Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0040B6D98C8FC62E4F905B39B9DF76CC2EB749047E0AA77992F9653B1AC3790/0/99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.mft
File:                     99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.mft (raw, json)
Hash identifier:          MYIMo8ag/rvW1/FaYZsDYbHFopTQqEEucYEymLLSlC0=
Subject key identifier:   EC:41:DB:3B:B1:F2:3E:7C:FF:41:45:2C:56:84:DE:EB:65:46:B5:E3
Authority key identifier: 99:D2:8F:03:5C:FB:F2:9F:CC:EA:3B:81:80:0F:0A:FA:AB:00:72:2A
Certificate issuer:       /CN=99D28F035CFBF29FCCEA3B81800F0AFAAB00722A
Certificate serial:       5804C582F61808AAB8AAC630114A0CF19522EB69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0040B6D98C8FC62E4F905B39B9DF76CC2EB749047E0AA77992F9653B1AC3790/0/99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.mft
Manifest number:          CA
Signing time:             Wed 09 Apr 2025 07:48:20 +0000
Manifest this update:     Wed 09 Apr 2025 07:43:20 +0000
Manifest next update:     Mon 14 Apr 2025 01:36:20 +0000
Files and hashes:         1: 99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.crl (hash: 5ypGWhyQ+zkmTRddJVuxsel67cAyzO3ESw4WT8BQquc=)
                          2: 323830333a646531303a3a2f33322d3332203d3e20323731393738.roa (hash: 7sFRCltbJlt7DXey3iSsGe1gRFgWgqjlykEnfARWfeg=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0040B6D98C8FC62E4F905B39B9DF76CC2EB749047E0AA77992F9653B1AC3790/0/99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0040B6D98C8FC62E4F905B39B9DF76CC2EB749047E0AA77992F9653B1AC3790/0/99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 08:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:04:c5:82:f6:18:08:aa:b8:aa:c6:30:11:4a:0c:f1:95:22:eb:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D28F035CFBF29FCCEA3B81800F0AFAAB00722A
        Validity
            Not Before: Apr  9 07:43:20 2025 GMT
            Not After : Apr 14 01:36:20 2025 GMT
        Subject: CN=EC41DB3BB1F23E7CFF41452C5684DEEB6546B5E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:68:b4:46:9e:e4:f3:b4:d9:b5:03:8b:81:3d:
                    1e:95:ad:fc:a8:37:cb:11:c6:71:96:9b:ed:f6:0f:
                    8a:40:56:f2:55:30:de:9d:ee:51:1a:44:0f:54:77:
                    e5:41:f7:39:2f:31:46:cb:14:79:b4:af:65:06:22:
                    e5:80:1d:c6:8f:4b:2e:b5:5a:2e:5f:34:f6:92:43:
                    3d:8c:a7:75:96:95:b7:4f:c5:28:5e:59:8b:fc:71:
                    f1:56:09:fd:a7:e3:b0:ac:f9:bd:92:24:af:18:73:
                    ed:56:2e:44:fa:6a:79:f6:9b:e7:b7:2f:43:a1:bd:
                    2b:de:c9:aa:a0:1d:bc:26:be:61:61:50:76:29:ac:
                    34:a2:8c:28:11:4a:33:85:c0:b3:e3:82:1e:6f:75:
                    53:cd:b8:ee:13:14:6e:5c:2c:70:e7:6f:54:f9:d0:
                    34:94:b2:fb:79:3e:04:e2:27:c9:33:90:33:3d:18:
                    23:00:ef:70:9b:1e:69:01:ec:40:c7:e3:f1:ab:71:
                    6a:a3:bb:07:78:63:42:2b:db:d6:6b:30:a3:61:ff:
                    cc:79:9a:91:9f:e5:a1:ff:98:ad:be:b5:62:e2:06:
                    68:f2:81:d0:d5:0b:52:a1:70:f8:5a:4c:03:12:00:
                    37:32:16:6e:14:6b:1f:e5:79:5c:63:8e:c1:fe:ef:
                    1a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:41:DB:3B:B1:F2:3E:7C:FF:41:45:2C:56:84:DE:EB:65:46:B5:E3
            X509v3 Authority Key Identifier:
                keyid:99:D2:8F:03:5C:FB:F2:9F:CC:EA:3B:81:80:0F:0A:FA:AB:00:72:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0040B6D98C8FC62E4F905B39B9DF76CC2EB749047E0AA77992F9653B1AC3790/0/99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0040B6D98C8FC62E4F905B39B9DF76CC2EB749047E0AA77992F9653B1AC3790/0/99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:08:2f:36:a1:ca:e5:74:a3:6a:fa:a4:ec:a8:b9:f7:5d:72:
         a4:5b:b2:f2:52:c4:c1:3c:75:e0:03:77:25:a1:bd:85:71:04:
         32:9e:3f:f3:70:e7:23:f2:56:65:41:56:43:a9:d0:86:a1:d4:
         37:34:c9:d8:44:be:63:b7:65:4f:f1:86:a1:99:82:08:0b:fc:
         6d:bc:9c:ef:e4:7d:1e:5c:91:6f:b8:6a:2c:0e:af:1c:1b:98:
         7f:0a:4d:0d:f2:ab:57:bb:1d:be:86:4f:41:7c:5b:9f:db:f0:
         66:a7:40:06:96:d0:1c:3a:37:8b:2b:2d:eb:26:c5:b9:ad:af:
         61:34:40:77:9c:c3:e7:38:b1:0d:43:22:dc:30:3e:10:7c:7f:
         f8:1b:58:76:43:57:cc:be:2e:0d:31:95:89:33:f0:df:fe:36:
         94:1e:30:f5:53:81:54:96:9a:66:67:1b:3e:47:d4:77:72:18:
         3b:3b:d9:20:56:9c:a7:99:d1:15:8a:62:2c:96:e3:50:87:39:
         ec:38:da:7f:a2:7d:d6:e5:f0:14:95:41:46:9d:54:b8:ea:07:
         92:8d:f9:32:b5:93:45:71:15:f0:b1:00:c5:f6:01:32:ad:53:
         6f:3e:e4:1d:dc:be:eb:2d:f1:b2:16:e3:22:2a:77:74:b5:06:
         1b:5a:79:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:44:55 2025 by rpki-client