Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft
File:                     8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft (raw, json)
Hash identifier:          n3fyF0nP65RoJRjtra8QH0lS1L7eGXgo6BrCf/3wl/o=
Subject key identifier:   78:32:A9:AC:90:21:1B:AD:50:E4:AF:44:7F:11:AD:FC:A5:E9:B2:7E
Authority key identifier: 8F:B5:C8:80:52:FB:05:C9:C4:F2:CE:D1:DE:5A:46:4A:20:D6:A3:7B
Certificate issuer:       /CN=8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B
Certificate serial:       0D472893F1D0B1E6DFFDEB4E8075B605B63D3CDC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft
Manifest number:          DF
Signing time:             Fri 09 May 2025 03:25:58 +0000
Manifest this update:     Fri 09 May 2025 03:20:58 +0000
Manifest next update:     Wed 14 May 2025 12:19:58 +0000
Files and hashes:         1: 3230302e312e3136312e302f32342d3234203d3e20323639393431.roa (hash: Mn9HP51sd3nq80GCLvFm4IDufKTTGBNvzNiXgOdxkOg=)
                          2: 8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.crl (hash: yQciSFggkWFExuRPLNm9D74EdaqDvuCqCKmUHqiOhEI=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 00:40:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:47:28:93:f1:d0:b1:e6:df:fd:eb:4e:80:75:b6:05:b6:3d:3c:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B
        Validity
            Not Before: May  9 03:20:58 2025 GMT
            Not After : May 14 12:19:58 2025 GMT
        Subject: CN=7832A9AC90211BAD50E4AF447F11ADFCA5E9B27E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f1:94:86:57:f6:d1:f3:83:5b:40:a9:71:ff:
                    80:0f:b5:ea:1f:46:f0:00:8e:87:c5:44:3c:b2:45:
                    b1:ac:e2:0b:2b:4b:ab:a0:fe:cd:2f:b6:d7:94:9a:
                    82:c1:2d:d7:0a:b0:1e:72:f4:06:71:05:d1:ae:85:
                    0f:9a:22:70:75:e3:89:2b:4e:cb:d3:68:65:95:5b:
                    2f:f6:40:ca:18:81:34:0a:06:3a:9b:67:59:76:ea:
                    5f:bc:b0:10:3e:1a:49:4b:e3:9d:c9:f8:d1:0b:10:
                    b4:8e:57:9b:ae:fe:80:37:d3:58:a6:0a:6c:ee:23:
                    37:20:a7:21:ec:df:88:3f:9b:07:8c:00:04:85:3d:
                    ed:f5:af:97:c8:10:d6:a3:f9:8e:43:f6:99:68:a5:
                    c8:6c:3b:21:ed:6c:84:47:b6:6c:2a:bc:12:74:cb:
                    f8:5d:10:8d:26:b9:77:09:ab:3b:92:c0:58:b7:70:
                    8f:4f:1a:8a:6e:81:51:3d:9c:5d:2f:98:72:1c:db:
                    4a:18:c8:7f:f1:e5:aa:d0:65:fa:c2:0f:7a:1d:55:
                    57:85:01:5e:15:62:cd:47:87:08:ca:58:68:b6:64:
                    0b:d5:08:78:17:64:97:7f:de:97:63:29:b2:9c:25:
                    bb:b0:dc:6d:5f:53:b2:4b:fd:a6:ab:0f:75:9e:db:
                    5c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:32:A9:AC:90:21:1B:AD:50:E4:AF:44:7F:11:AD:FC:A5:E9:B2:7E
            X509v3 Authority Key Identifier:
                keyid:8F:B5:C8:80:52:FB:05:C9:C4:F2:CE:D1:DE:5A:46:4A:20:D6:A3:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:2b:47:9a:8e:cd:45:cb:20:f1:f9:c8:53:53:0f:9d:26:f1:
         81:5a:10:c7:ed:61:e4:95:b9:e3:c3:92:bf:9b:47:fa:dd:c3:
         dd:31:a4:83:5b:3f:4c:83:87:8b:11:34:ec:e2:0f:18:a5:44:
         c7:e7:27:2e:71:20:ea:b2:44:8c:f4:b7:76:89:a9:dd:ef:7a:
         27:10:a8:d9:df:78:34:1f:0a:63:01:4d:5a:d2:7c:a0:37:e8:
         5d:49:50:b6:44:c0:11:bf:8c:89:f4:32:97:dc:69:c4:52:e2:
         e8:75:44:df:29:f9:70:4d:67:05:8c:5b:c7:b4:72:28:b5:af:
         51:d9:96:2a:86:19:b5:15:f0:d1:a2:34:e9:5c:22:3a:dc:b8:
         21:9c:d2:33:e9:0a:e0:10:56:6d:3c:82:72:da:9e:34:10:c6:
         87:7b:3d:b4:38:39:63:97:8a:72:6a:c4:cc:df:58:b3:cd:2e:
         81:64:66:a7:9d:3d:90:7f:9c:03:1e:3a:11:ed:e2:02:b7:92:
         48:4a:e3:96:87:6f:e9:0b:6c:1a:2c:63:3e:1b:49:3c:89:3b:
         f0:e0:f4:e4:28:79:44:c2:6a:9b:fc:df:b7:0b:95:28:e8:c2:
         b0:a6:41:7d:fb:c0:f8:62:2b:f9:2e:7f:38:4f:fc:5a:51:85:
         c2:33:ea:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:29:05 2025 by rpki-client