Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/352876AA3B7BD34529C4806D306052CF8D3D5515.mft
File:                     352876AA3B7BD34529C4806D306052CF8D3D5515.mft (raw, json)
Hash identifier:          UB9Pid2soUVSBL4e+Nvf+8YhOEJRImdEiOl/QJ8makk=
Subject key identifier:   D8:05:8C:FF:DA:42:EB:8D:89:A0:F9:AD:9A:72:5C:BB:E5:83:7F:30
Authority key identifier: 35:28:76:AA:3B:7B:D3:45:29:C4:80:6D:30:60:52:CF:8D:3D:55:15
Certificate issuer:       /CN=352876AA3B7BD34529C4806D306052CF8D3D5515
Certificate serial:       2D5876B50B8A98DE54DE3BB97370325982A2CA04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/352876AA3B7BD34529C4806D306052CF8D3D5515.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/352876AA3B7BD34529C4806D306052CF8D3D5515.mft
Manifest number:          A9
Signing time:             Fri 31 Jan 2025 17:03:58 +0000
Manifest this update:     Fri 31 Jan 2025 16:58:58 +0000
Manifest next update:     Wed 05 Feb 2025 10:35:58 +0000
Files and hashes:         1: 34352e3138332e36312e302f32342d3234203d3e20323733303233.roa (hash: E3F5/16Mv5OjAy84brYHDXMMYmOkPPI+nLOTB6n1RQc=)
                          2: 34352e3138332e36302e302f32322d3234203d3e20323639373633.roa (hash: sSe/wQHlJSRjr+tbgPQcd6/p8rCsjGWeGuP4LJMWre8=)
                          3: 352876AA3B7BD34529C4806D306052CF8D3D5515.crl (hash: 8gNr7rDgot7R8zkjOFYoKu4vAOktDB4E+ZV15kF/50k=)
                          4: 34352e3138332e36322e302f32342d3234203d3e203634313635.roa (hash: 8TdBdNu7oARPhkbIkZQtM90vvrZb0jBxx5xhQtxzfYI=)
                          5: 323830333a333536303a3a2f33322d3430203d3e20323639373633.roa (hash: VqCFXM4ZyiqmIUc3fjtxnU5RusRx7fpEO4hegLRKCWs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:58:76:b5:0b:8a:98:de:54:de:3b:b9:73:70:32:59:82:a2:ca:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=352876AA3B7BD34529C4806D306052CF8D3D5515
        Validity
            Not Before: Jan 31 16:58:58 2025 GMT
            Not After : Feb  5 10:35:58 2025 GMT
        Subject: CN=D8058CFFDA42EB8D89A0F9AD9A725CBBE5837F30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1d:29:42:08:26:1f:02:57:25:b2:e6:6e:ae:
                    28:90:3b:d8:8d:3c:71:2b:28:ea:ef:60:2a:22:87:
                    dc:69:c9:02:1a:71:63:48:fd:d8:5d:02:b6:9f:81:
                    07:6e:86:10:6f:f1:6f:41:1a:89:ae:9e:bc:cf:1a:
                    7e:9d:4a:b9:24:b4:c4:3e:57:6d:f7:6d:c5:99:39:
                    e3:a1:94:2b:d8:3f:d8:e2:88:21:65:72:40:c6:d2:
                    ee:d1:9f:e7:4b:fe:65:6d:ac:d3:a0:bc:70:b9:0f:
                    51:30:ea:71:3f:e2:1f:95:e6:15:5d:a1:7e:99:8a:
                    94:86:52:78:c1:34:03:d7:a9:0c:fe:74:2d:e9:aa:
                    87:26:5d:b8:d8:a7:c5:4b:52:84:5d:0d:c7:3b:bd:
                    45:90:ec:29:6d:c7:f9:07:16:3c:aa:81:cf:73:29:
                    7d:3e:0d:a1:3a:57:36:fe:be:83:31:94:be:ae:72:
                    8b:b6:71:92:b9:e6:2a:a8:d4:70:89:bb:51:66:ab:
                    1d:46:04:ee:b8:8d:f5:e3:d6:7c:d8:a2:88:fd:90:
                    71:ea:95:a6:55:5e:4a:77:6b:f7:d4:0e:47:bf:50:
                    98:6f:90:2f:ba:4b:f2:1f:aa:1b:6a:45:80:80:bb:
                    df:9b:1b:bc:d4:05:a6:21:f3:a8:89:44:85:94:21:
                    40:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:05:8C:FF:DA:42:EB:8D:89:A0:F9:AD:9A:72:5C:BB:E5:83:7F:30
            X509v3 Authority Key Identifier:
                keyid:35:28:76:AA:3B:7B:D3:45:29:C4:80:6D:30:60:52:CF:8D:3D:55:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/352876AA3B7BD34529C4806D306052CF8D3D5515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/352876AA3B7BD34529C4806D306052CF8D3D5515.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/352876AA3B7BD34529C4806D306052CF8D3D5515.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b8:73:7f:26:d9:01:0c:00:e3:dd:e3:13:b5:6b:95:44:9b:
         5e:f8:28:7c:14:f1:cb:4a:00:7f:0c:00:cd:53:12:b5:9c:92:
         12:be:6e:81:87:df:36:7b:6d:1f:27:a3:6d:ed:d1:d0:f3:90:
         b8:9e:95:a4:0c:9c:8c:b5:68:10:80:8b:c3:ee:73:4f:99:30:
         b6:8b:17:98:12:58:7c:c6:6c:56:ff:7f:cf:8f:b7:f8:34:ea:
         9d:12:52:8c:c9:db:c9:3f:18:80:02:00:d8:d5:a7:ea:61:b4:
         9b:c6:67:bf:5f:88:0d:a6:dd:6c:db:8d:49:25:25:ed:43:be:
         70:29:8f:3e:50:f3:8a:63:80:c3:ac:25:45:37:92:9f:c6:73:
         51:71:d6:59:cf:a5:e4:fc:7c:2b:9b:ea:9c:f0:40:3c:e5:f0:
         9f:bd:d8:61:8a:0b:f0:47:10:0f:95:08:00:3e:dc:3e:94:99:
         38:b9:3b:3d:a7:98:a7:7b:c0:db:f4:2e:15:3e:51:e6:f9:eb:
         c1:94:a5:e3:ea:85:20:f9:78:c6:e8:8c:68:5f:a3:3f:f2:b8:
         15:ca:94:8d:0e:59:c0:2d:d4:32:9d:2d:4b:fc:fa:7a:7a:2d:
         da:0b:f7:a2:b0:d1:29:a7:3f:ac:b4:15:cc:25:28:0a:84:e5:
         13:ab:6a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:32:19 2025 by rpki-client