Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.mft
File:                     A070374834B30E4E1EAC2F337D7138EE06F6AB7A.mft (raw, json)
Hash identifier:          cLhEboAE39IIdCUI8dCjdxbNHEFjayHb7BO/0A1Z8FI=
Subject key identifier:   2C:9C:E9:17:C6:B1:99:19:17:7D:73:B0:4A:50:F7:2B:DD:F2:26:8E
Authority key identifier: A0:70:37:48:34:B3:0E:4E:1E:AC:2F:33:7D:71:38:EE:06:F6:AB:7A
Certificate issuer:       /CN=A070374834B30E4E1EAC2F337D7138EE06F6AB7A
Certificate serial:       43A5B8C7C325932365C7691004C00A64C48058B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.mft
Manifest number:          0136
Signing time:             Wed 05 Nov 2025 11:22:05 +0000
Manifest this update:     Wed 05 Nov 2025 11:17:05 +0000
Manifest next update:     Mon 10 Nov 2025 22:13:05 +0000
Files and hashes:         1: A070374834B30E4E1EAC2F337D7138EE06F6AB7A.crl (hash: /4/GLZ7gfIE6VZfCnaKtWO8D4Y/hg7+j1WtojNwgdrM=)
                          2: 34352e3233382e3135322e302f32322d3232203d3e20323636383434.roa (hash: OL3ODep5Y7fiUOEEp1/S6T1apx/uzK8cfaHC4pBSM8g=)
                          3: 34352e3233382e3135332e302f32342d3234203d3e20323636383434.roa (hash: sCmZHB8rgKCzabg443G0kLDhtxkhyHpmOk8/SeixXdo=)
                          4: 34352e3233382e3135352e302f32342d3234203d3e20323636383434.roa (hash: yJvqk3crMN2qacl9GslGTXfab6v0o2kfp9w9MDzwm70=)
                          5: 323830333a646361303a3a2f33322d3936203d3e20323636383434.roa (hash: 6Oh7whju3PnkY2v/swtMl5r83Bkk0QwApo/gpgkCMeo=)
                          6: 34352e3233382e3135322e302f32342d3234203d3e20323636383434.roa (hash: 6HpxVCjBFC6iCl4vVkEKxKs/cOVFTlWDe6NSX8fDVNI=)
                          7: 34352e3233382e3135342e302f32332d3233203d3e20323636383434.roa (hash: hhDR2zk1dW3VvXD+5O3z++tHejT2qgbu3Gmx7pWApjQ=)
                          8: 34352e3233382e3135322e302f32332d3233203d3e20323636383434.roa (hash: U1jMONuNbqeN+6hNkQfhdXoVfES3bnzOwJp4DwIuz3Y=)
                          9: 34352e3233382e3135342e302f32342d3234203d3e20323636383434.roa (hash: qLhfcepM1qAg8QBrsjIlUVd4LRY/yctov0y3C5YrDkg=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a5:b8:c7:c3:25:93:23:65:c7:69:10:04:c0:0a:64:c4:80:58:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A070374834B30E4E1EAC2F337D7138EE06F6AB7A
        Validity
            Not Before: Nov  5 11:17:05 2025 GMT
            Not After : Nov 10 22:13:05 2025 GMT
        Subject: CN=2C9CE917C6B19919177D73B04A50F72BDDF2268E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9d:0d:98:3a:6d:a8:f8:6f:fb:b5:8e:b8:2c:
                    cb:b0:92:b3:fb:b5:9d:64:af:10:62:ac:13:5d:e1:
                    13:c8:5f:0a:cc:ec:d4:e7:f6:cf:a4:cb:fb:1f:f2:
                    a2:0f:0d:0d:c4:aa:e1:fb:5a:55:ca:a4:36:51:2f:
                    34:95:55:8d:87:f4:7c:4e:90:cd:08:01:db:11:e9:
                    f2:6a:ca:98:a0:3e:b2:c9:36:b4:81:41:5b:f2:e9:
                    e6:1d:45:06:36:20:96:26:a2:47:bd:01:9d:2f:92:
                    1c:e0:0e:df:8f:7c:cc:42:72:6c:65:e8:3d:7a:ea:
                    48:ff:cd:1b:e8:b5:db:58:7d:9f:67:52:15:1d:09:
                    86:f7:14:47:b4:eb:3d:12:73:ac:28:63:44:ee:a8:
                    8b:a9:08:9c:6f:95:af:99:b4:f8:e7:2c:e9:3b:2f:
                    fc:77:10:2d:9b:2f:0d:6c:f4:0b:30:ea:02:1b:64:
                    8f:85:ed:b0:e3:9a:bb:f9:b6:94:81:2f:55:28:56:
                    de:02:8e:aa:0d:5e:8b:a9:b8:57:13:e2:a2:b3:98:
                    d8:32:22:cc:7c:06:d0:3c:59:a5:60:15:b1:49:47:
                    1d:c2:22:c4:1c:51:f6:7d:88:19:5c:c9:d7:5c:35:
                    04:a3:79:21:8f:70:f7:2d:71:2d:59:eb:c0:e2:75:
                    2c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9C:E9:17:C6:B1:99:19:17:7D:73:B0:4A:50:F7:2B:DD:F2:26:8E
            X509v3 Authority Key Identifier:
                keyid:A0:70:37:48:34:B3:0E:4E:1E:AC:2F:33:7D:71:38:EE:06:F6:AB:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:4c:4b:89:75:a9:c8:d7:e8:20:e3:69:b5:b1:34:e4:dd:47:
         4d:ea:95:6d:c1:a8:2b:a4:a6:88:06:fc:01:83:d6:9d:fa:8c:
         5d:75:b0:b1:dc:9c:33:19:fb:a0:d4:20:31:ea:22:11:87:3c:
         04:7a:93:5c:9e:db:68:7a:cc:75:2b:a6:cc:65:eb:aa:f5:3c:
         33:dc:a1:3b:31:01:38:65:4e:f8:70:93:b2:a1:c8:8e:1c:8f:
         76:a3:36:66:b4:f4:ea:8a:ff:c4:54:85:c8:b3:97:f4:d4:14:
         ca:8d:e4:ae:53:82:1c:01:24:48:60:58:9f:55:84:0e:f0:51:
         02:cb:9a:e8:50:34:b4:48:23:c7:ec:5f:46:ca:ec:63:66:5e:
         a1:84:9b:56:50:be:30:c7:ec:0b:6c:54:f7:4e:28:e7:06:cc:
         a5:1b:44:37:8e:fa:0f:f3:65:40:e0:78:75:10:0d:b7:0b:41:
         a7:62:38:37:8a:df:be:70:44:c7:ef:58:60:b8:9c:1d:03:b6:
         8c:1d:a5:bd:3c:f8:2c:ec:30:95:8e:0b:57:f8:69:b2:cd:86:
         8e:76:0a:6e:f0:85:ae:3a:4b:24:2a:0f:ab:cc:22:b4:ed:d4:
         67:8a:6f:3f:c7:0a:63:09:fa:10:00:9c:54:c0:b9:d7:ac:c4:
         33:1c:c4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:44:10 2025 by rpki-client