Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.mft
File:                     D097D27028EDDD1240D51150F45062D4CE0E87F4.mft (raw, json)
Hash identifier:          pIxAGbLyZIYHwR6DGWrdkMGLqL0D40+otMXUSKrRL2Q=
Subject key identifier:   C0:CA:8B:1A:3A:32:17:92:1D:85:E2:BF:ED:D1:D2:AC:CB:9E:4D:7A
Authority key identifier: D0:97:D2:70:28:ED:DD:12:40:D5:11:50:F4:50:62:D4:CE:0E:87:F4
Certificate issuer:       /CN=D097D27028EDDD1240D51150F45062D4CE0E87F4
Certificate serial:       6F81553C9D47B70BB589DABF119DC13D28E8F426
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.mft
Manifest number:          AA
Signing time:             Fri 31 Jan 2025 00:18:34 +0000
Manifest this update:     Fri 31 Jan 2025 00:13:34 +0000
Manifest next update:     Wed 05 Feb 2025 09:02:34 +0000
Files and hashes:         1: 3230302e302e32302e302f32332d3235203d3e203238303137.roa (hash: fD4fAzfLQL3fPbmH2+MwERwrJqPv2Xh0/YBd8k1GAmw=)
                          2: 3230302e302e32312e302f32342d3235203d3e203238303137.roa (hash: adpNDy1LoD/U/g7NcYQFFMr5QeHTJts9UlpYZVIcidI=)
                          3: 323030313a313363373a363030343a3a2f34372d3536203d3e203238303137.roa (hash: NHlPGqTrUZxTRRiuf6e69fOd+YNcxCsAhkXzsTzeAjY=)
                          4: 323030313a313363373a363030353a3a2f34382d3536203d3e203238303137.roa (hash: vZ58LPXQGV0xWnHemmlTX4UikQFQDDFgSJWE7gUNvxU=)
                          5: D097D27028EDDD1240D51150F45062D4CE0E87F4.crl (hash: f7dzmav90hc7ssdIn6BvCpcyLt/FLMDMQ2zKyProfvA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:81:55:3c:9d:47:b7:0b:b5:89:da:bf:11:9d:c1:3d:28:e8:f4:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D097D27028EDDD1240D51150F45062D4CE0E87F4
        Validity
            Not Before: Jan 31 00:13:34 2025 GMT
            Not After : Feb  5 09:02:34 2025 GMT
        Subject: CN=C0CA8B1A3A3217921D85E2BFEDD1D2ACCB9E4D7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:69:1c:8d:d4:af:49:f2:4e:c8:5d:98:0e:0e:
                    0d:7d:13:48:0e:b6:a1:ff:81:03:8c:bd:02:0e:35:
                    b4:d9:9d:e0:c8:79:52:75:96:cd:9f:1e:76:e1:6d:
                    13:ea:69:56:ed:b4:82:b8:f7:f7:ad:67:82:b1:c5:
                    75:9f:4c:4a:81:90:fc:e8:dc:04:d9:a1:be:e4:bb:
                    78:5b:55:18:73:3a:ad:3c:0d:ad:6d:f0:76:3b:ca:
                    74:3f:93:dc:49:85:88:be:8d:1f:4e:3f:0d:0e:0c:
                    6c:24:bd:c7:a2:74:ae:57:44:c9:f6:84:24:99:b1:
                    ef:d3:2d:cb:e5:cf:6b:e4:eb:15:60:b0:49:a7:dd:
                    40:1a:96:73:17:77:a6:1c:bb:32:a1:85:24:f5:c1:
                    89:e2:b9:24:0c:5b:8f:01:1d:78:20:99:74:71:64:
                    98:85:6e:20:7d:3d:80:fd:b3:4c:88:42:8b:ff:72:
                    8b:cf:c8:4a:6a:00:69:25:de:91:cc:ac:e8:19:e3:
                    aa:51:df:6b:f5:02:06:da:8b:16:23:74:07:0f:f5:
                    d3:3f:a0:e1:ba:e9:ed:8d:a1:71:a5:46:98:f4:e8:
                    60:da:d5:7e:b8:b0:7e:ef:27:df:57:d2:02:80:26:
                    73:7d:0c:2b:6e:82:4e:8c:71:db:3e:d6:8d:9c:f0:
