Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft
File:                     AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft (raw, json)
Hash identifier:          U7mKzYvYUWv3AI84JBlYub4+4+SwKkioFaQysvjYOL8=
Subject key identifier:   26:A5:BB:E7:DA:1C:2A:10:50:6F:A8:BE:A4:BD:C2:F5:F7:DA:60:8C
Authority key identifier: AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6
Certificate issuer:       /CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6
Certificate serial:       6321CC63A902B418AAC5B64994F9995987829025
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft
Manifest number:          FF
Signing time:             Sun 20 Jul 2025 09:06:02 +0000
Manifest this update:     Sun 20 Jul 2025 09:01:02 +0000
Manifest next update:     Sat 26 Jul 2025 08:42:02 +0000
Files and hashes:         1: 3230302e322e3132302e302f32312d3234203d3e203237373932.roa (hash: D5DMKHlHzw9CvA1rcnA1jSrkcOaXf2GeyYaX/Dm4vgg=)
                          2: 3138312e3138392e3139322e302f31392d3234203d3e203237373932.roa (hash: iRcxfSfIghebD6QOPTeikJfgyLmeSFqaidY7uqEUWpw=)
                          3: AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl (hash: 0WHsgOncKSd3psRoEpFgSfBDTiRuAycvPm79tAa2DYU=)
                          4: 3137302e38342e3231322e302f32322d3234203d3e203237373932.roa (hash: w4u7sn4Br/SzlJWc1j5+t+BwDZV8XqI+m7Q7xmgOGGk=)
                          5: 3139302e362e3131322e302f32312d3234203d3e203237373932.roa (hash: YrOx16+iIZvmiEo/ZK0LlKWcOdGc7EJ9RvaPsFWx40Q=)
                          6: 3134332e3230322e32342e302f32322d3234203d3e203237373932.roa (hash: RkicQZt3HFQKsXjR9WqZwJBaILj2KxHS+v5Qc/slrcQ=)
                          7: 323830303a3561303a3a2f33322d3335203d3e203237373932.roa (hash: fMY9aGGR1i+J3ji8OBR1VAd6K1Ks5NePPEASVBvqcOc=)
                          8: 3139302e362e39362e302f32302d3234203d3e203237373932.roa (hash: PVP6+Aif2LoGjckv2En5VjHWt+kJjk9EEFLgY48YCS8=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 08:42:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:21:cc:63:a9:02:b4:18:aa:c5:b6:49:94:f9:99:59:87:82:90:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6
        Validity
            Not Before: Jul 20 09:01:02 2025 GMT
            Not After : Jul 26 08:42:02 2025 GMT
        Subject: CN=26A5BBE7DA1C2A10506FA8BEA4BDC2F5F7DA608C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:aa:fa:68:27:9b:e6:97:0e:6d:92:bf:99:e8:
                    64:39:9c:fb:59:19:c6:e0:1d:0d:44:94:e0:f2:72:
                    2a:c9:91:1e:e5:07:80:48:ea:5a:85:cb:02:6e:47:
                    f9:32:6e:f3:14:21:11:28:6b:21:31:38:3b:c3:a6:
                    22:2d:e7:fa:92:ec:91:1b:74:28:7d:e4:c0:c1:13:
                    79:db:90:ac:28:bc:68:1b:3f:e4:90:13:6a:6d:8f:
                    d5:11:f6:64:c6:7d:e2:56:32:1d:a6:1f:ed:44:f4:
                    5c:28:dd:a3:d1:c3:f3:78:26:f6:ed:1c:b6:a7:16:
                    f0:10:e7:8d:4a:27:f4:88:03:47:9b:75:29:38:c2:
                    92:57:45:66:88:dd:b9:ce:35:d2:bb:b1:d3:f9:8f:
                    d4:e9:66:40:dd:ee:0e:07:68:65:23:f3:95:81:ab:
                    8f:c4:71:4e:04:8d:2c:81:7a:6d:0e:30:25:a0:0e:
                    97:5b:3f:1f:24:df:f7:5d:22:4d:6e:28:10:c1:04:
                    12:0a:fa:67:90:24:ac:f7:0d:9a:d3:09:91:1d:97:
                    be:5f:30:d5:ce:2d:78:c3:19:66:07:ab:ca:a9:40:
                    66:fd:b1:6a:b8:a0:25:ec:82:1f:36:5f:7e:14:da:
                    08:34:93:0c:ee:69:17:b8:ac:a7:fb:cc:00:3a:84:
                    ba:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A5:BB:E7:DA:1C:2A:10:50:6F:A8:BE:A4:BD:C2:F5:F7:DA:60:8C
            X509v3 Authority Key Identifier:
                keyid:AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:19:62:a3:0e:d5:2a:d0:c7:41:73:ee:76:d7:ae:8e:11:33:
         8f:52:e4:7e:c4:9b:93:1a:c2:c7:7a:8d:0c:4a:b2:c0:23:84:
         0c:95:57:04:4a:70:79:b8:cb:3a:5c:4b:e3:88:bc:7e:e0:b7:
         fc:61:d8:c0:e6:f4:43:2c:c6:50:f0:9e:d7:9e:8c:32:d1:34:
         05:84:5a:f7:4e:44:cd:ce:33:0e:a0:a1:1f:04:11:60:f6:8f:
         e4:5c:a6:d0:dc:65:23:5b:ec:34:54:6b:1a:b7:df:5f:9c:ee:
         03:b8:06:ea:d3:12:4e:62:ca:21:17:17:81:04:c1:37:92:83:
         0f:94:29:59:00:5c:0d:3c:96:01:1a:1a:b7:bd:3f:2e:23:99:
         23:fc:26:32:ae:c5:6d:06:b0:6b:eb:60:dd:cb:37:0e:79:2a:
         8e:bc:03:5d:9f:a7:c6:e5:cb:80:85:46:d5:a5:4f:23:91:17:
         d0:2f:aa:34:92:63:8d:29:b8:44:6d:48:a1:c3:aa:bc:36:21:
         e4:ce:c9:5b:95:e0:a4:c7:ec:39:52:88:84:74:e6:ee:34:25:
         5f:79:c6:c5:31:da:54:b8:bf:7d:13:2a:15:c9:aa:8e:9d:54:
         23:34:9d:25:f2:9c:1a:95:99:2c:8d:7b:52:f0:3d:47:e8:f7:
         cc:95:00:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:20:59 2025 by rpki-client