Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228A1144F80DF4A77C0E4FAC62CB4207C688A7FC94E852E8C58941408A68ADAE/0/4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1.mft
File:                     4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1.mft (raw, json)
Hash identifier:          nDO+NajsPbAVtyCbzqDRc1VNtJeaSBzzmzAztTGqD6Q=
Subject key identifier:   7B:69:D5:64:C7:08:9F:A8:47:FE:78:4D:28:61:50:DC:E0:84:D2:E1
Authority key identifier: 4D:54:F9:2C:0C:41:A4:77:E9:B5:12:2A:4B:E2:DF:E8:3E:ED:8A:C1
Certificate issuer:       /CN=4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1
Certificate serial:       2885B696B48572CAD1C91D7CCDA989A9DE43871C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/228A1144F80DF4A77C0E4FAC62CB4207C688A7FC94E852E8C58941408A68ADAE/0/4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1.mft
Manifest number:          A9
Signing time:             Wed 29 Jan 2025 13:37:07 +0000
Manifest this update:     Wed 29 Jan 2025 13:32:07 +0000
Manifest next update:     Mon 03 Feb 2025 20:03:07 +0000
Files and hashes:         1: 34352e3136302e37322e302f32322d3234203d3e20323636383738.roa (hash: pNh4xi9VGxjCf/gLLk3GQ3jgLdhP31K5TI2SwuDijOU=)
                          2: 323830333a626161303a3a2f33322d3332203d3e20323636383738.roa (hash: seVc7S+erlD1IqyOwQpcuLdK2WgV4vHJ9ttS54EaS2s=)
                          3: 4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1.crl (hash: 3cIOeRh+4dyBwsxZopFJkVqD9rvW3zNAQoVAhSQpT74=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:85:b6:96:b4:85:72:ca:d1:c9:1d:7c:cd:a9:89:a9:de:43:87:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1
        Validity
            Not Before: Jan 29 13:32:07 2025 GMT
            Not After : Feb  3 20:03:07 2025 GMT
        Subject: CN=7B69D564C7089FA847FE784D286150DCE084D2E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8f:0c:e3:21:2e:3a:52:0b:8b:81:00:90:4e:
                    b0:e2:41:a1:ee:ef:f7:55:a1:23:72:6f:11:d7:a7:
                    57:67:c5:2d:e2:6e:c7:59:e1:53:d2:fd:09:1c:45:
                    88:d8:cb:7f:af:f5:d1:5e:21:c2:c4:a3:7f:97:c8:
                    d8:f9:f4:48:23:7c:91:87:68:cb:96:4e:99:2d:c6:
                    b2:6a:63:7b:0b:ab:8c:c3:34:c1:f6:c5:6b:0e:3e:
                    81:40:9b:6f:28:36:e6:c2:d6:cd:cb:f4:1c:70:1e:
                    ec:50:16:17:0a:b2:e1:16:ba:db:85:f7:89:5b:3d:
                    c5:1f:11:a5:3b:d8:c1:ed:36:f4:be:2d:31:cb:38:
                    35:2e:0a:67:16:ce:d9:3a:71:ab:09:c0:7f:e8:e5:
                    90:8c:4f:c6:bd:25:82:1d:68:d7:22:0b:a2:af:df:
                    b8:10:fe:88:f7:dc:bc:5d:e8:91:32:ed:87:f8:a8:
                    2a:27:ce:70:7b:20:90:bf:0c:66:42:80:59:6e:0b:
                    57:58:39:3a:74:89:97:2e:ff:1b:6f:d8:a2:16:4e:
                    09:5b:05:bd:e7:db:e9:d0:cf:02:58:cf:53:4e:b8:
                    25:1b:76:f3:24:da:43:fe:e4:fe:d4:c0:e3:3b:15:
                    18:cf:8a:bc:cb:4d:c2:31:3b:48:e9:2c:fb:9c:19:
                    57:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:69:D5:64:C7:08:9F:A8:47:FE:78:4D:28:61:50:DC:E0:84:D2:E1
            X509v3 Authority Key Identifier:
                keyid:4D:54:F9:2C:0C:41:A4:77:E9:B5:12:2A:4B:E2:DF:E8:3E:ED:8A:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/228A1144F80DF4A77C0E4FAC62CB4207C688A7FC94E852E8C58941408A68ADAE/0/4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228A1144F80DF4A77C0E4FAC62CB4207C688A7FC94E852E8C58941408A68ADAE/0/4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:be:12:41:17:1e:b3:25:cd:f6:be:90:bf:61:d3:0d:80:3c:
         ab:60:94:8e:27:fa:a9:0a:d5:95:ca:84:55:18:2e:81:4d:92:
         42:82:8f:f9:52:55:c2:44:50:86:96:43:08:22:f9:14:1e:d4:
         88:e7:00:be:8c:7d:39:e4:b0:5a:63:66:90:47:59:63:3e:14:
         92:1d:c2:7e:fa:8c:15:cc:3c:36:b9:33:bd:f7:33:f1:98:cc:
         7d:c6:6a:d8:c9:cc:72:a7:81:de:c6:ef:bf:93:3e:04:b6:0f:
         c3:71:72:7c:12:3b:23:ee:e4:62:ec:51:79:14:4f:d4:42:f1:
         fd:bf:ac:03:c0:c3:83:4e:d9:3c:c7:ec:e1:e8:72:16:48:cb:
         c7:63:f5:1c:1a:c8:05:37:bd:4d:68:c9:b1:a0:73:6f:07:04:
         52:58:02:17:ca:a2:c0:c4:3f:b6:0b:b8:ae:85:f7:27:b8:51:
         82:e6:bd:c5:27:08:ec:89:49:b7:04:b8:f1:1c:a5:77:f9:3c:
         10:c2:ea:d6:b0:8a:71:c8:ae:09:4e:6f:77:5a:07:c1:b7:4f:
         e6:df:2f:d4:24:3a:83:fd:c9:27:d3:09:64:ef:f0:5a:b4:22:
         1a:0b:5f:e0:51:84:0e:0d:56:f6:04:e6:b9:36:d7:7b:fd:d7:
         04:4d:c9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----