Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.mft
File:                     84FDCF40130E9D686F7A3657DA80EA0B09868A48.mft (raw, json)
Hash identifier:          bLf2avzoNefwlmJKVy5holC39gn6xZJSJAQVnjCOr+4=
Subject key identifier:   3A:87:C6:43:D1:67:FF:9E:05:FF:6D:65:7A:5A:E9:58:31:DC:A2:C7
Authority key identifier: 84:FD:CF:40:13:0E:9D:68:6F:7A:36:57:DA:80:EA:0B:09:86:8A:48
Certificate issuer:       /CN=84FDCF40130E9D686F7A3657DA80EA0B09868A48
Certificate serial:       1796DB4E51C8FC34E777A48DF97712AF11FF38B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.mft
Manifest number:          D7
Signing time:             Fri 09 May 2025 09:40:07 +0000
Manifest this update:     Fri 09 May 2025 09:35:07 +0000
Manifest next update:     Thu 15 May 2025 04:22:07 +0000
Files and hashes:         1: 323830333a343639303a3a2f33322d3438203d3e20323732383930.roa (hash: 3VLpL0Yy4sPmw2IQ3BPtSJN08kD17G4hoXyMXMj0l0w=)
                          2: 84FDCF40130E9D686F7A3657DA80EA0B09868A48.crl (hash: 9NpVIXvB2323lT+E6AkhBQvDOX3L4v/9Ml6d5Q9uYws=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 00:40:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:96:db:4e:51:c8:fc:34:e7:77:a4:8d:f9:77:12:af:11:ff:38:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84FDCF40130E9D686F7A3657DA80EA0B09868A48
        Validity
            Not Before: May  9 09:35:07 2025 GMT
            Not After : May 15 04:22:07 2025 GMT
        Subject: CN=3A87C643D167FF9E05FF6D657A5AE95831DCA2C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:24:b5:76:53:19:6e:b7:7d:74:2d:9b:eb:90:
                    91:a1:17:49:5d:44:b4:48:1c:69:c9:c5:36:12:29:
                    d9:12:b3:f5:02:2e:0f:c8:e3:fa:a5:46:6f:b3:a9:
                    ef:e5:97:29:77:d7:61:49:f9:6c:b3:c5:20:df:a9:
                    09:06:98:36:ec:24:96:d4:94:eb:73:47:fe:86:47:
                    a5:0f:f5:d7:2e:f5:ce:a5:0d:f5:26:07:db:a7:61:
                    ee:13:32:4c:99:0a:89:cc:e9:d5:c8:74:94:92:91:
                    e4:59:a7:58:23:c6:66:18:49:cd:2a:9a:20:86:ab:
                    de:1b:58:0a:d4:80:1e:cd:cf:ce:e9:4b:bc:79:a5:
                    5f:5b:52:46:cc:bf:b8:d2:7f:3b:d3:c7:8d:d0:c9:
                    f0:29:f2:78:22:69:2a:dd:c6:01:23:1b:17:95:41:
                    a8:5d:f0:ef:c4:fe:0a:23:09:37:35:4e:a9:7f:18:
                    c4:72:0d:1b:3f:30:ba:d0:15:0d:94:4f:09:72:9d:
                    c0:e0:a3:32:ef:86:41:5c:0c:60:2f:9c:02:f5:75:
                    c3:e7:10:8c:cb:1a:70:0c:b3:3d:9e:2e:38:d6:14:
                    32:6f:67:db:f3:37:ff:36:0a:a0:0a:76:2f:da:c5:
                    a7:1d:3f:1a:39:87:d9:d0:a0:e9:be:31:80:c2:11:
                    c7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:87:C6:43:D1:67:FF:9E:05:FF:6D:65:7A:5A:E9:58:31:DC:A2:C7
            X509v3 Authority Key Identifier:
