Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA96FE9DC29C23C4589BAFCF5D4FB7A65A8E142D89BDC1DAD1383AA743D02B26/0/B33D645E6A5CF960775ABC065DCEC403DBA9ABE4.mft
File:                     B33D645E6A5CF960775ABC065DCEC403DBA9ABE4.mft (raw, json)
Hash identifier:          q0cB7bPbJRS1OQXbe7yAQ477WaYIPbVL2PcZNARbMnA=
Subject key identifier:   02:23:48:84:FA:41:F2:CC:CB:35:79:57:4C:F0:92:54:3F:61:2A:33
Authority key identifier: B3:3D:64:5E:6A:5C:F9:60:77:5A:BC:06:5D:CE:C4:03:DB:A9:AB:E4
Certificate issuer:       /CN=B33D645E6A5CF960775ABC065DCEC403DBA9ABE4
Certificate serial:       5244F4C436567BDB5DFBD019BFDB005D68EE794F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B33D645E6A5CF960775ABC065DCEC403DBA9ABE4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA96FE9DC29C23C4589BAFCF5D4FB7A65A8E142D89BDC1DAD1383AA743D02B26/0/B33D645E6A5CF960775ABC065DCEC403DBA9ABE4.mft
Manifest number:          1B
Signing time:             Fri 27 Feb 2026 19:50:00 +0000
Manifest this update:     Fri 27 Feb 2026 19:45:00 +0000
Manifest next update:     Thu 05 Mar 2026 13:54:00 +0000
Files and hashes:         1: B33D645E6A5CF960775ABC065DCEC403DBA9ABE4.crl (hash: bu23aV9igSXfuNwN5myarQawg2i32bKPGhuK3xeA/B0=)
                          2: 3230302e33342e3133352e302f32342d3234203d3e2037303837.roa (hash: OgQGFo/wxZpeN8w6x70SniTOsbZQrafMMrTY90n+lKk=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA96FE9DC29C23C4589BAFCF5D4FB7A65A8E142D89BDC1DAD1383AA743D02B26/0/B33D645E6A5CF960775ABC065DCEC403DBA9ABE4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA96FE9DC29C23C4589BAFCF5D4FB7A65A8E142D89BDC1DAD1383AA743D02B26/0/B33D645E6A5CF960775ABC065DCEC403DBA9ABE4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B33D645E6A5CF960775ABC065DCEC403DBA9ABE4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Mar 2026 11:41:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:44:f4:c4:36:56:7b:db:5d:fb:d0:19:bf:db:00:5d:68:ee:79:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B33D645E6A5CF960775ABC065DCEC403DBA9ABE4
        Validity
            Not Before: Feb 27 19:45:00 2026 GMT
            Not After : Mar  5 13:54:00 2026 GMT
        Subject: CN=02234884FA41F2CCCB3579574CF092543F612A33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:68:ef:d4:66:11:59:16:87:27:09:79:f9:8a:
                    7f:1d:1e:4b:0c:d2:37:4f:ea:8b:0b:c6:b0:c1:68:
                    86:0c:7f:29:f0:4b:b6:61:34:e6:d3:c9:ef:9e:3b:
                    e3:47:be:39:5b:22:9c:ed:2d:af:a3:76:4d:e7:31:
                    9d:26:d4:82:6d:d6:bd:2d:b3:97:f8:81:30:24:e7:
                    5b:7e:47:ad:9d:d2:34:7e:c4:2f:73:85:3a:3a:5a:
                    9a:18:59:60:da:31:0f:a4:b0:2c:b3:13:a6:34:19:
                    5e:df:40:df:1a:f7:d2:64:40:e3:d9:6d:a4:85:36:
                    1b:32:6a:22:45:02:59:84:de:e2:ef:97:1a:6e:33:
                    f2:a7:14:fb:ce:86:c9:66:14:8b:55:18:01:00:e9:
                    8e:00:d3:e0:c4:b0:48:7d:ba:dd:cc:b6:db:82:92:
                    f5:c0:8a:ec:15:14:5e:44:fb:69:49:68:5d:cb:ae:
                    77:c2:3f:3e:61:0f:b6:01:b8:50:1a:1b:4e:3e:41:
                    36:70:e2:9a:26:18:f7:88:97:52:e6:2d:79:13:5c:
                    9c:3e:e5:10:f2:04:31:03:0b:a5:c6:62:4c:25:10:
                    b4:98:28:d0:58:64:6e:02:2b:8a:c0:6c:8d:d4:73:
                    44:fe:4e:5e:1d:97:bc:e0:8a:39:91:fc:c0:5d:2c:
                    ce:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:23:48:84:FA:41:F2:CC:CB:35:79:57:4C:F0:92:54:3F:61:2A:33
            X509v3 Authority Key Identifier:
                keyid:B3:3D:64:5E:6A:5C:F9:60:77:5A:BC:06:5D:CE:C4:03:DB:A9:AB:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA96FE9DC29C23C4589BAFCF5D4FB7A65A8E142D89BDC1DAD1383AA743D02B26/0/B33D645E6A5CF960775ABC065DCEC403DBA9ABE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B33D645E6A5CF960775ABC065DCEC403DBA9ABE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA96FE9DC29C23C4589BAFCF5D4FB7A65A8E142D89BDC1DAD1383AA743D02B26/0/B33D645E6A5CF960775ABC065DCEC403DBA9ABE4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a5:5b:2f:19:7d:7b:ac:90:9a:94:26:b6:e4:95:90:a9:29:
         38:dc:18:2d:85:28:45:45:36:90:39:07:77:26:7c:12:9b:2c:
         7e:a6:ac:c4:dd:e2:40:c7:5e:06:e1:f3:86:c3:aa:fd:15:54:
         94:1c:4b:23:5f:30:d9:02:50:57:8c:25:24:e7:41:74:d5:04:
         68:56:4f:0f:53:17:e6:49:70:ef:95:c7:ec:4d:61:a4:b9:c3:
         f7:a4:69:e8:f1:37:10:19:e9:0e:4e:3d:08:68:9b:32:42:ea:
         95:f9:14:c6:13:96:b6:3b:5e:b5:70:c4:1c:c5:e9:3e:c1:e2:
         6e:1b:ab:bb:0c:5d:ba:7a:43:2e:ef:94:b4:40:03:c6:ea:bc:
         e0:ce:19:0d:49:d6:9a:9d:c4:a1:78:b5:18:37:d5:98:ed:5c:
         88:88:ac:4e:97:8c:fe:8b:f0:a4:ac:34:47:59:4c:d8:fd:23:
         58:a6:a3:8c:18:68:d4:99:f9:5e:d8:4e:0c:27:5e:e4:fa:a7:
         df:e4:be:a3:a9:1b:50:a6:89:76:4c:63:cd:5f:5e:65:25:39:
         0c:e4:71:c8:9a:43:79:23:6d:ab:2d:55:bd:d0:e4:a4:f5:36:
         03:89:e8:be:f8:22:4f:09:b5:b1:5b:82:bc:16:f4:8f:d1:d1:
         fa:39:d7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:14:26 2026 by rpki-client