Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/2C105A8B66A79B278FD2A38A1572477F4D886617.mft
File:                     2C105A8B66A79B278FD2A38A1572477F4D886617.mft (raw, json)
Hash identifier:          qw+ueW5X1lVygqWL6W4MKDKa2tTFJyZ7ByycZwAFVw0=
Subject key identifier:   E2:25:76:2A:72:DB:D2:D3:A8:70:47:90:B7:EB:DE:E4:60:6D:E6:3B
Authority key identifier: 2C:10:5A:8B:66:A7:9B:27:8F:D2:A3:8A:15:72:47:7F:4D:88:66:17
Certificate issuer:       /CN=2C105A8B66A79B278FD2A38A1572477F4D886617
Certificate serial:       6248A786D57ABDE7426FA94B5D846E5A8F587198
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C105A8B66A79B278FD2A38A1572477F4D886617.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/2C105A8B66A79B278FD2A38A1572477F4D886617.mft
Manifest number:          AC
Signing time:             Fri 31 Jan 2025 08:54:01 +0000
Manifest this update:     Fri 31 Jan 2025 08:49:01 +0000
Manifest next update:     Wed 05 Feb 2025 21:19:01 +0000
Files and hashes:         1: 2C105A8B66A79B278FD2A38A1572477F4D886617.crl (hash: dkZGNWjXJZpTZsmcnyPiu+xQXRBLuHVpUYKiZxMdHP4=)
                          2: 34352e3137342e3132392e302f32342d3234203d3e20323637383230.roa (hash: C7LjR/odBzVELhN2F8ZliiXXv9SoKuY1+XeGyVjeqek=)
                          3: 34352e3137342e3133302e302f32332d3234203d3e20323637383230.roa (hash: 6xGKDzBXD86fSAoggklsdQWVeuEs44wueqp6eHQgxcI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:48:a7:86:d5:7a:bd:e7:42:6f:a9:4b:5d:84:6e:5a:8f:58:71:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C105A8B66A79B278FD2A38A1572477F4D886617
        Validity
            Not Before: Jan 31 08:49:01 2025 GMT
            Not After : Feb  5 21:19:01 2025 GMT
        Subject: CN=E225762A72DBD2D3A8704790B7EBDEE4606DE63B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:78:c6:ed:26:d7:ef:fe:9d:8e:09:4d:14:eb:
                    ab:8e:ab:d2:f4:5d:7b:ff:1e:cc:62:18:d0:78:67:
                    c0:56:37:0b:63:be:5e:e7:d2:15:c6:9c:c6:05:28:
                    ed:c1:e8:41:90:00:5e:55:da:38:dd:0f:27:50:75:
                    99:b1:86:78:6d:4a:8a:d1:af:87:50:b0:44:ac:42:
                    fc:f8:ad:e0:49:6b:77:c5:a7:84:e2:83:f9:21:2c:
                    0e:39:33:c0:16:68:2a:d6:82:83:35:aa:67:51:d2:
                    81:e9:15:e3:c7:8a:38:96:17:ea:25:52:38:22:12:
                    3f:34:ae:cf:40:98:6d:8d:65:9d:77:e6:22:b8:9c:
                    12:d1:c7:0c:d3:93:88:f2:5b:a8:31:ee:3b:1b:7d:
                    d4:2f:2e:75:fe:d8:42:63:d8:f2:25:dc:b1:bb:cc:
                    85:9e:0b:6a:13:dd:5a:db:85:41:13:0b:b1:46:07:
                    cf:6a:0e:aa:b7:1b:78:2e:32:fd:4c:ac:00:b5:ad:
                    e1:b0:6a:a3:d2:4c:63:a1:89:ea:07:bd:78:7c:27:
                    63:d8:63:94:4f:89:14:a8:fe:2b:cb:de:ba:54:e8:
                    87:85:b6:d7:29:5d:4e:64:98:5d:07:cc:e8:92:3e:
                    2b:de:40:0d:81:f8:b6:7f:4f:72:27:0f:81:31:dd:
                    40:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:25:76:2A:72:DB:D2:D3:A8:70:47:90:B7:EB:DE:E4:60:6D:E6:3B
            X509v3 Authority Key Identifier:
                keyid:2C:10:5A:8B:66:A7:9B:27:8F:D2:A3:8A:15:72:47:7F:4D:88:66:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/2C105A8B66A79B278FD2A38A1572477F4D886617.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C105A8B66A79B278FD2A38A1572477F4D886617.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/2C105A8B66A79B278FD2A38A1572477F4D886617.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:72:58:88:c7:1c:90:f4:7d:12:ba:0d:ea:46:43:e5:7f:03:
         8d:a0:43:9d:9a:49:ce:43:95:8c:45:d4:ff:33:bc:a1:80:1a:
         44:4f:09:f4:f4:63:7f:04:a9:3b:67:8a:dc:73:90:55:54:86:
         c0:ba:91:a9:5d:ca:69:51:e9:7f:ec:10:e2:e7:71:4f:bf:ce:
         d3:c9:0e:36:d9:63:65:ba:53:d0:d3:3e:80:1e:d3:8b:21:7f:
         5d:37:bf:e3:0b:ed:e6:bc:86:01:14:5a:f6:e4:72:8e:5b:32:
         6b:49:b3:5e:9e:b2:dc:da:1a:53:48:74:10:b8:b2:a8:c3:0a:
         e7:07:90:df:24:a4:fa:83:f8:42:a6:d9:7a:c6:2a:3d:3a:14:
         bd:2b:a7:79:23:dc:7a:81:2c:3c:5c:af:54:3f:96:70:12:bd:
         54:73:34:01:80:0c:8c:d7:0a:2f:a7:c7:36:52:25:43:64:c0:
         8d:02:27:04:95:d3:f1:86:8e:87:35:08:14:b1:f1:8e:4c:97:
         a4:dc:f8:a2:4c:58:f2:e6:f3:0e:1d:4a:80:9e:e8:8a:a6:ac:
         6c:c0:2c:a9:ab:f0:0d:92:a3:2d:de:22:b9:3b:4d:b1:f9:5e:
         f4:77:4e:33:d4:49:84:58:bf:51:a6:e3:b6:4a:f2:42:b0:fa:
         31:fb:1f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----