Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.mft
File:                     2152913C2D5333E6F48DA45B339F5C285841364B.mft (raw, json)
Hash identifier:          y5vlt37RAxlDqrTy5LoBrVJKSEW8VhFhXDFYlquqXlY=
Subject key identifier:   C5:28:6C:94:2C:50:E1:C4:C4:D9:2D:FE:04:34:8A:9C:A0:D1:36:9E
Authority key identifier: 21:52:91:3C:2D:53:33:E6:F4:8D:A4:5B:33:9F:5C:28:58:41:36:4B
Certificate issuer:       /CN=2152913C2D5333E6F48DA45B339F5C285841364B
Certificate serial:       758AC8F1D2B3EA9E360A1C1131FC8A4D8ED19167
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2152913C2D5333E6F48DA45B339F5C285841364B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.mft
Manifest number:          A5
Signing time:             Thu 30 Jan 2025 09:49:26 +0000
Manifest this update:     Thu 30 Jan 2025 09:44:26 +0000
Manifest next update:     Tue 04 Feb 2025 08:13:26 +0000
Files and hashes:         1: 3139302e3231312e3136382e302f32312d3234203d3e20323632353839.roa (hash: 9Q7aw5eEUgHCwGYShpMYQIm1GCm/d2auQlb94vtfnHg=)
                          2: 3139302e3231312e3136302e302f32302d3234203d3e203532323830.roa (hash: vGOgsPciQpqdQgvsBp3M+ZWqJaNQzboEgE5HB4Ku/Bc=)
                          3: 2152913C2D5333E6F48DA45B339F5C285841364B.crl (hash: zD6jafnyunf7jMe6tW2iuwm6UorEcohyfzJ8nyHhUgg=)
                          4: 3139302e3231312e3136302e302f32312d3234203d3e20323632353839.roa (hash: G9BY/9Isu9xTSHbsmlRixLSTOn2z7J5LgEHRsd4lTs4=)
                          5: 323830303a3637303a3a2f33322d3332203d3e203532323830.roa (hash: hxxaBoK884HlLK7EOLMjo+WeYJD7M2SPtQ+zC2f8v9k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:8a:c8:f1:d2:b3:ea:9e:36:0a:1c:11:31:fc:8a:4d:8e:d1:91:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2152913C2D5333E6F48DA45B339F5C285841364B
        Validity
            Not Before: Jan 30 09:44:26 2025 GMT
            Not After : Feb  4 08:13:26 2025 GMT
        Subject: CN=C5286C942C50E1C4C4D92DFE04348A9CA0D1369E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0c:28:71:a0:ba:58:4b:54:34:63:49:13:93:
                    90:4f:33:36:79:42:c2:f8:31:c0:b6:12:74:3e:10:
                    8a:e3:10:6d:a1:0e:0a:6c:ef:19:f0:2c:00:44:6c:
                    30:f1:9c:c2:1c:ec:87:82:5d:6b:eb:ec:fc:94:f7:
                    55:b2:18:43:01:0c:9a:21:d6:14:dc:4a:cb:1a:43:
                    9e:41:68:30:ed:81:ff:e1:a6:18:ef:07:32:b2:e2:
                    ed:8f:a7:cc:87:16:65:e8:18:ec:72:23:52:67:28:
                    6d:a9:96:71:11:84:10:cb:7c:fb:4d:a3:17:a4:6c:
                    59:79:e4:f3:7b:26:da:0b:f8:05:9d:62:eb:e6:a5:
                    db:b9:ec:af:6d:32:07:5d:ad:80:76:96:d1:55:69:
                    1c:aa:d2:18:63:1f:0e:5c:d8:a0:61:39:90:1b:a7:
                    97:dc:0d:7f:39:12:ca:e2:a7:50:4c:61:0f:f2:2a:
                    4c:3a:0e:f1:06:d8:f1:b9:34:d1:1c:2e:13:89:8e:
                    27:2c:ac:2e:12:c8:da:84:e4:cf:44:97:a1:df:eb:
                    5c:90:dd:03:6f:7a:ec:4d:57:39:9c:bb:10:4c:ac:
                    9a:36:75:f9:88:2f:90:74:b4:26:5b:ec:3c:37:af:
                    65:63:6f:9a:cf:a9:fc:98:42:6e:3b:c6:3d:dc:8b:
