash: +e0Ad9jYwJFjaQStpRvVL58/WjAAQDVh8uKiZPD6DUw=)
                          14: 3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl (hash: 8c23ixPqLxvHqL1aHlgHcjkuakseAP5aM8unfEd6DfU=)
                          15: 323830313a303a36313a3a2f34382d3438203d3e203532323734.roa (hash: kC9dGDBTBp/FCGR4FIziwiwa9RqayahmTG1nxdWgB/c=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 02:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:13:67:3c:fa:ce:b9:ac:34:72:67:b4:3d:15:9d:a3:38:17:92:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
        Validity
            Not Before: Jun  2 08:39:13 2025 GMT
            Not After : Jun  8 02:10:13 2025 GMT
        Subject: CN=CC249F15AA5CF9F2225AFADE2C340432DB34AD02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fe:60:6a:e2:b2:a4:6d:6a:3e:d1:37:43:6d:
                    3b:da:c9:2e:03:a5:ed:c4:d8:6a:c6:7d:2f:a6:fd:
                    6b:ce:17:dc:de:c9:51:48:22:12:c3:15:2f:f1:67:
                    f8:16:7c:f5:67:3e:f9:b7:6c:68:5e:a5:35:64:23:
                    fa:19:5d:cd:bd:1a:41:6b:86:c6:6a:46:b2:4a:d0:
                    5e:6c:e3:af:b9:52:fa:af:58:61:5a:28:24:7f:40:
                    dd:aa:22:53:50:ea:4d:2d:a9:e8:a7:f3:af:f6:6a:
                    01:06:42:54:df:45:b8:90:a3:47:41:5f:58:9c:e8:
                    54:e3:5e:62:c0:14:5c:bb:97:88:11:ac:a8:5f:fa:
                    47:87:0f:8a:8e:1e:d4:36:0f:7b:79:f8:a7:bb:44:
                    66:51:57:59:11:a8:50:4f:f1:45:59:64:44:43:00:
                    95:12:c4:07:85:3f:78:f2:b1:a5:f1:de:2d:7b:53:
                    07:90:1b:8c:40:5d:30:6d:85:b3:b0:67:07:04:d5:
                    9f:96:6a:1e:8d:5b:db:8f:00:61:c5:e1:ca:ce:c5:
                    87:77:27:76:42:84:8f:cd:01:5f:7f:3f:b3:d0:46:
                    be:da:8d:af:63:ec:29:72:ad:20:bf:a5:4a:f1:83:
                    c3:b8:2c:86:cc:35:de:16:23:3e:77:39:34:06:8c:
                    86:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:24:9F:15:AA:5C:F9:F2:22:5A:FA:DE:2C:34:04:32:DB:34:AD:02
            X509v3 Authority Key Identifier:
                keyid:3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:ee:3d:a4:d2:20:77:fa:0a:85:a4:b6:33:b7:05:a9:d4:c6:
         ce:56:a0:05:8c:85:4d:77:06:28:8c:6f:6a:43:40:64:78:34:
         b6:2c:7a:cf:83:f6:a8:30:64:1b:29:bf:26:a3:4d:13:ad:a7:
         0a:cb:01:db:55:80:97:0d:f0:d6:33:59:2a:7d:30:15:eb:c2:
         a3:c8:74:09:9a:1a:2f:fc:38:b1:18:e3:06:e1:2f:97:ef:bd:
