Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft
File:                     CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft (raw, json)
Hash identifier:          g7mW30MEf/w648+QBPHVRvs2ds2kOUvAzgxB67+bP4g=
Subject key identifier:   C3:E4:71:71:FB:29:E7:FE:FD:59:AF:55:AD:EC:AB:67:34:E3:44:A2
Authority key identifier: CF:F4:EB:94:A3:CA:42:40:E9:9D:51:5F:81:8C:70:09:0A:5B:EF:59
Certificate issuer:       /CN=CFF4EB94A3CA4240E99D515F818C70090A5BEF59
Certificate serial:       2B5C463AE8E6ED6C1CEE38D84585D3F38E409607
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft
Manifest number:          013A
Signing time:             Tue 04 Nov 2025 17:35:01 +0000
Manifest this update:     Tue 04 Nov 2025 17:30:01 +0000
Manifest next update:     Mon 10 Nov 2025 04:01:01 +0000
Files and hashes:         1: 3138352e37342e31382e302f32342d3234203d3e203336343534.roa (hash: /s6vyPqjFsCBzbl7k2i7VjFnyweu8raSTCp18y5qPow=)
                          2: 3139302e382e3137362e302f32322d3232203d3e203532333335.roa (hash: vREyyI+AZN7N3SkaHJXvgZvl0PshHIYkwZO60lmC2W0=)
                          3: 3138352e37342e31362e302f32332d3233203d3e203532333335.roa (hash: AA9n1lVR5HX9REgcEvpVDwT20zFoSkoU8JDEA1qlUsc=)
                          4: 3138352e37342e31362e302f32332d3234203d3e203336343534.roa (hash: 5hN2NJOMlsMqgRJfpQa/xPxQxH45stlb9cVIjWuo9mE=)
                          5: CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl (hash: EVWTiWIQ9G26Z7k6hC+FQW5+39TwiFWMJSDeULZR1DI=)
                          6: 3139302e382e3137362e302f32322d3234203d3e203336343534.roa (hash: dt9vy/6Dk0cotHocklt24/PtvbvoPUWM/O1eCtF+zH4=)
                          7: 3138352e37342e31382e302f32342d3234203d3e203532333335.roa (hash: LECpA5bPBejVOnzCUoO1kdwDq77N413G1QKuYnH703M=)
                          8: 3138352e37342e31392e302f32342d3234203d3e203532333335.roa (hash: 2dAG7U5n47XTp12aSGxvzNB0rrTxyRySK9VodyiPoqQ=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:5c:46:3a:e8:e6:ed:6c:1c:ee:38:d8:45:85:d3:f3:8e:40:96:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFF4EB94A3CA4240E99D515F818C70090A5BEF59
        Validity
            Not Before: Nov  4 17:30:01 2025 GMT
            Not After : Nov 10 04:01:01 2025 GMT
        Subject: CN=C3E47171FB29E7FEFD59AF55ADECAB6734E344A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d1:7b:bc:04:d2:33:e7:f0:96:8e:ef:55:00:
                    e9:f0:90:26:cd:a5:d3:82:b4:63:16:f1:31:9d:61:
                    1a:aa:99:98:78:28:0f:62:a5:79:ae:35:64:f6:7d:
                    39:7c:c6:aa:ee:53:2f:10:68:21:e2:b4:58:bd:e5:
                    cb:48:5f:ba:3a:75:60:a5:29:e0:c3:b3:fe:0d:b3:
                    6e:7a:07:d4:9d:22:f4:fb:d8:d3:da:29:47:d7:05:
                    4c:65:8f:86:d4:0b:01:58:11:ca:d6:d0:9c:5d:4b:
                    b1:9c:3e:7d:ba:cc:90:de:f2:3e:bb:da:03:20:42:
                    a7:bd:a7:a7:68:06:8f:d8:7f:cc:84:dc:53:9d:f4:
                    b7:ef:60:b4:ea:df:ee:ba:51:0c:ac:e8:ff:22:d9:
                    f0:3c:63:94:df:c2:36:47:45:86:3a:6b:b0:37:cc:
                    74:0b:5e:65:44:28:a2:1a:c9:65:c9:44:30:ce:e4:
                    11:2a:85:8a:6b:e4:ec:05:46:44:dc:96:52:b8:7c:
                    5e:9a:f2:c0:a9:42:0a:f4:bb:a9:e2:e0:3c:db:9c:
                    f1:56:90:ae:ab:e9:a4:17:aa:31:a3:73:5a:da:ec:
                    9f:55:9a:cd:61:ec:db:08:b5:3b:53:79:9e:7b:83:
                    a7:c0:94:db:5e:12:e3:01:8a:72:dc:58:3b:61:8b:
                    fe:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E4:71:71:FB:29:E7:FE:FD:59:AF:55:AD:EC:AB:67:34:E3:44:A2
            X509v3 Authority Key Identifier:
                keyid:CF:F4:EB:94:A3:CA:42:40:E9:9D:51:5F:81:8C:70:09:0A:5B:EF:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:71:62:2c:4e:ee:0e:23:68:7b:99:ad:07:f5:dc:95:d0:83:
         74:8b:ec:1b:20:08:09:40:ef:52:2c:4c:82:c3:13:f8:98:f4:
         d4:59:60:dc:b5:a8:e0:1e:a2:b5:e3:60:e5:e3:94:69:d3:90:
         02:bb:45:33:c4:88:fb:9c:0f:c3:c6:e3:22:67:18:12:4d:b3:
         ee:29:bb:0f:78:a2:c5:58:8f:bd:3b:58:8a:0d:d8:eb:d9:7e:
         ed:60:e6:0d:f6:1a:36:d2:2b:f5:c4:5a:96:d2:60:e7:a5:ab:
         82:ab:65:06:10:df:46:de:59:7d:2a:c0:bc:4e:1b:03:d1:d4:
         1a:6c:62:f5:33:81:7f:8a:3c:ad:34:ea:27:7e:02:f2:24:59:
         3a:6e:a0:8b:35:8e:7f:aa:1d:52:f8:02:94:d2:22:6b:76:8e:
         e3:26:bf:d5:d0:bf:da:2c:5e:9e:3f:8e:36:4d:14:ea:ac:75:
         8c:54:ad:e4:91:45:28:e0:21:51:1c:b5:75:60:5f:e1:78:be:
         97:5d:2d:3f:b2:72:de:23:00:3e:ac:c5:06:62:d0:c7:fc:9f:
         90:01:b0:d7:53:a1:4a:3b:7b:8f:18:8e:d8:6b:11:68:01:9d:
         e6:9c:8b:b5:c9:76:85:3f:9d:ad:55:fb:42:7a:0f:94:bb:53:
         ef:00:34:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:51:48 2025 by rpki-client