Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34717F05133BDBAF157A2D88A1831560DA2390FADFA1F46F3C42F979B3A6BD7A/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.mft
File:                     217EAB37EEC2C460E29FF931AF05B634C82792CF.mft (raw, json)
Hash identifier:          wec28IdYRFsrbXXKQ8PMxH0nyX6b6JsU8028OQ3SO4w=
Subject key identifier:   D2:63:C3:7C:A1:93:37:76:6E:DC:5D:1B:60:B7:64:6B:B7:E4:FB:01
Authority key identifier: 21:7E:AB:37:EE:C2:C4:60:E2:9F:F9:31:AF:05:B6:34:C8:27:92:CF
Certificate issuer:       /CN=217EAB37EEC2C460E29FF931AF05B634C82792CF
Certificate serial:       6511E97FDA824D9E5A20198E7A116A533AF14E7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34717F05133BDBAF157A2D88A1831560DA2390FADFA1F46F3C42F979B3A6BD7A/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.mft
Manifest number:          0133
Signing time:             Tue 04 Nov 2025 04:09:59 +0000
Manifest this update:     Tue 04 Nov 2025 04:04:59 +0000
Manifest next update:     Sun 09 Nov 2025 19:50:59 +0000
Files and hashes:         1: 3134382e3231342e302e302f31362d3234203d3e2032373038.roa (hash: XQiUkKBu6wXM+gexa9UmCy1etG815t2gAgit917BbhY=)
                          2: 217EAB37EEC2C460E29FF931AF05B634C82792CF.crl (hash: xWe8p6oLpFcF+s+tDPcwNFFaQlvBJeybhDE9PTdPRuM=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34717F05133BDBAF157A2D88A1831560DA2390FADFA1F46F3C42F979B3A6BD7A/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34717F05133BDBAF157A2D88A1831560DA2390FADFA1F46F3C42F979B3A6BD7A/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:11:e9:7f:da:82:4d:9e:5a:20:19:8e:7a:11:6a:53:3a:f1:4e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=217EAB37EEC2C460E29FF931AF05B634C82792CF
        Validity
            Not Before: Nov  4 04:04:59 2025 GMT
            Not After : Nov  9 19:50:59 2025 GMT
        Subject: CN=D263C37CA19337766EDC5D1B60B7646BB7E4FB01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9d:b0:a9:32:ce:ba:2e:65:7e:d0:95:fc:d2:
                    18:95:44:99:cc:ea:89:de:79:95:aa:da:51:5c:ee:
                    1c:a8:10:90:6c:9c:f9:f1:2b:b8:ea:3e:92:8e:a1:
                    1b:6f:48:73:bc:42:df:c4:19:ab:3f:34:e9:37:77:
                    9d:39:37:6c:eb:38:65:fa:14:c6:cd:b8:34:88:54:
                    ae:38:cf:eb:43:56:67:4f:10:65:e0:b3:52:8c:68:
                    fd:cf:9e:22:4d:55:c8:83:ca:35:4b:ec:26:ef:d5:
                    00:8e:7f:d6:eb:21:ab:75:f3:b6:47:e7:ff:bb:53:
                    51:db:33:67:0b:1c:2a:f7:28:01:45:d0:af:6a:eb:
                    54:5d:d7:aa:34:9c:7c:58:9d:21:38:9a:e7:95:c0:
                    11:96:a1:ce:1c:0f:c9:c9:71:5f:83:a4:e1:1d:2c:
                    c9:dc:a7:b3:2b:ee:ce:6c:0c:c0:1a:72:d0:67:41:
                    a6:a8:6f:68:f7:78:94:53:57:4f:d1:36:a6:f9:b5:
                    15:86:92:bc:26:58:08:bf:50:d7:07:85:20:b7:8a:
                    9e:83:1c:e4:29:b2:4f:97:b4:33:24:83:ee:40:b9:
                    9a:f3:e2:7c:9c:64:53:4c:81:e5:11:74:cf:78:1c:
                    5e:22:e6:b2:21:29:54:9e:00:3f:c6:d4:2b:70:22:
                    64:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:63:C3:7C:A1:93:37:76:6E:DC:5D:1B:60:B7:64:6B:B7:E4:FB:01
            X509v3 Authority Key Identifier:
                keyid:21:7E:AB:37:EE:C2:C4:60:E2:9F:F9:31:AF:05:B6:34:C8:27:92:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34717F05133BDBAF157A2D88A1831560DA2390FADFA1F46F3C42F979B3A6BD7A/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34717F05133BDBAF157A2D88A1831560DA2390FADFA1F46F3C42F979B3A6BD7A/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:7c:99:11:eb:9c:80:b5:2b:05:d0:9a:07:5a:90:22:b4:c7:
         b2:10:79:20:14:30:b1:f2:67:d6:d0:cd:c5:23:50:84:2d:9e:
         b4:fb:bb:29:f8:72:a2:39:9d:ee:2b:08:e1:16:97:43:97:9e:
         f1:9e:62:e9:ff:68:94:a0:f6:b5:93:ad:58:98:fc:47:36:d0:
         cc:57:2d:68:c5:1d:e8:c7:4d:6a:b3:79:f1:50:79:a7:9a:c2:
         f1:6b:c8:36:19:4a:50:83:25:cd:a9:a9:ae:e7:71:90:3a:cf:
         93:0a:4f:1f:57:5d:95:76:cc:15:0e:9e:d2:8c:e4:9f:e0:e0:
         d2:58:60:ff:0e:a7:c9:e1:c0:49:15:5a:25:b0:51:e9:78:80:
         bf:9f:db:f5:1b:9f:f0:3b:b0:a3:14:e7:1c:4f:ce:de:f6:a9:
         a0:c0:75:ba:de:d4:df:11:72:3d:ec:55:9c:bf:08:8d:05:48:
         10:d3:51:e5:08:1a:b7:d2:f8:fb:f1:9b:ec:e0:e0:a9:5b:5a:
         ed:24:d7:b4:94:3a:84:25:ec:92:50:a1:72:8f:3e:f9:0a:6e:
         0e:a9:0c:c6:fc:4e:ce:0d:0e:be:4d:43:d9:8b:d9:80:72:bc:
         76:12:ce:c7:5b:40:58:8f:9c:31:0c:18:d2:65:d1:e5:a0:44:
         c8:3b:3f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:43:43 2025 by rpki-client