Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.mft
File:                     089B798E1BD051786195E5F9D02238D550A5EAD7.mft (raw, json)
Hash identifier:          r9p8hvNkQeQz6e+FHvDjIvbFN6b5BwsiGcXGeiXmpRY=
Subject key identifier:   FB:6F:E9:9C:86:A3:C3:28:BD:A2:80:EE:69:BE:F2:AD:DA:B1:29:92
Authority key identifier: 08:9B:79:8E:1B:D0:51:78:61:95:E5:F9:D0:22:38:D5:50:A5:EA:D7
Certificate issuer:       /CN=089B798E1BD051786195E5F9D02238D550A5EAD7
Certificate serial:       17080565B74BFEFDD2EAA5ACCB25E3D3EFD7A717
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.mft
Manifest number:          A7
Signing time:             Wed 29 Jan 2025 14:47:53 +0000
Manifest this update:     Wed 29 Jan 2025 14:42:53 +0000
Manifest next update:     Tue 04 Feb 2025 05:27:53 +0000
Files and hashes:         1: 3137302e3234342e3230382e302f32322d3234203d3e20323634363638.roa (hash: 1Z7ryqsZSvi2os04M6Dm265zgx5x7CbM13OWKkf0Qyw=)
                          2: 3137302e3234342e3230382e302f32342d3234203d3e20323731383832.roa (hash: Mb5u4TrLMpl9xBqfXttksbU4jeLGJSbYp7EKnIv1Fws=)
                          3: 3137302e3234342e3230382e302f32322d3234203d3e203532343638.roa (hash: TVshWrMVGo3bPKYvQeHfMtl1noKRV555NfDnmf5BT/8=)
                          4: 323830333a396163303a3a2f33322d3438203d3e20323731383832.roa (hash: llenxCGEHbHTBWngxaVbIr3Zrxb/Lh2H3C1tgusdF6E=)
                          5: 089B798E1BD051786195E5F9D02238D550A5EAD7.crl (hash: eNBmmJpD0f24w5i3tf1xcG/yWou8YLyJS9CX6AZnbX8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:08:05:65:b7:4b:fe:fd:d2:ea:a5:ac:cb:25:e3:d3:ef:d7:a7:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=089B798E1BD051786195E5F9D02238D550A5EAD7
        Validity
            Not Before: Jan 29 14:42:53 2025 GMT
            Not After : Feb  4 05:27:53 2025 GMT
        Subject: CN=FB6FE99C86A3C328BDA280EE69BEF2ADDAB12992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:55:82:f1:de:f6:1b:6c:25:f8:1d:fd:34:61:
                    64:e0:35:9a:e9:8d:11:66:4a:f5:5a:e0:e1:70:ec:
                    ff:5d:a7:79:2e:66:0b:f7:c5:78:77:57:99:2f:d8:
                    c5:24:26:34:2d:cf:62:6f:17:e7:93:6a:58:02:d6:
                    53:94:1c:43:e3:cf:45:f9:d0:09:9f:e4:a8:3d:39:
                    37:92:27:35:91:ac:63:1b:9d:0c:ce:49:dd:7f:57:
                    42:2c:fe:79:5b:64:85:8c:8a:88:ac:cd:52:94:c7:
                    77:1f:be:6e:11:d3:d1:5d:ac:e5:1d:f6:83:96:45:
                    f9:bf:c2:d0:5f:9d:3b:30:89:f9:70:a4:d8:4b:63:
                    17:ad:eb:f1:5a:14:f9:5e:d8:98:39:bb:96:98:11:
                    f4:59:f3:7e:64:4e:93:dc:e8:4f:f2:f5:60:0c:14:
                    43:c6:ad:63:01:c9:be:ec:f5:32:dc:09:64:78:f9:
                    f4:a0:62:86:72:85:29:1f:3e:3c:98:c4:fb:3c:13:
                    9b:37:1f:19:36:a9:a4:5f:be:10:11:69:1c:f3:d1:
                    23:79:4e:a7:de:b8:01:97:da:83:84:e3:16:72:7d:
                    3f:51:c0:c2:f1:8c:d1:51:7d:f4:2b:6a:1a:fb:00:
                    c7:35:f5:aa:d8:51:93:e0:a3:7f:fd:87:d4:15:f6:
                    52:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6F:E9:9C:86:A3:C3:28:BD:A2:80:EE:69:BE:F2:AD:DA:B1:29:92
            X509v3 Authority Key Identifier:
                keyid:08:9B:79:8E:1B:D0:51:78:61:95:E5:F9:D0:22:38:D5:50:A5:EA:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:13:da:04:86:f7:83:11:ef:a6:ae:00:5a:f5:38:64:0b:fd:
         8b:a5:26:18:e1:65:e5:8e:4b:ad:b7:07:d4:b9:a4:72:73:c8:
         d4:5e:42:9f:8d:b1:32:28:27:39:3b:c4:c3:2b:8c:0f:e2:ba:
         52:67:a7:18:e3:5f:a6:47:1b:e2:66:08:26:64:95:fd:bb:d0:
         c3:27:b9:fe:60:e6:fb:ed:95:b8:cd:7f:20:89:76:af:d9:ad:
         e2:a9:a1:a9:df:60:3e:88:7f:2c:cc:37:01:c7:31:d3:87:18:
         d0:29:6c:b7:8d:21:e1:b0:de:de:e1:b6:67:58:9c:22:7c:a2:
         77:6f:6e:15:4f:b1:1b:b1:51:98:df:8a:7c:2f:b9:37:be:2a:
         02:ee:40:4f:8c:fc:89:41:a8:d1:72:b5:1a:52:46:d6:f8:e8:
         5e:11:8d:c9:6b:dd:1b:58:f6:b6:a1:65:19:7e:e0:6b:50:ae:
         29:e9:84:91:2e:86:58:02:54:38:ad:4a:9f:8e:ab:56:26:80:
         7e:5a:6b:2b:36:8b:92:f2:f1:e9:3a:6a:c9:ba:c8:53:63:47:
         0b:7c:b6:b7:bf:86:14:19:a8:85:cf:56:4f:5c:97:3f:d0:1e:
         52:7d:a4:ef:35:b7:5b:e0:9f:c0:a8:36:c9:b5:da:1f:3a:02:
         1f:d4:14:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----