Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.mft
File:                     CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.mft (raw, json)
Hash identifier:          zdr8IX3H/YFOSNeZpMZqqUHVa1xzHk0kfPXwp7dJ8LM=
Subject key identifier:   B0:E4:98:C0:C4:F8:2F:11:87:47:E3:8C:1D:1E:67:67:50:A5:0B:EB
Authority key identifier: CD:3C:D6:2A:62:CA:FB:D9:9D:1A:C6:CB:B6:E0:73:A5:51:84:5F:27
Certificate issuer:       /CN=CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27
Certificate serial:       49B336D7E373BB95F86B3A931028B98CD25B0E1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.mft
Manifest number:          AB
Signing time:             Wed 29 Jan 2025 20:56:47 +0000
Manifest this update:     Wed 29 Jan 2025 20:51:47 +0000
Manifest next update:     Mon 03 Feb 2025 23:58:47 +0000
Files and hashes:         1: 3230302e31312e33332e302f32342d3234203d3e20323730303238.roa (hash: GfOAlyOSdn2Jl0MqhQ8ptjnhfmEIru4nZ5N88UHJhWE=)
                          2: CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.crl (hash: 4urHt9KcucSKIYq3HDMnLx0AHVSgKgTIAi6fxfBOT6U=)
                          3: 323830313a3133613a3a2f34342d3434203d3e20323730303238.roa (hash: MTxmz2BeCimLfpVJPQcut58Jv25HWlTluL4cJw4VQDQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b3:36:d7:e3:73:bb:95:f8:6b:3a:93:10:28:b9:8c:d2:5b:0e:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27
        Validity
            Not Before: Jan 29 20:51:47 2025 GMT
            Not After : Feb  3 23:58:47 2025 GMT
        Subject: CN=B0E498C0C4F82F118747E38C1D1E676750A50BEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:06:06:e2:7d:90:35:71:51:63:60:fc:4f:af:
                    94:33:5e:e4:6d:db:0c:0e:25:9c:04:64:de:b9:99:
                    7b:5e:b0:83:48:ac:10:3e:e5:92:2d:9e:3d:8c:d9:
                    41:48:da:41:5c:fc:e2:df:57:01:79:4a:ce:1c:3b:
                    1e:f3:17:5f:f3:d8:cb:47:5f:16:0a:74:7d:e1:00:
                    77:e8:36:da:00:eb:85:6a:d8:5b:27:d8:4e:52:0d:
                    36:82:b0:0e:af:76:b0:60:d9:b4:49:91:eb:4d:e2:
                    b4:50:7e:b4:91:74:3e:ee:dd:c5:0e:87:7c:f7:87:
                    42:d7:64:aa:24:f4:22:33:1f:ab:ab:f4:eb:bf:7e:
                    1a:18:fa:73:f1:1a:cd:81:6a:39:c4:66:5a:fe:c5:
                    c9:55:22:cf:3f:67:19:f3:e7:2e:a5:af:d9:f8:6b:
                    e0:95:90:26:39:63:ca:de:9c:f9:66:3e:5e:b5:06:
                    77:15:af:d2:66:6e:b4:38:1d:28:84:0e:3e:94:3f:
                    25:f6:1f:3e:5b:06:03:18:7a:a2:21:a1:39:81:81:
                    53:d0:6e:19:21:ca:6a:7d:d9:b8:fd:49:a5:9e:50:
                    41:09:bb:bd:d6:3b:27:ce:11:cc:c0:5b:c4:70:b9:
                    26:31:8f:1d:2e:97:de:b2:7a:36:0a:90:b7:fb:31:
                    69:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E4:98:C0:C4:F8:2F:11:87:47:E3:8C:1D:1E:67:67:50:A5:0B:EB
            X509v3 Authority Key Identifier:
                keyid:CD:3C:D6:2A:62:CA:FB:D9:9D:1A:C6:CB:B6:E0:73:A5:51:84:5F:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:11:10:7f:5e:8e:c0:93:2d:fe:f6:19:c6:69:50:b2:bd:eb:
         cb:57:5d:02:38:09:11:d7:55:e1:7e:62:21:4e:19:76:55:ca:
         f8:13:00:c8:0a:e9:74:54:a4:53:7f:4e:87:33:12:73:73:6c:
         90:d4:62:ae:10:1b:e7:b2:90:0d:f6:e2:08:3c:aa:a1:d1:95:
         cf:38:2f:b5:9b:8b:b0:2f:26:78:3d:4c:40:48:04:01:e8:5e:
         e8:16:02:9e:5d:d0:cf:f6:0e:fe:34:df:55:9c:26:c3:38:ae:
         73:43:73:e7:b9:b7:ff:51:6f:48:e5:63:5d:7e:99:52:c0:b0:
         1a:26:c7:ff:e4:35:9f:c4:75:b0:79:a8:bf:25:d1:da:3e:20:
         79:0b:98:12:47:77:3d:f3:29:26:d3:df:14:14:1e:db:aa:fd:
         77:19:12:d5:20:e2:9e:d0:3b:10:2d:99:a2:b1:90:89:76:5e:
         52:73:01:ba:c3:a1:a4:20:b0:6b:60:38:10:84:eb:73:c6:99:
         d1:64:87:7c:eb:4b:d4:ea:5b:02:02:fd:1f:cf:8d:c6:5d:62:
         27:22:0f:8e:53:31:3f:be:45:50:f6:e3:f8:12:41:2a:72:4a:
         74:fb:a7:f3:44:75:81:22:97:3d:61:29:59:49:77:af:aa:a0:
         6a:1b:76:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----