Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.mft
File:                     955DB46C4EFAEA760561376C9A5F35873B9F1567.mft (raw, json)
Hash identifier:          6hDTB6up2LFGtChoAEmkn7uUnEPd8SHuGvD4oyWLSJ0=
Subject key identifier:   51:08:9F:69:ED:57:96:8B:07:8E:ED:0F:74:6A:DB:BD:E5:2D:2C:28
Authority key identifier: 95:5D:B4:6C:4E:FA:EA:76:05:61:37:6C:9A:5F:35:87:3B:9F:15:67
Certificate issuer:       /CN=955DB46C4EFAEA760561376C9A5F35873B9F1567
Certificate serial:       03F743D0C45ABB15292B5C25CFDBC6AB63A74BFE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.mft
Manifest number:          D3
Signing time:             Mon 05 May 2025 14:51:01 +0000
Manifest this update:     Mon 05 May 2025 14:46:01 +0000
Manifest next update:     Sat 10 May 2025 13:45:01 +0000
Files and hashes:         1: 955DB46C4EFAEA760561376C9A5F35873B9F1567.crl (hash: R4waRNBKaHWmKm1pUVEVPJT+sH10gTxbIy2NSw3A7FQ=)
                          2: 3230302e35362e3232342e302f32302d3234203d3e203139333332.roa (hash: TL2i4hlD6hJXrSNeWyqdo2cMD8ZRHgwpdmiacgpICMs=)
                          3: 3230302e33392e39362e302f31392d3234203d3e203139333332.roa (hash: EVPfU/YWHputbtS3Gz8oXsbz8sOoCpjWgF8WJ8FICc4=)
                          4: 3230312e3136382e302e302f31362d3234203d3e203139333332.roa (hash: aDVREVvOwsvSodMGpn6oA0+Bm/OMdLR4C0pqBy3mvg8=)
                          5: 323830363a3231623a3a2f33322d3438203d3e203139333332.roa (hash: vzI8KPyuEgCmSr4WHX/6yT3F+8i9dpf0xj8OPB8XGQY=)
                          6: 3230302e35332e39362e302f32302d3234203d3e203139333332.roa (hash: 1ZN1CXDPFJUqkHNkoZkxVV0k62C+wIp6m96C5q4pGiE=)
                          7: 3230302e31332e31362e302f32302d3234203d3e203139333332.roa (hash: ej0SYgYgA2tyHeAZ9TQDyeFcJH3o3lj6YHFfBhxINzc=)
                          8: 3230302e35332e33322e302f31392d3234203d3e203139333332.roa (hash: br2wRBfAAT9LASNI5q560hBQIxuICgtBbZZUjJ9Uflc=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 01:54:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f7:43:d0:c4:5a:bb:15:29:2b:5c:25:cf:db:c6:ab:63:a7:4b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955DB46C4EFAEA760561376C9A5F35873B9F1567
        Validity
            Not Before: May  5 14:46:01 2025 GMT
            Not After : May 10 13:45:01 2025 GMT
        Subject: CN=51089F69ED57968B078EED0F746ADBBDE52D2C28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:68:e9:eb:7f:71:b6:a1:64:df:0e:bb:9f:a0:
                    41:3b:f9:05:58:cc:e1:b4:fa:40:d7:9b:5b:0b:56:
                    e2:17:f2:ad:ae:99:fe:36:3d:3c:1a:d1:6d:ca:9b:
                    c0:ba:4c:e8:b3:bd:09:1a:d9:a3:06:c9:4e:02:cf:
                    f9:b5:b0:e4:cc:3b:c3:db:12:b1:21:bc:1c:38:c1:
                    eb:a4:10:1c:cb:7e:b4:de:fd:7a:06:15:ea:06:cd:
                    c1:4c:3a:2c:75:26:fa:90:ec:c3:54:77:ee:9c:cb:
                    a3:44:61:f8:42:79:06:31:8c:97:e2:15:51:12:90:
                    e9:c5:21:3a:d3:6d:4d:ad:4f:d6:e7:3d:83:da:8b:
                    5a:71:a8:68:34:71:ac:34:ef:99:ee:30:24:10:1d:
                    d6:a1:eb:8e:67:bc:f7:ff:45:8a:c2:af:32:05:61:
                    74:03:b0:a2:5e:90:80:bc:aa:74:a8:97:e2:af:3e:
                    7e:7a:64:76:ae:0d:a9:a6:23:af:79:e1:d5:35:42:
                    be:19:c1:39:e6:da:96:7c:5f:a6:df:87:ea:39:52:
