Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft
File:                     DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft (raw, json)
Hash identifier:          gNZO61iTKrBH76jOJ0gNvIeutgVYM+BQC8tIed/0+IY=
Subject key identifier:   1E:72:AC:54:34:80:99:8D:3A:45:FF:6E:E9:DA:6D:43:69:77:F1:7C
Authority key identifier: DF:B8:DF:1F:0B:E6:09:FB:6F:98:00:3E:B9:6C:9C:DE:72:B5:3A:F8
Certificate issuer:       /CN=DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8
Certificate serial:       49026D605658692721D3285EC15F19C6169EE9C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft
Manifest number:          0133
Signing time:             Thu 06 Nov 2025 13:06:22 +0000
Manifest this update:     Thu 06 Nov 2025 13:01:22 +0000
Manifest next update:     Mon 10 Nov 2025 20:05:22 +0000
Files and hashes:         1: 323830313a31333a323830303a3a2f34382d3438203d3e203134303830.roa (hash: 7UfKWaQAr95bPBridFn/arYQ/3LdRnATvxQ9sAAQ4B4=)
                          2: DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl (hash: usqFay3b7JdbORQvBFPE1xyX4m2X7705lRwQPkjay8k=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 10 Nov 2025 20:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:02:6d:60:56:58:69:27:21:d3:28:5e:c1:5f:19:c6:16:9e:e9:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8
        Validity
            Not Before: Nov  6 13:01:22 2025 GMT
            Not After : Nov 10 20:05:22 2025 GMT
        Subject: CN=1E72AC543480998D3A45FF6EE9DA6D436977F17C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e0:8f:5c:01:85:25:30:22:5d:5b:2a:2b:70:
                    2a:66:5a:52:bd:b8:b4:32:e4:16:4c:58:bf:f2:3d:
                    42:a2:17:a2:3a:3e:b5:a8:65:96:37:99:fa:08:97:
                    29:7d:95:96:42:12:b3:3a:da:d7:6b:0d:96:14:66:
                    6f:1d:0a:36:24:6d:2a:19:ac:39:98:ff:30:90:52:
                    38:5e:5c:45:9e:56:2e:06:c7:63:61:d0:bb:ec:05:
                    9b:55:4e:22:fc:00:9b:4a:31:5b:ed:d2:29:cd:79:
                    e0:e1:aa:18:15:99:3f:04:1d:cc:b7:57:09:e3:35:
                    ec:28:4c:91:4b:18:63:86:21:38:35:b0:6d:a2:e3:
                    ad:4f:84:4b:33:e6:0d:20:b6:12:0c:02:d3:95:59:
                    6f:02:dc:6d:e3:60:b3:ad:41:7b:ab:75:c1:f0:ac:
                    a5:fd:54:0f:50:63:a9:bf:b7:b2:b5:f5:41:70:93:
                    9e:35:94:62:b5:dc:2c:74:26:fe:6a:f4:ff:4c:90:
                    56:34:82:fe:7c:ee:14:78:d5:8c:96:67:2d:c3:55:
                    c7:31:8a:ec:c4:69:78:d1:87:52:0e:2b:07:9c:4c:
                    3b:3f:0e:ba:c3:ed:7f:dc:1b:86:32:89:02:59:7e:
                    b0:40:65:41:19:ee:ac:16:bd:c8:5c:7d:d1:e7:56:
                    35:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:72:AC:54:34:80:99:8D:3A:45:FF:6E:E9:DA:6D:43:69:77:F1:7C
            X509v3 Authority Key Identifier:
                keyid:DF:B8:DF:1F:0B:E6:09:FB:6F:98:00:3E:B9:6C:9C:DE:72:B5:3A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:f1:24:cb:1e:1b:7d:3c:67:78:9b:9d:71:39:d4:3d:bb:0d:
         26:f2:ca:8a:d2:b5:bb:5a:1c:c2:81:08:3c:1e:01:f3:cc:fc:
         83:30:b6:dd:ee:4c:4f:62:e5:32:29:4b:73:6f:e1:14:3c:14:
         c1:ee:8c:3a:22:95:3b:e2:37:5f:28:89:84:3c:41:f0:2e:6d:
         08:3c:2a:8b:5a:8b:85:a9:68:6c:75:f8:5a:b8:b5:77:c8:07:
         92:4c:fd:57:c7:b8:2b:2c:d9:b7:f7:12:b3:72:84:b8:f1:68:
         ea:80:60:22:52:8a:94:a3:98:66:51:c8:31:5d:7d:3e:36:bf:
         51:e7:73:ef:29:3c:65:be:7d:d1:d7:92:a5:d7:21:45:69:1e:
         50:26:65:bf:50:7a:cd:e7:73:4c:a2:2c:ca:01:15:bf:7a:f7:
         b5:42:cf:87:a6:b1:9c:94:4c:e7:56:b5:a3:9f:39:16:a0:6d:
         52:0c:95:05:f4:fb:76:9b:99:51:51:70:dd:c7:01:4f:a4:ef:
         95:9a:53:9b:5f:da:eb:31:8b:69:6c:8b:8f:0a:f6:29:e2:3c:
         58:a9:06:a0:e7:59:19:53:40:0a:3b:9c:e1:b9:8f:b1:ab:91:
         27:ae:9c:b5:7b:d1:0b:af:70:d4:01:1e:a4:77:7d:e2:0b:c7:
         4c:02:12:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 16:36:08 2025 by rpki-client