Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
File:                     CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft (raw, json)
Hash identifier:          /1GT2iaqx1jeJ241F8+q55a44PXSzjeIQTEcMI4IAAo=
Subject key identifier:   32:0D:96:36:C6:1D:9F:83:91:DF:9A:D8:7A:FF:D8:8C:D1:59:18:9F
Authority key identifier: CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC
Certificate issuer:       /CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
Certificate serial:       4A5E8F04D8D48F523EBAF08F1DA142D885C8D244
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
Manifest number:          0172
Signing time:             Sun 01 Mar 2026 23:39:06 +0000
Manifest this update:     Sun 01 Mar 2026 23:34:06 +0000
Manifest next update:     Fri 06 Mar 2026 04:49:06 +0000
Files and hashes:         1: 323830333a383238303a3a2f33322d3332203d3e20323634383434.roa (hash: kMz8Zk/AWDRwAVGLJFvvyvYKJjpACmuyP6pcjkl4MGA=)
                          2: 3139312e39372e31362e302f32322d3234203d3e20323634383434.roa (hash: Yuf5XFzKCIo2d0epsdNAai1Ql9jRbdyDY/wpCpQorNA=)
                          3: 3139312e39372e31372e302f32342d3234203d3e20323732383635.roa (hash: 8JFBRRJPMn+8eQeCdhdOgi4iQs4rzxptXxCUEWx1+Q0=)
                          4: CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl (hash: 3DV6lI5pRbhyd/bhNM+TobrGZnu8cpv6bzG8J4Qq4ls=)
                          5: 3137302e3234342e38382e302f32322d3234203d3e20323634383434.roa (hash: EqsSaCt8bWlKbQxBJ4+VRsUziVKjMJDVV+4mGez7uEE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 04:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:5e:8f:04:d8:d4:8f:52:3e:ba:f0:8f:1d:a1:42:d8:85:c8:d2:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
        Validity
            Not Before: Mar  1 23:34:06 2026 GMT
            Not After : Mar  6 04:49:06 2026 GMT
        Subject: CN=320D9636C61D9F8391DF9AD87AFFD88CD159189F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4e:fe:3b:1a:4a:df:54:5d:1c:dd:5b:a0:36:
                    e2:d5:d0:85:73:b5:8e:44:55:88:37:fb:ca:96:ea:
                    38:42:78:b8:a1:d7:d4:29:33:16:eb:de:7c:2d:02:
                    b2:6b:04:28:bf:89:41:78:70:82:21:ec:4e:fd:6b:
                    cc:34:02:fb:5f:f5:b4:23:b9:ae:cd:13:e2:af:45:
                    35:dd:5d:b2:f6:9f:3e:a7:98:6a:2e:a6:24:be:22:
                    35:6c:e6:45:63:88:c4:c9:ef:c0:20:b7:8d:ba:d3:
                    bc:59:d2:d6:5e:d8:51:03:8d:db:32:18:24:2d:8a:
                    87:e8:0e:59:f2:75:99:e3:ac:33:76:ab:2f:45:2b:
                    cd:72:d8:e4:e2:32:48:d7:ae:e4:d8:8b:5c:49:fe:
                    4f:4a:70:a3:5f:2c:a7:58:fc:d1:9e:a2:14:9e:3e:
                    ba:86:d2:6d:f2:ca:6a:2e:ab:1b:1b:dc:19:dc:24:
                    b5:c2:47:86:db:cc:42:a9:33:a6:9c:9a:cf:24:11:
                    9f:d8:2d:da:84:50:1a:cd:16:53:6c:6a:67:5e:43:
                    fd:47:21:fd:5e:f4:b4:5c:25:20:a0:8c:af:d7:49:
                    70:90:a6:69:55:05:ea:23:1a:fc:e7:9e:d3:39:e9:
                    7e:c8:a3:32:ca:75:60:87:98:1d:f5:1a:e0:0f:c2:
                    e7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0D:96:36:C6:1D:9F:83:91:DF:9A:D8:7A:FF:D8:8C:D1:59:18:9F
            X509v3 Authority Key Identifier:
                keyid:CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:56:7e:76:3c:bd:d7:c7:b2:73:a4:a9:82:f3:34:dc:25:4f:
         7c:5f:7b:de:40:df:2c:2c:8b:16:6f:37:84:d3:df:3a:f5:1a:
         5e:b5:46:5d:6d:bd:8d:9e:f3:97:07:37:cc:b6:2b:19:81:12:
         40:b8:40:e4:62:72:d8:36:f6:c6:7a:24:84:69:6a:9d:b3:77:
         5d:de:7a:7a:fc:c1:01:83:2d:16:9a:bc:6f:01:81:cf:35:d0:
         32:e3:07:fb:af:4e:60:7c:02:b3:1b:42:51:03:2e:88:ff:02:
         33:5b:ae:83:5d:52:56:a7:48:b8:65:cc:2a:cc:4c:9b:c5:43:
         7d:74:d0:c6:68:a6:fe:8c:44:68:ba:ec:97:ce:24:f2:53:5b:
         43:13:e4:db:4f:9d:5e:81:41:e9:ba:4c:58:55:7b:07:9d:79:
         b6:5d:82:4f:bd:af:19:0c:42:ba:f4:6d:db:7d:ce:b8:3d:6c:
         fd:a5:4a:74:a6:1f:61:4c:e8:6f:79:7e:b8:7a:78:0f:e4:6a:
         76:7f:a8:42:86:b6:6d:06:49:74:79:67:3e:69:42:31:da:bd:
         35:3d:b1:d8:ce:85:3b:d9:14:bf:3a:ec:af:ac:0f:e8:e7:ae:
         3e:9f:6b:96:13:c5:69:c0:22:90:0a:b1:b4:57:84:0b:75:f2:
         b6:0e:11:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:16:03 2026 by rpki-client