Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.mft
File:                     420B44E3D543CA237CB6BC9020FEC4357D75D278.mft (raw, json)
Hash identifier:          nQ1UCL003VGKClKmf8QB+lagaHQkTGBzjAKINqRJGeg=
Subject key identifier:   8E:59:0D:E2:6F:A0:63:E3:26:4E:7C:B6:7E:A8:64:D0:54:D2:9E:7C
Authority key identifier: 42:0B:44:E3:D5:43:CA:23:7C:B6:BC:90:20:FE:C4:35:7D:75:D2:78
Certificate issuer:       /CN=420B44E3D543CA237CB6BC9020FEC4357D75D278
Certificate serial:       29F17C4E327EE19C91C47EAB2AEE8D7A58B0DAAA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.mft
Manifest number:          DE
Signing time:             Sun 04 May 2025 22:25:54 +0000
Manifest this update:     Sun 04 May 2025 22:20:54 +0000
Manifest next update:     Sat 10 May 2025 13:30:54 +0000
Files and hashes:         1: 323830333a663836303a3a2f33322d3438203d3e20323632353839.roa (hash: AYJunXWOaZzPW7GNffbz2hS/zRX/ILxXGvW7p+BaLOg=)
                          2: 420B44E3D543CA237CB6BC9020FEC4357D75D278.crl (hash: XUlHWUHo8QRRbnMbOv11Wo+TujiaxoTwpML3gsJCaBE=)
                          3: 323830333a663836303a3a2f33322d3438203d3e20323732393935.roa (hash: lua80lqZs3pnNPzwC8YM5I/4s8xiZPbTcpo2byV9anA=)
                          4: 34352e3137332e31302e302f32332d3234203d3e20323732393935.roa (hash: bOs7kcdOXaU0+s3i+H7IAYDD9Y1iXh5X6R1+m3hcO7k=)
                          5: 34352e3137332e31302e302f32332d3234203d3e20323632353839.roa (hash: kazJYo39sP5p22aozbqs/gxJAGWy0rZvU8tXXuY2LlE=)
                          6: 34352e3137332e392e302f32342d3234203d3e20323732393935.roa (hash: k0iN4XJYUJqNfRCXjrL68TShISbFe8R2TaAS6n0LHeg=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 01:54:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f1:7c:4e:32:7e:e1:9c:91:c4:7e:ab:2a:ee:8d:7a:58:b0:da:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420B44E3D543CA237CB6BC9020FEC4357D75D278
        Validity
            Not Before: May  4 22:20:54 2025 GMT
            Not After : May 10 13:30:54 2025 GMT
        Subject: CN=8E590DE26FA063E3264E7CB67EA864D054D29E7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3d:6e:b8:09:d0:58:b1:5d:69:5d:a3:01:f3:
                    53:d3:e8:eb:40:fb:fa:7b:c3:d9:46:ee:50:da:4e:
                    b0:ae:6f:e7:33:66:11:8e:69:b2:b4:3f:8e:7d:0e:
                    af:20:ba:c6:c7:5c:6f:9c:81:9e:eb:e5:2d:14:dd:
                    ed:af:43:ad:5d:7a:26:2e:07:e8:b6:98:90:df:52:
                    b9:61:8b:d9:44:97:1f:5b:85:cb:60:9d:8d:6c:01:
                    9c:0a:57:65:30:7e:67:d5:a3:36:2f:e1:d3:80:57:
                    e4:34:d1:e0:7e:5f:1a:79:8e:14:62:12:38:52:e7:
                    aa:ed:63:cd:54:65:02:8a:8d:8f:f9:a9:b3:f4:56:
                    3a:60:ef:67:a5:a1:a5:0e:cf:32:58:48:39:ab:47:
                    df:e9:77:75:24:38:d8:19:50:1d:7a:9d:1e:c5:9a:
                    a4:6e:56:ce:a6:8a:c5:dd:25:90:22:68:7d:ae:3a:
                    87:d1:ce:6a:58:22:4c:04:f7:10:45:e3:bc:88:ad:
                    7c:47:cb:40:25:0a:35:02:94:b0:0e:e3:b2:89:93:
                    f8:85:5e:bd:94:e8:7f:6c:39:9a:86:54:72:83:47:
                    d0:b3:72:26:8f:40:9f:ec:20:9b:af:f1:f8:df:45:
