Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft
File:                     BCDD50591AFBE01DD1E89006B709D14B69D79567.mft (raw, json)
Hash identifier:          8jEaiS4APrhUYVusDLoxIR/TBpxv+6axg0xWdROWkd8=
Subject key identifier:   D3:C8:56:F2:BB:4A:7C:26:EE:E0:BF:0F:34:FC:4F:5D:66:D0:38:75
Authority key identifier: BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67
Certificate issuer:       /CN=BCDD50591AFBE01DD1E89006B709D14B69D79567
Certificate serial:       0A17EFF96A840DB93607F1EB94A9B4E7691D6EE4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft
Manifest number:          0139
Signing time:             Mon 03 Nov 2025 17:39:12 +0000
Manifest this update:     Mon 03 Nov 2025 17:34:12 +0000
Manifest next update:     Sat 08 Nov 2025 22:55:12 +0000
Files and hashes:         1: 323830303a6362303a3a2f33322d3438203d3e20323633323434.roa (hash: HG79+FZ1IJmtzxISYDc5++PcOk2TMTwJhOCfg+BwQeE=)
                          2: BCDD50591AFBE01DD1E89006B709D14B69D79567.crl (hash: CB+p4No3NWctHyhBFwxzPkIhbkv2NaqmNTxMvGn8xAg=)
                          3: 3139302e3130362e33322e302f32312d3234203d3e20323633323434.roa (hash: IKpYtNnPqJi7A2I065akkFAJXM/1P20XrCW6mLLJ8DY=)
                          4: 3137302e3234372e3134302e302f32322d3234203d3e20323633323434.roa (hash: xopTA6jKSIsdkIE6jBzhXIFqdR5+llPDfkKoskVciXA=)
                          5: 3138362e302e3138302e302f32322d3234203d3e20323633323434.roa (hash: 0DlXsm98HlB5uDzTYzIjyDBNM1DJ5k3QRekEzRjOxzQ=)
                          6: 3133382e39392e3138342e302f32322d3234203d3e20323633323434.roa (hash: r3mpym8MNwnvHxIuYSgXnngQZcrxT6L1+B3uUPWi9dY=)
                          7: 3133312e37322e3133322e302f32322d3234203d3e20323633323434.roa (hash: 9BHe64mInmx7D9r4r9/CtM7RjflnHnNO52klk8Xfo/4=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 08 Nov 2025 22:55:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:17:ef:f9:6a:84:0d:b9:36:07:f1:eb:94:a9:b4:e7:69:1d:6e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCDD50591AFBE01DD1E89006B709D14B69D79567
        Validity
            Not Before: Nov  3 17:34:12 2025 GMT
            Not After : Nov  8 22:55:12 2025 GMT
        Subject: CN=D3C856F2BB4A7C26EEE0BF0F34FC4F5D66D03875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:28:7a:f3:93:98:81:b5:66:02:8e:8b:36:55:
                    cd:a9:c1:4d:4e:dc:fa:d4:be:f8:ad:68:1e:06:79:
                    98:2a:5a:4c:8c:5d:2f:89:97:1b:aa:78:43:19:6e:
                    11:fc:92:d6:0e:f4:2c:ba:35:d1:9b:1e:40:73:a9:
                    ab:e7:76:ad:c5:bf:82:bd:93:64:8c:9f:f8:c0:80:
                    2a:41:b2:01:98:9c:c0:8f:e4:40:76:38:0a:e9:35:
                    26:28:a6:67:13:7f:71:f0:27:db:4d:ae:73:00:2b:
                    1a:76:ec:43:07:f9:9e:b2:bf:93:2e:e5:7c:53:ec:
                    a9:b8:36:97:a1:c5:7c:da:a9:12:c5:c2:f1:55:cb:
                    1c:74:20:af:c4:39:18:79:8a:29:04:f4:f4:6d:b2:
                    2e:ac:30:cc:d0:78:81:18:21:15:99:56:b1:f4:20:
                    cb:bf:e0:f3:60:4b:b4:ea:29:e4:8e:77:1d:27:14:
                    88:d4:4b:8a:bd:f6:14:af:ae:50:dd:eb:94:55:d8:
                    69:66:78:da:4a:3e:1e:89:b9:d7:b5:2c:0e:df:31:
                    b3:bc:cc:0a:e1:2f:ac:ad:79:d3:25:e8:76:3c:d2:
                    61:45:80:5b:0a:c0:f2:a0:ae:e5:91:74:e8:ad:1c:
                    55:b0:44:ee:9c:bd:d2:c1:3e:ee:59:3c:88:07:49:
                    51:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C8:56:F2:BB:4A:7C:26:EE:E0:BF:0F:34:FC:4F:5D:66:D0:38:75
            X509v3 Authority Key Identifier:
                keyid:BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:a0:a4:8e:5b:f8:d0:39:b5:05:95:79:cb:d2:a1:88:3e:c0:
         bb:54:96:7b:c3:60:12:23:e2:7b:05:27:0e:ee:20:43:dd:e7:
         1d:66:cd:d6:64:ff:38:1b:84:e5:a7:9a:54:c5:72:ac:1c:25:
         eb:b0:5b:85:fc:bb:b8:04:52:3e:51:8d:d3:2d:63:0e:55:f1:
         de:21:dd:45:43:b9:34:40:bc:9c:6f:2d:03:00:12:f9:84:9c:
         f9:1d:37:6d:f1:97:58:2c:dc:70:94:d7:3c:30:3f:f8:c6:02:
         53:c8:c9:55:53:4d:54:28:00:ae:67:13:e9:46:ac:3d:1f:9b:
         cf:49:47:50:cc:ae:1c:ab:f2:87:cd:22:eb:bf:a2:dd:4a:cf:
         0b:77:84:7a:b7:11:d2:f0:7a:97:a3:91:dc:ae:2e:24:ac:13:
         ce:08:ec:bf:cc:56:cb:9d:4c:60:ee:69:76:bd:d5:24:ff:05:
         30:96:b2:c9:95:00:f2:20:77:27:dc:62:b3:16:4b:d6:b1:ba:
         4b:17:2d:44:45:a0:b5:30:83:6b:8b:6b:a9:66:ca:ba:db:cd:
         c0:a4:92:14:79:f2:69:a2:8d:23:26:09:45:bf:5e:3d:72:11:
         ef:14:8a:a3:bd:f1:53:b9:26:90:6e:b6:16:22:d2:cd:21:fb:
         3f:6b:32:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:35:06 2025 by rpki-client