Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.mft
File:                     CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.mft (raw, json)
Hash identifier:          FMzaz+ya8NA0irNiEyfumz9bwilIKw2ZJ5JX4/v7vH0=
Subject key identifier:   1E:41:00:89:F7:7A:F2:17:19:02:4B:EA:D7:E2:D2:2C:93:2B:5A:30
Authority key identifier: CD:03:59:B5:46:DA:A3:8D:E0:E9:8E:47:B8:5C:7B:2A:E2:C8:2D:71
Certificate issuer:       /CN=CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71
Certificate serial:       4AA28F3D181316C286D3B317C1AF35520F792F75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.mft
Manifest number:          7D
Signing time:             Thu 30 Jan 2025 02:45:14 +0000
Manifest this update:     Thu 30 Jan 2025 02:40:14 +0000
Manifest next update:     Tue 04 Feb 2025 16:53:14 +0000
Files and hashes:         1: 323830333a6231303a3430303a3a2f33382d3338203d3e203532343638.roa (hash: Y171XxJbzSlNY5V/C5yJx5I9CNCHI64g3EkfNEQJAbc=)
                          2: 323830333a6231303a3a2f33382d3338203d3e203237393531.roa (hash: jTu5BUpRglwe9zR9n3clNh6s+JNQI5fKewHIO4mltLQ=)
                          3: 3138312e3233332e3136382e302f32342d3234203d3e203237393531.roa (hash: e2EjQd+/iN1/06Eaq1RIPao/kSuX1uuWa8F+nO7fvQk=)
                          4: CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.crl (hash: knZKzP6bkLjVo/rOcA+mfcGQKmwrDtTfRrIe3LnmZTc=)
                          5: 3138312e3233332e3136392e302f32342d3234203d3e203532343638.roa (hash: xu5AyUw9f0Uz0Hx9U6ffriib1lomLbYgE7vXK35FOkU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a2:8f:3d:18:13:16:c2:86:d3:b3:17:c1:af:35:52:0f:79:2f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71
        Validity
            Not Before: Jan 30 02:40:14 2025 GMT
            Not After : Feb  4 16:53:14 2025 GMT
        Subject: CN=1E410089F77AF21719024BEAD7E2D22C932B5A30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0d:97:18:16:03:d3:b8:73:b0:7b:1a:b9:5e:
                    90:b5:c8:67:d8:fa:38:fb:73:be:ab:45:d5:a3:a8:
                    29:13:e6:ea:d7:d0:1f:ad:2f:9a:70:90:b5:88:b3:
                    da:bf:da:27:0b:73:94:05:da:17:e7:8e:75:52:5e:
                    e0:66:4c:88:c9:8b:58:bc:c6:0b:d3:02:10:1e:26:
                    c8:9c:29:0f:1c:80:25:4f:6e:34:db:a9:e8:7b:91:
                    2c:5e:d9:de:23:d9:3b:71:9b:0e:84:36:b1:92:c0:
                    be:c6:5e:3b:39:6c:f1:c6:0d:b2:65:c7:67:64:5d:
                    5c:e9:d5:23:a2:68:e3:2d:69:2f:ad:62:14:3f:6d:
                    d0:73:19:a2:32:6a:fa:33:1a:b9:be:ae:44:35:61:
                    e7:d2:8c:09:f6:7f:13:f2:76:34:76:ba:4f:e0:96:
                    d5:b8:b2:91:da:0d:f8:33:65:26:c1:d2:a0:05:e5:
                    5f:95:f4:db:44:9c:89:1f:82:ad:87:29:8c:f5:45:
                    ea:84:77:35:95:ce:41:d6:62:4d:aa:8c:d6:bf:9d:
                    b6:01:88:28:14:cf:61:d2:e9:94:7c:db:34:e2:f5:
                    dc:bd:d1:bf:c9:40:72:30:ce:5c:1a:53:b8:8d:19:
                    92:9d:22:61:fa:f4:37:2b:d8:49:b3:0e:a8:c0:85:
                    fb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:41:00:89:F7:7A:F2:17:19:02:4B:EA:D7:E2:D2:2C:93:2B:5A:30
            X509v3 Authority Key Identifier:
                keyid:CD:03:59:B5:46:DA:A3:8D:E0:E9:8E:47:B8:5C:7B:2A:E2:C8:2D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:53:6e:04:3e:be:ad:ac:85:8d:d9:d0:e8:25:86:71:ea:50:
         86:cf:9a:da:be:ca:d9:d7:34:6a:c8:a6:52:9c:5a:db:0f:80:
         d5:51:7c:62:df:84:8f:a9:06:10:59:f4:2e:d2:6d:a4:33:52:
         76:77:eb:03:6b:e2:c2:ec:2c:be:d0:f9:99:b2:9e:c3:5c:97:
         12:b9:ff:ab:58:56:f1:e8:4f:cb:48:5c:ca:99:a8:3b:44:52:
         db:2c:14:fe:13:62:fe:2a:a5:b0:20:5f:60:88:c3:0b:4a:51:
         3c:16:d4:ac:85:23:6e:2d:f6:39:42:c8:14:7e:34:40:d3:f6:
         d7:2c:85:de:1d:b4:8a:d1:e7:0e:d1:0f:90:b3:2c:30:86:bf:
         70:4f:6a:96:ee:4f:ac:a7:c6:06:8c:2a:39:01:cf:42:8a:84:
         a7:9d:75:a1:e9:75:69:95:2c:f3:c7:df:85:09:1c:d1:d7:63:
         1c:bc:da:05:65:23:c0:44:43:3b:0f:63:17:bc:c9:54:d5:9d:
         32:ef:e2:a1:19:b5:9c:d8:2d:40:88:82:1f:5d:f0:06:ac:41:
         0c:4d:8d:81:df:72:63:0e:0c:30:88:f1:8c:96:ce:3a:04:2a:
         b2:d9:bf:0d:76:74:7f:99:f4:12:0f:5c:4f:43:8d:92:1d:a8:
         ad:5e:b6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----