                    ea:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:28:6C:94:2C:50:E1:C4:C4:D9:2D:FE:04:34:8A:9C:A0:D1:36:9E
            X509v3 Authority Key Identifier:
                keyid:21:52:91:3C:2D:53:33:E6:F4:8D:A4:5B:33:9F:5C:28:58:41:36:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2152913C2D5333E6F48DA45B339F5C285841364B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:ec:5b:52:89:8b:bf:d7:27:4a:4e:3d:b7:f5:c7:be:2a:e1:
         21:98:2b:36:bc:bb:18:53:98:5a:8c:a3:0c:8d:7c:80:86:37:
         35:47:33:67:08:20:20:22:29:03:58:46:c8:b9:76:9a:2b:d4:
         55:f2:52:9b:d0:b8:34:21:9e:89:11:47:17:54:92:90:51:af:
         d0:c9:6f:a4:5a:db:92:e0:5e:fb:39:05:da:5f:e9:bb:ca:ff:
         5b:94:d0:f0:ad:27:5c:21:5a:9c:98:39:b2:75:f1:1d:e2:98:
         47:83:d4:92:73:5f:c5:c9:21:c2:86:8c:d1:5e:f3:62:75:a5:
         13:34:d5:c1:4b:fa:09:78:e8:00:93:66:5a:e8:d8:ae:3e:82:
         7d:fa:07:d3:88:d4:ee:67:d0:8f:b0:c5:f8:15:5b:5b:47:cf:
         c6:bf:ee:5e:d6:22:63:35:ac:cc:aa:6c:f6:64:58:dc:3f:fe:
         8a:7b:8b:dc:96:01:e6:6c:8e:7d:7b:a6:42:07:d6:56:0c:58:
         68:2c:c4:dd:fd:18:13:f8:ef:17:4b:94:0f:d6:0a:18:8c:a1:
         b8:65:62:16:01:26:e5:20:fe:ee:2c:a7:00:60:fe:f7:5d:da:
         81:4c:1f:91:5d:4b:58:6c:de:7a:24:d4:d9:25:ac:75:ce:61:
         0e:d0:4b:af
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUdYrI8dKz6p42ChwRMfyKTY7RkWcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE1MjkxM0MyRDUzMzNFNkY0OERBNDVCMzM5RjVDMjg1
ODQxMzY0QjAeFw0yNTAxMzAwOTQ0MjZaFw0yNTAyMDQwODEzMjZaMDMxMTAvBgNV
BAMTKEM1Mjg2Qzk0MkM1MEUxQzRDNEQ5MkRGRTA0MzQ4QTlDQTBEMTM2OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/DChxoLpYS1Q0Y0kTk5BPMzZ5
QsL4McC2EnQ+EIrjEG2hDgps7xnwLABEbDDxnMIc7IeCXWvr7PyU91WyGEMBDJoh
1hTcSssaQ55BaDDtgf/hphjvBzKy4u2Pp8yHFmXoGOxyI1JnKG2plnERhBDLfPtN
oxekbFl55PN7JtoL+AWdYuvmpdu57K9tMgddrYB2ltFVaRyq0hhjHw5c2KBhOZAb
p5fcDX85Esrip1BMYQ/yKkw6DvEG2PG5NNEcLhOJjicsrC4SyNqE5M9El6Hf61yQ
3QNveuxNVzmcuxBMrJo2dfmIL5B0tCZb7Dw3r2Vjb5rPqfyYQm47xj3ci+pHAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUxShslCxQ4cTE2S3+BDSKnKDRNp4wHwYDVR0j
BBgwFoAUIVKRPC1TM+b0jaRbM59cKFhBNkswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MTRBQTlFNjM2M0QwNDBCQUUwODgwMTAwNUREOEE4MzM1
QUU1MEQ0NkRGRjUzQjMzNTlFNDZCQ0FGNDJGMEQ2LzAvMjE1MjkxM0MyRDUzMzNF
NkY0OERBNDVCMzM5RjVDMjg1ODQxMzY0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMTUyOTEzQzJENTMzM0U2RjQ4
REE0NUIzMzlGNUMyODU4NDEzNjRCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzE0QUE5RTYzNjNEMDQwQkFFMDg4MDEwMDVERDhBODMzNUFFNTBENDZE
RkY1M0IzMzU5RTQ2QkNBRjQyRjBENi8wLzIxNTI5MTNDMkQ1MzMzRTZGNDhEQTQ1
QjMzOUY1QzI4NTg0MTM2NEIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCI7FtSiYu/1ydKTj239ce+KuEh
mCs2vLsYU5hajKMMjXyAhjc1RzNnCCAgIikDWEbIuXaaK9RV8lKb0Lg0IZ6JEUcX
VJKQUa/QyW+kWtuS4F77OQXaX+m7yv9blNDwrSdcIVqcmDmydfEd4phHg9SSc1/F
ySHChozRXvNidaUTNNXBS/oJeOgAk2Za6NiuPoJ9+gfTiNTuZ9CPsMX4FVtbR8/G
v+5e1iJjNazMqmz2ZFjcP/6Ke4vclgHmbI59e6ZCB9ZWDFhoLMTd/RgT+O8XS5QP
1goYjKG4ZWIWASblIP7uLKcAYP73XdqBTB+RXUtYbN56JNTZJax1zmEO0Euv
-----END CERTIFICATE-----