Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft
File:                     AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft (raw, json)
Hash identifier:          srLbBzCPmmwd+AImi0bQNLtkih8IezWQsrDGrqoQ8Vk=
Subject key identifier:   EB:06:0C:49:4A:4A:1A:94:52:C2:D0:08:D0:7A:7C:79:07:22:33:67
Authority key identifier: AA:71:89:C7:5E:9B:FC:B4:1A:37:6A:F3:33:03:F6:2E:80:9A:D1:DF
Certificate issuer:       /CN=AA7189C75E9BFCB41A376AF33303F62E809AD1DF
Certificate serial:       3FA35E07DC9453A76D2570CE77A85D4157C1EEB9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft
Manifest number:          30
Signing time:             Thu 30 Jan 2025 10:09:41 +0000
Manifest this update:     Thu 30 Jan 2025 10:04:41 +0000
Manifest next update:     Wed 05 Feb 2025 01:05:41 +0000
Files and hashes:         1: 323830313a3135343a3a2f34322d3432203d3e20323636363639.roa (hash: cgbsJfGQ/MTGGtOxt3PfchWsk7LSN4vvbwUB6CXb+0Y=)
                          2: 323830313a3135343a3a2f34322d3432203d3e203237393531.roa (hash: F80Vsa+zM2xkO7s8YBp4LfHphwneYJQP2KB13oqOlB0=)
                          3: AA7189C75E9BFCB41A376AF33303F62E809AD1DF.crl (hash: RpEf/+tfRHAae73N77aju2uWtpTlNLbkGi9G2zkhYRA=)
                          4: 34352e3232372e352e302f32342d3234203d3e203237393531.roa (hash: CVXF6XoSJWo87mhhCJfUv5K2AEVvgnHGI61jPK2jq3w=)
                          5: 323830313a3135343a3a2f34322d3432203d3e203138373437.roa (hash: PCe48n/hNN6nUgDj6uZfWAC5wPAGIGxQXjZBm4H+CKw=)
                          6: 34352e3232372e352e302f32342d3234203d3e20323636363639.roa (hash: /IRPjpW2Y1I1NfKD0WKlDcMMdCkpkKNHSxQq1SdA5Ws=)
                          7: 34352e3232372e352e302f32342d3234203d3e203138373437.roa (hash: 6K0/Rv0LRMNb2pltlcKhC3QbeuPUxODSmASkeeReHtQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a3:5e:07:dc:94:53:a7:6d:25:70:ce:77:a8:5d:41:57:c1:ee:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA7189C75E9BFCB41A376AF33303F62E809AD1DF
        Validity
            Not Before: Jan 30 10:04:41 2025 GMT
            Not After : Feb  5 01:05:41 2025 GMT
        Subject: CN=EB060C494A4A1A9452C2D008D07A7C7907223367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b6:38:ba:b6:3f:98:9d:03:d6:b1:80:e8:34:
                    e1:42:b0:fb:8f:aa:17:e7:72:53:b5:d8:f2:f8:8e:
                    e2:d2:8e:a1:2d:3d:4f:d6:38:0e:08:1a:02:5a:3e:
                    06:34:60:5f:58:13:39:73:cf:ff:01:d2:d8:ee:1e:
                    32:14:c1:f2:20:db:f8:83:c1:37:e5:5c:52:e2:17:
                    e2:b9:ec:a9:11:47:6d:a1:86:1a:98:ad:08:17:26:
                    d3:d7:aa:36:48:f2:32:22:a6:1a:54:05:b8:e9:78:
                    b9:70:64:c1:67:76:75:46:40:0d:de:e9:8a:3c:1b:
                    d6:06:56:49:ad:8b:64:2f:43:7c:df:02:61:cf:2a:
                    9f:12:1d:fb:c4:fb:e8:60:d9:9b:87:8e:cd:0a:ff:
                    b2:ba:7c:b5:bf:bb:35:26:61:c6:cc:31:b3:0d:f8:
                    00:65:86:6f:b4:03:0b:6a:9f:9c:91:71:e5:12:bf:
                    95:b7:93:0e:51:ac:ca:04:85:75:18:45:62:bd:c7:
                    a0:f4:bf:de:b2:47:84:6a:2a:c3:ab:a4:94:d6:af:
                    8e:0d:5a:f9:22:89:19:b6:98:03:06:16:76:96:82:
                    40:5a:26:7b:8b:42:2f:ca:c5:d6:94:f1:83:8b:3b:
                    77:60:61:bc:1b:d9:b8:c6:f2:de:48:27:09:f4:e2:
                    71:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:06:0C:49:4A:4A:1A:94:52:C2:D0:08:D0:7A:7C:79:07:22:33:67
            X509v3 Authority Key Identifier:
                keyid:AA:71:89:C7:5E:9B:FC:B4:1A:37:6A:F3:33:03:F6:2E:80:9A:D1:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:5c:c1:93:21:83:2c:b1:6c:8a:c6:13:cf:5c:ed:a0:86:8f:
         79:35:af:3a:a5:07:5e:de:7e:81:a4:48:fa:b8:bf:ae:b1:ec:
         99:2c:4a:12:4b:3a:db:94:58:50:73:6e:db:5b:f5:90:74:58:
         17:8a:68:33:2c:08:6e:f4:05:f2:7b:b8:ba:ef:a4:79:28:74:
         3d:7a:f9:17:ac:51:a5:7d:6e:b1:ee:76:0a:49:59:1d:69:9c:
         4a:6f:a5:58:e3:ab:f8:20:3d:67:6b:f3:5e:fc:ba:f4:a4:ee:
         26:df:98:cc:2a:36:10:a3:3f:5c:67:f5:cb:f2:7c:c1:75:32:
         24:8e:88:26:68:23:44:02:fe:ff:72:f8:7c:aa:28:7a:dd:58:
         34:52:0e:b0:ed:09:74:38:d4:76:f1:69:97:fe:32:0e:ee:21:
         fe:99:a0:3e:82:4f:b0:48:3d:f6:94:e8:b5:40:f4:55:01:91:
         59:44:40:07:b4:b8:56:a5:89:22:5c:5f:82:55:db:88:78:52:
         9f:61:6d:af:dc:c4:80:d5:e8:26:56:9d:a5:bf:33:e8:64:c3:
         3e:8d:48:69:27:ac:3b:36:35:04:eb:61:fd:67:c1:60:5c:6b:
         8d:5f:cb:7f:44:d1:7e:e1:b0:43:fd:a6:c3:e3:08:b7:d4:4c:
         ac:39:73:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:30:57 2025 by rpki-client