Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.mft
File:                     BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.mft (raw, json)
Hash identifier:          KQHV226YoGsuZUUguKwb0P8GdfkqSTlLpsnzaQ5ViNQ=
Subject key identifier:   3B:00:A1:7A:29:9E:28:16:B4:89:25:38:19:84:7F:B2:4C:1F:76:10
Authority key identifier: BD:95:55:72:60:FD:7A:36:E6:33:8B:A6:1E:D0:BA:A8:DB:41:83:F8
Certificate issuer:       /CN=BD95557260FD7A36E6338BA61ED0BAA8DB4183F8
Certificate serial:       0F747E4F1F70F78028B0DF5DC6DDA8CC679FEC8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.mft
Manifest number:          D4
Signing time:             Mon 05 May 2025 07:36:29 +0000
Manifest this update:     Mon 05 May 2025 07:31:29 +0000
Manifest next update:     Sat 10 May 2025 23:42:29 +0000
Files and hashes:         1: 3137302e3233382e3137312e302f32342d3234203d3e20323634383031.roa (hash: 9sySjNrBKSGi6GsXpJsYvLiLiVgDbZ8IrWiQSSsLLIc=)
                          2: 3137302e3233382e3137302e302f32342d3234203d3e20313938393439.roa (hash: kZd2xrZpKPTrtCIPNFJRufxyTa/fRyXEmnoBXyrQuSI=)
                          3: BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.crl (hash: wACxaPdbdcdYoxKD468/5+ImauYcLwlovjQgX26Hgww=)
                          4: 3137302e3233382e3137302e302f32332d3233203d3e20323634383031.roa (hash: th2+jGFfb5c+WdONrNR7i10c0SduHcg545KxljUMaHM=)
                          5: 3137302e3233382e3137302e302f32332d3233203d3e20313938393439.roa (hash: Q1I4oBkLOZLfxg/aVf3PuOxbnIlcLkj9Rtkx64x05us=)
                          6: 3137302e3233382e3137312e302f32342d3234203d3e20313938393439.roa (hash: h4Yel2QpdUHgsFOhbsqbT9hYJISybFNlp9cgJZpJLR8=)
                          7: 3137302e3233382e3137302e302f32342d3234203d3e20323634383031.roa (hash: XbH9gPbvtALIv3Cq7xYm9uPplUny1PwBgRmOfT1SpmU=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 23:42:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:74:7e:4f:1f:70:f7:80:28:b0:df:5d:c6:dd:a8:cc:67:9f:ec:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD95557260FD7A36E6338BA61ED0BAA8DB4183F8
        Validity
            Not Before: May  5 07:31:29 2025 GMT
            Not After : May 10 23:42:29 2025 GMT
        Subject: CN=3B00A17A299E2816B489253819847FB24C1F7610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9a:c3:4e:ca:64:ad:91:ef:38:de:b8:a7:70:
                    39:d3:bf:0c:30:96:e4:98:f4:8f:07:ee:97:ec:1c:
                    fa:72:39:18:5f:79:c6:44:ba:7d:45:4a:cc:0c:30:
                    62:4b:fa:e9:ec:ed:26:62:a0:69:69:e4:7b:43:c8:
                    79:fe:d6:60:4f:d2:4f:3c:7c:a5:1f:ed:d6:8f:da:
                    16:5c:74:07:40:45:f3:7d:47:de:f3:6a:8f:61:40:
                    8f:2a:74:36:bd:27:14:31:78:27:83:e2:c5:8b:7d:
                    e2:e9:eb:d9:3b:9e:eb:f5:5a:32:55:b0:52:93:0b:
                    15:23:c9:2c:b1:f3:06:44:9e:6b:18:e8:ee:c2:9e:
                    a6:15:27:6b:b6:a6:a5:c0:53:ce:5d:7b:72:4d:dd:
                    3a:5f:85:38:ca:cd:1e:24:6e:21:df:bc:35:1b:be:
                    a3:8b:f2:98:a7:ce:b4:79:3a:3c:d1:c6:99:b0:38:
                    e5:21:e5:bd:14:4b:6c:20:3f:87:24:e0:fd:33:2a:
                    ee:2e:49:57:17:20:6f:81:f9:20:1b:6e:e0:e6:4b:
                    4f:54:30:7b:6a:35:15:f6:b8:7a:97:cf:cf:e9:61:
                    09:57:92:81:a0:fc:87:d7:92:1f:4a:5c:fd:a8:eb:
                    b8:cd:92:58:74:08:d4:a9:5b:8a:68:97:14:50:97:
                    4c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:00:A1:7A:29:9E:28:16:B4:89:25:38:19:84:7F:B2:4C:1F:76:10
            X509v3 Authority Key Identifier:
                keyid:BD:95:55:72:60:FD:7A:36:E6:33:8B:A6:1E:D0:BA:A8:DB:41:83:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:96:74:58:02:db:87:94:62:21:c9:0d:0c:8d:9d:c1:13:63:
         7f:c7:63:22:ce:28:a9:30:27:3b:73:1d:66:cf:6e:60:01:b0:
         56:d7:9d:d9:6b:23:43:21:92:d3:5d:78:67:b7:c1:50:7e:6b:
         35:6c:15:73:04:f1:1a:0c:ae:ab:77:ed:eb:68:7e:36:f2:12:
         31:47:36:c9:c9:e3:01:5e:e8:dd:de:c7:2d:c8:46:5b:e4:94:
         dd:3d:9a:5c:8f:4a:68:a4:cf:1a:55:17:e9:29:34:32:6b:9f:
         c1:d3:6e:6f:ea:25:6c:96:42:bc:10:5d:2a:4b:9b:39:ca:09:
         8a:aa:76:b8:d5:1e:db:c5:99:d8:bf:d3:df:b6:6e:7f:8a:07:
         36:74:fb:06:a4:b0:37:01:e8:56:ed:bb:bc:68:01:f2:1b:30:
         eb:f8:93:4f:9d:98:5a:24:3c:1e:96:de:7d:5c:f6:56:96:c2:
         fa:29:ae:f9:3d:d8:6e:c5:19:1b:5d:39:7a:c8:9c:db:9b:47:
         23:37:7f:91:b8:bb:e8:ed:39:73:ae:c3:7a:9d:1f:3e:6a:f6:
         f8:70:47:68:ec:c9:5a:10:fb:98:bc:cd:ea:39:0b:90:27:e8:
         21:71:62:21:d3:e7:01:99:8b:d8:7e:11:f3:04:bb:ca:f0:86:
         11:25:74:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 00:02:25 2025 by rpki-client