                    13:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CA:8B:1A:3A:32:17:92:1D:85:E2:BF:ED:D1:D2:AC:CB:9E:4D:7A
            X509v3 Authority Key Identifier:
                keyid:D0:97:D2:70:28:ED:DD:12:40:D5:11:50:F4:50:62:D4:CE:0E:87:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:ff:74:71:e6:0d:2a:2c:c1:14:52:3b:6e:56:1a:f1:68:89:
         3a:d8:60:74:98:c8:e7:a2:be:df:df:5c:7a:03:95:5e:09:dc:
         52:0d:9f:04:47:9c:05:2b:d0:6f:63:42:ac:25:07:68:af:8d:
         fc:17:f7:ad:23:f2:57:68:eb:7b:3f:8a:af:54:63:f7:40:02:
         7b:33:6e:c3:c8:f2:b3:58:82:d2:e0:d5:f2:8b:d3:6e:9f:8c:
         ee:b0:1c:59:f2:a1:17:97:78:49:69:82:74:db:95:c3:02:70:
         d9:2f:79:c2:c8:52:bb:8a:a5:6b:89:e2:c6:3e:70:cd:fc:c1:
         bf:c2:3a:fa:d8:a3:25:69:24:90:b0:d7:ff:ed:18:65:cf:c2:
         69:20:ae:2d:42:d2:76:e4:5b:35:4c:da:31:e4:ca:3a:c7:54:
         be:05:e7:12:b3:75:51:c1:57:ca:e6:db:0c:54:86:87:21:f6:
         cb:19:a6:2d:46:de:9d:de:63:de:9c:c5:a2:d2:14:57:90:8f:
         bb:36:e4:92:dc:32:9d:f2:5e:a9:b3:4c:c4:63:31:1f:2b:31:
         fa:aa:b0:1d:3a:03:2e:bc:c3:c7:52:aa:0a:b7:1d:4b:f8:e3:
         e7:29:15:e9:1d:93:02:a5:26:30:4e:5a:ae:81:39:6b:d5:f4:
         db:fe:e6:4c
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUb4FVPJ1Htwu1idq/EZ3BPSjo9CYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA5N0QyNzAyOEVEREQxMjQwRDUxMTUwRjQ1MDYyRDRD
RTBFODdGNDAeFw0yNTAxMzEwMDEzMzRaFw0yNTAyMDUwOTAyMzRaMDMxMTAvBgNV
BAMTKEMwQ0E4QjFBM0EzMjE3OTIxRDg1RTJCRkVERDFEMkFDQ0I5RTREN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfaRyN1K9J8k7IXZgODg19E0gO
tqH/gQOMvQIONbTZneDIeVJ1ls2fHnbhbRPqaVbttIK49/etZ4KxxXWfTEqBkPzo
3ATZob7ku3hbVRhzOq08Da1t8HY7ynQ/k9xJhYi+jR9OPw0ODGwkvceidK5XRMn2
hCSZse/TLcvlz2vk6xVgsEmn3UAalnMXd6YcuzKhhST1wYniuSQMW48BHXggmXRx
ZJiFbiB9PYD9s0yIQov/covPyEpqAGkl3pHMrOgZ46pR32v1AgbaixYjdAcP9dM/
oOG66e2NoXGlRpj06GDa1X64sH7vJ99X0gKAJnN9DCtugk6Mcds+1o2c8BOpAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUwMqLGjoyF5IdheK/7dHSrMueTXowHwYDVR0j
BBgwFoAU0JfScCjt3RJA1RFQ9FBi1M4Oh/QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMDU5ODQ0MjA5MzBGMkU1QzA0ODJENEFCOEZFRUY2M0U1
MzBDOTY2M0UwQURDM0IxNjFDNjM2NUI1RjkzQzhELzAvRDA5N0QyNzAyOEVEREQx
MjQwRDUxMTUwRjQ1MDYyRDRDRTBFODdGNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMDk3RDI3MDI4RURERDEyNDBE
NTExNTBGNDUwNjJENENFMEU4N0Y0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTA1OTg0NDIwOTMwRjJFNUMwNDgyRDRBQjhGRUVGNjNFNTMwQzk2NjNF
MEFEQzNCMTYxQzYzNjVCNUY5M0M4RC8wL0QwOTdEMjcwMjhFREREMTI0MEQ1MTE1
MEY0NTA2MkQ0Q0UwRTg3RjQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCo/3Rx5g0qLMEUUjtuVhrxaIk6
2GB0mMjnor7f31x6A5VeCdxSDZ8ER5wFK9BvY0KsJQdor438F/etI/JXaOt7P4qv
VGP3QAJ7M27DyPKzWILS4NXyi9Nun4zusBxZ8qEXl3hJaYJ025XDAnDZL3nCyFK7
iqVrieLGPnDN/MG/wjr62KMlaSSQsNf/7Rhlz8JpIK4tQtJ25Fs1TNox5Mo6x1S+
BecSs3VRwVfK5tsMVIaHIfbLGaYtRt6d3mPenMWi0hRXkI+7NuSS3DKd8l6ps0zE
YzEfKzH6qrAdOgMuvMPHUqoKtx1L+OPnKRXpHZMCpSYwTlqugTlr1fTb/uZM
-----END CERTIFICATE-----