                    83:9d:81:eb:f0:c4:f2:69:29:9e:7c:dd:cc:8a:ee:
                    e2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:59:0D:E2:6F:A0:63:E3:26:4E:7C:B6:7E:A8:64:D0:54:D2:9E:7C
            X509v3 Authority Key Identifier:
                keyid:42:0B:44:E3:D5:43:CA:23:7C:B6:BC:90:20:FE:C4:35:7D:75:D2:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:d7:32:bd:be:7b:3b:31:43:95:b7:16:bb:b1:2f:34:c6:3c:
         30:af:e7:f5:17:4b:8b:4f:cf:2f:40:5c:32:3d:b9:82:8d:22:
         76:87:c7:96:1d:0a:62:d2:70:af:3c:b7:81:0d:2b:b6:bf:95:
         4c:eb:5a:63:cc:cc:59:08:ac:74:fe:3f:70:57:cf:98:93:97:
         21:06:1c:0e:a7:63:b6:80:38:73:3f:f5:26:91:bb:79:77:62:
         51:95:36:76:99:0b:02:38:9e:83:12:98:91:4c:7d:83:6b:c4:
         c6:4f:54:6b:2e:71:22:ca:dc:f3:7e:a5:88:74:68:56:a7:14:
         51:ff:63:e7:45:c3:99:c0:02:d4:ff:05:6b:b4:cc:57:12:61:
         be:38:a3:ff:84:44:95:9a:93:d2:6a:a5:87:db:5a:07:21:9f:
         d8:89:26:da:1d:ef:06:dc:62:7a:fb:28:99:90:00:64:e6:9d:
         f2:f5:d3:5a:46:cf:b8:22:92:91:7c:c0:80:ff:6a:e5:83:42:
         99:89:a6:99:f7:61:53:f5:3d:84:46:75:bd:4a:f0:23:30:69:
         31:10:7e:a1:9a:57:c3:2d:95:72:91:64:e6:f0:d9:9c:d8:b5:
         46:b6:f0:06:71:f1:22:fb:9d:21:da:8d:2f:4a:cb:7d:f8:f3:
         b5:ab:69:82
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUKfF8TjJ+4ZyRxH6rKu6Neliw2qowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwQjQ0RTNENTQzQ0EyMzdDQjZCQzkwMjBGRUM0MzU3
RDc1RDI3ODAeFw0yNTA1MDQyMjIwNTRaFw0yNTA1MTAxMzMwNTRaMDMxMTAvBgNV
BAMTKDhFNTkwREUyNkZBMDYzRTMyNjRFN0NCNjdFQTg2NEQwNTREMjlFN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCePW64CdBYsV1pXaMB81PT6OtA
+/p7w9lG7lDaTrCub+czZhGOabK0P459Dq8gusbHXG+cgZ7r5S0U3e2vQ61deiYu
B+i2mJDfUrlhi9lElx9bhctgnY1sAZwKV2UwfmfVozYv4dOAV+Q00eB+Xxp5jhRi
EjhS56rtY81UZQKKjY/5qbP0Vjpg72eloaUOzzJYSDmrR9/pd3UkONgZUB16nR7F
mqRuVs6misXdJZAiaH2uOofRzmpYIkwE9xBF47yIrXxHy0AlCjUClLAO47KJk/iF
Xr2U6H9sOZqGVHKDR9CzciaPQJ/sIJuv8fjfRYOdgevwxPJpKZ583cyK7uJRAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUjlkN4m+gY+MmTny2fqhk0FTSnnwwHwYDVR0j
BBgwFoAUQgtE49VDyiN8tryQIP7ENX110ngwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GN0I5NUYxRERCOUUzQzQyNDJFRTM2QkUwRTNCMUNFM0ND
RkVCMDBGODk1MDhDMUQ3RTc1NTk2RDNEMTEyRURFLzAvNDIwQjQ0RTNENTQzQ0Ey
MzdDQjZCQzkwMjBGRUM0MzU3RDc1RDI3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MjBCNDRFM0Q1NDNDQTIzN0NC
NkJDOTAyMEZFQzQzNTdENzVEMjc4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjdCOTVGMUREQjlFM0M0MjQyRUUzNkJFMEUzQjFDRTNDQ0ZFQjAwRjg5
NTA4QzFEN0U3NTU5NkQzRDExMkVERS8wLzQyMEI0NEUzRDU0M0NBMjM3Q0I2QkM5
MDIwRkVDNDM1N0Q3NUQyNzgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA/1zK9vns7MUOVtxa7sS80xjww
r+f1F0uLT88vQFwyPbmCjSJ2h8eWHQpi0nCvPLeBDSu2v5VM61pjzMxZCKx0/j9w
V8+Yk5chBhwOp2O2gDhzP/Umkbt5d2JRlTZ2mQsCOJ6DEpiRTH2Da8TGT1RrLnEi
ytzzfqWIdGhWpxRR/2PnRcOZwALU/wVrtMxXEmG+OKP/hESVmpPSaqWH21oHIZ/Y
iSbaHe8G3GJ6+yiZkABk5p3y9dNaRs+4IpKRfMCA/2rlg0KZiaaZ92FT9T2ERnW9
SvAjMGkxEH6hmlfDLZVykWTm8Nmc2LVGtvAGcfEi+50h2o0vSst9+PO1q2mC
-----END CERTIFICATE-----
Generated at Tue May 6 17:33:21 2025 by rpki-client