Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
File:                     cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft (raw, json)
Hash identifier:          XGW0CZz5zb7elbzJjq8GkMbhMwG/qTg2RpVM+D8R7cA=
Subject key identifier:   01:DB:CB:A6:27:2B:F9:EC:A1:C2:1E:A6:3C:B5:D8:AD:E5:50:96:11
Authority key identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98
Certificate issuer:       /CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798
Certificate serial:       22D9335C611F483128AA6181516C2CD7B6D9267A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
Manifest number:          15
Signing time:             Tue 05 Aug 2025 17:59:46 +0000
Manifest this update:     Tue 05 Aug 2025 17:59:46 +0000
Manifest next update:     Sat 09 Aug 2025 17:59:46 +0000
Files and hashes:         1: 79de1a10-540a-49e4-92f2-b8e81488ffd1.roa (hash: 9EtpUAtyskZh3MSgWEJQ5udG2Nps7JodHcnqePo0Xj4=)
                          2: cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl (hash: KuzjYTXP3XkESPHSppgkTzD2yZ1Xt1OKM3Gy0LuRlIA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 17:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d9:33:5c:61:1f:48:31:28:aa:61:81:51:6c:2c:d7:b6:d9:26:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798
        Validity
            Not Before: Aug  5 17:59:46 2025 GMT
            Not After : Aug  9 17:59:46 2025 GMT
        Subject: serialNumber=9d07047fa89887081c1d3f19339c3ec688d4ea50cf075583028b5c5f6864d941, CN=7b7e81e4-c981-4cca-be35-ec61f732415c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:aa:5c:e3:ef:b8:78:49:5e:13:ff:44:c9:26:
                    28:a7:ad:38:fe:11:29:93:dd:37:f6:5c:ec:5e:4b:
                    0b:59:91:74:8d:d6:45:72:b9:20:2b:7d:2e:9d:ae:
                    6d:3e:0d:0e:83:69:e6:a7:34:9d:53:3e:06:d5:8c:
                    21:44:2a:d3:90:c0:32:31:f1:be:74:9c:98:49:1b:
                    6b:d5:64:19:0d:7d:bf:41:54:53:c8:fb:3c:40:fb:
                    d0:a6:5c:d4:5d:0f:8f:48:61:16:81:86:47:69:67:
                    99:5c:07:37:e5:e3:f0:96:b9:77:56:71:9d:53:2c:
                    94:d5:0c:89:d7:b4:16:35:a2:ce:19:f8:35:28:db:
                    81:c5:86:8e:4a:14:ab:bc:38:50:e1:c0:77:67:a9:
                    61:2f:06:af:aa:6b:81:65:96:cb:a3:6f:60:3c:d8:
                    a3:a0:23:1d:e2:14:34:05:c8:8d:54:a4:c0:94:7e:
                    ce:b7:4f:59:9a:f3:3e:f9:3c:bf:55:3d:da:85:12:
                    62:fa:40:21:84:b8:77:1c:dc:a0:36:32:08:f6:c1:
                    85:8e:94:0f:93:47:6c:51:fe:e6:5a:82:64:ec:86:
                    c5:e8:b9:cc:66:78:b4:8a:dc:ff:a1:4d:9b:f3:a2:
                    38:fc:90:65:0a:60:37:80:89:57:08:13:47:4b:c0:
                    8a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DB:CB:A6:27:2B:F9:EC:A1:C2:1E:A6:3C:B5:D8:AD:E5:50:96:11
            X509v3 Authority Key Identifier:
                keyid:A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:17:05:20:4c:92:a1:dc:ad:7f:dd:91:a0:d1:c2:d5:b8:d8:
         65:be:6a:2e:7d:07:9e:6b:53:90:34:3d:95:f3:e3:11:5d:32:
         fe:d6:37:63:fe:36:07:d4:07:ee:fb:1b:a5:da:ce:b6:cd:8d:
         99:ff:27:25:f7:6b:92:30:47:ef:10:eb:3d:0c:5c:e2:be:20:
         d9:13:c4:55:be:15:c1:ed:c2:92:1f:b0:50:c3:2b:97:98:12:
         5d:a6:3c:2b:ed:13:62:47:4b:2f:d9:8d:93:04:c9:a0:14:11:
         5d:25:8c:13:5c:c2:e6:e5:b3:6c:0c:dc:e7:45:15:35:81:6c:
         16:dd:f3:00:b6:9b:93:1c:6e:ab:68:6b:64:4e:72:8f:c0:4a:
         40:8e:63:54:4a:cc:f1:70:37:70:00:6a:47:6e:a9:81:c6:6e:
         98:b7:38:f6:da:d4:0c:c2:e0:d6:38:be:ba:4c:7d:01:a7:f7:
         d5:5f:94:3e:ef:d9:dc:71:c2:45:8b:e5:50:d6:df:77:28:8d:
         c4:ea:de:1b:bd:55:8a:e3:15:d5:b1:73:ff:3d:22:e7:ef:fd:
         09:6f:0a:95:6b:f3:6a:b8:6b:8b:e5:a4:6b:b7:82:09:b4:91:
         b4:52:29:04:9f:fd:fa:c5:e3:b7:49:80:27:33:ed:19:b7:d4:
         31:7b:a1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:08:40 2025 by rpki-client