Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D35EC05FD3947842A09BE6A4EFFCE0A02AC1F2ED24280E35AB4DB334B5563A93/0/970664554CE595E3595AD5B26B64B6852A7156DA.mft
File:                     970664554CE595E3595AD5B26B64B6852A7156DA.mft (raw, json)
Hash identifier:          17jNazaJ2NeBVnKdC8zFobC9ppBHP6okLQl/6XELD8A=
Subject key identifier:   FF:97:AC:53:CD:93:5D:3C:3A:20:87:7A:97:B8:AB:0D:03:3F:D0:BD
Authority key identifier: 97:06:64:55:4C:E5:95:E3:59:5A:D5:B2:6B:64:B6:85:2A:71:56:DA
Certificate issuer:       /CN=970664554CE595E3595AD5B26B64B6852A7156DA
Certificate serial:       709C04772CA3DECA79A3429E8D2D6F638B9BDBA1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/970664554CE595E3595AD5B26B64B6852A7156DA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D35EC05FD3947842A09BE6A4EFFCE0A02AC1F2ED24280E35AB4DB334B5563A93/0/970664554CE595E3595AD5B26B64B6852A7156DA.mft
Manifest number:          EB
Signing time:             Sat 21 Jun 2025 17:15:10 +0000
Manifest this update:     Sat 21 Jun 2025 17:10:10 +0000
Manifest next update:     Fri 27 Jun 2025 14:00:10 +0000
Files and hashes:         1: 323830333a626431303a3a2f33322d3438203d3e20323732303536.roa (hash: LAriNefkzCn25EsISO3tuAa6wUIb++N+fSIc2IM6dY8=)
                          2: 970664554CE595E3595AD5B26B64B6852A7156DA.crl (hash: nsMZEDxXgw5/+URc05YGtLdWOMdxgWPxjM/vj6kd4uU=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D35EC05FD3947842A09BE6A4EFFCE0A02AC1F2ED24280E35AB4DB334B5563A93/0/970664554CE595E3595AD5B26B64B6852A7156DA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D35EC05FD3947842A09BE6A4EFFCE0A02AC1F2ED24280E35AB4DB334B5563A93/0/970664554CE595E3595AD5B26B64B6852A7156DA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/970664554CE595E3595AD5B26B64B6852A7156DA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 23:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9c:04:77:2c:a3:de:ca:79:a3:42:9e:8d:2d:6f:63:8b:9b:db:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970664554CE595E3595AD5B26B64B6852A7156DA
        Validity
            Not Before: Jun 21 17:10:10 2025 GMT
            Not After : Jun 27 14:00:10 2025 GMT
        Subject: CN=FF97AC53CD935D3C3A20877A97B8AB0D033FD0BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:44:5f:cc:aa:ef:e7:7e:7a:c5:77:63:25:80:
                    b0:36:33:57:df:20:77:fa:59:75:a1:5a:32:12:cb:
                    39:00:da:5f:17:fc:6a:23:4c:34:5e:96:97:4c:a0:
                    ec:9b:16:dc:65:9c:3a:6d:83:28:59:83:93:03:2d:
                    f6:8e:24:74:72:d3:1b:31:6a:cc:b5:63:01:cf:d8:
                    26:cc:d6:59:88:33:c0:dd:ae:13:ca:00:c9:f8:26:
                    dd:14:6a:a1:fd:2e:cf:b7:42:51:cf:9d:7d:db:f0:
                    59:a2:f9:dc:6c:56:42:2e:fc:f3:07:cd:dc:0f:fd:
                    35:a2:9e:74:19:94:5d:82:90:d8:38:23:5b:4d:bd:
                    97:a3:45:cf:77:50:65:f5:2a:bf:51:50:da:bc:e1:
                    c3:bb:99:a4:91:b3:0f:ac:d3:08:e1:20:28:ae:47:
                    f0:38:ef:59:f3:35:f0:73:82:39:55:44:cc:3f:93:
                    dc:13:10:82:5f:32:f8:5c:9f:c6:04:61:ad:3e:53:
                    77:53:f4:da:bd:1d:c6:0a:bf:e7:82:e5:88:b9:0b:
                    c8:10:16:ce:53:e8:c8:99:90:e6:74:e4:97:23:b6:
                    a8:73:2c:66:14:5e:ba:e7:dd:cd:27:76:9b:3b:08:
                    9b:25:0a:99:1b:56:be:f9:39:1f:dd:78:5d:70:ae:
                    e1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:97:AC:53:CD:93:5D:3C:3A:20:87:7A:97:B8:AB:0D:03:3F:D0:BD
            X509v3 Authority Key Identifier:
                keyid:97:06:64:55:4C:E5:95:E3:59:5A:D5:B2:6B:64:B6:85:2A:71:56:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D35EC05FD3947842A09BE6A4EFFCE0A02AC1F2ED24280E35AB4DB334B5563A93/0/970664554CE595E3595AD5B26B64B6852A7156DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/970664554CE595E3595AD5B26B64B6852A7156DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D35EC05FD3947842A09BE6A4EFFCE0A02AC1F2ED24280E35AB4DB334B5563A93/0/970664554CE595E3595AD5B26B64B6852A7156DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:d6:ea:57:0a:29:77:5a:34:a2:94:f0:63:2a:18:01:cc:ae:
         47:52:67:d7:f9:cd:eb:fc:a9:44:db:62:e8:ee:bd:10:c1:32:
         ae:c5:1b:ab:b2:d1:b9:f9:29:a9:7c:4c:cd:92:af:2c:66:73:
         91:42:cc:65:7b:bc:6d:47:8b:41:bb:99:83:b0:52:bb:50:52:
         ac:97:8a:d1:37:2f:e3:4a:89:da:18:fb:d1:93:8c:07:d2:17:
         b7:43:90:58:39:57:e7:01:ee:42:4d:f0:89:e4:a6:5b:7c:20:
         b1:58:fa:4b:af:1b:ac:16:83:b6:72:21:a0:ab:90:5d:0f:64:
         11:55:fb:d4:f7:f6:cb:56:d0:4e:22:8c:b2:b7:18:97:02:15:
         1b:da:d1:11:b4:cc:ea:c7:ad:3b:cc:33:90:9b:7f:e9:41:37:
         b5:8d:4f:f7:e8:d9:d1:d6:ed:73:f1:b5:fb:ac:b9:87:29:3e:
         bd:81:c7:66:58:bf:ca:70:4d:c0:98:b4:01:1e:da:2e:d4:f8:
         b4:6b:57:04:96:ca:f4:6f:6f:30:de:52:88:81:ad:50:85:13:
         9e:c6:d3:a5:49:66:67:24:70:b8:51:88:f1:44:3a:35:58:45:
         56:b5:eb:58:77:45:4b:69:7e:fc:6c:ee:82:50:34:97:51:1a:
         00:cc:ca:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 19:25:20 2025 by rpki-client