Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/626DF4797B0744D66925A916672340501DC8D2CB.mft
File:                     626DF4797B0744D66925A916672340501DC8D2CB.mft (raw, json)
Hash identifier:          TP4eqZUTxRZkKjx61GO1DQFIezjx4tM9sYWXgbeZmqY=
Subject key identifier:   DA:6D:64:77:A6:9B:B5:41:47:69:DE:B5:C9:D5:4A:5B:1C:3C:57:BB
Authority key identifier: 62:6D:F4:79:7B:07:44:D6:69:25:A9:16:67:23:40:50:1D:C8:D2:CB
Certificate issuer:       /CN=626DF4797B0744D66925A916672340501DC8D2CB
Certificate serial:       64DF2481BDF6A429543C1209D68D84A3D884A25A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/626DF4797B0744D66925A916672340501DC8D2CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/626DF4797B0744D66925A916672340501DC8D2CB.mft
Manifest number:          AD
Signing time:             Thu 30 Jan 2025 18:19:48 +0000
Manifest this update:     Thu 30 Jan 2025 18:14:48 +0000
Manifest next update:     Tue 04 Feb 2025 20:09:48 +0000
Files and hashes:         1: 323830313a31613a353830303a3a2f34382d3438203d3e20323732383036.roa (hash: 8ZFFZlT2bKrE1SbYlIlq8a+2XFBAhIsVLlwV0dMUKoQ=)
                          2: 626DF4797B0744D66925A916672340501DC8D2CB.crl (hash: TF0dUDVJjxjTxHc1tjvsLRLUxJsufiiybKVzAmVvh5w=)
                          3: 34352e36382e32392e302f32342d3234203d3e20323732383036.roa (hash: QRqa396kZogiUa5XWKje8KZEWGJ/eQA95jUWswCNIVs=)
                          4: 34352e36382e32342e302f32322d3234203d3e20323732383036.roa (hash: tRh/q6FGicrelNDabCPp9NhV1aOZ/3eTOOmdVkMokjA=)
                          5: 34352e36382e33312e302f32342d3234203d3e20323732383036.roa (hash: QTafbAZR+hXmqLBqor427vV3x8YZuqs5oW3uCNBxeS0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:df:24:81:bd:f6:a4:29:54:3c:12:09:d6:8d:84:a3:d8:84:a2:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=626DF4797B0744D66925A916672340501DC8D2CB
        Validity
            Not Before: Jan 30 18:14:48 2025 GMT
            Not After : Feb  4 20:09:48 2025 GMT
        Subject: CN=DA6D6477A69BB5414769DEB5C9D54A5B1C3C57BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:98:e4:05:4d:09:14:86:10:9d:cb:1f:32:d3:
                    bf:48:7b:fd:22:82:d2:9d:14:10:d0:15:a0:ac:78:
                    23:4b:1d:f0:1d:74:c5:27:6f:9e:01:92:e5:d9:c8:
                    ee:f7:ab:37:8f:76:e4:37:da:d8:3b:9a:c7:85:73:
                    c6:fc:90:3a:af:1f:7a:de:be:d6:42:81:d5:82:ac:
                    25:19:8a:53:6c:93:16:a0:e2:6f:b8:c7:06:5a:fb:
                    42:09:61:35:4c:67:74:01:ce:fb:d7:23:05:1f:d0:
                    be:93:5b:c2:e0:90:f8:ea:2f:80:1c:a1:0f:38:b7:
                    72:39:5d:9e:77:f2:2a:b0:fa:4d:74:93:89:38:1e:
                    14:3f:98:a5:6c:af:5c:2f:27:50:b3:2e:57:29:37:
                    80:0a:47:9c:5b:52:da:56:71:e4:19:cf:00:dc:89:
                    4a:82:3b:06:d0:41:fb:70:33:85:d1:58:c1:e3:39:
                    67:b3:c8:05:69:20:d2:20:20:16:1f:a6:56:fe:41:
                    c9:af:19:cf:49:2c:c8:07:5d:c0:d9:13:e8:b0:92:
                    4d:8d:9e:18:38:d2:bf:9a:d4:fc:71:e2:a8:c8:65:
                    6c:88:c5:b8:99:ee:53:13:d0:91:de:02:c4:dc:5f:
                    79:32:bf:a6:62:18:03:a8:34:8d:a5:f3:14:e2:f8:
                    4f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6D:64:77:A6:9B:B5:41:47:69:DE:B5:C9:D5:4A:5B:1C:3C:57:BB
            X509v3 Authority Key Identifier:
                keyid:62:6D:F4:79:7B:07:44:D6:69:25:A9:16:67:23:40:50:1D:C8:D2:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/626DF4797B0744D66925A916672340501DC8D2CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/626DF4797B0744D66925A916672340501DC8D2CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/626DF4797B0744D66925A916672340501DC8D2CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:9f:92:5d:e7:36:0e:e0:80:5f:fb:4a:8a:d6:15:30:3b:8c:
         22:16:01:b0:f6:af:80:7f:88:5e:5f:26:f6:0c:e2:4e:ac:1b:
         79:d2:51:d6:5d:d3:b8:30:53:6e:e6:09:96:82:f2:c9:e0:d3:
         57:3f:86:8d:a8:e5:cf:3c:9f:09:6d:2a:75:23:f9:81:7a:51:
         be:fc:60:48:bd:25:f0:27:13:a2:0b:f0:17:d6:58:ca:2f:f5:
         4e:82:f4:89:e9:37:9d:6a:0f:73:5b:44:6e:bd:e8:e4:48:4b:
         0b:95:87:67:12:43:68:b8:77:12:d6:9f:5f:51:da:1a:eb:83:
         79:5c:cd:4d:da:5f:b0:ac:8b:15:86:2f:93:7a:da:70:74:42:
         f3:dd:ad:2f:86:16:d1:a6:1e:7b:3e:a8:15:28:03:43:ff:58:
         d6:cf:bd:ca:ca:60:8b:fd:20:74:8c:28:47:12:cd:bd:0c:30:
         1c:77:a9:05:56:8e:b8:45:de:a1:ee:12:fb:f5:ff:cc:74:87:
         6c:13:05:b2:98:dc:ac:16:0a:7f:5c:84:91:aa:1f:69:ed:11:
         c0:c6:2f:20:1d:47:0f:33:7b:32:a9:f8:e2:f7:3c:a8:a4:80:
         eb:f6:45:40:68:ca:4a:fc:ea:01:c7:30:1e:19:3b:39:e5:bd:
         e2:1a:29:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----