Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/244C18D5CEF38E6C71D35E4A8BBEFB1C5120FFAB6B5AFD278F5F89DB12D24056/0/8F9D596B5F4DD5B3F4DC80916A137A68D104D408.mft
File:                     8F9D596B5F4DD5B3F4DC80916A137A68D104D408.mft (raw, json)
Hash identifier:          hUHwXD1+CS45SCQZt3UATOkFVqUyqmAfJ7kLyjwMpH4=
Subject key identifier:   D4:78:C5:04:D4:DD:31:F1:0F:5E:76:57:8F:B4:D6:B7:99:B8:BE:4B
Authority key identifier: 8F:9D:59:6B:5F:4D:D5:B3:F4:DC:80:91:6A:13:7A:68:D1:04:D4:08
Certificate issuer:       /CN=8F9D596B5F4DD5B3F4DC80916A137A68D104D408
Certificate serial:       520E427392C4EEF2A24579CE3C1C0E2DD5009AAE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9D596B5F4DD5B3F4DC80916A137A68D104D408.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/244C18D5CEF38E6C71D35E4A8BBEFB1C5120FFAB6B5AFD278F5F89DB12D24056/0/8F9D596B5F4DD5B3F4DC80916A137A68D104D408.mft
Manifest number:          D2
Signing time:             Wed 07 May 2025 12:37:58 +0000
Manifest this update:     Wed 07 May 2025 12:32:58 +0000
Manifest next update:     Mon 12 May 2025 11:52:58 +0000
Files and hashes:         1: 8F9D596B5F4DD5B3F4DC80916A137A68D104D408.crl (hash: 1hgi6jC1VsyKWh2lTI3HW3jRPZOLS4l9fBH64N0MmIw=)
                          2: 3230302e3132332e3232382e302f32322d3234203d3e20323639393133.roa (hash: 6Z/tZqu0G3dj9amuFf+sa9HoSt897VYc3GhnQcDYHlk=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/244C18D5CEF38E6C71D35E4A8BBEFB1C5120FFAB6B5AFD278F5F89DB12D24056/0/8F9D596B5F4DD5B3F4DC80916A137A68D104D408.crl
                          rsync://repository.lacnic.net/rpki/lacnic/244C18D5CEF38E6C71D35E4A8BBEFB1C5120FFAB6B5AFD278F5F89DB12D24056/0/8F9D596B5F4DD5B3F4DC80916A137A68D104D408.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9D596B5F4DD5B3F4DC80916A137A68D104D408.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 11:52:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:0e:42:73:92:c4:ee:f2:a2:45:79:ce:3c:1c:0e:2d:d5:00:9a:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F9D596B5F4DD5B3F4DC80916A137A68D104D408
        Validity
            Not Before: May  7 12:32:58 2025 GMT
            Not After : May 12 11:52:58 2025 GMT
        Subject: CN=D478C504D4DD31F10F5E76578FB4D6B799B8BE4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cb:cf:bd:d4:a7:f0:15:98:14:48:2b:41:14:
                    e3:be:9a:09:78:61:31:40:51:52:0d:78:75:95:79:
                    c3:12:47:22:88:8d:c3:a1:7b:35:88:dd:d5:f0:da:
                    37:04:ad:d3:c4:54:67:4d:b8:bb:d7:c0:ad:f3:23:
                    b9:c4:b1:81:75:38:3e:d6:16:da:aa:ec:f4:a5:21:
                    32:3f:1c:b7:22:93:d4:c7:5c:ed:99:21:6b:32:2d:
                    d0:f6:58:26:f7:89:6b:09:4b:ad:40:44:3a:1b:0a:
                    d8:66:1b:68:e8:ef:2c:08:50:97:2b:47:9c:9b:30:
                    1d:f3:64:8e:12:cd:b7:58:3c:3d:ab:15:cc:18:8c:
                    23:16:1f:74:9f:3b:48:8f:cb:ac:c0:7c:32:3d:4b:
                    a0:4c:11:d9:99:7b:f4:f7:0e:c2:0e:b6:ef:81:31:
                    91:c2:a9:85:18:9e:87:be:74:1d:3a:aa:ad:62:ff:
                    94:be:3b:a6:4f:a1:15:11:32:12:53:c6:87:34:6e:
                    31:2c:a0:c0:1d:9f:1b:5a:1a:67:d0:10:04:74:96:
                    80:ac:79:ed:9f:bd:a2:36:42:d5:a1:c2:5d:54:ad:
                    81:23:d9:f3:b1:82:b6:c7:4a:1b:cf:4a:ea:34:7f:
                    bf:a2:27:7e:f6:a9:be:77:4b:17:4d:35:d8:fc:1b:
                    6f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:78:C5:04:D4:DD:31:F1:0F:5E:76:57:8F:B4:D6:B7:99:B8:BE:4B
            X509v3 Authority Key Identifier:
                keyid:8F:9D:59:6B:5F:4D:D5:B3:F4:DC:80:91:6A:13:7A:68:D1:04:D4:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/244C18D5CEF38E6C71D35E4A8BBEFB1C5120FFAB6B5AFD278F5F89DB12D24056/0/8F9D596B5F4DD5B3F4DC80916A137A68D104D408.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9D596B5F4DD5B3F4DC80916A137A68D104D408.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/244C18D5CEF38E6C71D35E4A8BBEFB1C5120FFAB6B5AFD278F5F89DB12D24056/0/8F9D596B5F4DD5B3F4DC80916A137A68D104D408.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:b3:12:fe:7f:d9:69:22:4d:6b:7f:7a:c0:25:32:dc:88:a4:
         c8:32:f2:08:b1:97:09:f5:1e:83:0d:a9:24:14:2d:77:be:b7:
         16:57:1a:b5:f9:4e:ce:26:a2:bd:b0:1e:13:0b:d9:8b:2a:ca:
         df:e8:86:3f:09:07:7d:0e:8f:aa:a8:0b:5c:bb:8f:35:0d:cf:
         d5:4d:06:eb:8b:99:ef:f9:46:09:cc:03:38:41:4f:2f:2f:34:
         2d:c2:fa:19:cb:05:9c:db:8f:12:24:1e:7c:ad:d0:04:1e:93:
         50:f5:15:64:17:95:57:15:63:a3:7a:47:62:06:83:38:ee:a5:
         e7:b4:e2:35:f8:3e:b5:44:12:df:80:ef:80:d7:3f:86:d3:aa:
         e0:5d:00:42:58:87:79:d3:75:fa:94:38:9b:3e:a3:80:fe:ec:
         98:4b:b6:29:c5:5f:23:d3:bd:b6:e7:ac:b0:3d:4f:56:11:ac:
         d1:66:a1:8a:28:e4:38:56:af:16:68:69:e2:0e:ab:c8:7c:04:
         f9:55:53:a4:ad:d6:67:57:67:8e:0e:96:28:ff:8d:75:99:a0:
         3f:ee:fa:a1:e9:89:63:ca:ae:84:c4:7a:43:f3:94:f4:a3:d5:
         60:ed:98:77:81:61:8a:a0:87:10:76:62:b8:ad:9e:2d:50:77:
         46:68:ce:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:10:12 2025 by rpki-client