Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.mft
File:                     975BBA86138B6A2DC834A2B1778C6E08EBF42F28.mft (raw, json)
Hash identifier:          BcVP71jRPVfTdtxWdDwqcqVe/x97m4s+gh1ORu9g1IM=
Subject key identifier:   9D:8D:57:B5:BB:62:C7:46:81:E7:B0:C3:EA:88:A3:8B:93:A7:EA:DD
Authority key identifier: 97:5B:BA:86:13:8B:6A:2D:C8:34:A2:B1:77:8C:6E:08:EB:F4:2F:28
Certificate issuer:       /CN=975BBA86138B6A2DC834A2B1778C6E08EBF42F28
Certificate serial:       595F6F4E2BA928EB5A8DA75D8C67B1F9EEAF978C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.mft
Manifest number:          2A
Signing time:             Sun 02 Nov 2025 21:22:06 +0000
Manifest this update:     Sun 02 Nov 2025 21:17:06 +0000
Manifest next update:     Sat 08 Nov 2025 09:40:06 +0000
Files and hashes:         1: 975BBA86138B6A2DC834A2B1778C6E08EBF42F28.crl (hash: pXfOaaMDeILFSqENXHCG7Xa2eCuRmVJ6gJVZbDs2iyE=)
                          2: 3139302e3131322e3230302e302f32332d3234203d3e20323732303237.roa (hash: AlJWmo5d/Xb64jU+u51izptbbw7gIM8epmfDS+0loks=)
                          3: 3230302e33352e3135322e302f32332d3234203d3e20323732303237.roa (hash: /1W0pyAi/2feT9m7qEMIjGdf2UvjoTWUtwTfO8pDvyM=)
                          4: 3139302e3131322e3139342e302f32332d3234203d3e20323732303237.roa (hash: ngqB1m1CeMuIhWPt9UMo/Fkl+ytrQhKKZ1+g5e73v/M=)
                          5: 3139302e3131322e3230322e302f32332d3234203d3e20323732303237.roa (hash: 1LZ6KiizlJk+0XU+Z3iPxs0LzwrGuCLz2P9MjWxccSY=)
                          6: 3139302e3131322e3139322e302f32332d3234203d3e20323732303237.roa (hash: ZiVjW0CyYT1TGKrlzboczo2WM/U6WP5ipDiprXqRiDM=)
                          7: 3230302e33352e3135342e302f32332d3234203d3e20323732303237.roa (hash: CnF+E1KTJWjgCT5reUZFfmuQtEoE4UsqCnB6ZG2k8bc=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 08 Nov 2025 09:40:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:5f:6f:4e:2b:a9:28:eb:5a:8d:a7:5d:8c:67:b1:f9:ee:af:97:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=975BBA86138B6A2DC834A2B1778C6E08EBF42F28
        Validity
            Not Before: Nov  2 21:17:06 2025 GMT
            Not After : Nov  8 09:40:06 2025 GMT
        Subject: CN=9D8D57B5BB62C74681E7B0C3EA88A38B93A7EADD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:07:48:10:79:b1:e5:75:e4:53:51:7d:d4:90:
                    80:70:e8:ad:a7:71:24:65:3c:de:4e:b2:a0:71:31:
                    d7:d3:0d:35:0e:d5:41:eb:9f:a4:5b:2d:4f:5b:f8:
                    68:9f:bc:e5:0a:78:a6:3d:f4:8b:8a:04:b4:f0:5e:
                    a8:5a:fe:08:a0:8c:78:e8:2c:97:b6:df:0a:7d:08:
                    24:6a:ec:7c:c4:ba:e3:df:6c:2f:b9:78:a4:03:e8:
                    63:0d:7a:72:75:24:a5:7e:96:4a:6c:87:1b:16:7c:
                    71:fd:c5:8e:c6:77:65:dc:81:6f:f6:29:89:70:ff:
                    a7:d7:dd:b9:c5:d9:4f:1a:1f:69:2e:b8:30:48:2b:
                    60:a3:38:7e:4e:b5:e7:a6:9e:10:ff:d9:08:b7:67:
                    f4:cc:99:e4:c3:88:57:a6:b0:e3:b0:71:0f:22:71:
                    7b:fc:a3:c5:3f:8a:02:be:fd:38:5d:dd:17:e6:3f:
                    39:57:49:b5:2a:ee:ae:cc:08:9d:1b:bc:dc:f6:f4:
                    85:95:df:82:b1:ec:7d:be:d5:c6:6f:7f:5b:b4:a9:
                    7e:bb:cc:ee:ec:22:b4:66:3c:85:a2:ca:17:b4:f1:
                    bb:04:9b:04:09:1c:13:ac:61:bd:03:73:66:79:40:
                    89:e8:8b:6a:62:4a:0c:7c:5d:95:07:c1:b9:56:64:
                    e0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8D:57:B5:BB:62:C7:46:81:E7:B0:C3:EA:88:A3:8B:93:A7:EA:DD
            X509v3 Authority Key Identifier:
                keyid:97:5B:BA:86:13:8B:6A:2D:C8:34:A2:B1:77:8C:6E:08:EB:F4:2F:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:d6:b6:aa:59:5f:02:6a:81:df:bd:44:11:87:3e:be:6d:d5:
         11:9f:a8:9d:26:3a:22:f1:28:9c:0b:e9:c9:c4:01:7d:fb:89:
         1b:3c:b8:6f:01:fc:af:4e:49:de:13:a5:e2:31:e6:ac:4f:2d:
         b6:b4:bf:54:1d:d9:bf:df:a9:11:97:a0:6f:8c:ba:17:3a:0c:
         5c:f6:23:af:21:97:92:ee:cf:84:d7:b8:e3:52:e2:88:c8:ed:
         b8:a0:40:8a:df:1a:32:56:96:97:c6:36:1e:ad:5f:c2:a1:0d:
         bb:74:50:83:dc:28:3d:88:df:bc:b4:9b:09:27:a5:16:5e:0d:
         47:fd:e3:53:dc:27:c2:78:27:ee:30:4c:5b:6d:28:73:78:ff:
         c8:ad:2f:20:93:dd:ab:96:1d:0d:07:71:05:8d:bf:d2:30:df:
         08:f3:99:30:0b:a0:8d:23:a3:f0:84:47:41:57:c4:cd:c6:e0:
         2b:df:f9:62:9d:4b:a4:72:02:c6:bc:c2:04:fa:15:66:d2:13:
         aa:7a:cb:ad:b0:d7:12:a7:3f:35:44:53:2c:2e:76:a4:94:14:
         03:ab:c1:7a:a6:ce:2d:f6:71:52:2f:60:a5:44:43:bc:0c:0f:
         d1:80:14:2a:8c:0b:a9:69:fd:42:92:20:97:0a:29:42:e9:a1:
         3e:4c:24:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:21:19 2025 by rpki-client