                    2e:3c:15:1e:f5:b1:be:0e:6a:f7:d7:84:f8:69:32:
                    f0:95:39:a1:48:f8:b6:37:e6:d3:2c:84:2f:37:76:
                    7c:c4:4b:4c:6e:e8:bd:c6:c2:e8:16:5a:8a:b7:dc:
                    23:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:08:9F:69:ED:57:96:8B:07:8E:ED:0F:74:6A:DB:BD:E5:2D:2C:28
            X509v3 Authority Key Identifier:
                keyid:95:5D:B4:6C:4E:FA:EA:76:05:61:37:6C:9A:5F:35:87:3B:9F:15:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:3c:02:ca:3c:c3:a0:f1:c8:5e:e3:76:3e:6e:ab:8e:a3:47:
         9a:36:61:76:91:a8:be:6b:51:aa:07:05:6d:a1:85:dc:e3:f7:
         be:03:c6:01:ea:fd:90:57:63:3a:10:22:6d:27:3b:17:b1:87:
         bf:94:98:52:4d:a0:c2:99:18:84:9b:51:9e:b7:31:db:98:9d:
         9f:ac:2f:22:86:f1:e3:94:bd:7e:b7:80:49:70:d1:44:69:ea:
         6a:a9:8c:19:63:cd:31:89:b9:c5:97:fa:08:18:c6:dd:05:63:
         76:70:d7:26:e9:ec:67:b6:b7:28:38:72:a0:b8:c8:14:5f:df:
         14:ea:fa:f1:23:ed:1d:69:e6:a9:2c:8e:b3:59:6a:80:4c:51:
         86:d1:c7:65:ff:b8:72:38:db:db:57:00:d3:14:59:19:ed:7d:
         e6:88:60:15:dd:47:fd:59:e8:7a:5b:67:c6:b1:55:56:eb:b1:
         53:68:a1:e8:f0:b7:07:4d:2d:8c:c5:7f:96:7a:aa:cd:5d:d4:
         92:7e:c2:6b:ef:a5:89:a6:99:e6:8f:34:bc:34:ed:2a:9b:b8:
         9c:41:f8:36:77:2c:9e:a7:6d:a5:cd:a3:2b:13:5b:22:cf:d6:
         8d:16:27:3a:30:9d:a8:49:95:64:8e:a9:0b:ea:b9:d4:6e:bc:
         ac:88:04:e5
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUA/dD0MRauxUpK1wlz9vGq2OnS/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU1REI0NkM0RUZBRUE3NjA1NjEzNzZDOUE1RjM1ODcz
QjlGMTU2NzAeFw0yNTA1MDUxNDQ2MDFaFw0yNTA1MTAxMzQ1MDFaMDMxMTAvBgNV
BAMTKDUxMDg5RjY5RUQ1Nzk2OEIwNzhFRUQwRjc0NkFEQkJERTUyRDJDMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhaOnrf3G2oWTfDrufoEE7+QVY
zOG0+kDXm1sLVuIX8q2umf42PTwa0W3Km8C6TOizvQka2aMGyU4Cz/m1sOTMO8Pb
ErEhvBw4weukEBzLfrTe/XoGFeoGzcFMOix1JvqQ7MNUd+6cy6NEYfhCeQYxjJfi
FVESkOnFITrTbU2tT9bnPYPai1pxqGg0caw075nuMCQQHdah645nvPf/RYrCrzIF
YXQDsKJekIC8qnSol+KvPn56ZHauDammI6954dU1Qr4ZwTnm2pZ8X6bfh+o5Ui48
FR71sb4OavfXhPhpMvCVOaFI+LY35tMshC83dnzES0xu6L3GwugWWoq33CNzAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUUQifae1XlosHju0PdGrbveUtLCgwHwYDVR0j
BBgwFoAUlV20bE766nYFYTdsml81hzufFWcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BOEJEMzE2RjdBNzAwMjJCMERCNUM1NUExMDc3MUIwMjZC
QTBCODVBNkIzNjg5NTMxQzMyN0NENTk2RDYwNkY1LzAvOTU1REI0NkM0RUZBRUE3
NjA1NjEzNzZDOUE1RjM1ODczQjlGMTU2Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NTVEQjQ2QzRFRkFFQTc2MDU2
MTM3NkM5QTVGMzU4NzNCOUYxNTY3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQThCRDMxNkY3QTcwMDIyQjBEQjVDNTVBMTA3NzFCMDI2QkEwQjg1QTZC
MzY4OTUzMUMzMjdDRDU5NkQ2MDZGNS8wLzk1NURCNDZDNEVGQUVBNzYwNTYxMzc2
QzlBNUYzNTg3M0I5RjE1NjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA+PALKPMOg8che43Y+bquOo0ea
NmF2kai+a1GqBwVtoYXc4/e+A8YB6v2QV2M6ECJtJzsXsYe/lJhSTaDCmRiEm1Ge
tzHbmJ2frC8ihvHjlL1+t4BJcNFEaepqqYwZY80xibnFl/oIGMbdBWN2cNcm6exn
trcoOHKguMgUX98U6vrxI+0daeapLI6zWWqATFGG0cdl/7hyONvbVwDTFFkZ7X3m
iGAV3Uf9Weh6W2fGsVVW67FTaKHo8LcHTS2MxX+WeqrNXdSSfsJr76WJppnmjzS8
NO0qm7icQfg2dyyep22lzaMrE1siz9aNFic6MJ2oSZVkjqkL6rnUbrysiATl
-----END CERTIFICATE-----
Generated at Tue May 6 09:10:28 2025 by rpki-client