Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
File:                     946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft (raw, json)
Hash identifier:          CohR9OzbcY+Mh6Flwl1RxiiO6rWaTPEM0N1mCPhJ9xw=
Subject key identifier:   B9:38:F8:68:14:E8:36:4B:12:BA:69:5B:0E:64:85:C4:CF:DD:DD:7D
Authority key identifier: 94:6D:AE:84:64:E7:C5:81:E9:BA:57:87:F7:4C:BD:A9:DC:F6:F8:CD
Certificate issuer:       /CN=946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD
Certificate serial:       1649961C941507FE6203C9884EABCFC232CE4D7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
Manifest number:          0162
Signing time:             Sat 25 Oct 2025 12:03:05 +0000
Manifest this update:     Sat 25 Oct 2025 11:58:05 +0000
Manifest next update:     Thu 30 Oct 2025 09:06:05 +0000
Files and hashes:         1: BCC0665ECF8A97B83E398268D92A255BAE661816.cer (hash: YiBe5f228NzHEuZpldhCPMJmCEYhSMfmarLYXm2mMnk=)
                          2: 05BAF2939E37DDDE1793A803162A35594ACBB405.cer (hash: IkceNnKRP9IJ6iX17fWtH2h8J+6S1/kyEZNZn1ZIHvg=)
                          3: 946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl (hash: QMTXWuYIRtyC/NWARG7z+SCgQp/pYfAXt1pCo+09WZA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 30 Oct 2025 09:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:49:96:1c:94:15:07:fe:62:03:c9:88:4e:ab:cf:c2:32:ce:4d:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD
        Validity
            Not Before: Oct 25 11:58:05 2025 GMT
            Not After : Oct 30 09:06:05 2025 GMT
        Subject: CN=B938F86814E8364B12BA695B0E6485C4CFDDDD7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:61:0a:5d:80:e3:6b:e4:4c:0b:78:d2:db:38:
                    10:05:f2:05:2f:47:36:b5:d3:93:26:1a:b1:f5:c9:
                    b1:19:cd:4b:ec:5f:95:fa:a9:ea:8a:df:ea:22:d1:
                    2a:f9:f1:e6:c3:6e:a0:1a:47:8f:53:05:6f:0a:4b:
                    37:42:63:6e:7a:30:23:cf:ea:9b:85:02:17:58:b0:
                    a3:43:f5:5c:bd:54:da:82:f9:78:0f:31:fc:31:f7:
                    a1:1a:2f:67:d3:45:3c:72:a1:09:df:e6:ca:01:79:
                    8f:e6:82:64:f0:0d:6a:44:08:84:8f:4f:72:20:6e:
                    c6:df:1d:f9:52:e1:f4:78:89:b3:0f:32:ff:23:80:
                    41:42:bd:25:38:29:3f:5f:55:d1:18:63:4c:be:4f:
                    83:46:76:4e:e9:cb:99:38:8b:08:fc:c4:01:7b:f7:
                    13:7a:80:e9:c3:25:e6:f2:ac:ce:34:55:67:ce:60:
                    78:e8:ce:49:76:43:62:d6:10:85:56:69:ce:d1:ab:
                    05:28:00:48:8b:28:8e:78:94:6e:31:be:a8:04:6f:
                    6d:f2:c4:66:94:49:c9:2b:84:fe:a2:7c:04:a5:43:
                    ae:4c:fa:b5:d2:44:0b:66:58:a9:fd:d3:0a:71:c8:
                    d0:dc:dd:39:ff:db:f5:8e:b5:c8:90:fd:97:08:6e:
                    52:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:38:F8:68:14:E8:36:4B:12:BA:69:5B:0E:64:85:C4:CF:DD:DD:7D
            X509v3 Authority Key Identifier:
                keyid:94:6D:AE:84:64:E7:C5:81:E9:BA:57:87:F7:4C:BD:A9:DC:F6:F8:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:0d:22:a6:20:9b:1e:e7:95:9d:23:9a:82:27:1e:6e:38:9d:
         b4:0e:f7:87:67:85:50:5c:e3:bd:b2:b5:3e:8e:c1:ef:fb:69:
         1d:55:23:b8:bf:1c:ff:d2:d3:79:86:2d:2a:d7:24:05:ed:0e:
         81:06:6e:46:81:28:d6:ba:4a:44:83:cc:00:76:00:06:42:95:
         70:10:fe:5e:cd:b2:93:4d:d3:d2:c1:52:11:f6:9d:a4:b2:8f:
         bc:b6:7d:b4:1b:89:e8:7b:9d:2f:03:5a:29:f9:60:ad:95:3c:
         09:af:bd:6b:83:04:6c:4b:00:71:3b:f7:d9:52:76:b7:ac:e2:
         b5:6b:44:a0:7a:9e:46:c4:ea:65:4f:bd:05:5e:56:d9:f7:9a:
         c5:c1:d2:1b:32:7e:86:23:e2:ab:49:a8:f5:c8:7a:8d:1c:16:
         f9:c9:ec:c8:8b:83:ef:f7:9c:64:7a:5e:28:c8:7a:72:29:cd:
         8a:95:5b:2f:85:4c:8f:21:81:20:a2:b3:e6:39:3b:de:30:c7:
         78:2d:43:94:e4:b4:89:23:13:5f:e9:d8:67:98:a9:ad:d7:46:
         3e:1e:0a:59:68:70:93:1d:e7:9a:61:c8:58:f7:f5:b4:30:76:
         11:69:24:3b:b6:d2:50:e2:f5:f5:a7:98:ed:2c:52:34:7f:78:
         53:9d:0d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 03:09:45 2025 by rpki-client