Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B3146CE91205F3D5C78C516967877D31CCAD3A4AF98EF52B1DCB60168D25F7E/0/D24B0252516038C8F5AED640DCC6496F35757027.mft
File:                     D24B0252516038C8F5AED640DCC6496F35757027.mft (raw, json)
Hash identifier:          5ZmFCLrU3Un22U+dkSFSFcb6k11cdnou/GeUCBB5GoQ=
Subject key identifier:   7D:16:AD:CD:B6:3B:9E:44:11:B7:B6:42:99:0A:60:61:97:3D:7D:A4
Authority key identifier: D2:4B:02:52:51:60:38:C8:F5:AE:D6:40:DC:C6:49:6F:35:75:70:27
Certificate issuer:       /CN=D24B0252516038C8F5AED640DCC6496F35757027
Certificate serial:       3B3D4148BAF13CA3EAB3852CC9551833AA55EE56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D24B0252516038C8F5AED640DCC6496F35757027.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B3146CE91205F3D5C78C516967877D31CCAD3A4AF98EF52B1DCB60168D25F7E/0/D24B0252516038C8F5AED640DCC6496F35757027.mft
Manifest number:          A5
Signing time:             Wed 29 Jan 2025 13:27:01 +0000
Manifest this update:     Wed 29 Jan 2025 13:22:01 +0000
Manifest next update:     Mon 03 Feb 2025 19:15:01 +0000
Files and hashes:         1: 34352e3233362e3138342e302f32322d3234203d3e20323636383033.roa (hash: bh7ON42R+fGQ0maKuAd3ps71byO0eNCOl6hzY6LtarQ=)
                          2: D24B0252516038C8F5AED640DCC6496F35757027.crl (hash: G3rxkw6y8DTpuU/VmxtCNUOiN9ifLV8enpEMejUQIeU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:3d:41:48:ba:f1:3c:a3:ea:b3:85:2c:c9:55:18:33:aa:55:ee:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D24B0252516038C8F5AED640DCC6496F35757027
        Validity
            Not Before: Jan 29 13:22:01 2025 GMT
            Not After : Feb  3 19:15:01 2025 GMT
        Subject: CN=7D16ADCDB63B9E4411B7B642990A6061973D7DA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cd:18:98:07:b5:94:cc:69:ca:bb:00:db:f9:
                    85:a8:f0:87:8f:85:50:0a:84:65:d6:77:21:ef:ab:
                    3a:30:70:77:be:21:e7:b7:08:f4:f5:8c:92:16:96:
                    8f:a6:dd:20:70:a9:81:9e:31:d0:5c:72:0e:06:85:
                    48:32:d9:94:d5:31:c2:29:7c:41:a2:c5:72:64:6b:
                    85:5a:8f:45:3f:82:3a:cd:d1:80:9c:f3:ea:0b:c8:
                    bd:87:c5:17:0c:9d:c1:bd:7e:6b:ff:96:b1:93:96:
                    f9:4a:60:2d:b3:a3:3c:c5:b5:09:5c:ec:79:c6:d4:
                    2d:ee:e6:b2:8d:30:97:6a:24:c5:87:ad:95:43:85:
                    e9:e6:f6:2d:df:48:4e:d2:33:6b:f9:3e:10:61:82:
                    8f:7e:05:35:cc:55:b7:86:55:b1:a6:6c:90:52:cd:
                    02:23:b4:94:bb:a6:42:75:67:67:df:68:71:2d:be:
                    1e:9b:f7:12:f1:8f:8c:79:60:38:c5:cf:8a:5c:11:
                    63:d0:04:03:3b:ce:0a:50:ee:c5:aa:03:81:91:c8:
                    de:4c:f0:69:ca:96:81:4e:32:78:8f:94:55:52:de:
                    57:cd:f4:8e:cd:7c:ab:dc:17:f3:74:bf:3c:45:6d:
                    b9:1f:b8:b4:f1:18:53:08:1e:d8:0c:1c:13:ed:49:
                    3e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:16:AD:CD:B6:3B:9E:44:11:B7:B6:42:99:0A:60:61:97:3D:7D:A4
            X509v3 Authority Key Identifier:
                keyid:D2:4B:02:52:51:60:38:C8:F5:AE:D6:40:DC:C6:49:6F:35:75:70:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B3146CE91205F3D5C78C516967877D31CCAD3A4AF98EF52B1DCB60168D25F7E/0/D24B0252516038C8F5AED640DCC6496F35757027.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D24B0252516038C8F5AED640DCC6496F35757027.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B3146CE91205F3D5C78C516967877D31CCAD3A4AF98EF52B1DCB60168D25F7E/0/D24B0252516038C8F5AED640DCC6496F35757027.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:51:0b:77:88:22:a1:b7:9f:b9:53:5c:3f:44:40:20:b3:46:
         e7:9a:23:d9:9d:36:50:a5:3f:27:1f:65:74:04:02:14:b6:6c:
         3e:38:7b:7b:df:68:2d:4e:2a:a9:2c:c9:49:1d:77:e0:06:5e:
         70:69:98:d0:b6:80:6b:d2:89:97:8a:d9:a3:80:d2:f8:41:bf:
         85:77:b9:f8:60:6f:fc:b4:57:67:bd:ae:a3:0d:e3:ce:5c:fa:
         8f:0a:06:3d:4e:2c:9f:7e:2b:02:6b:4b:ea:e9:83:d7:f0:c5:
         c3:fc:b6:fe:51:d8:e2:d4:b7:97:3d:e4:6c:0c:94:c9:57:28:
         53:d5:e2:4d:b2:a8:e6:dd:9d:12:61:24:02:8b:aa:1a:5b:37:
         0d:f0:86:0d:1f:98:60:86:fa:bd:6a:27:75:fe:11:ec:8d:3f:
         6a:2b:54:eb:b6:fa:06:61:b7:97:c9:7d:81:b3:2e:22:85:5f:
         f4:3c:2e:d4:dd:f8:98:c3:3d:0d:c4:c2:1f:84:6c:0c:8d:64:
         8b:86:41:3a:d1:a9:3c:49:06:55:b7:8e:23:ca:d2:e5:00:de:
         08:ee:28:0a:17:85:88:53:c7:02:18:9e:88:05:51:b3:b5:69:
         79:c1:75:42:ea:2e:24:28:58:f6:68:2e:af:10:9a:2a:3a:23:
         e2:c7:1f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----