Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
File:                     AA2338B66632D823F77072125112B5BF1F721769.mft (raw, json)
Hash identifier:          gv3VTH1LZeCuF6EtBeVDSi8tQg2AAYXrlSNqp6hJDOQ=
Subject key identifier:   2E:C2:EB:8A:1A:58:80:A3:14:87:78:F0:0C:62:1F:EE:4B:EC:41:CF
Authority key identifier: AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
Certificate issuer:       /CN=AA2338B66632D823F77072125112B5BF1F721769
Certificate serial:       5A02BA04943FFBAFD2AE2CD5B76A2D3154148447
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
Manifest number:          0130
Signing time:             Tue 04 Nov 2025 16:36:53 +0000
Manifest this update:     Tue 04 Nov 2025 16:31:53 +0000
Manifest next update:     Sun 09 Nov 2025 09:51:53 +0000
Files and hashes:         1: AA2338B66632D823F77072125112B5BF1F721769.crl (hash: N6f9pswsWEuxZLq0MPGscXGBy5qieP9Nv/UXm7jkVHo=)
                          2: 34352e3233372e3232322e302f32332d3233203d3e20323636383139.roa (hash: PMUAqmCu4jLgGE4W1UfcbQhDKwanax0we0RQX2/iKas=)
                          3: 34352e3233372e3232322e302f32342d3234203d3e20323636383139.roa (hash: eoL7Y795RnrMWZUw7U8PkLtY0w5+OUPQ52ffjZRRUqE=)
                          4: 34352e3233372e3232302e302f32342d3234203d3e20323636383139.roa (hash: S7FRt48mlJQdhRUBKeeOjWo5otOru6pXI07NZVe+lsM=)
                          5: 34352e3233372e3232312e302f32342d3234203d3e20323636383139.roa (hash: /elfOjbQfF2fPsMe6mNPua2FvaMW9MN/Vs+BX6OZ9K4=)
                          6: 34352e3233372e3232302e302f32322d3232203d3e20323636383139.roa (hash: 5GwF/yG9sdY75vW2Fj///TOVFJ4fRdCrLcvD0MbMXqY=)
                          7: 34352e3233372e3232302e302f32332d3233203d3e20323636383139.roa (hash: nOCJFysz8C8bWJVMRkvOCViuUCqzB1SjNWhFC7y70bc=)
                          8: 34352e3233372e3232332e302f32342d3234203d3e20323636383139.roa (hash: H8ah+1UhN/eq5WKFT0vmFxrRSA6J3Cu5+ERJLv9mNDM=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl
                          rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:02:ba:04:94:3f:fb:af:d2:ae:2c:d5:b7:6a:2d:31:54:14:84:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA2338B66632D823F77072125112B5BF1F721769
        Validity
            Not Before: Nov  4 16:31:53 2025 GMT
            Not After : Nov  9 09:51:53 2025 GMT
        Subject: CN=2EC2EB8A1A5880A3148778F00C621FEE4BEC41CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c8:11:4c:e3:b6:74:a2:b5:fd:69:4c:4e:cf:
                    11:f6:f7:6f:73:65:8c:76:52:72:59:5d:1c:c8:32:
                    58:18:a2:99:29:ee:7c:ef:40:6b:f8:c6:fe:69:8d:
                    f4:d3:0d:6b:f2:21:36:5f:6f:cb:4a:3f:32:bc:1f:
                    c5:e7:de:06:24:f8:06:9c:06:c0:cf:bd:56:fd:ca:
                    69:9b:88:c4:c8:82:3e:4a:78:2c:ca:f0:08:15:b1:
                    1a:48:a2:c3:c9:4d:2a:81:56:59:2d:f0:a6:91:c0:
                    82:0b:12:24:82:80:f0:a8:e2:9d:ab:38:45:df:9d:
                    ab:ad:d8:34:50:aa:32:81:14:c7:08:8a:c1:82:d8:
                    ca:04:ed:c0:9e:1a:0a:73:34:79:96:f6:e8:cb:c3:
                    74:d9:53:df:42:85:2c:07:7b:39:29:f1:15:69:42:
                    2c:82:bc:49:35:4d:40:1b:29:50:b6:03:07:4c:50:
                    41:8e:bf:83:52:f1:0f:d5:61:32:e5:02:e0:ba:a4:
                    d6:2a:bc:63:03:cb:16:ef:26:18:41:cb:9e:72:9e:
                    01:22:f3:b1:18:c3:e0:3b:ec:f1:d2:b6:54:ec:ba:
                    4c:59:f4:61:6c:06:32:d9:84:39:8e:99:ee:f0:6b:
                    ec:35:03:19:96:f8:5e:c1:bc:b4:ba:4e:a1:c8:7a:
                    ee:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C2:EB:8A:1A:58:80:A3:14:87:78:F0:0C:62:1F:EE:4B:EC:41:CF
            X509v3 Authority Key Identifier:
                keyid:AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:10:c7:a4:0c:0f:ef:b3:cf:ed:ce:83:a6:51:d7:d2:eb:0f:
         99:2d:21:65:6c:4d:36:41:3e:b9:69:62:97:19:d0:be:3a:49:
         d0:ef:15:54:5e:d0:99:2d:04:11:2f:c4:3e:ea:2c:05:13:61:
         28:7d:41:38:ac:59:4c:15:e9:bd:36:47:54:f1:6e:72:55:0d:
         31:15:05:53:6f:cd:02:51:4f:dc:a6:05:b5:a2:42:42:f2:4d:
         e8:c7:05:97:3d:b1:63:75:93:74:bb:e3:98:05:52:4f:59:09:
         d6:08:f6:82:34:04:9e:06:8c:c9:0f:de:04:4b:ee:81:45:92:
         9a:d9:84:7f:e6:d7:17:9e:f5:bb:d4:ad:0c:2b:cb:06:6c:31:
         b5:52:c8:ed:4c:1f:f5:12:7c:89:bd:88:c0:1a:04:ab:14:82:
         eb:0a:39:4a:24:53:5c:66:7e:72:9a:62:88:4d:73:25:f8:06:
         62:e8:ba:d7:c1:5d:fd:12:8b:cf:9b:e7:ce:e7:52:91:98:0d:
         b3:f2:4a:13:8c:7b:1c:a5:f2:e0:f3:ad:42:69:6b:2d:35:c8:
         00:c2:86:4a:79:f5:79:7c:17:a5:19:b7:a5:58:90:7c:b4:e0:
         5b:32:3a:ce:70:22:ab:f5:b9:48:48:b1:07:93:db:94:e1:e7:
         f5:cd:28:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:19:27 2025 by rpki-client