Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DB8F65B180EB280A6CF86D1CBA388A96308840BE26735199AC3D2D24A4ED4C3/0/A336D3A6848D9FCFC33C29FA222E93389C236D0B.mft
File:                     A336D3A6848D9FCFC33C29FA222E93389C236D0B.mft (raw, json)
Hash identifier:          Mw4D9OrVFxqYgp8h13VGm7kvDOevyQoYshO56yRgs/E=
Subject key identifier:   97:40:11:03:DA:E0:D0:C6:D7:38:12:6E:C5:D8:91:41:AF:36:53:5A
Authority key identifier: A3:36:D3:A6:84:8D:9F:CF:C3:3C:29:FA:22:2E:93:38:9C:23:6D:0B
Certificate issuer:       /CN=A336D3A6848D9FCFC33C29FA222E93389C236D0B
Certificate serial:       52A567A4F12D01849E04CFC373EEAAD44E1BD1C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A336D3A6848D9FCFC33C29FA222E93389C236D0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8DB8F65B180EB280A6CF86D1CBA388A96308840BE26735199AC3D2D24A4ED4C3/0/A336D3A6848D9FCFC33C29FA222E93389C236D0B.mft
Manifest number:          51
Signing time:             Tue 06 May 2025 12:03:24 +0000
Manifest this update:     Tue 06 May 2025 11:58:24 +0000
Manifest next update:     Mon 12 May 2025 05:23:24 +0000
Files and hashes:         1: 3230372e3234382e38312e302f32342d3234203d3e20323634373832.roa (hash: /LQlEY08Ipy9kECQ/Y/XgayPSXZGuIbfC3JwfwwgzQ4=)
                          2: A336D3A6848D9FCFC33C29FA222E93389C236D0B.crl (hash: NQUCz4LVOvP/bo0acQd5OAlINpdL9woZ7OJtU5eavNw=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8DB8F65B180EB280A6CF86D1CBA388A96308840BE26735199AC3D2D24A4ED4C3/0/A336D3A6848D9FCFC33C29FA222E93389C236D0B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8DB8F65B180EB280A6CF86D1CBA388A96308840BE26735199AC3D2D24A4ED4C3/0/A336D3A6848D9FCFC33C29FA222E93389C236D0B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A336D3A6848D9FCFC33C29FA222E93389C236D0B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 01:51:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:a5:67:a4:f1:2d:01:84:9e:04:cf:c3:73:ee:aa:d4:4e:1b:d1:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A336D3A6848D9FCFC33C29FA222E93389C236D0B
        Validity
            Not Before: May  6 11:58:24 2025 GMT
            Not After : May 12 05:23:24 2025 GMT
        Subject: CN=97401103DAE0D0C6D738126EC5D89141AF36535A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8a:fa:d6:96:0d:b5:91:d0:96:70:cc:dc:68:
                    f5:63:4b:cc:b8:bd:f9:36:68:4d:bd:d5:40:5c:44:
                    74:8a:97:35:82:ca:84:5f:6f:1a:81:57:2d:ce:8a:
                    b6:c0:a0:ee:93:f4:82:e9:22:c1:d2:72:c5:59:cd:
                    84:c2:c8:8a:3c:cf:98:ea:89:a0:96:fc:e8:d8:21:
                    6e:06:ef:4a:52:6e:b4:67:ea:82:e7:f4:c9:94:1b:
                    99:0a:ce:09:20:16:99:3f:f8:21:e5:fa:c2:73:4f:
                    c4:ff:ce:cc:df:4e:01:f8:9c:47:59:d8:c8:e4:28:
                    3d:4a:bf:0d:75:5c:e3:63:62:a3:0a:65:83:3b:77:
                    47:1a:a8:b4:3d:a2:37:35:e2:b9:26:27:7e:95:74:
                    19:ef:2d:88:b3:cd:5b:5b:15:ac:11:a2:69:42:fd:
                    cb:c7:cc:2b:f3:c7:25:da:c2:0d:d9:1a:cc:61:79:
                    59:21:30:79:31:aa:36:8f:c7:c0:cf:c7:88:c9:d7:
                    0b:1d:53:ec:56:26:18:e9:a2:19:84:5f:88:2b:98:
                    92:f9:2c:a1:4e:e4:45:94:19:59:12:48:7b:6e:22:
                    7a:fd:9b:1b:44:39:33:1b:e9:dc:77:2c:17:53:4a:
                    91:03:46:1b:4d:ed:f4:56:9e:f8:96:42:68:9c:b2:
                    00:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:40:11:03:DA:E0:D0:C6:D7:38:12:6E:C5:D8:91:41:AF:36:53:5A
            X509v3 Authority Key Identifier:
                keyid:A3:36:D3:A6:84:8D:9F:CF:C3:3C:29:FA:22:2E:93:38:9C:23:6D:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8DB8F65B180EB280A6CF86D1CBA388A96308840BE26735199AC3D2D24A4ED4C3/0/A336D3A6848D9FCFC33C29FA222E93389C236D0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A336D3A6848D9FCFC33C29FA222E93389C236D0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DB8F65B180EB280A6CF86D1CBA388A96308840BE26735199AC3D2D24A4ED4C3/0/A336D3A6848D9FCFC33C29FA222E93389C236D0B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:98:dd:cf:ea:b1:51:fa:85:1a:22:10:d6:aa:da:1d:0f:70:
         6e:19:e8:bc:4f:14:48:dd:a9:14:5f:01:94:2f:0d:6e:8a:67:
         4e:24:42:12:66:ce:97:a1:fc:99:e4:ca:b1:8f:47:0d:81:d5:
         64:56:38:cc:c9:3e:29:cd:56:ee:df:71:76:11:52:c1:11:42:
         9d:21:d9:b4:c0:33:1c:19:62:df:9d:b4:d2:03:37:8e:63:3d:
         4c:b0:29:02:76:f6:85:b9:7f:81:ba:5a:33:4f:94:73:7e:92:
         0b:8c:3a:32:af:c0:dc:0b:96:10:91:c4:48:1c:c1:09:7e:ab:
         2c:90:d5:08:17:5a:c3:56:d4:ae:a4:1c:17:41:38:0f:a5:48:
         5d:14:1d:d6:d6:bc:a3:62:f5:50:eb:55:04:b3:de:b6:0e:b8:
         16:41:34:bb:6e:45:78:0f:c9:54:86:0a:b0:49:99:5f:51:7a:
         70:09:7d:68:b7:d9:f4:fd:7a:6e:b9:0a:5f:14:da:c3:ac:c4:
         c1:1d:2c:d0:62:f4:50:6b:5c:f8:6d:fd:48:5b:00:de:4c:a7:
         28:19:30:14:1f:c7:b0:2d:e2:48:cf:3f:da:c0:b3:ae:eb:0a:
         99:8b:8c:12:fa:c7:72:a6:ef:f1:f6:88:56:a9:dd:81:6d:18:
         09:95:4f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:45:21 2025 by rpki-client