Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE4F4B537633F057E5D7A50F05241B24ECB6101701C1CD692F3E7A681925BE62/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.mft
File:                     958A517F1B57F15CAC71A4ABE5A03A21F805ED14.mft (raw, json)
Hash identifier:          LN345MwCxy3s3JcVqygFO5dQf6ogPGX8CHcAaxqpfWo=
Subject key identifier:   CB:86:F4:C7:78:3B:69:C2:DA:A3:62:BF:D7:79:5D:F7:F6:F6:CE:C5
Authority key identifier: 95:8A:51:7F:1B:57:F1:5C:AC:71:A4:AB:E5:A0:3A:21:F8:05:ED:14
Certificate issuer:       /CN=958A517F1B57F15CAC71A4ABE5A03A21F805ED14
Certificate serial:       22115DEDC03C2D7FC925B8BA6C43790036093E88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE4F4B537633F057E5D7A50F05241B24ECB6101701C1CD692F3E7A681925BE62/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.mft
Manifest number:          A6
Signing time:             Tue 04 Nov 2025 08:47:37 +0000
Manifest this update:     Tue 04 Nov 2025 08:42:37 +0000
Manifest next update:     Sun 09 Nov 2025 05:57:37 +0000
Files and hashes:         1: 958A517F1B57F15CAC71A4ABE5A03A21F805ED14.crl (hash: +2feBSPjdZjdOCj3tndpxWGcCQNHums+g2A8bdYT3RE=)
                          2: 323830333a313064303a3a2f33322d3332203d3e20323733393639.roa (hash: WiMHprUViZs7dpSbMFw8ZgT/J4LNEB/rSu43C24YJB8=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE4F4B537633F057E5D7A50F05241B24ECB6101701C1CD692F3E7A681925BE62/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE4F4B537633F057E5D7A50F05241B24ECB6101701C1CD692F3E7A681925BE62/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:11:5d:ed:c0:3c:2d:7f:c9:25:b8:ba:6c:43:79:00:36:09:3e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958A517F1B57F15CAC71A4ABE5A03A21F805ED14
        Validity
            Not Before: Nov  4 08:42:37 2025 GMT
            Not After : Nov  9 05:57:37 2025 GMT
        Subject: CN=CB86F4C7783B69C2DAA362BFD7795DF7F6F6CEC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7b:42:18:7c:8e:61:3a:bf:e4:71:43:78:db:
                    6b:c3:be:1e:e1:49:10:41:26:4a:a2:42:8a:0b:38:
                    48:19:8c:35:d6:a9:cc:5c:10:51:9d:f1:00:f2:f0:
                    90:a5:54:78:d0:38:71:6e:c0:d3:34:cc:0a:3c:89:
                    85:c8:b7:fc:89:25:e3:15:66:3d:de:51:9f:62:1a:
                    a4:c0:17:7b:87:c8:bc:27:f4:81:c7:2d:cb:bd:76:
                    5a:fc:be:87:5d:0c:b2:22:16:62:a0:12:08:05:e7:
                    cd:b6:bf:a0:99:18:50:0e:8f:b1:63:9c:79:7f:84:
                    b7:c5:ec:14:d3:4e:64:57:5a:1d:75:07:44:7a:24:
                    59:6f:78:67:11:10:3f:b8:e0:f2:2b:81:b4:08:37:
                    b4:da:71:56:c8:d0:66:7b:64:d2:8b:27:5e:57:c1:
                    cf:86:bd:13:3a:7c:b9:bd:bb:ab:59:68:7f:c1:c7:
                    36:42:0e:4e:7a:0f:f8:7f:b6:9a:b6:ba:d4:ee:ba:
                    2c:c6:77:d8:8d:93:1d:cc:cd:58:4a:99:44:f0:09:
                    c1:77:71:89:2f:a2:d7:fc:9d:8e:0f:32:b9:47:d6:
                    36:a7:4b:eb:65:74:4c:5d:5f:2b:3d:9b:39:d7:77:
                    2a:68:32:98:ed:c9:65:00:05:6d:61:c0:e2:10:02:
                    a7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:86:F4:C7:78:3B:69:C2:DA:A3:62:BF:D7:79:5D:F7:F6:F6:CE:C5
            X509v3 Authority Key Identifier:
                keyid:95:8A:51:7F:1B:57:F1:5C:AC:71:A4:AB:E5:A0:3A:21:F8:05:ED:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE4F4B537633F057E5D7A50F05241B24ECB6101701C1CD692F3E7A681925BE62/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE4F4B537633F057E5D7A50F05241B24ECB6101701C1CD692F3E7A681925BE62/0/958A517F1B57F15CAC71A4ABE5A03A21F805ED14.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:de:e2:5e:89:ac:5e:80:a8:ae:a1:3b:aa:2a:1e:bf:4c:04:
         9f:fb:60:6b:5a:b0:c1:fc:fd:06:b7:1b:5b:62:b2:24:6c:07:
         f7:66:e6:38:70:ce:a7:1a:c1:04:2d:34:62:00:13:ee:07:26:
         d4:e8:a4:33:17:7c:c0:fc:ed:b4:fc:9a:be:53:59:64:13:3b:
         c5:10:44:c4:c8:ba:38:7a:e6:ed:72:fe:cc:39:73:97:6b:11:
         5f:9d:31:75:7c:bc:43:00:49:be:3a:af:10:6e:97:f6:c5:c7:
         27:ee:32:76:cf:71:b8:a4:88:7a:46:be:d4:57:11:f9:d0:d4:
         75:ab:07:f0:e0:8d:e3:0a:23:1c:e3:eb:d8:8a:ce:e7:53:ba:
         c7:d6:9d:26:91:26:45:f4:24:4e:82:0c:4f:a2:ad:40:93:0e:
         cb:9c:5f:eb:5d:3f:9c:32:48:be:a2:2b:84:59:09:04:2c:d0:
         f8:d8:1b:e8:14:86:7e:91:93:ca:ec:63:87:6d:5d:8a:c1:04:
         6e:26:f7:49:1c:10:32:47:6f:e7:20:f7:0d:49:a7:4f:1f:6a:
         76:c7:91:6b:38:a3:0a:49:2b:2e:27:57:f8:61:29:94:99:3b:
         7b:4e:a8:53:8d:cf:8b:ab:38:b0:b3:33:6e:91:36:25:70:f3:
         02:c4:86:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:49:12 2025 by rpki-client