         9e:ce:88:58:c0:ad:06:6a:5c:b7:0c:0b:c8:86:fd:c6:cb:07:
         0c:cc:67:51:0b:d2:ea:bf:b6:7c:a4:67:ec:7b:83:70:e8:32:
         62:72:53:96:8a:56:ba:f4:04:96:dc:7a:4b:a9:a5:a7:1d:6c:
         9e:61:59:44:28:57:4a:78:78:74:91:e9:2f:bf:cc:34:d1:a9:
         33:e1:12:48:eb:01:10:e7:61:24:fe:8d:45:c3:fa:ba:50:33:
         a3:98:e6:0a:b4:8e:1d:e8:d2:20:62:54:0a:13:75:36:1a:0e:
         a9:69:a5:db:ea:56:f0:c0:db:22:70:fa:51:0c:dc:b5:da:58:
         0a:48:2a:5f:c5:0e:11:ea:4a:f0:96:3a:e7:60:98:5b:19:79:
         9f:ec:4e:17:92:c9:74:fd:fb:fd:02:66:88:c7:36:8d:bf:14:
         e3:e3:12:5c
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUARNnPPrOuaw0cme0PRWdozgXktowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y2MDk4OUEwMjQwNDIxQjlFNjJGOTNCNTk4QkUzOTBG
RDZDRENDNjAeFw0yNTA2MDIwODM5MTNaFw0yNTA2MDgwMjEwMTNaMDMxMTAvBgNV
BAMTKENDMjQ5RjE1QUE1Q0Y5RjIyMjVBRkFERTJDMzQwNDMyREIzNEFEMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj/mBq4rKkbWo+0TdDbTvayS4D
pe3E2GrGfS+m/WvOF9zeyVFIIhLDFS/xZ/gWfPVnPvm3bGhepTVkI/oZXc29GkFr
hsZqRrJK0F5s46+5UvqvWGFaKCR/QN2qIlNQ6k0tqein86/2agEGQlTfRbiQo0dB
X1ic6FTjXmLAFFy7l4gRrKhf+keHD4qOHtQ2D3t5+Ke7RGZRV1kRqFBP8UVZZERD
AJUSxAeFP3jysaXx3i17UweQG4xAXTBthbOwZwcE1Z+Wah6NW9uPAGHF4crOxYd3
J3ZChI/NAV9/P7PQRr7aja9j7ClyrSC/pUrxg8O4LIbMNd4WIz53OTQGjIZlAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUzCSfFapc+fIiWvreLDQEMts0rQIwHwYDVR0j
BBgwFoAUP2CYmgJAQhueYvk7WYvjkP1s3MYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FMUZDRjAwNkRFMjMxQzFFOEY5QUY0MzMwNkREQTVGN0ZB
MUQyRDhENEU2RjhEQjJGMEIwOEM2M0QyRkZCREZELzAvM0Y2MDk4OUEwMjQwNDIx
QjlFNjJGOTNCNTk4QkUzOTBGRDZDRENDNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRjYwOTg5QTAyNDA0MjFCOUU2
MkY5M0I1OThCRTM5MEZENkNEQ0M2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTFGQ0YwMDZERTIzMUMxRThGOUFGNDMzMDZEREE1RjdGQTFEMkQ4RDRF
NkY4REIyRjBCMDhDNjNEMkZGQkRGRC8wLzNGNjA5ODlBMDI0MDQyMUI5RTYyRjkz
QjU5OEJFMzkwRkQ2Q0RDQzYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBk7j2k0iB3+gqFpLYztwWp1MbO
VqAFjIVNdwYojG9qQ0BkeDS2LHrPg/aoMGQbKb8mo00TracKywHbVYCXDfDWM1kq
fTAV68KjyHQJmhov/DixGOMG4S+X772ezohYwK0Galy3DAvIhv3GywcMzGdRC9Lq
v7Z8pGfse4Nw6DJiclOWila69ASW3HpLqaWnHWyeYVlEKFdKeHh0kekvv8w00akz
4RJI6wEQ52Ek/o1Fw/q6UDOjmOYKtI4d6NIgYlQKE3U2Gg6paaXb6lbwwNsicPpR
DNy12lgKSCpfxQ4R6krwljrnYJhbGXmf7E4Xksl0/fv9AmaIxzaNvxTj4xJc
-----END CERTIFICATE-----
Generated at Wed Jun 4 12:24:35 2025 by rpki-client