Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.mft
File:                     CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.mft (raw, json)
Hash identifier:          lvqZURrrmt/QjdTwxLEttJomhvHYW7UljGNXx3c2kvk=
Subject key identifier:   62:2F:FA:D3:BA:4F:78:2C:6D:7F:31:91:DA:21:9E:50:64:52:9C:3D
Authority key identifier: CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C
Certificate issuer:       /CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C
Certificate serial:       38CBB8D06EFE2B70CA7DD6F2E20FB0AF35AACE18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.mft
Manifest number:          D0
Signing time:             Sun 22 Jun 2025 22:20:32 +0000
Manifest this update:     Sun 22 Jun 2025 22:15:32 +0000
Manifest next update:     Sat 28 Jun 2025 04:23:32 +0000
Files and hashes:         1: 34352e3233342e3138322e302f32342d3234203d3e20323636373634.roa (hash: cxX38JuDIil07IwkPPxUErhp3A5sAkszVoFl9wndO5M=)
                          2: 34352e3233342e3138312e302f32342d3234203d3e20323636373634.roa (hash: 4/4Fb3ZbZTL41S8++5em3waYYEQ8Ayslkkk9GPHLJqc=)
                          3: 34352e3233342e3138302e302f32322d3232203d3e20323636373634.roa (hash: 9MpxZIIYXNSlQNbWa2RPIowH8+lyZDguWSCEywpAgkE=)
                          4: 34352e3233342e3138322e302f32332d3233203d3e20323636373634.roa (hash: 3xEzIH5wzNKpUa+1AAC4WSh4jXK/xWtB9ARxCWM2L7Y=)
                          5: 34352e3233342e3138302e302f32332d3233203d3e20323636373634.roa (hash: +pQ5uyH6yTp1j0gbDDJk4QA9OV/ctQ19HN+YhlmjeQ8=)
                          6: 34352e3233342e3138332e302f32342d3234203d3e20323636373634.roa (hash: z2VzPl0oE7DE5WcNxVBj6vatmkLEPItD4p7xKBCV3Qk=)
                          7: 323830333a663732303a3a2f33322d3332203d3e20323636373634.roa (hash: eBQZgei+oe6V4dO+H4VvNM6xUzlI5q/HGvYHTjbTArs=)
                          8: CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl (hash: SryOynIgX5LByyD8PzJInwY7rOWCDgc6fbF48NspLxo=)
                          9: 34352e3233342e3138302e302f32342d3234203d3e20323636373634.roa (hash: bWtv4w9AV0KI1Vmc/3D46rXNEE9HFRb3CaRwz3ClqJo=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Jun 2025 21:24:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:cb:b8:d0:6e:fe:2b:70:ca:7d:d6:f2:e2:0f:b0:af:35:aa:ce:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C
        Validity
            Not Before: Jun 22 22:15:32 2025 GMT
            Not After : Jun 28 04:23:32 2025 GMT
        Subject: CN=622FFAD3BA4F782C6D7F3191DA219E5064529C3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8f:a9:4e:52:b5:75:b5:bd:b6:d8:f6:89:c0:
                    c0:8e:8e:a7:4c:cc:a8:96:46:11:79:be:93:1d:3a:
                    1a:37:9f:51:62:fe:09:f5:5e:25:b0:c4:fa:b0:c4:
                    ff:88:67:59:a0:4b:b7:44:72:53:bb:26:73:32:84:
                    49:e2:22:53:41:98:9f:10:e0:6e:9e:95:ca:fd:59:
                    f9:ab:32:04:bb:b1:89:c9:c3:5e:a6:7d:11:22:75:
                    48:7d:33:af:4c:2c:16:af:d0:e7:10:a0:82:ee:45:
                    3a:09:c8:11:3f:f5:35:0e:3e:0e:3d:51:00:0a:46:
                    3a:eb:9a:6e:70:e7:39:a7:06:a8:23:d4:06:e3:c4:
                    d4:98:ff:4d:c2:db:ce:3c:de:75:0f:b1:3d:d2:ba:
                    56:1d:34:37:bf:7a:51:db:dc:76:a2:0e:b8:23:16:
                    5d:75:ec:57:81:b1:81:aa:99:ce:94:52:71:22:e3:
                    5c:9f:01:b9:6c:18:73:d1:c4:68:26:00:a8:eb:a2:
                    32:62:a8:34:a1:31:24:ad:ad:ae:80:ba:7e:2e:a1:
                    5d:98:99:78:eb:b1:89:b2:05:36:34:01:f8:5d:95:
                    6f:0b:50:3b:8e:eb:d9:d2:3f:98:e4:b4:6f:d3:d6:
                    00:e9:1e:1e:86:43:39:40:5d:b3:13:47:3f:fc:31:
                    55:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2F:FA:D3:BA:4F:78:2C:6D:7F:31:91:DA:21:9E:50:64:52:9C:3D
            X509v3 Authority Key Identifier:
                keyid:CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:12:1c:b2:f3:ad:26:86:9a:6e:bc:63:0e:2b:be:e4:ad:b5:
         a5:6e:b0:84:a4:62:2b:79:04:cb:2b:bc:33:19:19:a4:49:9f:
         2c:20:43:32:93:43:77:3b:ba:31:a8:9e:16:af:02:28:6b:c8:
         5d:35:dd:72:78:36:55:82:a0:b3:a5:48:f2:d1:65:40:c0:51:
         7e:eb:c0:02:68:4a:c2:c1:16:0d:f8:cc:53:dc:3c:e6:a1:ce:
         9e:aa:23:34:bf:2e:6d:8c:44:33:f7:4a:5e:b8:0d:67:70:fa:
         e0:3f:f2:17:08:66:fe:87:f7:59:cd:b2:af:50:ed:12:f9:e4:
         2a:9c:3c:cb:53:07:d3:67:50:5d:1d:90:97:f0:90:e4:58:93:
         c9:6a:9b:16:94:e6:97:21:bc:32:45:44:47:bc:1a:de:69:7b:
         67:89:6f:ec:7e:81:3b:1b:1e:49:99:90:55:9e:ac:f9:1f:6c:
         03:b3:69:e5:96:3f:36:ba:ec:de:24:ad:8a:f6:74:59:81:0a:
         c4:8e:a1:92:50:3d:57:bf:68:55:08:d1:2c:06:eb:84:80:de:
         c5:35:2b:ab:b1:81:00:e1:fe:f7:98:9f:e3:c1:5d:c4:d6:19:
         47:ca:6d:04:ce:70:42:13:dc:e9:5c:45:1f:d2:26:f8:31:21:
         66:37:b4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 01:19:43 2025 by rpki-client