Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.mft
File:                     3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.mft (raw, json)
Hash identifier:          AtBq9PGaAQH0hVPsLS7z5R/AcSqEiE47DYD+JFmsFCc=
Subject key identifier:   2A:FF:55:AE:93:2E:BE:FC:88:7B:77:63:E6:5D:2E:45:F6:13:C7:4E
Authority key identifier: 34:32:C5:0F:EB:B6:FB:57:D8:AC:4E:D4:C0:5D:F2:0C:89:FE:6D:70
Certificate issuer:       /CN=3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70
Certificate serial:       372A0EC3305FB2960B862525727D71C2E0488E7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.mft
Manifest number:          0128
Signing time:             Tue 04 Nov 2025 07:26:56 +0000
Manifest this update:     Tue 04 Nov 2025 07:21:56 +0000
Manifest next update:     Sun 09 Nov 2025 09:26:56 +0000
Files and hashes:         1: 3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.crl (hash: XV5MM4WR6WGSAbnLZqrsJWBBAz25Sos2+a7y/Io+0Bk=)
                          2: 323830333a356439303a3a2f33322d3536203d3e20323733303030.roa (hash: 0OoP3A238IuGlM9478CrBEi+3xgJKgMmBk2U8Rug3mA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:2a:0e:c3:30:5f:b2:96:0b:86:25:25:72:7d:71:c2:e0:48:8e:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70
        Validity
            Not Before: Nov  4 07:21:56 2025 GMT
            Not After : Nov  9 09:26:56 2025 GMT
        Subject: CN=2AFF55AE932EBEFC887B7763E65D2E45F613C74E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:82:e5:62:cd:4d:8b:4e:0f:0e:6e:c0:19:d6:
                    99:89:50:0d:28:62:cc:58:4f:a3:8c:23:31:79:83:
                    b4:78:ba:b4:85:39:9f:c4:a6:7e:a0:98:bb:de:c9:
                    84:82:8e:94:86:bf:9c:51:66:da:bc:7d:d5:8b:60:
                    d0:8a:9a:18:99:b9:0b:50:77:83:d8:01:34:81:42:
                    bc:ef:fe:ff:98:99:57:8f:67:78:7f:69:69:9e:a3:
                    bd:89:93:2b:13:2e:81:db:6a:15:50:d4:38:16:a2:
                    ee:fa:7d:70:8a:aa:ad:6b:c8:d9:e7:aa:30:c3:ea:
                    33:ff:58:8b:43:a6:a9:08:dd:55:f4:e0:1a:fa:36:
                    52:b2:bb:45:14:3e:d0:47:0c:8e:39:64:fe:13:c2:
                    c3:59:03:54:d3:c2:88:bb:dd:33:84:bd:5d:5a:08:
                    69:b0:f3:24:fa:ff:86:88:68:a2:5c:59:68:69:c8:
                    e7:94:ac:63:3b:7b:b7:0b:fa:da:8d:68:66:3e:d0:
                    d1:fd:d2:7d:70:8a:ca:f2:e7:7e:ea:ce:f5:bb:65:
                    a4:1c:79:f8:5d:d2:18:00:3d:b8:f0:d5:9c:25:bb:
                    73:1a:18:0c:2d:b3:f3:56:69:cc:f3:e8:e3:f5:80:
                    48:63:68:61:76:ea:36:ff:04:ba:0d:6a:83:62:16:
                    22:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:FF:55:AE:93:2E:BE:FC:88:7B:77:63:E6:5D:2E:45:F6:13:C7:4E
            X509v3 Authority Key Identifier:
                keyid:34:32:C5:0F:EB:B6:FB:57:D8:AC:4E:D4:C0:5D:F2:0C:89:FE:6D:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:83:04:e6:fb:96:f6:b8:48:7d:72:ac:d2:a3:b5:74:de:7e:
         23:da:e3:85:59:d5:a3:66:ee:50:bd:86:a1:f6:f8:35:47:3d:
         35:a8:c6:d0:ab:18:1e:86:f4:c8:6b:09:8c:d5:2e:d3:cb:51:
         07:04:82:39:6f:1b:c9:ca:1f:77:2b:23:c6:66:f5:d3:b0:a2:
         60:8a:03:5a:32:01:cc:eb:e3:76:58:ea:02:f8:c3:81:31:e4:
         80:3e:16:a2:34:74:c9:b8:22:5b:46:b1:32:50:5a:8d:f5:2d:
         e4:f5:eb:7f:f4:a6:71:83:5f:52:67:69:42:92:3d:ef:c0:9a:
         30:06:af:d7:5e:c8:5e:25:1d:2b:9a:af:df:73:b9:bc:ca:8c:
         99:14:92:9e:a4:98:85:cd:1f:0c:03:5c:9d:bd:6f:a5:a8:93:
         20:eb:9b:95:dd:00:5b:6a:68:8c:b3:73:8c:e0:49:57:00:1a:
         4c:87:f1:f7:25:ed:46:63:78:5a:05:24:5a:fe:a1:93:7e:0a:
         6d:a2:d8:5f:48:80:88:84:00:e4:a6:73:ce:3d:98:fd:a5:5c:
         5a:7c:12:d9:3a:36:ec:24:6e:1a:83:ee:fa:59:42:2e:3c:ec:
         92:aa:96:5d:96:4c:c6:6f:0d:49:f3:c5:20:44:1e:5d:2d:40:
         9a:df:5f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:21:27 2025 by rpki-client