Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E2F56DD1610959E303CF72272C0B39E43CDF55932794918EAA3BE565B815090C/0/A66FA328D1A71192C97DB22C2D2021E9C4CE99A3.mft
File:                     A66FA328D1A71192C97DB22C2D2021E9C4CE99A3.mft (raw, json)
Hash identifier:          AIOcFaAg8qj86y6BA69Ij762BNhAN2A6oV3/Sns9zIk=
Subject key identifier:   CA:F7:FF:B7:0B:58:9A:24:92:35:C9:C2:FF:8A:F0:FC:BD:6E:D1:82
Authority key identifier: A6:6F:A3:28:D1:A7:11:92:C9:7D:B2:2C:2D:20:21:E9:C4:CE:99:A3
Certificate issuer:       /CN=A66FA328D1A71192C97DB22C2D2021E9C4CE99A3
Certificate serial:       4A9E2A7ED3571E4FAB934310ED277E62052F0AA4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A66FA328D1A71192C97DB22C2D2021E9C4CE99A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E2F56DD1610959E303CF72272C0B39E43CDF55932794918EAA3BE565B815090C/0/A66FA328D1A71192C97DB22C2D2021E9C4CE99A3.mft
Manifest number:          CA
Signing time:             Sun 13 Apr 2025 10:57:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:52:25 +0000
Manifest next update:     Sat 19 Apr 2025 00:43:25 +0000
Files and hashes:         1: A66FA328D1A71192C97DB22C2D2021E9C4CE99A3.crl (hash: NMeMCSb/qeeGX1qDatTcyE2+zOIwrScVoQp29hlxICk=)
                          2: 323830313a3135613a3a2f34302d3430203d3e20323637373838.roa (hash: UTtTaB0TE/0fVQmzECvsarI29U/24+aLp5xoddKW2B8=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E2F56DD1610959E303CF72272C0B39E43CDF55932794918EAA3BE565B815090C/0/A66FA328D1A71192C97DB22C2D2021E9C4CE99A3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E2F56DD1610959E303CF72272C0B39E43CDF55932794918EAA3BE565B815090C/0/A66FA328D1A71192C97DB22C2D2021E9C4CE99A3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A66FA328D1A71192C97DB22C2D2021E9C4CE99A3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:9e:2a:7e:d3:57:1e:4f:ab:93:43:10:ed:27:7e:62:05:2f:0a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A66FA328D1A71192C97DB22C2D2021E9C4CE99A3
        Validity
            Not Before: Apr 13 10:52:25 2025 GMT
            Not After : Apr 19 00:43:25 2025 GMT
        Subject: CN=CAF7FFB70B589A249235C9C2FF8AF0FCBD6ED182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:85:e0:49:48:46:f0:aa:ca:13:d4:f9:8a:e3:
                    42:f2:09:95:8c:7b:65:69:b1:e5:e5:33:2c:b8:78:
                    ba:f5:28:e2:47:e5:1a:65:4d:67:dd:2c:ce:2f:c9:
                    56:d8:56:56:8f:e2:44:97:c5:09:22:da:89:16:c4:
                    a9:d5:3e:d5:c3:1a:69:7b:d7:61:0d:41:ae:11:c0:
                    46:1d:f0:14:1d:be:aa:54:1c:03:70:de:37:b1:1d:
                    5d:09:4e:28:c7:e6:de:95:31:30:83:bd:27:ea:2d:
                    ea:d5:03:3f:fe:5d:12:b9:5f:c1:e4:fb:f7:d1:45:
                    56:f3:07:db:a3:13:68:8b:cd:7c:6f:ca:05:77:c1:
                    6d:b1:a7:b3:82:a0:d3:5e:4b:30:4d:64:f7:22:5b:
                    05:95:08:8e:b2:d4:b6:2d:61:bc:bf:3d:bf:7e:89:
                    eb:e9:db:91:b5:4d:42:db:be:b9:93:38:a1:bf:53:
                    0e:81:16:ff:56:1b:3f:f1:85:22:76:78:11:af:6e:
                    9c:55:b7:b8:5d:2c:ba:43:7f:1e:c9:0d:e8:a7:34:
                    b7:2d:4a:b6:ab:f1:21:ed:15:c9:0c:ab:0b:44:00:
                    f9:04:f3:0e:8d:7c:39:f3:c0:2f:bc:5a:b7:43:68:
                    9d:c8:8c:57:b5:40:21:d7:ae:0c:ac:6f:85:cc:b0:
                    3d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F7:FF:B7:0B:58:9A:24:92:35:C9:C2:FF:8A:F0:FC:BD:6E:D1:82
            X509v3 Authority Key Identifier:
                keyid:A6:6F:A3:28:D1:A7:11:92:C9:7D:B2:2C:2D:20:21:E9:C4:CE:99:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E2F56DD1610959E303CF72272C0B39E43CDF55932794918EAA3BE565B815090C/0/A66FA328D1A71192C97DB22C2D2021E9C4CE99A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A66FA328D1A71192C97DB22C2D2021E9C4CE99A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E2F56DD1610959E303CF72272C0B39E43CDF55932794918EAA3BE565B815090C/0/A66FA328D1A71192C97DB22C2D2021E9C4CE99A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:41:ac:e0:b4:20:07:96:8e:20:d1:11:a2:fb:5d:24:4f:ee:
         56:6d:b1:58:ac:0d:4f:20:71:68:68:09:f8:f8:17:02:43:8c:
         05:ba:95:a9:6c:05:ee:27:1e:04:e0:05:ff:4e:99:da:ab:30:
         2b:15:f9:e7:e6:63:7d:f3:46:d5:74:87:58:89:e2:61:6b:31:
         7b:30:89:a6:d8:dd:89:61:81:cf:dc:23:bd:a1:3d:f3:30:80:
         19:9f:80:d3:d7:b5:05:b8:b5:2d:99:86:84:8b:94:25:bc:11:
         9d:67:da:f3:d1:f5:d5:89:0c:cf:c9:bd:1d:29:ed:d9:e9:ae:
         52:fe:e6:83:a8:40:f0:95:dd:8b:c3:38:c8:1a:fe:d7:49:c2:
         c4:ac:c8:c8:20:ad:bd:24:63:43:7b:27:d3:c4:d4:a7:df:7b:
         8e:28:05:58:bd:17:30:37:5d:c4:f3:44:fb:30:5c:cc:e2:a2:
         1b:7d:03:ee:b3:a5:f0:73:85:4f:34:fe:0a:1c:33:b2:e8:53:
         5b:7c:52:8b:2d:34:66:0a:5d:6c:f1:d7:32:f5:99:89:49:64:
         ae:46:4f:48:43:a9:c1:84:7f:36:73:ca:5b:cb:a5:66:b1:5e:
         0a:a1:a4:6c:ef:f8:4e:17:96:2b:60:41:b8:6f:5e:b6:82:17:
         45:ae:8f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:21:29 2025 by rpki-client