Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64B0A40F11547A1880CB4465F57270B879E0ACAB83F42F6C2674A4166EF87ACC/0/DF7BA6674A1C6C4D2CC18E914BC6A3AD8A01755B.mft
File:                     DF7BA6674A1C6C4D2CC18E914BC6A3AD8A01755B.mft (raw, json)
Hash identifier:          G+QkZX1sGWh2TLKXbkoics+w4kyk0aAD1bhov9fX4U4=
Subject key identifier:   89:34:6C:91:F2:19:72:C7:57:13:9A:AD:2D:8D:E1:FB:AD:A8:68:19
Authority key identifier: DF:7B:A6:67:4A:1C:6C:4D:2C:C1:8E:91:4B:C6:A3:AD:8A:01:75:5B
Certificate issuer:       /CN=DF7BA6674A1C6C4D2CC18E914BC6A3AD8A01755B
Certificate serial:       230F0DB14D6391742679AE5161EF9A4FBFF955B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7BA6674A1C6C4D2CC18E914BC6A3AD8A01755B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64B0A40F11547A1880CB4465F57270B879E0ACAB83F42F6C2674A4166EF87ACC/0/DF7BA6674A1C6C4D2CC18E914BC6A3AD8A01755B.mft
Manifest number:          BB
Signing time:             Thu 08 May 2025 13:48:10 +0000
Manifest this update:     Thu 08 May 2025 13:43:10 +0000
Manifest next update:     Wed 14 May 2025 10:37:10 +0000
Files and hashes:         1: DF7BA6674A1C6C4D2CC18E914BC6A3AD8A01755B.crl (hash: 0edK0XH/JflORNV+ToPkC97Xy5oShwscW4xgA6zaHN8=)
                          2: 323830333a666535303a3a2f33322d3438203d3e20323733323335.roa (hash: o5bmLGfwATGQe5Qs3QJwE8ySNbxP5YiSruceSJmjC6s=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64B0A40F11547A1880CB4465F57270B879E0ACAB83F42F6C2674A4166EF87ACC/0/DF7BA6674A1C6C4D2CC18E914BC6A3AD8A01755B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64B0A40F11547A1880CB4465F57270B879E0ACAB83F42F6C2674A4166EF87ACC/0/DF7BA6674A1C6C4D2CC18E914BC6A3AD8A01755B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7BA6674A1C6C4D2CC18E914BC6A3AD8A01755B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 00:40:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:0f:0d:b1:4d:63:91:74:26:79:ae:51:61:ef:9a:4f:bf:f9:55:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF7BA6674A1C6C4D2CC18E914BC6A3AD8A01755B
        Validity
            Not Before: May  8 13:43:10 2025 GMT
            Not After : May 14 10:37:10 2025 GMT
        Subject: CN=89346C91F21972C757139AAD2D8DE1FBADA86819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:01:9b:b3:2c:8e:d7:16:50:c6:98:cf:f2:ec:
                    89:df:6c:2c:65:02:a4:b4:19:43:42:00:33:d6:04:
                    b6:4e:83:be:c6:3c:38:7c:35:d4:c7:a1:99:56:98:
                    72:20:97:da:e3:a4:f8:93:32:28:cd:de:ed:0c:0b:
                    30:77:ea:35:cc:1c:7c:e3:d9:be:74:6e:f9:d9:52:
                    2b:71:77:45:2e:aa:e4:50:3f:b5:79:1c:8b:51:fc:
                    26:d7:4c:e3:b3:06:6f:fc:78:31:cd:ad:9b:65:cd:
                    28:64:c6:84:b4:c6:d6:27:0f:ca:b8:19:e9:cc:21:
                    84:61:c4:31:c5:55:cd:de:31:d8:27:74:c5:38:b8:
                    fc:b1:8c:cc:f7:16:2c:6e:8a:3b:06:dd:e8:a4:ab:
                    62:2a:d7:dd:ae:76:83:48:65:b6:e8:43:68:2a:a8:
                    8e:68:03:33:bd:0f:2b:1d:91:b5:ae:d7:bb:33:ed:
                    ed:f1:c7:2f:80:4a:a8:4f:22:73:58:cc:8a:5a:42:
                    c0:01:b7:b4:8c:58:8c:d9:65:d9:a1:e4:e5:c0:df:
                    8d:0d:03:b3:88:dd:b2:0a:03:b0:06:f7:ba:e2:5b:
                    cf:6f:8a:8f:7f:0e:61:5a:63:b3:b7:7a:4c:58:cb:
                    71:7c:0c:a5:1f:9f:7a:2e:4a:0f:a3:e9:84:e2:e9:
                    b7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:34:6C:91:F2:19:72:C7:57:13:9A:AD:2D:8D:E1:FB:AD:A8:68:19
            X509v3 Authority Key Identifier:
                keyid:DF:7B:A6:67:4A:1C:6C:4D:2C:C1:8E:91:4B:C6:A3:AD:8A:01:75:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64B0A40F11547A1880CB4465F57270B879E0ACAB83F42F6C2674A4166EF87ACC/0/DF7BA6674A1C6C4D2CC18E914BC6A3AD8A01755B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7BA6674A1C6C4D2CC18E914BC6A3AD8A01755B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64B0A40F11547A1880CB4465F57270B879E0ACAB83F42F6C2674A4166EF87ACC/0/DF7BA6674A1C6C4D2CC18E914BC6A3AD8A01755B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:4b:e9:70:92:3a:ec:ae:e2:0d:c3:9e:26:7d:9c:2c:86:ab:
         ca:2a:88:5c:5b:b0:91:b5:6c:4f:bd:69:b3:12:fb:fe:7d:f9:
         4b:d7:c6:67:52:56:d7:f5:80:03:8a:79:ed:b9:ea:16:91:ea:
         e4:47:f9:2b:b8:95:b0:5e:4b:f3:58:c3:24:cb:a4:b1:28:a5:
         0e:79:25:76:f6:85:eb:86:3f:cb:7c:36:d7:4d:67:d6:f3:6e:
         df:84:a4:cf:46:db:28:18:35:92:31:be:97:0b:80:b6:9c:47:
         e7:2b:2c:48:dd:15:15:b7:92:14:d6:5e:e2:fa:29:a4:55:97:
         da:db:3f:69:03:5f:32:2b:a5:10:7d:ea:f9:db:ef:d8:da:ea:
         1b:6e:95:ea:db:a4:9c:5d:a5:51:fc:ab:ef:1c:86:77:43:00:
         50:6f:f8:48:62:8f:0a:81:49:8c:2f:26:47:b5:09:66:d4:f8:
         4a:08:6e:b4:9d:44:1c:17:1b:63:92:51:82:f7:db:f9:4f:e7:
         d3:77:cc:be:0b:05:c8:5e:b6:03:47:bf:c6:70:5f:d8:44:e0:
         70:a7:14:27:cb:f5:b3:d4:18:21:7f:bd:66:48:39:50:e0:05:
         22:1c:44:6a:f0:53:88:00:f1:16:9a:4a:6b:02:d3:e4:e6:1c:
         cb:8d:1e:ce
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUIw8NsU1jkXQmea5RYe+aT7/5VbEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY3QkE2Njc0QTFDNkM0RDJDQzE4RTkxNEJDNkEzQUQ4
QTAxNzU1QjAeFw0yNTA1MDgxMzQzMTBaFw0yNTA1MTQxMDM3MTBaMDMxMTAvBgNV
BAMTKDg5MzQ2QzkxRjIxOTcyQzc1NzEzOUFBRDJEOERFMUZCQURBODY4MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRAZuzLI7XFlDGmM/y7InfbCxl
AqS0GUNCADPWBLZOg77GPDh8NdTHoZlWmHIgl9rjpPiTMijN3u0MCzB36jXMHHzj
2b50bvnZUitxd0UuquRQP7V5HItR/CbXTOOzBm/8eDHNrZtlzShkxoS0xtYnD8q4
GenMIYRhxDHFVc3eMdgndMU4uPyxjMz3FixuijsG3eikq2Iq192udoNIZbboQ2gq
qI5oAzO9DysdkbWu17sz7e3xxy+ASqhPInNYzIpaQsABt7SMWIzZZdmh5OXA340N
A7OI3bIKA7AG97riW89vio9/DmFaY7O3ekxYy3F8DKUfn3ouSg+j6YTi6bfNAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUiTRskfIZcsdXE5qtLY3h+62oaBkwHwYDVR0j
BBgwFoAU33umZ0ocbE0swY6RS8ajrYoBdVswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEIwQTQwRjExNTQ3QTE4ODBDQjQ0NjVGNTcyNzBCODc5
RTBBQ0FCODNGNDJGNkMyNjc0QTQxNjZFRjg3QUNDLzAvREY3QkE2Njc0QTFDNkM0
RDJDQzE4RTkxNEJDNkEzQUQ4QTAxNzU1Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERjdCQTY2NzRBMUM2QzREMkND
MThFOTE0QkM2QTNBRDhBMDE3NTVCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRCMEE0MEYxMTU0N0ExODgwQ0I0NDY1RjU3MjcwQjg3OUUwQUNBQjgz
RjQyRjZDMjY3NEE0MTY2RUY4N0FDQy8wL0RGN0JBNjY3NEExQzZDNEQyQ0MxOEU5
MTRCQzZBM0FEOEEwMTc1NUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAfS+lwkjrsruINw54mfZwshqvK
KohcW7CRtWxPvWmzEvv+fflL18ZnUlbX9YADinntueoWkerkR/kruJWwXkvzWMMk
y6SxKKUOeSV29oXrhj/LfDbXTWfW827fhKTPRtsoGDWSMb6XC4C2nEfnKyxI3RUV
t5IU1l7i+imkVZfa2z9pA18yK6UQfer52+/Y2uobbpXq26ScXaVR/KvvHIZ3QwBQ
b/hIYo8KgUmMLyZHtQlm1PhKCG60nUQcFxtjklGC99v5T+fTd8y+CwXIXrYDR7/G
cF/YROBwpxQny/Wz1Bghf71mSDlQ4AUiHERq8FOIAPEWmkprAtPk5hzLjR7O
-----END CERTIFICATE-----
Generated at Sat May 10 18:37:53 2025 by rpki-client