Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft
File:                     D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft (raw, json)
Hash identifier:          RWmCXu8hSuuyBNh9ujh6AKxjS85/qY+7gV3EpXhWvd0=
Subject key identifier:   C6:90:28:24:8F:5E:CC:ED:A8:72:75:DE:0B:B1:F8:07:18:3C:5C:59
Authority key identifier: D9:D3:E0:DB:C4:C3:EB:0E:E7:CA:56:4F:0F:91:A0:38:A1:D5:87:7C
Certificate issuer:       /CN=D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C
Certificate serial:       2CB8F69719E4996B6A8073C9AA25DE088B3CD48E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft
Manifest number:          A1
Signing time:             Fri 31 Jan 2025 12:06:00 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:00 +0000
Manifest next update:     Tue 04 Feb 2025 18:18:00 +0000
Files and hashes:         1: 34352e37302e3138302e302f32322d3232203d3e20323635383134.roa (hash: yvikhDJdFU/TcD4SZr21dKH41sdzsfD8vZu+Nmxk+pg=)
                          2: D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.crl (hash: Cv1y2bDc5vspuCEf93WXGiChjScHQnQqOv+dn9qE3lg=)
                          3: 323830333a333832303a3a2f33322d3332203d3e20323635383134.roa (hash: xFTVotHARTqU1utzBag1fj+GlpZJP0T4kCko5uEbFtI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b8:f6:97:19:e4:99:6b:6a:80:73:c9:aa:25:de:08:8b:3c:d4:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C
        Validity
            Not Before: Jan 31 12:01:00 2025 GMT
            Not After : Feb  4 18:18:00 2025 GMT
        Subject: CN=C69028248F5ECCEDA87275DE0BB1F807183C5C59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c4:ec:cd:61:db:87:87:5b:36:d6:cf:bd:11:
                    ba:17:89:75:2a:b7:27:f3:20:63:d5:da:8b:08:e5:
                    94:a7:92:55:ff:04:4f:6d:02:67:b1:0b:b3:c1:2b:
                    27:9e:14:1c:75:f7:86:35:7b:80:19:28:27:aa:86:
                    03:9a:7c:44:54:64:d4:fc:f3:42:22:33:b7:6b:92:
                    23:78:9b:3b:36:43:b4:c2:f9:4c:61:03:2c:1a:ca:
                    46:13:12:ab:ef:47:e5:b7:b5:48:e6:56:97:ed:9f:
                    e6:01:40:09:bc:ca:46:56:d9:e9:20:07:29:9f:e2:
                    3e:94:d5:bf:17:fa:3f:76:af:52:2b:55:30:1e:50:
                    2a:3c:b0:eb:1b:87:ce:c0:3f:f4:a9:1b:06:cc:ee:
                    be:ec:59:a3:2c:00:43:7c:3c:d5:e4:fc:1a:cb:e7:
                    6b:49:44:39:60:2e:b5:71:ef:3f:0d:83:96:88:96:
                    d3:76:dc:a1:49:46:89:ba:35:ee:17:b1:aa:83:a9:
                    2d:26:38:f0:11:ed:35:42:b3:fa:0c:9e:87:ec:5c:
                    dc:16:5f:b4:69:7d:14:85:b2:93:a1:4e:8e:f4:9a:
                    f0:25:08:d1:a9:f1:35:2f:58:7d:12:97:95:4c:ed:
                    db:de:08:a3:f7:ee:77:99:da:84:46:8d:ea:89:28:
                    9e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:90:28:24:8F:5E:CC:ED:A8:72:75:DE:0B:B1:F8:07:18:3C:5C:59
            X509v3 Authority Key Identifier:
                keyid:D9:D3:E0:DB:C4:C3:EB:0E:E7:CA:56:4F:0F:91:A0:38:A1:D5:87:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:db:5f:b8:cd:8f:b9:52:30:fe:00:48:99:16:e3:a2:46:fc:
         61:a7:c4:55:52:e5:62:77:08:b9:68:47:a2:93:3a:b0:5d:e2:
         01:e3:40:c4:ee:38:8b:93:01:b9:20:e5:e9:df:74:19:65:49:
         39:6f:4d:07:ec:39:15:e9:12:0f:9a:a3:fb:b7:ea:88:b0:ba:
         e6:76:54:7e:a3:ac:85:f2:ca:99:37:1d:1a:0e:c8:b3:5d:29:
         ae:a1:cd:b2:b1:e6:13:98:a0:e2:f9:96:ee:40:b6:f1:72:70:
         37:ab:70:53:41:97:e1:18:bf:e4:4e:79:eb:15:bf:0a:e7:32:
         bc:ef:f7:16:58:89:40:7a:a4:a5:ec:c6:80:5c:91:d0:1f:24:
         ae:52:4b:ae:10:ed:94:ae:16:2b:47:c7:ea:63:c8:50:34:ab:
         f3:e7:07:63:8e:ca:51:68:6c:29:3d:8b:2b:35:c3:39:2a:bd:
         00:ab:72:ab:dc:bc:f1:a1:71:b2:f5:d6:a0:9d:d5:6f:f0:ab:
         16:73:03:de:a3:42:fe:37:ef:b4:ed:a3:04:b0:15:d3:25:2b:
         02:d7:fa:c0:d6:3d:27:05:64:f7:15:dc:cf:fa:d6:4a:7c:e3:
         fb:bf:10:89:95:45:cc:52:cc:7a:61:44:77:dc:cf:fe:3c:ec:
         98:88:c4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----