Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.mft
File:                     AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.mft (raw, json)
Hash identifier:          In0X3+pswIxEK8N+aBnwn2nDFuNgipvJ0bsT/x2TMtg=
Subject key identifier:   2A:B4:84:12:42:99:C9:AF:13:86:DA:45:02:75:A4:87:5F:02:AF:4D
Authority key identifier: AF:4E:F7:30:0D:CD:35:72:D2:5A:D9:FC:9E:15:44:19:3A:D7:F4:14
Certificate issuer:       /CN=AF4EF7300DCD3572D25AD9FC9E1544193AD7F414
Certificate serial:       3779E57DEA7F21D9916C64BB366B33C10591354B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.mft
Manifest number:          A5
Signing time:             Wed 29 Jan 2025 11:40:57 +0000
Manifest this update:     Wed 29 Jan 2025 11:35:57 +0000
Manifest next update:     Mon 03 Feb 2025 20:30:57 +0000
Files and hashes:         1: 34352e3232362e3130302e302f32322d3234203d3e203532333237.roa (hash: kazf9DydSmUmxIRsRIWu+7hKE0onbaaIqhsFblre57s=)
                          2: AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.crl (hash: ODH1pemztSoaHIO+1/0rQ3IVpi3D30GEANDS0lCIREk=)
                          3: 323830333a666132303a3a2f33322d3438203d3e203532333237.roa (hash: MxdpmQKy1j8hve0Uu4py8FoypqK/46XIUXYWxBXeeFo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:79:e5:7d:ea:7f:21:d9:91:6c:64:bb:36:6b:33:c1:05:91:35:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4EF7300DCD3572D25AD9FC9E1544193AD7F414
        Validity
            Not Before: Jan 29 11:35:57 2025 GMT
            Not After : Feb  3 20:30:57 2025 GMT
        Subject: CN=2AB484124299C9AF1386DA450275A4875F02AF4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:67:11:5a:a4:70:11:db:6b:16:57:37:2f:e7:
                    0a:4f:e9:58:fc:40:02:8d:e5:37:44:71:1e:29:a5:
                    47:01:1c:64:18:26:54:6b:2a:34:c8:3d:01:81:3b:
                    9f:04:1a:59:97:ad:b3:9a:2b:b7:e6:f8:7f:09:81:
                    ba:b9:b2:5b:29:18:a3:93:fd:22:e0:b1:f8:bf:b1:
                    4c:72:a4:22:80:0f:64:f0:33:d1:98:76:bc:34:f0:
                    1b:8a:a8:87:e3:a4:49:01:0c:09:5c:ba:3b:e2:96:
                    ab:44:53:cc:01:1f:1f:35:63:29:18:27:8c:ff:f1:
                    9d:07:15:d4:47:e1:a3:51:b1:db:fa:14:6e:e7:6f:
                    ed:89:db:91:a3:be:ca:79:80:21:80:7b:ad:a3:d5:
                    4d:d1:c1:56:96:f3:c7:c0:8f:ec:62:9b:cb:30:a1:
                    c7:e0:d6:78:9e:fb:2b:82:5c:dc:5a:09:a5:84:de:
                    a5:ea:63:0b:90:9a:5a:f1:a6:a5:d2:3d:15:a1:56:
                    fe:dc:c3:a9:f9:fc:c0:6b:c9:8d:69:1c:52:ba:41:
                    1c:e3:3c:9c:50:30:1f:0d:88:67:55:3d:9d:a2:93:
                    ab:88:d6:6b:e4:34:04:48:35:f5:42:96:1f:cd:e0:
                    54:42:8c:c5:b4:6c:cd:e1:24:75:b4:7d:6c:0d:07:
                    fe:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B4:84:12:42:99:C9:AF:13:86:DA:45:02:75:A4:87:5F:02:AF:4D
            X509v3 Authority Key Identifier:
                keyid:AF:4E:F7:30:0D:CD:35:72:D2:5A:D9:FC:9E:15:44:19:3A:D7:F4:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:df:15:61:70:a3:b2:6e:3d:47:b7:46:05:db:9c:cf:7d:30:
         c6:58:b1:aa:0a:bf:c1:57:73:0b:e8:2b:e3:f2:60:1b:6b:55:
         c6:ef:67:87:83:b0:3b:9e:d0:ef:7f:47:4b:37:d2:ee:ae:43:
         48:4b:6e:40:30:28:1b:74:13:b1:f3:dd:a1:5b:bf:4c:18:00:
         8f:ad:6a:59:7a:d9:c2:39:44:35:d7:a3:0a:18:63:cd:38:ae:
         45:95:32:2d:76:8f:51:88:b5:e2:ff:4e:31:31:87:7e:66:14:
         0f:5c:b4:98:9e:04:a9:68:8b:26:10:68:2f:c8:49:3e:5c:96:
         4e:8c:00:70:e2:04:fb:46:91:ab:fb:61:d0:0c:f4:12:37:cb:
         d8:7f:dd:d5:ea:7f:de:57:be:f7:23:5b:db:3e:49:79:bf:70:
         02:b3:d2:f9:f4:e6:92:0f:1f:5d:e5:0a:2a:e2:78:a6:d2:1d:
         53:36:ba:4b:d0:06:fe:e7:ea:ee:0e:cd:ce:19:12:15:4a:31:
         fc:ab:e6:b0:d3:b2:52:29:d2:3c:3e:e0:2a:6b:6f:f9:bb:4a:
         4c:cb:e7:6a:73:ae:2f:c1:26:41:a3:be:f3:90:1c:ee:64:ed:
         25:51:d0:21:f7:36:5f:fa:f2:af:99:9d:e8:64:d6:30:a4:9e:
         60:73:e6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----