Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.mft
File:                     D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.mft (raw, json)
Hash identifier:          n2jNae72GdksLJCBTPyriSd+rtpM7Y1fw/Sqqoxovy8=
Subject key identifier:   BE:BE:78:4A:A8:A4:AA:44:1F:9D:A3:EE:52:B4:34:B5:09:55:9F:19
Authority key identifier: D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C
Certificate issuer:       /CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
Certificate serial:       521B2EDE05D119317E7C8D1CC9045AD6B5B29296
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.mft
Manifest number:          0135
Signing time:             Wed 05 Nov 2025 12:02:27 +0000
Manifest this update:     Wed 05 Nov 2025 11:57:27 +0000
Manifest next update:     Mon 10 Nov 2025 12:14:27 +0000
Files and hashes:         1: D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl (hash: eItD6sUI9Qhpf6H4sykjxRMLEokL4JaQ0BVqUB6iURk=)
                          2: 3136382e3137362e302e302f31362d3234203d3e2035373232.roa (hash: LHp5PheVY7de8Sp03QJGo0Ie1KETYoo2n7UDL1i7jCw=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:1b:2e:de:05:d1:19:31:7e:7c:8d:1c:c9:04:5a:d6:b5:b2:92:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C
        Validity
            Not Before: Nov  5 11:57:27 2025 GMT
            Not After : Nov 10 12:14:27 2025 GMT
        Subject: CN=BEBE784AA8A4AA441F9DA3EE52B434B509559F19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5a:ad:de:2e:ec:2b:16:5f:f3:ab:0d:5f:5e:
                    46:f2:52:71:d5:e6:76:ea:62:56:b8:50:7d:55:08:
                    23:46:55:9f:b3:03:a9:ab:60:eb:4d:65:b3:63:b2:
                    9b:dc:f1:76:56:32:6b:66:d0:c9:80:b1:8a:44:79:
                    64:ab:30:bb:be:0e:4b:dd:1a:82:23:d8:80:91:55:
                    c1:ae:4e:17:dc:35:b1:a4:06:86:da:cf:a0:d9:44:
                    b7:01:c8:6e:58:de:69:0b:58:9f:07:cb:23:f4:16:
                    f6:e2:69:15:11:f1:38:48:7e:b0:10:d4:d6:5a:cb:
                    8a:87:f2:06:73:b6:bb:83:92:2f:3e:b0:13:f1:55:
                    c4:f7:67:bc:af:74:07:40:71:ac:1d:d2:f7:f0:23:
                    ba:ad:ae:2d:06:ea:67:49:11:78:19:7c:5f:a8:be:
                    bf:17:ca:c2:81:0c:b9:59:2a:74:fd:c6:a1:e2:22:
                    a4:22:c7:05:66:56:4a:85:9f:61:71:7d:76:cd:ff:
                    7a:0f:42:9d:de:fe:ce:18:df:e5:03:ee:fd:76:d2:
                    33:bf:21:fb:b5:72:11:f5:45:68:72:c4:a4:7a:eb:
                    58:9d:f8:e7:43:0a:e6:25:3a:84:98:a1:ac:ec:cf:
                    86:ba:6a:4e:63:41:ce:38:a7:3e:6d:c0:2b:c4:1a:
                    e2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BE:78:4A:A8:A4:AA:44:1F:9D:A3:EE:52:B4:34:B5:09:55:9F:19
            X509v3 Authority Key Identifier:
                keyid:D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:e5:0f:09:c6:34:fa:63:83:b1:1f:00:d0:99:9f:b3:d8:0b:
         07:90:b4:8c:d6:b4:40:59:f9:56:3d:2c:31:77:47:9c:c6:a4:
         40:1d:84:dc:67:1b:3d:ff:75:4d:36:2a:64:f2:52:c4:87:09:
         47:46:a1:f0:b9:af:76:6a:49:c8:77:2d:34:c5:25:81:35:16:
         5f:5e:9a:70:3d:d0:46:ff:d2:17:13:d4:80:54:a3:55:a6:88:
         20:70:da:09:06:b3:cd:ab:eb:d0:fd:d4:de:b3:6c:68:4f:f4:
         d9:36:60:63:a9:37:8e:c0:17:a5:4b:d4:f5:02:78:1e:bb:b9:
         a6:d3:6a:f2:9a:ef:7f:db:a8:ce:c6:47:a1:79:70:4f:14:02:
         c5:6c:96:07:65:cc:00:b2:a8:46:d6:97:b8:77:d0:64:71:b8:
         21:79:6e:8f:db:54:fa:a6:9a:39:86:8b:91:3f:ca:29:25:8c:
         9e:a4:4a:4a:f5:5c:fa:fa:fd:c3:d2:51:bb:5b:07:54:1d:d4:
         3a:47:5e:bd:5e:50:7b:21:a8:5a:a0:aa:54:96:cb:3a:0d:9e:
         2b:8c:ae:10:cf:fb:df:a8:1b:58:ee:d5:12:f0:66:5b:7a:27:
         d4:b4:a3:ae:ab:97:b3:cc:ec:f2:4a:1f:c2:5e:98:d3:f9:44:
         ec:d1:98:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:41:39 2025 by rpki-client