Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.mft
File:                     D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.mft (raw, json)
Hash identifier:          bI9BslG86Q7j3635tKHgegEHyHjhGmGOfG3sp7BOawo=
Subject key identifier:   D6:25:21:AF:F8:89:FF:15:B5:77:B4:8E:3B:53:E2:3B:87:5B:0A:90
Authority key identifier: D7:C2:C8:0C:B5:9C:8E:33:C7:BB:4E:D1:0B:EA:57:E2:1C:E7:6C:EE
Certificate issuer:       /CN=D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE
Certificate serial:       3236E93F714F5BABDA0ED8CF2F29EB3104397832
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.mft
Manifest number:          D7
Signing time:             Wed 07 May 2025 02:42:00 +0000
Manifest this update:     Wed 07 May 2025 02:37:00 +0000
Manifest next update:     Mon 12 May 2025 08:57:00 +0000
Files and hashes:         1: 323830333a336365303a3a2f33322d3332203d3e20323639393135.roa (hash: EW5/U1SDjlIkCCd0SSMXKzhpnkPvbQgYu2Pg6zQD46s=)
                          2: 34352e3138372e38392e302f32342d3234203d3e20323639393135.roa (hash: eH4mEzmSIlFH4LH2Sb1+aclqCYyUA34THwvryUcZUcU=)
                          3: 34352e3138392e3233332e302f32342d3234203d3e20323639393135.roa (hash: zrbUrDsAcyNmxo8fdPCrK4CIjwGQFu1IQ6Lzczt1A5U=)
                          4: 34352e3138392e3233322e302f32332d3233203d3e20323639393135.roa (hash: 5+0feaWnWVqOge2khHl2R9u7pQ02o9VCNk2gGX2DlsQ=)
                          5: 34352e3138392e3233332e302f32342d3234203d3e203130373533.roa (hash: 1DfrxIUcmFdLvx+0CYxYpFbtYC2tgWnePALDvqsz1OY=)
                          6: 34352e3138392e3233322e302f32342d3234203d3e20323639393135.roa (hash: uQDnVHdtB0qXC0HOj6lYDQXopqo7nCO59AQFm9IVTJs=)
                          7: D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.crl (hash: MBfdypWSOM/9IKP8gDvCHvpcIltn5oPpNTQql95ctlE=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 08:57:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:36:e9:3f:71:4f:5b:ab:da:0e:d8:cf:2f:29:eb:31:04:39:78:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE
        Validity
            Not Before: May  7 02:37:00 2025 GMT
            Not After : May 12 08:57:00 2025 GMT
        Subject: CN=D62521AFF889FF15B577B48E3B53E23B875B0A90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b0:74:05:92:9c:ee:5a:8b:07:f4:f4:a7:7a:
                    b3:b9:07:2b:f1:54:4d:9e:b5:1c:14:c7:55:39:e7:
                    1f:ae:ba:3d:c5:87:19:ca:ab:27:d6:35:85:ec:50:
                    72:c4:7a:30:04:65:09:3c:7a:7c:6f:62:1e:49:b4:
                    ae:93:61:3c:0a:d8:61:f4:3f:10:44:3f:0b:cb:a8:
                    69:73:28:76:f0:04:8f:b8:23:db:ed:41:5a:3f:35:
                    11:5d:b8:fd:dc:11:73:80:c4:35:08:86:93:30:c6:
                    eb:89:0e:73:ef:c0:f0:9f:43:3f:cb:cd:0e:a3:40:
                    c5:e3:e1:a4:8c:ac:a1:1d:69:63:40:e1:38:29:92:
                    06:4c:66:fd:27:ef:18:a9:2f:c4:d7:aa:22:85:ee:
                    3f:ed:a3:fc:60:a9:5b:25:c9:91:ff:90:07:a3:26:
                    8f:81:b2:c5:da:cd:43:51:b2:ab:c4:8e:1d:5b:d1:
                    b4:54:78:a3:cb:2b:02:82:6d:b1:7e:aa:91:cc:04:
                    f5:e9:3e:19:23:42:6a:f7:2b:e6:cd:20:ef:93:b5:
                    9a:35:b5:9c:62:42:41:6f:a4:81:78:01:73:9a:96:
                    fa:ec:97:60:72:6b:fd:49:4e:96:12:9b:09:17:49:
                    5c:e1:c6:1a:ce:d6:8b:0b:b1:b9:3a:c7:88:fb:77:
                    38:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:25:21:AF:F8:89:FF:15:B5:77:B4:8E:3B:53:E2:3B:87:5B:0A:90
            X509v3 Authority Key Identifier:
                keyid:D7:C2:C8:0C:B5:9C:8E:33:C7:BB:4E:D1:0B:EA:57:E2:1C:E7:6C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:7d:76:75:4b:8d:b3:3e:6b:8f:9a:27:b7:c7:9b:ef:98:bf:
         bf:d1:f2:df:ee:74:bf:39:e3:bc:e4:f3:b2:ae:21:85:54:93:
         bb:96:9f:ae:18:10:dc:44:a7:6c:25:f0:d0:0e:d4:11:74:54:
         32:b7:d3:b4:30:aa:73:f9:d2:60:ee:f2:0b:49:02:bd:3c:80:
         18:4e:0d:c9:b6:e3:85:f0:bc:43:45:2e:ac:4a:db:fa:f5:0c:
         58:3e:d5:08:f8:83:82:b7:32:81:6a:e0:10:a8:33:8e:5d:8e:
         6e:bd:77:6c:be:a2:7e:36:cb:46:54:ce:b4:50:04:7c:69:db:
         04:69:50:5c:41:2a:7e:09:e4:91:f7:a5:7a:99:06:62:ec:72:
         d5:a4:cc:4b:18:fd:73:6e:98:bd:34:7c:1c:54:7e:c0:6d:5d:
         48:44:f5:17:48:94:98:68:51:60:e2:d4:8a:eb:de:26:44:12:
         aa:40:7a:42:54:1b:43:64:9b:41:b0:03:d7:87:5d:82:e0:04:
         8e:66:85:ae:7f:c0:02:3d:58:3b:95:4d:13:26:6f:91:b5:55:
         87:5f:a0:d6:7f:4a:6f:f2:39:ff:2e:19:eb:9d:6f:29:54:34:
         ed:29:11:9e:57:73:22:e6:f6:24:be:e1:e8:55:72:d5:df:5d:
         1e:df:ec:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:41:24 2025 by rpki-client