Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft
File:                     AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft (raw, json)
Hash identifier:          d45hP1Ob1n6VQXHwjqq1gfJNx1cv8pTrKMKqZQUA11M=
Subject key identifier:   A7:A8:FC:0B:F0:33:23:5A:67:BB:A3:53:F7:46:B3:4D:FF:00:98:D0
Authority key identifier: AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6
Certificate issuer:       /CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6
Certificate serial:       2210902D989EBC90DCC298526A9A711321A56A94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft
Manifest number:          DB
Signing time:             Thu 01 May 2025 04:22:02 +0000
Manifest this update:     Thu 01 May 2025 04:17:02 +0000
Manifest next update:     Tue 06 May 2025 23:07:02 +0000
Files and hashes:         1: 3138312e3138392e3139322e302f31392d3234203d3e203237373932.roa (hash: iRcxfSfIghebD6QOPTeikJfgyLmeSFqaidY7uqEUWpw=)
                          2: 3139302e362e3131322e302f32312d3234203d3e203237373932.roa (hash: YrOx16+iIZvmiEo/ZK0LlKWcOdGc7EJ9RvaPsFWx40Q=)
                          3: AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl (hash: G4Hdi3n8trLLsIIZlDLrTj0mW9l2+kwHB9RrSYs/Dbk=)
                          4: 323830303a3561303a3a2f33322d3335203d3e203237373932.roa (hash: fMY9aGGR1i+J3ji8OBR1VAd6K1Ks5NePPEASVBvqcOc=)
                          5: 3137302e38342e3231322e302f32322d3234203d3e203237373932.roa (hash: w4u7sn4Br/SzlJWc1j5+t+BwDZV8XqI+m7Q7xmgOGGk=)
                          6: 3139302e362e39362e302f32302d3234203d3e203237373932.roa (hash: PVP6+Aif2LoGjckv2En5VjHWt+kJjk9EEFLgY48YCS8=)
                          7: 3230302e322e3132302e302f32312d3234203d3e203237373932.roa (hash: D5DMKHlHzw9CvA1rcnA1jSrkcOaXf2GeyYaX/Dm4vgg=)
                          8: 3134332e3230322e32342e302f32322d3234203d3e203237373932.roa (hash: RkicQZt3HFQKsXjR9WqZwJBaILj2KxHS+v5Qc/slrcQ=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 06 May 2025 14:36:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:10:90:2d:98:9e:bc:90:dc:c2:98:52:6a:9a:71:13:21:a5:6a:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6
        Validity
            Not Before: May  1 04:17:02 2025 GMT
            Not After : May  6 23:07:02 2025 GMT
        Subject: CN=A7A8FC0BF033235A67BBA353F746B34DFF0098D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:88:7e:80:80:12:de:70:30:79:7d:4f:89:87:
                    5f:14:ce:84:3a:44:d0:2e:aa:ae:71:c4:66:86:26:
                    70:f9:47:d9:2c:e4:e2:cc:ed:f4:b9:4c:0d:2d:81:
                    8b:87:b0:0e:38:73:22:e1:be:3e:5f:a2:6c:fd:15:
                    5e:e9:81:d7:d5:c8:b3:f6:00:48:e6:b1:af:cf:28:
                    e3:16:df:df:85:e9:28:1e:7c:a0:78:54:86:8c:2e:
                    65:98:4f:6a:96:46:79:67:0f:0d:56:f3:e8:88:7a:
                    14:9e:e5:2c:a0:ef:11:9a:dd:28:67:82:80:f1:4c:
                    23:ec:7f:46:bd:11:06:bb:17:13:59:02:5d:7e:55:
                    d9:48:40:cd:10:80:6a:46:e0:fe:47:3e:17:0b:f0:
                    02:76:79:69:a7:e9:c3:af:91:a2:dd:f5:04:d9:be:
                    37:76:9d:66:e1:51:6b:8c:eb:11:50:9a:2c:e8:17:
                    2c:06:ea:5d:98:a6:69:82:0e:24:67:28:a1:97:1b:
                    77:4f:86:07:1c:54:09:73:64:6f:8b:3f:6f:a9:7b:
                    e9:57:f5:fb:fb:71:64:9f:7c:e8:89:fd:e9:23:62:
                    7d:4c:91:b7:3e:12:ff:37:eb:61:18:30:c9:cc:fd:
                    2d:1c:7b:d1:a7:9e:00:de:6b:11:ef:fb:1c:04:25:
                    24:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A8:FC:0B:F0:33:23:5A:67:BB:A3:53:F7:46:B3:4D:FF:00:98:D0
            X509v3 Authority Key Identifier:
                keyid:AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:e4:4e:d8:77:41:14:22:aa:c3:68:c9:16:fe:af:de:7d:31:
         71:6f:32:28:5a:27:07:49:3c:ad:ef:28:1f:c4:59:ec:c5:8d:
         29:57:ae:2f:3d:54:bc:68:2f:7b:5f:a6:61:f4:6f:b4:5f:6e:
         4a:63:5b:48:d1:22:82:25:ca:39:08:b8:a8:1b:87:0f:05:e8:
         18:53:76:7c:23:5a:2c:c0:32:b6:b0:0f:c5:e3:47:1f:28:d4:
         4a:9e:0f:45:d4:97:19:45:bf:81:45:9d:13:48:e4:b9:b4:f0:
         cf:31:75:ba:4e:2f:9b:49:eb:eb:c3:c1:9b:23:11:77:65:66:
         d0:55:90:db:ee:4a:14:c6:78:7e:43:41:63:e5:0d:f1:36:e1:
         c5:df:1d:d7:f2:bd:fc:e8:83:37:07:85:0f:cd:79:82:71:c4:
         8b:7d:85:13:9e:de:d2:e4:a5:92:12:4d:82:b1:74:f1:26:86:
         86:26:6e:13:f4:e1:83:e3:cf:1c:2d:64:4f:02:ee:4c:8d:8f:
         c5:78:0c:28:ff:d9:18:9e:f3:33:63:2d:b6:ef:d8:50:90:84:
         01:77:99:0b:25:3e:7a:e1:1d:8e:9d:1b:68:7a:84:9f:bc:20:
         8b:81:ed:41:3c:ee:bc:63:aa:af:66:9d:6d:e5:a3:e5:c8:d8:
         c7:b2:e7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 10:20:29 2025 by rpki-client