Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.mft
File:                     889D0E05D0237E6BC68731B7798A1D62FA3AE791.mft (raw, json)
Hash identifier:          aiOm/nvgq3+qayRHyra9kNYdiuRBmXIq6RHuK2Yc1ZY=
Subject key identifier:   D2:C7:CC:2C:62:91:01:B6:4D:62:42:64:6A:29:54:8A:1E:05:B0:FE
Authority key identifier: 88:9D:0E:05:D0:23:7E:6B:C6:87:31:B7:79:8A:1D:62:FA:3A:E7:91
Certificate issuer:       /CN=889D0E05D0237E6BC68731B7798A1D62FA3AE791
Certificate serial:       5A5314231C56C23E17A67E3B47E9529BF4CB55CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.mft
Manifest number:          A2
Signing time:             Thu 30 Jan 2025 08:48:51 +0000
Manifest this update:     Thu 30 Jan 2025 08:43:51 +0000
Manifest next update:     Tue 04 Feb 2025 03:51:51 +0000
Files and hashes:         1: 34352e3139312e3139322e302f32322d3232203d3e20323639393333.roa (hash: AlIryFBAxGlUmsU45/HxWZniG7ETkRZbtOIMDfXnMoc=)
                          2: 34352e3139312e3139322e302f32332d3234203d3e20323639393333.roa (hash: lxDUU0d/jbh9bLQiqh83hDBir2HmM0rsjNYHEtqZsGo=)
                          3: 34352e3139312e3139342e302f32342d3234203d3e20323732383738.roa (hash: ppQW22Nu/nzf4wGOfLMyqD8HjGC2vqlY6p+/5vNYB1c=)
                          4: 34352e3139312e3139352e302f32342d3234203d3e20323639393333.roa (hash: tccZP3MYwS7Q6Mfkj3E38Ago8wh7WXPgonT6rPpShdw=)
                          5: 889D0E05D0237E6BC68731B7798A1D62FA3AE791.crl (hash: 0oGEHeKt2oVD6HEsAamabc/j9nrREevZtGMZiMKE+z4=)
                          6: 323830333a386165303a3a2f33322d3438203d3e20323639393333.roa (hash: eNKneh8JS94UgEFTOO90ETQS93edqVZc/LaThspWcMk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:53:14:23:1c:56:c2:3e:17:a6:7e:3b:47:e9:52:9b:f4:cb:55:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=889D0E05D0237E6BC68731B7798A1D62FA3AE791
        Validity
            Not Before: Jan 30 08:43:51 2025 GMT
            Not After : Feb  4 03:51:51 2025 GMT
        Subject: CN=D2C7CC2C629101B64D6242646A29548A1E05B0FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:66:40:d3:84:c9:27:4d:b5:78:ec:ec:63:5d:
                    a9:98:2f:66:64:63:4a:2c:70:20:b8:1c:10:c5:1d:
                    9d:18:21:85:2f:09:fa:6d:dd:9a:cd:79:6d:a4:e2:
                    d0:71:20:2f:c6:13:df:4c:29:16:ac:43:b0:2e:cf:
                    1b:cf:a4:7d:64:75:17:47:48:17:7f:a8:2f:d4:ac:
                    6d:9f:1c:9a:b3:0d:7f:e4:c1:bb:e1:e3:09:86:0a:
                    da:3e:a4:64:e2:40:51:29:17:31:ab:36:4b:4f:98:
                    9a:38:11:32:ae:d2:38:b9:74:7d:fb:69:0c:98:97:
                    e8:1d:95:bd:30:a1:c8:fd:d4:77:8f:80:e0:94:de:
                    ed:e3:6e:b5:68:d0:3b:b3:3b:08:7b:e5:45:09:12:
                    25:11:a2:0f:c8:6a:c8:12:d1:6a:f6:f6:2a:74:e7:
                    80:89:08:35:dd:b3:5a:68:2c:ec:ee:8a:d8:e7:6b:
                    2d:0f:51:2c:03:aa:d1:ff:24:07:7b:65:6b:b1:3e:
                    e1:d9:89:1e:b5:ec:6f:c9:1c:b5:bc:dd:0e:9b:1c:
                    b1:b3:4f:ac:78:45:ed:a9:60:7c:4e:2d:fd:36:f2:
                    86:b5:34:a8:c4:50:f0:cf:1e:30:5d:a0:28:5e:2c:
                    4f:d9:94:ec:51:62:1b:83:32:00:87:19:d6:04:4b:
                    c7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C7:CC:2C:62:91:01:B6:4D:62:42:64:6A:29:54:8A:1E:05:B0:FE
            X509v3 Authority Key Identifier:
                keyid:88:9D:0E:05:D0:23:7E:6B:C6:87:31:B7:79:8A:1D:62:FA:3A:E7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:6f:e1:df:41:cd:20:6b:07:00:04:5d:0e:78:e2:fd:9f:2e:
         a1:40:50:60:2d:c0:3d:0d:ac:0d:4d:c2:89:a0:e8:42:4c:1f:
         ad:ba:9e:cc:15:cf:77:5b:70:63:52:f8:48:92:f0:a3:6a:2e:
         0a:b5:43:e9:67:5e:fc:ab:76:06:06:85:8b:17:ee:37:55:57:
         98:da:da:89:e5:ae:7c:be:fd:9a:24:1a:26:0c:42:58:a8:4c:
         5d:c2:c3:59:b2:44:04:52:12:86:b9:7c:18:d9:ce:a3:c5:43:
         66:17:dd:07:7b:69:52:36:18:4a:89:f2:f3:32:54:23:8d:e5:
         e3:4f:e8:44:14:6c:4f:6a:20:81:5d:76:f1:db:28:d7:49:a8:
         73:b4:91:24:46:31:c5:f3:40:a4:c0:87:d8:14:38:4a:e5:2a:
         2b:d8:3e:2c:f8:28:ae:bf:1a:31:46:26:b1:63:7f:4d:c8:54:
         70:01:d2:e3:c1:21:a5:5c:5c:54:d1:e6:8e:7b:66:80:3e:53:
         df:c8:a2:86:fc:a4:2a:6a:10:9c:a2:12:9a:2a:6b:d0:ee:a1:
         d4:51:39:c5:ca:cc:cb:8e:64:85:d2:0c:b1:d6:a2:8f:94:d1:
         93:bd:65:83:54:41:1d:8d:f1:da:57:95:1e:26:d5:fa:e6:b8:
         a0:74:36:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:59:01 2025 by rpki-client