Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.mft
File:                     20B9C47C5E606454FC314AD7D8CD786FB8049FF1.mft (raw, json)
Hash identifier:          zGKXmEFZn+0VteHiDwTwjRLfHtwmDuSq13fzmGnpgV0=
Subject key identifier:   67:82:C9:A6:76:D0:A8:F0:6B:0C:06:FE:0E:8E:CC:92:23:0F:EE:2F
Authority key identifier: 20:B9:C4:7C:5E:60:64:54:FC:31:4A:D7:D8:CD:78:6F:B8:04:9F:F1
Certificate issuer:       /CN=20B9C47C5E606454FC314AD7D8CD786FB8049FF1
Certificate serial:       5A6CB0D87D5C1F06531FDC29B5F126A4AF62E551
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.mft
Manifest number:          0135
Signing time:             Mon 03 Nov 2025 18:09:35 +0000
Manifest this update:     Mon 03 Nov 2025 18:04:35 +0000
Manifest next update:     Sun 09 Nov 2025 15:21:35 +0000
Files and hashes:         1: 20B9C47C5E606454FC314AD7D8CD786FB8049FF1.crl (hash: HW4NeHH9FIYYB1Vpkaoso8z9FXp8eVuDw1zQCv0FAzE=)
                          2: 3230302e3132362e33322e302f32302d3234203d3e20323634373830.roa (hash: i9zgCnNrq8bcxofN13vAgU1rDNWKcRA2fapKD8mMCSo=)
                          3: 3136302e3233382e3235342e302f32332d3234203d3e20323634383539.roa (hash: KO1SSpavTbyg7HFRtvqMyJWEB+ZnlB3T7roiVm6a7Z8=)
                          4: 3136302e3233382e3235322e302f32332d3233203d3e20323634383539.roa (hash: TQnvYhDAZYFiLp+yK3ipM9mMZiGwQz10Jo9mY0c0E08=)
                          5: 3137302e3234372e3133362e302f32322d3234203d3e20323634373830.roa (hash: I2ua20SVmTvexQDgDcx13C8HeWOZcfaDBSEHTSWdNRk=)
                          6: 323830333a313334303a3a2f33322d3438203d3e20323634373830.roa (hash: FKICauL83A/ax5cdLIRsg945NlzHw+pc6Xs/d+O/2Qw=)
                          7: 3136382e3232382e3234382e302f32322d3234203d3e20323634373830.roa (hash: gojxVyq+gUhgU4FE7lKAqsoCNlcEQvAAyj69qt9vVp0=)
                          8: 3136302e3233382e3235342e302f32332d3233203d3e20323634383539.roa (hash: pMYJuKExamad0wC9U4YdYdqiMVp2IfYyHXuDHUIo324=)
                          9: 3230302e31322e32382e302f32322d3234203d3e20323634373830.roa (hash: WBNy1eLt9YuzJ+wkr/k6i4TZ5cYTE/637OEwKZWgYTc=)
                          10: 3136302e3233382e3235322e302f32332d3234203d3e20323634383539.roa (hash: GX06SyZczlCBM/2P51Lf0AKBYvQ0YX8T9lWBjG+tMUI=)
                          11: 3136302e3233382e3235322e302f32322d3234203d3e20323634383539.roa (hash: oZUtL7TcKMkTMcsRD4+cvxhAdsoG7Mb2LrTjOhQdq+s=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:6c:b0:d8:7d:5c:1f:06:53:1f:dc:29:b5:f1:26:a4:af:62:e5:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20B9C47C5E606454FC314AD7D8CD786FB8049FF1
        Validity
            Not Before: Nov  3 18:04:35 2025 GMT
            Not After : Nov  9 15:21:35 2025 GMT
        Subject: CN=6782C9A676D0A8F06B0C06FE0E8ECC92230FEE2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e1:dd:48:a7:b3:bf:73:9d:f4:d3:0d:32:31:
                    df:89:90:f4:7e:ae:68:55:f1:88:24:57:bb:1f:0c:
                    38:ed:b1:c2:fa:54:59:ea:d8:4e:15:94:3f:25:21:
                    93:3a:88:32:bf:44:bd:b4:aa:16:81:10:8e:39:f3:
                    2b:14:c4:00:0e:18:7f:85:09:ba:53:53:53:05:98:
                    e9:e8:a0:be:c9:34:6e:74:65:6c:56:9b:c6:87:0e:
                    f8:7c:92:a5:fe:3a:c0:56:f4:1c:fa:87:d8:88:f4:
                    e2:83:75:80:be:6e:3c:15:e0:81:89:4a:a0:b1:9a:
                    42:0a:c2:8e:b2:d0:19:83:83:5e:75:49:22:47:44:
                    cf:a8:c9:fb:9f:2e:b5:9e:1e:28:d1:ac:30:fc:42:
                    ea:1a:09:ab:1b:0e:2d:66:a4:2a:89:6a:98:ef:67:
                    24:5e:02:85:3e:5b:5a:9a:ca:19:32:eb:e5:a2:10:
                    1b:36:32:1d:1e:cf:27:43:ad:f0:e2:91:4f:0f:e7:
                    24:96:a5:78:62:05:17:09:ab:6b:bd:d8:f7:32:d0:
                    42:df:49:72:76:3b:f2:96:e6:79:56:0a:0e:9e:00:
                    b5:6f:50:5f:7e:7c:20:e5:0a:75:83:a4:48:db:60:
                    96:fe:87:90:c6:55:10:f1:92:d2:13:77:22:1f:52:
                    f2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:82:C9:A6:76:D0:A8:F0:6B:0C:06:FE:0E:8E:CC:92:23:0F:EE:2F
            X509v3 Authority Key Identifier:
                keyid:20:B9:C4:7C:5E:60:64:54:FC:31:4A:D7:D8:CD:78:6F:B8:04:9F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:57:08:b5:a7:5b:da:a8:6b:e9:ad:b4:1b:2a:1b:9d:26:cd:
         6a:6d:a5:e2:2e:dd:b3:f8:c2:b7:ac:02:fc:1c:ff:80:ef:37:
         46:28:35:b5:2d:43:5f:f5:1d:89:8e:30:91:d7:13:50:2a:f5:
         6a:8c:4e:d7:f0:c6:e6:57:58:3e:91:f4:16:ae:38:8e:c3:16:
         7d:be:ea:96:8d:9e:6b:18:e2:47:e7:65:f1:27:a4:62:56:22:
         02:5a:2d:28:6d:9c:a4:54:cf:6d:bd:2e:2b:b0:53:07:2a:5f:
         87:86:b0:e1:88:7b:68:59:2e:2f:0f:ab:d4:44:1e:69:32:d0:
         6f:60:ca:94:5f:bc:38:60:bd:8f:c9:49:2e:fb:ba:74:1e:09:
         e5:37:2b:63:98:1a:99:7b:a1:43:58:6e:82:84:00:e0:3a:57:
         42:1a:a0:3d:6e:9d:4d:f9:99:01:fc:58:dd:cb:5f:7d:a0:a1:
         8c:6b:6f:05:97:ab:54:be:4c:12:66:19:00:06:0f:76:b4:4c:
         64:0a:35:91:0c:fe:4e:e9:b5:48:ff:be:b2:32:3e:33:e3:25:
         0b:d4:43:e0:52:07:52:8c:68:57:30:95:dd:47:ef:6e:a0:ed:
         17:17:b5:84:ee:d5:72:0b:e7:ad:14:e2:e5:52:2d:c1:30:e5:
         fc:bf:49:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:59:54 2025 by rpki-client