Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/45B9347D38FAB900F1D979175B2078F6ECF805A6474CA556528533E841D9F341/0/D60CEB01DC00C1A218A7B86A82B4F247B04BAC1A.mft
File:                     D60CEB01DC00C1A218A7B86A82B4F247B04BAC1A.mft (raw, json)
Hash identifier:          cAUiOyo2ARcjqydeW3ks3CAxQoxsLcA7F3vwDFeijKQ=
Subject key identifier:   8D:6D:A3:54:65:C5:ED:FD:4A:F4:E3:B0:14:10:B2:43:87:3D:CF:EF
Authority key identifier: D6:0C:EB:01:DC:00:C1:A2:18:A7:B8:6A:82:B4:F2:47:B0:4B:AC:1A
Certificate issuer:       /CN=D60CEB01DC00C1A218A7B86A82B4F247B04BAC1A
Certificate serial:       38D2F23226AE1EB606BE4B99F4014C8552B934D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D60CEB01DC00C1A218A7B86A82B4F247B04BAC1A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/45B9347D38FAB900F1D979175B2078F6ECF805A6474CA556528533E841D9F341/0/D60CEB01DC00C1A218A7B86A82B4F247B04BAC1A.mft
Manifest number:          0137
Signing time:             Mon 03 Nov 2025 15:42:59 +0000
Manifest this update:     Mon 03 Nov 2025 15:37:59 +0000
Manifest next update:     Sat 08 Nov 2025 11:45:59 +0000
Files and hashes:         1: 323830363a3430653a3a2f33322d3332203d3e20323732333232.roa (hash: /JXIB68ZxnUjSnLNN4fGoi80UwMnrJmIm+ig9XOWEp8=)
                          2: D60CEB01DC00C1A218A7B86A82B4F247B04BAC1A.crl (hash: nYSfN8pqnaDX4WrVoou9ANSyv0BjrmtNx7c2gIed6r8=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/45B9347D38FAB900F1D979175B2078F6ECF805A6474CA556528533E841D9F341/0/D60CEB01DC00C1A218A7B86A82B4F247B04BAC1A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/45B9347D38FAB900F1D979175B2078F6ECF805A6474CA556528533E841D9F341/0/D60CEB01DC00C1A218A7B86A82B4F247B04BAC1A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D60CEB01DC00C1A218A7B86A82B4F247B04BAC1A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 08 Nov 2025 11:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d2:f2:32:26:ae:1e:b6:06:be:4b:99:f4:01:4c:85:52:b9:34:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D60CEB01DC00C1A218A7B86A82B4F247B04BAC1A
        Validity
            Not Before: Nov  3 15:37:59 2025 GMT
            Not After : Nov  8 11:45:59 2025 GMT
        Subject: CN=8D6DA35465C5EDFD4AF4E3B01410B243873DCFEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ab:a1:a8:26:5b:08:1d:d7:25:5c:d5:57:04:
                    b0:f7:c1:53:c9:d1:d6:57:05:45:43:17:b7:7f:e1:
                    5b:d5:65:8c:5c:7e:58:9a:06:00:24:49:83:bc:70:
                    95:e8:e9:3e:e2:db:51:b0:fe:c0:e8:d0:03:52:25:
                    d3:fc:15:3d:ab:cb:33:3d:40:cf:42:6a:0b:91:63:
                    11:08:5e:df:2c:ab:74:b2:35:0d:31:73:c8:85:a6:
                    96:59:26:fe:f8:6a:0b:bf:70:9a:09:21:5f:0c:97:
                    da:ee:4a:19:96:1f:37:7d:d0:d1:24:78:7f:5d:4b:
                    20:b1:b3:de:d0:55:13:39:42:cc:5a:fc:ca:77:c5:
                    2d:a0:48:77:1c:b9:4e:d5:50:5b:9e:d4:bf:77:3a:
                    10:69:93:e2:53:5e:2d:75:37:ba:b6:47:09:21:a5:
                    58:84:e1:73:b0:d6:fa:12:f3:c8:98:22:66:50:a0:
                    3c:66:c5:ab:66:cf:58:9d:43:3f:a2:fb:ec:73:28:
                    f6:36:e1:89:77:a1:b8:dc:44:f4:fe:0f:2d:72:50:
                    e9:1b:51:dd:fd:82:8e:24:5e:a3:52:89:b4:ee:55:
                    30:10:c9:0c:79:bb:7e:08:98:86:dc:eb:bd:99:df:
                    45:71:37:f7:83:9d:2f:0c:e2:b9:55:83:cc:ca:0b:
                    0e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6D:A3:54:65:C5:ED:FD:4A:F4:E3:B0:14:10:B2:43:87:3D:CF:EF
            X509v3 Authority Key Identifier:
                keyid:D6:0C:EB:01:DC:00:C1:A2:18:A7:B8:6A:82:B4:F2:47:B0:4B:AC:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/45B9347D38FAB900F1D979175B2078F6ECF805A6474CA556528533E841D9F341/0/D60CEB01DC00C1A218A7B86A82B4F247B04BAC1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D60CEB01DC00C1A218A7B86A82B4F247B04BAC1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/45B9347D38FAB900F1D979175B2078F6ECF805A6474CA556528533E841D9F341/0/D60CEB01DC00C1A218A7B86A82B4F247B04BAC1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b8:5e:e8:e3:c3:32:11:cf:87:8b:33:d2:aa:46:b7:4a:ea:
         32:cf:ce:e1:39:a5:61:51:ae:89:24:8c:4d:cc:d9:fa:e4:6a:
         7d:bb:72:78:fd:75:8a:b7:f7:eb:4b:f0:0c:ae:7d:5e:23:13:
         22:4b:b6:59:49:9a:e9:e3:4b:d1:29:e2:11:c7:b7:06:a1:51:
         01:67:4c:f1:02:1d:e0:73:2a:95:46:6b:a0:34:dd:cc:93:30:
         0d:a2:ad:ce:23:7a:6b:b9:36:25:76:41:0d:08:e6:f4:de:6a:
         31:70:fa:41:58:44:41:9b:e5:5a:62:ab:5b:cf:7e:d8:70:48:
         fc:4f:40:e4:1f:7e:6a:89:93:e3:6e:4a:88:e7:f3:fc:e8:53:
         95:f4:57:26:eb:dd:b4:56:b6:c3:bd:c9:7c:6b:a9:91:57:08:
         57:a8:df:e8:2e:d8:ec:11:dc:15:4d:5f:ff:b7:66:69:8e:28:
         2e:45:17:c1:45:32:30:b0:82:24:39:5b:52:04:91:31:38:bf:
         39:46:48:87:96:81:39:ce:da:13:b1:ee:e9:7f:b0:f1:ff:6c:
         a1:c9:28:2b:7f:ee:1b:d1:c1:25:66:c6:78:dd:b0:03:3e:a6:
         2d:57:7c:1f:e9:e8:17:3f:5c:f5:70:41:7c:9f:cb:c8:88:9e:
         58:22:04:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:07:40 2025 by rpki-client