Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5655CE993EDA485C4BFC4CF110B01564FC0C1C314F36DB0C759A525B9096EECD/0/32B1BA9DC69C59C35C63C3534AA400DDB84A32EB.mft
File:                     32B1BA9DC69C59C35C63C3534AA400DDB84A32EB.mft (raw, json)
Hash identifier:          dfMB9bP4JEsVxRV1WY8ZTyfjgN1cK2pFcjzrgJxfu94=
Subject key identifier:   AD:7D:69:29:0F:54:FD:E9:BD:EA:2E:57:92:4D:2C:5B:C5:3E:9B:F4
Authority key identifier: 32:B1:BA:9D:C6:9C:59:C3:5C:63:C3:53:4A:A4:00:DD:B8:4A:32:EB
Certificate issuer:       /CN=32B1BA9DC69C59C35C63C3534AA400DDB84A32EB
Certificate serial:       6D22949DFDE6E93EC74B3A63A7CA099E202FF031
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32B1BA9DC69C59C35C63C3534AA400DDB84A32EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5655CE993EDA485C4BFC4CF110B01564FC0C1C314F36DB0C759A525B9096EECD/0/32B1BA9DC69C59C35C63C3534AA400DDB84A32EB.mft
Manifest number:          0130
Signing time:             Tue 04 Nov 2025 00:07:36 +0000
Manifest this update:     Tue 04 Nov 2025 00:02:36 +0000
Manifest next update:     Sun 09 Nov 2025 07:14:36 +0000
Files and hashes:         1: 32B1BA9DC69C59C35C63C3534AA400DDB84A32EB.crl (hash: 7ecL//olVwk+0fDRYTfRBG4Ewb3AVYZTb0tPLH2gw1o=)
                          2: 323830313a31393a393830303a3a2f34382d3438203d3e203134303830.roa (hash: 9g4H3KbmSq8qPGpKm/HHdbrjdsce0LZcQ3awD8fIsUo=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5655CE993EDA485C4BFC4CF110B01564FC0C1C314F36DB0C759A525B9096EECD/0/32B1BA9DC69C59C35C63C3534AA400DDB84A32EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5655CE993EDA485C4BFC4CF110B01564FC0C1C314F36DB0C759A525B9096EECD/0/32B1BA9DC69C59C35C63C3534AA400DDB84A32EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32B1BA9DC69C59C35C63C3534AA400DDB84A32EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:22:94:9d:fd:e6:e9:3e:c7:4b:3a:63:a7:ca:09:9e:20:2f:f0:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32B1BA9DC69C59C35C63C3534AA400DDB84A32EB
        Validity
            Not Before: Nov  4 00:02:36 2025 GMT
            Not After : Nov  9 07:14:36 2025 GMT
        Subject: CN=AD7D69290F54FDE9BDEA2E57924D2C5BC53E9BF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7f:e6:87:94:11:75:23:3e:d2:8e:aa:e5:94:
                    c1:ca:51:e4:42:cd:6b:54:aa:31:f6:7b:b2:fa:02:
                    26:ec:e2:a8:46:10:0f:f6:26:05:52:a4:5b:fe:cd:
                    20:98:45:8f:e9:4b:25:ed:70:55:f3:72:c7:85:13:
                    a0:5b:7e:5b:87:b4:0f:7c:7a:c4:da:a2:a7:ab:28:
                    25:e2:8a:8d:30:c1:f7:13:08:68:4a:63:0c:7d:9b:
                    3d:3a:7b:07:fc:1c:75:58:0f:da:97:98:6d:dc:ef:
                    62:c7:ee:fa:99:5b:66:0b:eb:7e:f7:34:6a:36:d1:
                    08:51:06:7c:a3:a3:53:33:ec:74:9b:d1:88:01:21:
                    8e:91:d6:04:9b:76:4e:ab:b2:ef:ea:a6:ad:1a:b5:
                    7c:23:74:8b:fa:be:29:cb:3b:41:2a:87:5b:e0:de:
                    99:ef:80:22:91:70:8a:b9:e7:7a:68:e6:26:7c:ce:
                    28:8b:29:93:54:95:aa:b0:30:f8:51:89:da:5a:81:
                    9f:fe:05:44:b3:40:bf:52:8f:1b:1a:fb:e5:44:96:
                    24:80:d4:a6:b5:be:e8:72:0c:5c:fd:5c:d4:c2:6d:
                    30:1c:5e:60:cd:e5:8b:39:94:b6:4b:3c:20:53:e4:
                    7b:e2:5e:33:2d:68:6a:74:c2:07:60:f1:6b:41:8c:
                    d8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7D:69:29:0F:54:FD:E9:BD:EA:2E:57:92:4D:2C:5B:C5:3E:9B:F4
            X509v3 Authority Key Identifier:
                keyid:32:B1:BA:9D:C6:9C:59:C3:5C:63:C3:53:4A:A4:00:DD:B8:4A:32:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5655CE993EDA485C4BFC4CF110B01564FC0C1C314F36DB0C759A525B9096EECD/0/32B1BA9DC69C59C35C63C3534AA400DDB84A32EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32B1BA9DC69C59C35C63C3534AA400DDB84A32EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5655CE993EDA485C4BFC4CF110B01564FC0C1C314F36DB0C759A525B9096EECD/0/32B1BA9DC69C59C35C63C3534AA400DDB84A32EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f2:fe:dc:3e:c5:46:27:a3:37:56:a3:3d:d9:9e:de:f2:ea:
         31:e7:49:73:69:1d:81:3a:0d:ac:c7:b2:b4:0a:41:a9:aa:fd:
         71:35:46:d0:d4:0c:eb:fa:e3:0c:b0:de:c2:70:05:3a:d3:bd:
         b8:61:17:ad:64:ee:d9:2c:0f:c3:f7:ed:3c:06:fc:fe:e3:01:
         d0:1c:a6:d9:ff:88:b5:aa:30:11:78:b4:fe:4b:35:31:1f:3e:
         95:0b:08:7e:a1:89:f0:bc:30:6c:04:25:b0:8f:8d:85:21:73:
         d7:ad:95:3b:cd:f3:c4:4a:4c:37:a6:49:76:62:26:cc:30:1d:
         a6:34:f8:16:9e:bc:6e:f6:6f:da:f6:f4:1b:07:da:03:17:b0:
         b7:c0:d5:56:80:95:78:53:83:a0:70:db:e2:8f:f3:51:62:7d:
         be:c3:17:d9:6f:cf:34:9f:4d:4c:c8:c4:2c:9a:01:34:07:1b:
         8b:4c:9d:85:16:28:56:88:68:c2:73:37:75:ae:f6:29:27:de:
         3c:37:b2:ff:82:39:e1:03:84:aa:d4:4a:25:b5:03:37:ff:9b:
         d0:9f:7b:3e:fb:9d:75:56:d8:bb:94:60:33:cc:3c:53:8b:da:
         27:5c:17:83:ad:87:62:c2:91:dc:ca:8f:43:b2:af:79:91:28:
         9c:8b:1b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:07:22 2025 by rpki-client