Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.mft
File:                     895B4D927A602F9CA222D8FCAF756DD4A38DC945.mft (raw, json)
Hash identifier:          Da7OPcs378BpHKzf2x8+b7FkezChGPjsTa+ugX+VKyo=
Subject key identifier:   1E:83:32:B2:27:6D:56:D6:71:25:36:39:79:A2:20:29:55:28:8E:7B
Authority key identifier: 89:5B:4D:92:7A:60:2F:9C:A2:22:D8:FC:AF:75:6D:D4:A3:8D:C9:45
Certificate issuer:       /CN=895B4D927A602F9CA222D8FCAF756DD4A38DC945
Certificate serial:       771C3B74774FB17A1E6D3F3B0654C106F41345B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.mft
Manifest number:          A8
Signing time:             Thu 30 Jan 2025 23:48:17 +0000
Manifest this update:     Thu 30 Jan 2025 23:43:17 +0000
Manifest next update:     Tue 04 Feb 2025 00:02:17 +0000
Files and hashes:         1: 323830333a313163303a3a2f33322d3438203d3e20323635363835.roa (hash: M3MuPKKdfX9wlBUix67ThDEun6Gi1soxz1Hk1ybtqzw=)
                          2: 34352e352e32332e302f32342d3234203d3e20323733303434.roa (hash: NbQZj2LDbEUUrMq2OJ5Xs1FhAPy2YHC7YUGXx2G56aM=)
                          3: 34352e352e32322e302f32342d3234203d3e20323635363835.roa (hash: 9z6kW+QL+XInd0lv4whjIDgZyCGAEXOSouR8AK/Tcv0=)
                          4: 895B4D927A602F9CA222D8FCAF756DD4A38DC945.crl (hash: +7d/SfYXr4x0H3w0ksGAHp1cM2K5C5tvX7aa4sgB/ak=)
                          5: 34352e352e32312e302f32342d3234203d3e20323635363835.roa (hash: DHFyaBiQ2yMF8z3tTGnMYGcmpYOKzSMzD4OnCvJ9DWI=)
                          6: 34352e352e32302e302f32342d3234203d3e20323635363835.roa (hash: V47ergE+ZSuScuLgwCqtN1p031vbH3uvJavn5Mihu8U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:1c:3b:74:77:4f:b1:7a:1e:6d:3f:3b:06:54:c1:06:f4:13:45:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=895B4D927A602F9CA222D8FCAF756DD4A38DC945
        Validity
            Not Before: Jan 30 23:43:17 2025 GMT
            Not After : Feb  4 00:02:17 2025 GMT
        Subject: CN=1E8332B2276D56D67125363979A2202955288E7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2e:62:a5:7c:a0:9e:d7:c2:25:2e:b3:dc:91:
                    9a:e1:62:aa:ee:be:54:d3:4d:f4:39:0c:8b:c5:ba:
                    99:0b:4d:31:52:4f:d8:c7:7a:03:88:bb:57:86:9f:
                    d9:af:63:80:6b:15:07:2c:60:fe:02:3c:3d:44:4d:
                    32:d3:97:81:d7:48:7b:f4:ed:54:cf:cb:f9:d5:69:
                    4e:94:e9:3f:ff:2b:9f:e0:02:a4:f6:58:ea:b5:f9:
                    47:22:db:af:6f:79:eb:3b:b5:8e:53:1d:7e:7e:50:
                    f6:78:75:fb:76:7f:dc:a4:99:cb:f7:04:50:7b:d1:
                    c4:3d:f4:44:e0:23:38:d6:fd:ab:7f:50:7c:3f:a6:
                    1e:82:8c:f3:e2:9d:93:89:a3:17:71:dc:c7:13:cf:
                    b8:06:d4:cc:bb:30:b6:c1:b8:86:62:06:f8:32:e5:
                    15:aa:30:ab:f1:ee:56:d5:60:1b:36:60:3a:9b:28:
                    59:11:29:bb:e2:98:6d:87:dc:ad:fa:86:66:e1:b1:
                    e7:68:3a:1b:d2:1a:42:57:e1:51:4c:6e:18:39:c5:
                    cc:26:61:7f:fa:fe:36:f7:9e:63:f3:cf:49:d2:3c:
                    57:d5:9c:47:80:8a:f3:20:d8:62:57:9d:be:5a:00:
                    af:34:55:b8:17:8c:3b:27:96:3f:48:7f:44:4c:00:
                    07:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:83:32:B2:27:6D:56:D6:71:25:36:39:79:A2:20:29:55:28:8E:7B
            X509v3 Authority Key Identifier:
                keyid:89:5B:4D:92:7A:60:2F:9C:A2:22:D8:FC:AF:75:6D:D4:A3:8D:C9:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:e5:1e:8d:84:1e:6b:be:a9:74:16:d1:a4:d1:ae:73:f4:96:
         81:78:af:61:95:19:2f:c5:64:a9:31:0e:39:29:74:c5:9b:36:
         21:5d:00:87:4c:c1:5f:41:e2:e2:a5:37:44:13:b5:fd:b8:00:
         68:4f:5d:4e:3b:85:97:1b:7a:1e:29:f1:24:41:c1:30:01:0b:
         93:f7:88:a4:00:4a:6e:4a:b8:38:a0:27:31:dc:3d:7e:e8:c2:
         b0:01:42:e7:6e:c9:9d:37:4c:f9:88:9d:97:4b:cf:44:f6:f1:
         cb:aa:7d:ac:81:80:54:3d:43:27:b2:26:8f:72:aa:f6:d9:d6:
         ba:8c:cf:c4:1d:e4:94:35:8c:79:9c:fb:cd:23:86:4b:a8:e6:
         8f:ec:64:8e:0a:82:e7:40:24:bf:cd:4d:22:eb:fe:af:bb:d4:
         58:2f:a3:72:56:4b:56:f2:f7:c0:81:70:fe:6f:fa:f1:c7:b7:
         05:2d:5c:56:e3:60:c1:79:36:e6:80:f3:90:ba:5d:e3:75:84:
         d7:6b:03:47:0b:31:f9:a8:f2:f0:62:de:20:29:b4:0f:9d:65:
         c4:f2:86:6f:b4:90:cd:50:85:d2:2d:dc:d6:0c:e0:4c:82:9c:
         55:b6:d9:f1:ca:f3:4d:99:0f:f5:6a:04:b0:61:60:16:ea:7b:
         b3:ea:02:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:25:17 2025 by rpki-client