Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.mft
File:                     3D2C065C974E700B1369EDF4ADBE1BD11272B09A.mft (raw, json)
Hash identifier:          lVXhx3iIDI6Htr86pChH+b2A7kzitiPWIWuLVSFL150=
Subject key identifier:   A9:26:9F:A1:EB:FE:60:30:CF:F7:EB:6A:31:13:D3:80:B6:12:69:7C
Authority key identifier: 3D:2C:06:5C:97:4E:70:0B:13:69:ED:F4:AD:BE:1B:D1:12:72:B0:9A
Certificate issuer:       /CN=3D2C065C974E700B1369EDF4ADBE1BD11272B09A
Certificate serial:       6F98DDBE2D85AF220D4D9E1F0EA9E16CE6A0CDD3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.mft
Manifest number:          AA
Signing time:             Fri 31 Jan 2025 16:08:23 +0000
Manifest this update:     Fri 31 Jan 2025 16:03:23 +0000
Manifest next update:     Tue 04 Feb 2025 20:58:23 +0000
Files and hashes:         1: 3138362e32362e3132382e302f31372d3230203d3e203237383839.roa (hash: vyGH3wGkO4s1wzOEZhqbY9AD0H0w7puavYvhdkw99+Q=)
                          2: 3138312e33342e302e302f31352d3230203d3e203237383839.roa (hash: Iijk51IeoTO6USLRSRUHiXHWsV6YaHqJTElVBA6AD0Q=)
                          3: 3230312e3233382e302e302f31382d3234203d3e203237383839.roa (hash: 7M99pwpW2R/rFrH7oVVhBLQ5kclZw3AW0tMQrAAAfic=)
                          4: 3138362e32362e302e302f31382d3230203d3e203237383839.roa (hash: xu7FYtT9PxFvye5Jv3qPF1tQY1VYSHVUK78K50PGILQ=)
                          5: 3138312e33342e302e302f31352d3135203d3e2038303438.roa (hash: GK/W221Le21UbC/8dRM1y9HiZ1/i6Oz3QJMV/+plpbA=)
                          6: 3138312e31372e302e302f31362d3230203d3e203237383839.roa (hash: b9KmO0wBQF72THJFCPEIDW+P/b/Ex1yS5OV2JsiJ/kc=)
                          7: 3D2C065C974E700B1369EDF4ADBE1BD11272B09A.crl (hash: xGyR0BszQErgfRzB+ZIbDHVGAtYgJNyujQMln42ON8A=)
                          8: 323830303a3530303a3a2f33322d3332203d3e203237383839.roa (hash: RYfkhznsmCe0nU4L3de6pBjqC5cCilhyTh8DhK7SF6k=)
                          9: 3230302e3130372e3139322e302f32312d3231203d3e203237383839.roa (hash: ISQLbG6pkh+r8GAASqGhoM7sm5nwLjipzcmQ8wW41CM=)
                          10: 3138312e31382e302e302f31352d3230203d3e203237383839.roa (hash: QwhVEVmEAZXk3kVK9P2yfsGMZTSOOCHSa4QGJluVinI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:98:dd:be:2d:85:af:22:0d:4d:9e:1f:0e:a9:e1:6c:e6:a0:cd:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D2C065C974E700B1369EDF4ADBE1BD11272B09A
        Validity
            Not Before: Jan 31 16:03:23 2025 GMT
            Not After : Feb  4 20:58:23 2025 GMT
        Subject: CN=A9269FA1EBFE6030CFF7EB6A3113D380B612697C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9d:8e:c2:a5:a2:8c:c3:0c:58:10:27:47:b1:
                    5f:7a:3e:f3:c3:23:95:c4:e5:58:ba:c8:be:c1:7f:
                    13:0b:6f:40:61:ef:19:a5:70:0a:89:2d:0c:7c:a0:
                    b1:90:78:75:fb:c5:98:7d:b7:6a:c4:b9:89:48:21:
                    13:94:cc:0f:5a:2b:ae:5b:2f:bb:75:73:ba:99:5f:
                    c8:2f:64:d7:05:7d:05:1e:fa:47:3b:d7:1d:49:e6:
                    b4:fc:51:f3:90:86:c1:7d:13:3f:d6:81:83:8f:40:
                    54:24:e3:fa:8a:2d:94:01:60:9d:3f:3e:b5:6f:a7:
                    dc:8e:56:5b:56:b1:2a:6d:24:7d:f9:a0:07:3d:01:
                    d3:69:bb:ad:d1:e3:78:6c:83:41:56:d0:ee:15:79:
                    8f:de:e6:83:77:53:a1:0a:be:b1:8c:27:26:1d:e4:
                    21:de:c0:54:4b:a6:53:bf:6d:bc:b7:88:5c:d6:98:
                    00:95:bf:7a:dc:db:5c:aa:ad:dd:ad:67:e6:36:3e:
                    aa:07:14:25:18:18:30:2d:d1:d2:94:cf:90:4d:3d:
                    c0:d4:c6:5a:24:52:3d:50:b3:3a:66:67:76:11:27:
                    a8:59:60:77:ee:66:f2:95:eb:96:da:75:c5:86:11:
                    1b:51:cd:d5:f4:ec:6a:a6:2b:ff:25:3b:fb:8b:0f:
                    53:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:26:9F:A1:EB:FE:60:30:CF:F7:EB:6A:31:13:D3:80:B6:12:69:7C
            X509v3 Authority Key Identifier:
                keyid:3D:2C:06:5C:97:4E:70:0B:13:69:ED:F4:AD:BE:1B:D1:12:72:B0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:17:bd:ff:44:42:67:13:bc:2d:79:22:d6:50:f0:a2:01:8d:
         02:60:49:39:7e:26:a3:6c:9e:1c:25:88:76:85:6f:e7:3d:18:
         4e:7b:a4:ff:f1:1c:1f:6f:01:37:41:12:2a:39:34:8b:cc:d4:
         c0:9f:e3:43:97:95:00:be:97:73:24:e0:ec:7a:b4:2c:d8:51:
         0c:5f:5e:4b:f1:34:43:f8:70:af:32:3e:23:53:9e:89:df:d2:
         ff:c6:91:a5:b3:fd:c6:ea:c8:90:83:c7:c0:e8:d4:3f:37:1b:
         12:84:2b:26:df:47:7e:e3:6f:cb:10:26:da:14:57:e8:9b:99:
         fb:37:2b:0b:7e:ae:b9:07:f8:fc:7d:5f:a0:ce:fa:45:19:a1:
         8f:9f:57:7a:15:ef:ab:b4:20:c1:53:84:25:11:95:49:0c:92:
         6d:a2:4d:d8:ab:1a:f4:b2:2c:55:6f:af:14:30:3e:c1:27:10:
         bc:5d:e5:94:64:99:11:41:08:a9:40:7c:fe:e0:ed:4f:5b:12:
         c1:df:06:f9:3c:34:5f:42:3d:96:70:c1:fa:af:a6:a3:2d:73:
         c4:49:79:f5:cd:c3:fc:ba:68:34:45:7b:fd:fd:d1:17:a1:2d:
         f5:6a:8e:d2:72:75:f0:a5:76:37:64:bd:e5:f0:8f:ba:0f:d3:
         5e:bb:03:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:15:30 2025 by rpki-client