                keyid:84:FD:CF:40:13:0E:9D:68:6F:7A:36:57:DA:80:EA:0B:09:86:8A:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87AA68C33550678A823BCF7932FF399C4C42BAF033431B99C44EE6F24E2A67E6/0/84FDCF40130E9D686F7A3657DA80EA0B09868A48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:cf:6d:26:4c:f7:e8:cd:41:02:28:ea:7f:03:a2:6f:f4:67:
         fc:6c:63:01:70:fa:d2:cf:01:cb:0d:11:73:d8:31:c3:e5:05:
         67:2a:71:3c:e5:a2:e0:86:cb:ef:aa:ba:1a:ae:02:2d:0a:a1:
         b8:72:51:25:83:e9:f4:23:a6:ba:20:9c:5c:b0:1c:de:a6:00:
         14:c5:3a:fb:b6:ce:7f:9f:8e:b6:2d:db:61:4d:24:3e:10:10:
         76:51:95:54:81:c1:05:d8:57:a9:05:2b:63:c4:ad:a1:e0:0c:
         b7:2b:0c:ed:bb:e7:cf:6f:48:fd:4b:1e:3c:d3:2c:13:4b:fb:
         c8:17:27:fa:82:92:b5:53:03:67:d2:04:d7:a3:8e:83:44:97:
         62:9f:01:31:ee:c8:0b:15:1a:5d:b9:82:7f:20:ea:bb:d2:5e:
         32:c7:ec:d4:9d:a5:64:fd:71:77:c1:c7:f5:e4:e5:4a:6a:3a:
         d2:78:02:89:d7:92:06:25:4e:a2:fc:90:b6:0d:59:80:1f:23:
         f6:29:6b:71:cc:73:98:80:c6:fd:5d:82:4b:63:94:83:5a:30:
         02:b7:6e:d4:3c:99:61:b4:b0:7c:a0:f8:a7:32:80:a3:86:51:
         4c:ab:c0:c2:3f:1e:06:c3:a4:4b:86:c2:e8:bc:7d:34:e5:aa:
         e8:d9:47:73
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUF5bbTlHI/DTnd6SN+XcSrxH/OLIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODRGRENGNDAxMzBFOUQ2ODZGN0EzNjU3REE4MEVBMEIw
OTg2OEE0ODAeFw0yNTA1MDkwOTM1MDdaFw0yNTA1MTUwNDIyMDdaMDMxMTAvBgNV
BAMTKDNBODdDNjQzRDE2N0ZGOUUwNUZGNkQ2NTdBNUFFOTU4MzFEQ0EyQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfJLV2Uxlut310LZvrkJGhF0ld
RLRIHGnJxTYSKdkSs/UCLg/I4/qlRm+zqe/llyl312FJ+WyzxSDfqQkGmDbsJJbU
lOtzR/6GR6UP9dcu9c6lDfUmB9unYe4TMkyZConM6dXIdJSSkeRZp1gjxmYYSc0q
miCGq94bWArUgB7Nz87pS7x5pV9bUkbMv7jSfzvTx43QyfAp8ngiaSrdxgEjGxeV
Qahd8O/E/gojCTc1Tql/GMRyDRs/MLrQFQ2UTwlyncDgozLvhkFcDGAvnAL1dcPn
EIzLGnAMsz2eLjjWFDJvZ9vzN/82CqAKdi/axacdPxo5h9nQoOm+MYDCEcdTAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUOofGQ9Fn/54F/21lelrpWDHcoscwHwYDVR0j
BBgwFoAUhP3PQBMOnWhvejZX2oDqCwmGikgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84N0FBNjhDMzM1NTA2NzhBODIzQkNGNzkzMkZGMzk5QzRD
NDJCQUYwMzM0MzFCOTlDNDRFRTZGMjRFMkE2N0U2LzAvODRGRENGNDAxMzBFOUQ2
ODZGN0EzNjU3REE4MEVBMEIwOTg2OEE0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NEZEQ0Y0MDEzMEU5RDY4NkY3
QTM2NTdEQTgwRUEwQjA5ODY4QTQ4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODdBQTY4QzMzNTUwNjc4QTgyM0JDRjc5MzJGRjM5OUM0QzQyQkFGMDMz
NDMxQjk5QzQ0RUU2RjI0RTJBNjdFNi8wLzg0RkRDRjQwMTMwRTlENjg2RjdBMzY1
N0RBODBFQTBCMDk4NjhBNDgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCKz20mTPfozUECKOp/A6Jv9Gf8
bGMBcPrSzwHLDRFz2DHD5QVnKnE85aLghsvvqroargItCqG4clElg+n0I6a6IJxc
sBzepgAUxTr7ts5/n462LdthTSQ+EBB2UZVUgcEF2FepBStjxK2h4Ay3Kwztu+fP
b0j9Sx480ywTS/vIFyf6gpK1UwNn0gTXo46DRJdinwEx7sgLFRpduYJ/IOq70l4y
x+zUnaVk/XF3wcf15OVKajrSeAKJ15IGJU6i/JC2DVmAHyP2KWtxzHOYgMb9XYJL
Y5SDWjACt27UPJlhtLB8oPinMoCjhlFMq8DCPx4Gw6RLhsLovH005aro2Udz
-----END CERTIFICATE-----
Generated at Sat May 10 22:50:04 2025 by rpki-client