Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.mft
File:                     9651F1E4B6480D19626E784CA1A8F0ABC94C1487.mft (raw, json)
Hash identifier:          wlt59oJzAXxDtmA//zBjp5+ij6rkhY5QasZYwiekOW0=
Subject key identifier:   EF:18:3F:42:F0:03:70:F8:6C:F8:8C:5E:59:D9:2A:03:51:8F:A7:6D
Authority key identifier: 96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87
Certificate issuer:       /CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
Certificate serial:       1DE020618743427E34D3BD58E3802DE74C5B16C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.mft
Manifest number:          D8
Signing time:             Mon 07 Apr 2025 13:08:13 +0000
Manifest this update:     Mon 07 Apr 2025 13:03:13 +0000
Manifest next update:     Sat 12 Apr 2025 08:27:13 +0000
Files and hashes:         1: 3137302e3233332e37322e302f32332d3233203d3e203336353131.roa (hash: m/2yAxoo/iQU9egFaiIS8C11xxHMKzzMc+3Iny4l1as=)
                          2: 9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl (hash: B6HFhfpUL+RKQbFmlIO3EPtSgwPJwdyXM0DSxqekuCo=)
                          3: 3137302e3233332e37342e302f32342d3234203d3e203333333932.roa (hash: ZN0MuWcSMWD+OokApz1Q4aajfNcUDIid7++jdJoWZKg=)
                          4: 3137302e3233332e37322e302f32322d3232203d3e203333333932.roa (hash: lAWJVLWpStF/SgXWukvF41svNVKbu8ytfZwh6og53do=)
                          5: 3137302e3233332e37332e302f32342d3234203d3e203333333932.roa (hash: AWh0b/MUtOnKVWs+ZmZy7op8esqtm3hoVTogr83C33w=)
                          6: 3137302e3233332e37322e302f32342d3234203d3e203336353131.roa (hash: PD3gEV2bY9QvO9NRhq6W6FVSpn40niz/bluEiC5fbKo=)
                          7: 3137302e3233332e37322e302f32322d3232203d3e203336353131.roa (hash: uIoLgDmyEXnR7J0PtERsxMnKtiWzB4wrz1hUNvjpYow=)
                          8: 323830333a313734303a3a2f33322d3332203d3e203336353131.roa (hash: 2hcmBdpNMTyqUqgAFLvlLeW20CYV7j3TteLNyeijuHM=)
                          9: 3137302e3233332e37332e302f32342d3234203d3e203336353131.roa (hash: nqrc5CKolHJmkzm/3pW0VecsG+jpCCDTqddmulEXNyE=)
                          10: 3137302e3233332e37322e302f32342d3234203d3e203333333932.roa (hash: 0HtXZcA1PRi11GEBl9+pmbugiQDzU4sSincOQ+bOFng=)
                          11: 3137302e3233332e37342e302f32342d3234203d3e203336353131.roa (hash: Gwg7GqmNgPuQx1orAcV+9oVYStqzwiViEJBsZXX4mf4=)
                          12: 3137302e3233332e37322e302f32332d3233203d3e203333333932.roa (hash: 4YPEutU0yaBB84EKESHBwHFMUr+Zewf0E9ASuxbx2xg=)
                          13: 323830333a313734303a3a2f33322d3332203d3e203333333932.roa (hash: Soe9sUaIgKPlFrUea6XdQEgZ8+GLcSBATZ+S9lvYQwU=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:e0:20:61:87:43:42:7e:34:d3:bd:58:e3:80:2d:e7:4c:5b:16:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
        Validity
            Not Before: Apr  7 13:03:13 2025 GMT
            Not After : Apr 12 08:27:13 2025 GMT
        Subject: CN=EF183F42F00370F86CF88C5E59D92A03518FA76D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:76:45:d3:21:00:47:d7:39:3d:d2:f2:0b:b5:
                    63:e6:ba:2c:d3:71:86:eb:3f:00:0a:81:9a:69:fa:
                    09:ec:a5:c2:c1:58:80:bc:f1:b2:3f:b7:c0:d8:f2:
                    09:a7:c5:19:f9:a3:b0:81:29:3c:3d:0c:db:84:d0:
                    08:a0:72:00:4d:4e:f8:3c:d9:26:02:cb:27:05:e1:
                    fc:da:76:13:4a:28:94:d6:63:c6:ce:d6:97:0f:1f:
                    a3:40:af:17:ee:5f:68:3c:22:15:b5:6c:dc:5c:8d:
                    e4:d6:80:e8:09:5a:91:5f:ee:80:3d:73:5a:c5:89:
                    6a:b7:94:d5:0f:6c:23:4b:7e:6b:73:e5:c8:6e:5a:
                    46:4a:d0:0e:65:c5:ba:0a:cf:9a:3b:6c:47:0c:e1:
                    0b:e5:c2:b3:7b:59:ab:95:fb:a9:d8:5a:55:36:b4:
                    30:d2:fc:55:c4:e3:a5:b6:90:c1:9c:30:4c:19:7a:
                    ad:9d:e3:b8:f3:1f:d0:50:14:d2:b6:ee:ab:38:a3:
                    ed:93:5a:75:ee:cb:b9:f2:d9:06:f1:d6:40:3d:f2:
                    89:aa:2f:ba:b6:b5:1d:cf:ac:ab:0a:c4:8f:d7:9a:
                    39:65:e9:1c:71:00:38:15:26:66:7f:87:e1:8a:72:
                    68:8b:83:41:95:20:95:1e:28:a9:2d:10:f6:17:11:
                    47:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:18:3F:42:F0:03:70:F8:6C:F8:8C:5E:59:D9:2A:03:51:8F:A7:6D
            X509v3 Authority Key Identifier:
                keyid:96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:84:0a:68:d1:5b:f5:6d:2c:a0:a7:40:b0:e3:22:5b:f8:98:
         a5:b0:28:dc:53:ea:57:17:2c:04:26:35:fb:d0:23:70:b2:42:
         7f:96:96:ba:43:7a:de:fc:f9:94:0c:ef:af:f2:08:65:bf:ca:
         91:86:6a:e4:50:e6:96:42:d7:22:87:0f:53:51:da:b3:f3:a0:
         59:0b:4d:6e:ca:73:40:36:c3:ff:a3:00:0d:ff:14:6c:96:c5:
         6a:55:3b:2c:70:23:d5:7b:f4:45:0e:5d:35:09:71:f9:85:d1:
         38:2c:a7:22:3c:a2:16:75:29:e6:9d:b7:52:e5:2a:c7:f5:51:
         69:30:77:fe:71:de:10:18:84:98:ea:c9:e5:b5:93:a3:d5:27:
         80:87:9f:5c:8a:50:65:02:f2:15:50:c9:b7:e4:74:d2:d5:97:
         63:e4:d2:a9:b4:aa:99:19:6e:c3:80:dd:77:9b:4e:75:06:3e:
         9e:98:c0:d5:6f:40:fd:e0:fa:d6:6d:c6:a2:b7:75:5a:24:b6:
         c0:cc:24:9d:83:08:66:d7:c1:41:eb:c9:aa:95:da:c7:70:25:
         7c:d4:87:6e:a0:b8:da:92:a2:e6:35:5b:e8:a6:68:e6:7a:0c:
         2a:df:e6:e5:35:1b:3c:c1:07:ef:26:84:21:ee:88:51:81:31:
         7b:77:bb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:15:25 2025 by rpki-client