Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.mft
File:                     35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.mft (raw, json)
Hash identifier:          AEH8dR1WctAqSuoqCeySfwgi00loW639MB2HyV5gXk0=
Subject key identifier:   DD:22:C5:C7:3C:BB:84:08:DF:EC:4F:41:12:B8:67:85:18:2E:FB:33
Authority key identifier: 35:E5:BB:60:F4:5D:A7:A5:EB:83:98:E1:19:BF:3E:9C:2E:A5:94:B2
Certificate issuer:       /CN=35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2
Certificate serial:       05B47EA9B170CA544244E1DC00027A4FB2CCF54E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.mft
Manifest number:          0170
Signing time:             Sun 01 Mar 2026 19:21:33 +0000
Manifest this update:     Sun 01 Mar 2026 19:16:33 +0000
Manifest next update:     Fri 06 Mar 2026 12:39:33 +0000
Files and hashes:         1: 3230302e31322e3139322e302f32342d3234203d3e203532323933.roa (hash: VOwfRTx8AbmRJ6q7IAO+ZBHe6bq2jnFxRJymsUhD8Dg=)
                          2: 35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.crl (hash: rJnzHNB6GkAUqyoiYDSVK+Al5u4c/5lcQwsk7PGHVZw=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 12:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b4:7e:a9:b1:70:ca:54:42:44:e1:dc:00:02:7a:4f:b2:cc:f5:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2
        Validity
            Not Before: Mar  1 19:16:33 2026 GMT
            Not After : Mar  6 12:39:33 2026 GMT
        Subject: CN=DD22C5C73CBB8408DFEC4F4112B86785182EFB33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6c:8b:01:3f:4e:40:db:48:f9:04:6b:e5:5b:
                    5f:4b:b2:7e:6f:19:3e:eb:79:64:05:99:7f:d2:2f:
                    30:65:97:2c:cd:b3:77:c0:10:1d:55:28:cd:9f:20:
                    e0:db:0a:79:23:f6:ee:1d:ca:9f:ad:fa:5c:92:14:
                    97:7f:55:27:46:11:ea:bf:fb:6e:12:fb:de:64:b9:
                    80:eb:b7:06:0d:af:0e:cc:40:30:ca:66:ae:aa:64:
                    d4:26:1f:c4:82:e8:3f:3e:6c:08:c5:28:24:5b:67:
                    88:f0:63:40:82:2d:e3:0c:92:4a:62:10:49:99:79:
                    ef:37:99:cf:14:9a:43:ed:ae:53:80:d8:b0:71:ce:
                    30:cc:e4:a0:c6:d2:99:12:dd:9f:b4:f4:98:81:29:
                    92:a8:a4:04:4e:3d:3a:dc:3d:38:5a:02:d9:e4:b2:
                    35:a1:2f:ef:a3:bb:c6:15:3d:6e:e5:ed:b4:68:25:
                    d6:a3:7d:af:aa:bb:f6:ff:c2:83:f2:89:02:e0:bc:
                    2e:71:bb:55:e2:29:14:56:88:53:ef:5a:52:93:98:
                    5d:15:ac:01:70:f2:82:fa:7d:83:ba:71:f6:26:73:
                    8c:e0:9e:aa:fa:a6:a3:3f:f5:32:d0:ac:24:cd:ca:
                    db:db:15:b1:48:da:3c:c2:10:d9:35:8e:87:48:17:
                    42:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:22:C5:C7:3C:BB:84:08:DF:EC:4F:41:12:B8:67:85:18:2E:FB:33
            X509v3 Authority Key Identifier:
                keyid:35:E5:BB:60:F4:5D:A7:A5:EB:83:98:E1:19:BF:3E:9C:2E:A5:94:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:c0:5d:f2:a8:58:77:fa:ba:9f:65:ee:4d:6b:11:3f:c1:85:
         13:b8:c9:d0:e6:94:e5:eb:18:3a:87:99:a6:db:ca:06:0a:9b:
         b3:b2:c8:d1:51:20:2a:0d:7b:7d:b2:3e:31:e1:9d:a7:f3:42:
         9e:49:7b:57:64:54:42:8f:51:01:12:f9:0c:71:7d:9b:9d:43:
         ac:d8:ca:b4:bd:85:e5:5e:54:73:66:53:31:2e:0f:2a:39:2b:
         bc:f3:e3:f8:91:19:f0:b7:77:ac:cf:94:9e:ce:66:e6:d1:d4:
         fe:2e:1a:5a:db:17:f2:99:86:bc:21:91:f8:29:64:f7:93:01:
         70:7f:74:63:24:0a:c5:a4:e2:25:00:ca:a6:92:7a:41:7c:ff:
         4e:a1:07:05:27:c6:c5:18:fa:44:45:14:6d:2f:11:0a:47:e6:
         5b:b9:55:55:37:5c:69:39:d5:b0:49:eb:e0:23:bb:ad:77:db:
         0c:b5:d6:1d:05:18:65:60:6a:2c:fa:d8:d9:b3:a0:73:97:e2:
         31:d5:25:81:7c:d9:e6:75:a1:e7:cd:e0:9c:33:10:3a:d9:25:
         d7:bc:39:c0:50:66:8e:74:02:ba:e6:e9:e2:e1:03:af:4b:96:
         fa:d5:39:16:52:b3:74:93:2c:c2:f8:14:1b:fa:6c:af:31:2c:
         5e:5f:98:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:34:36 2026 by rpki-client