Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D0B55A168814D5F885710371612D4E760FEA4E066B8DCF680B0674C5739BF06/0/1D43B7E6E5BDF6F233B25AFA485A315BCF67E07A.mft
File:                     1D43B7E6E5BDF6F233B25AFA485A315BCF67E07A.mft (raw, json)
Hash identifier:          vWLMB1v/YblQOArjcgkIuuOv/gtAUklwjLsTmNIK+KE=
Subject key identifier:   91:A2:5F:57:45:AB:F2:20:E4:0F:8E:0D:BB:90:EE:38:0D:74:F2:F9
Authority key identifier: 1D:43:B7:E6:E5:BD:F6:F2:33:B2:5A:FA:48:5A:31:5B:CF:67:E0:7A
Certificate issuer:       /CN=1D43B7E6E5BDF6F233B25AFA485A315BCF67E07A
Certificate serial:       2022A25D8D712D9B4030F8FB45ADA407E214AEF2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D43B7E6E5BDF6F233B25AFA485A315BCF67E07A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D0B55A168814D5F885710371612D4E760FEA4E066B8DCF680B0674C5739BF06/0/1D43B7E6E5BDF6F233B25AFA485A315BCF67E07A.mft
Manifest number:          D9
Signing time:             Mon 05 May 2025 15:26:21 +0000
Manifest this update:     Mon 05 May 2025 15:21:21 +0000
Manifest next update:     Sun 11 May 2025 06:00:21 +0000
Files and hashes:         1: 1D43B7E6E5BDF6F233B25AFA485A315BCF67E07A.crl (hash: xOckraUfu0ZpINouTByMjlx9PVGoVv/Fww/68OtA87A=)
                          2: 323830333a373731303a3a2f33322d3634203d3e20323732313130.roa (hash: bF4npIyjftIvGfZJwSsOfCL39Ma/4v/fXW5cG9FuQCs=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D0B55A168814D5F885710371612D4E760FEA4E066B8DCF680B0674C5739BF06/0/1D43B7E6E5BDF6F233B25AFA485A315BCF67E07A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D0B55A168814D5F885710371612D4E760FEA4E066B8DCF680B0674C5739BF06/0/1D43B7E6E5BDF6F233B25AFA485A315BCF67E07A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D43B7E6E5BDF6F233B25AFA485A315BCF67E07A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 01:54:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:22:a2:5d:8d:71:2d:9b:40:30:f8:fb:45:ad:a4:07:e2:14:ae:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D43B7E6E5BDF6F233B25AFA485A315BCF67E07A
        Validity
            Not Before: May  5 15:21:21 2025 GMT
            Not After : May 11 06:00:21 2025 GMT
        Subject: CN=91A25F5745ABF220E40F8E0DBB90EE380D74F2F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ea:86:72:fc:17:c5:99:18:50:27:45:76:9d:
                    1b:a8:bd:f4:57:c1:05:60:80:36:82:f2:b4:bd:27:
                    30:c1:64:0c:e3:80:12:fa:00:ac:fb:57:79:a1:e6:
                    98:16:4b:19:c7:29:2e:f7:c9:53:24:25:e3:25:f5:
                    c6:da:9e:29:dd:fd:da:02:fd:4c:61:48:ed:2b:1e:
                    0c:5e:3b:3f:a1:e4:f1:ee:9f:3a:0c:ea:9d:0e:c5:
                    7b:53:89:30:74:d5:f4:02:69:b8:20:d3:5d:69:8d:
                    d6:e7:a0:79:dc:fe:1f:2c:c9:4c:33:53:03:89:fc:
                    8b:aa:99:09:85:1e:49:f7:a4:0c:d4:b9:04:4a:10:
                    1f:d8:4e:4e:3d:ba:a7:32:f4:52:47:75:84:72:d5:
                    cf:33:60:0a:71:df:2b:f5:79:9b:e9:a4:be:10:b8:
                    72:cd:6c:d6:22:02:23:91:7f:5f:91:a8:a4:f1:1a:
                    da:6c:31:38:fc:6c:64:06:81:3a:2e:3f:1b:72:63:
                    57:c5:ad:dd:e0:c9:27:9f:5f:81:b7:ce:9c:79:37:
                    1d:4e:cb:8a:7e:95:3c:bb:71:01:72:c0:08:24:77:
                    c1:6b:3c:51:8a:b4:96:ce:fd:91:b6:26:dc:2b:5d:
                    c3:3d:c4:9e:a7:1c:48:bf:d9:3e:f9:10:50:e4:06:
                    c8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A2:5F:57:45:AB:F2:20:E4:0F:8E:0D:BB:90:EE:38:0D:74:F2:F9
            X509v3 Authority Key Identifier:
                keyid:1D:43:B7:E6:E5:BD:F6:F2:33:B2:5A:FA:48:5A:31:5B:CF:67:E0:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D0B55A168814D5F885710371612D4E760FEA4E066B8DCF680B0674C5739BF06/0/1D43B7E6E5BDF6F233B25AFA485A315BCF67E07A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D43B7E6E5BDF6F233B25AFA485A315BCF67E07A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D0B55A168814D5F885710371612D4E760FEA4E066B8DCF680B0674C5739BF06/0/1D43B7E6E5BDF6F233B25AFA485A315BCF67E07A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:64:88:f9:9e:24:cb:a8:12:d4:d3:77:c6:70:1d:59:88:6f:
         1a:14:cb:04:f0:53:68:7d:b1:ae:a4:65:a4:23:ba:02:bd:fa:
         65:9b:1c:79:9a:57:cf:ff:07:99:45:9a:8b:41:83:e6:a6:1c:
         9f:1f:a3:25:1a:d7:8d:51:c4:15:08:59:2e:12:21:a0:d9:58:
         61:f0:7b:96:2b:2d:fc:e1:82:e6:d1:c0:f9:d3:26:eb:ef:80:
         c0:2a:a3:b4:40:da:89:9c:12:1c:25:a4:6e:15:b5:e6:61:eb:
         0c:08:36:7b:ad:1b:9c:17:10:d2:c6:75:15:fe:62:43:4b:10:
         1d:a6:66:3f:d3:95:be:d7:51:e8:71:76:86:e1:ab:25:e9:91:
         d1:d8:25:56:0c:81:f2:c0:59:98:26:6c:d1:eb:31:94:29:a0:
         67:4d:a3:dc:35:ad:bf:77:3f:5d:17:e9:48:93:f2:a3:a9:b3:
         7c:7c:a8:3a:b5:f6:38:d5:42:ab:bb:a1:99:cf:f0:6f:ae:e0:
         b8:cd:36:f8:e8:91:4f:3e:cc:1d:80:f3:b7:bd:8d:bb:82:93:
         f5:fd:66:35:91:8c:74:de:bc:ac:2b:d3:f7:9e:c2:75:61:f3:
         fb:48:3d:24:de:9f:b9:63:af:87:85:7b:54:4d:c8:87:f6:1e:
         de:dd:b9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 10:25:16 2025 by rpki-client