Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.mft
File:                     DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.mft (raw, json)
Hash identifier:          wBUZgspR63cEU+/dW8N+fnIX7mKVirQvZK8Ij2XWsn0=
Subject key identifier:   F9:95:E6:9B:E5:D3:5E:1F:E6:E9:00:3F:19:31:DE:8C:DB:9D:6F:B4
Authority key identifier: DA:08:9F:A2:42:DF:F5:A5:D9:12:D8:E5:A1:82:FD:C3:22:BB:B5:FA
Certificate issuer:       /CN=DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA
Certificate serial:       52C654146FC7EF2FEF8973E095EF6027C0B79628
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.mft
Manifest number:          3A
Signing time:             Fri 31 Jan 2025 07:13:02 +0000
Manifest this update:     Fri 31 Jan 2025 07:08:02 +0000
Manifest next update:     Tue 04 Feb 2025 14:11:02 +0000
Files and hashes:         1: 323830313a3132363a3a2f34342d3434203d3e20323632353839.roa (hash: ZdMFSSnl+bVCAYLkfOFhjzGcKskoNNiklFm/f+K/Sc4=)
                          2: DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.crl (hash: YwA4uVF6+tV46LzBSJBy818cm/oqtlNQxbduDzUT7dY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c6:54:14:6f:c7:ef:2f:ef:89:73:e0:95:ef:60:27:c0:b7:96:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA
        Validity
            Not Before: Jan 31 07:08:02 2025 GMT
            Not After : Feb  4 14:11:02 2025 GMT
        Subject: CN=F995E69BE5D35E1FE6E9003F1931DE8CDB9D6FB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:73:16:40:45:6d:b6:92:51:8f:70:3a:50:c0:
                    44:29:2f:6e:92:26:6f:f4:e5:4c:01:de:c2:a8:32:
                    5a:1f:e1:df:dc:29:92:71:63:8f:19:99:23:0c:95:
                    f5:60:59:34:db:89:9c:bf:57:7e:3a:e7:80:9d:ba:
                    79:69:b1:88:02:4c:46:f1:dc:88:b3:03:72:ce:f0:
                    16:5e:4f:c6:3b:ae:bf:11:3e:07:d6:49:a0:89:ad:
                    0d:2e:d3:ee:f5:44:17:ec:d4:64:d2:ae:24:aa:59:
                    9f:0c:cd:9f:64:05:fd:53:5d:53:61:dd:f6:a7:d5:
                    2f:9a:26:fc:f6:43:cf:50:18:be:f8:e3:89:22:47:
                    6b:fe:a5:ef:c4:ec:1a:62:9d:ae:dc:57:04:bc:cd:
                    31:28:a3:d3:ab:f5:c8:c9:91:b4:7c:f5:72:d9:79:
                    a8:f1:f4:f3:b7:6d:6f:83:57:2a:9e:92:7d:d0:98:
                    28:a7:98:b2:95:d8:ce:b8:68:9f:b2:23:15:bd:b4:
                    1a:ad:1e:18:69:18:3b:f0:96:3f:f9:d2:0e:a6:09:
                    db:dd:fc:e7:0f:b9:63:f3:a2:c5:02:36:ec:e5:de:
                    3f:96:07:76:05:91:e9:5a:30:46:dc:f1:62:21:aa:
                    3c:62:de:1a:7a:9e:d2:3b:ed:e8:2b:27:3f:5c:86:
                    ff:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:95:E6:9B:E5:D3:5E:1F:E6:E9:00:3F:19:31:DE:8C:DB:9D:6F:B4
            X509v3 Authority Key Identifier:
                keyid:DA:08:9F:A2:42:DF:F5:A5:D9:12:D8:E5:A1:82:FD:C3:22:BB:B5:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:3d:f9:f1:4b:54:c9:7c:58:62:67:2d:43:43:9a:cf:d6:a2:
         81:fc:40:b1:c7:f9:f4:b6:18:72:6f:48:5f:3e:88:17:4c:f3:
         35:44:a3:4a:51:a0:76:64:f9:6f:43:80:37:77:5d:87:77:f3:
         99:bf:a9:5f:69:bb:36:51:79:a1:80:ba:d5:53:58:45:6b:96:
         3c:8b:06:d2:59:f1:8b:27:5d:58:41:8b:18:78:e8:bc:78:27:
         74:8b:e7:1e:49:cb:a6:a9:27:e6:aa:b9:65:45:0c:75:78:ff:
         f9:0a:38:38:aa:33:7c:4f:01:65:a0:5b:2b:60:f6:52:3b:86:
         a4:c1:4e:b3:58:73:d8:37:40:53:6a:e3:f3:95:01:b0:82:90:
         00:53:3f:e1:8f:7d:a3:6f:16:fb:4d:ba:63:a2:02:60:2d:52:
         7b:59:12:47:ca:97:7d:3f:65:43:f6:9f:e8:d6:c3:b3:8d:35:
         64:67:47:36:94:45:3b:95:9e:d8:03:74:6e:88:82:81:ab:41:
         e2:4f:af:1a:65:fd:5f:6c:af:ac:74:3a:fe:18:4d:b6:5a:50:
         a1:9c:89:d1:5b:05:9e:20:1f:e8:37:67:23:10:92:3f:a3:7f:
         6e:1a:a8:ff:ef:13:3f:cb:42:16:81:70:14:d8:d5:6b:8a:72:
         d2:7e:d4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----