Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.mft
File:                     220AE4263EC4510BDEEDA90B2E56F50C63919DF0.mft (raw, json)
Hash identifier:          fKTTdxu7lmkJWYknXk0zl5/z4FTVDnJSt43iKGvHGAs=
Subject key identifier:   45:1D:48:02:76:FF:F1:2E:BD:2C:E5:1D:D0:79:67:13:E2:83:B5:CF
Authority key identifier: 22:0A:E4:26:3E:C4:51:0B:DE:ED:A9:0B:2E:56:F5:0C:63:91:9D:F0
Certificate issuer:       /CN=220AE4263EC4510BDEEDA90B2E56F50C63919DF0
Certificate serial:       089F5CFE194E1796258584FC7A24EA0939E25DFA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.mft
Manifest number:          A5
Signing time:             Fri 31 Jan 2025 17:49:29 +0000
Manifest this update:     Fri 31 Jan 2025 17:44:29 +0000
Manifest next update:     Wed 05 Feb 2025 14:03:29 +0000
Files and hashes:         1: 3137302e3234352e35362e302f32322d3234203d3e20323632323334.roa (hash: f9nep2n4Q1gs5nasSf5x09ZwaJG//z5qlkW43ATZGZM=)
                          2: 220AE4263EC4510BDEEDA90B2E56F50C63919DF0.crl (hash: YjSGUKp5MnJXrUT6mv5FZw5Up6pNC5oI9AXwDaloA7E=)
                          3: 3133312e3130382e3233322e302f32322d3234203d3e20323632323334.roa (hash: e1Po8EPFRAZU+ZDXxws1GEJznglRqF5vSNP2PudjVSI=)
                          4: 323830333a646230303a3a2f33322d3438203d3e20323632323334.roa (hash: LkqkZAPxFoABEGm91xfSA7G6uuRS6Cy6ghDtmc4IANY=)
                          5: 3137392e34392e3131322e302f32312d3234203d3e20323632323334.roa (hash: NaT0nFOS2plF47Ye5PWNZUjbER7hpT8cEUMOVGbFqyQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:9f:5c:fe:19:4e:17:96:25:85:84:fc:7a:24:ea:09:39:e2:5d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=220AE4263EC4510BDEEDA90B2E56F50C63919DF0
        Validity
            Not Before: Jan 31 17:44:29 2025 GMT
            Not After : Feb  5 14:03:29 2025 GMT
        Subject: CN=451D480276FFF12EBD2CE51DD0796713E283B5CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b3:e4:63:1e:07:4c:8f:91:d7:73:27:f9:b6:
                    8d:93:61:79:4a:a1:12:03:1d:dd:f5:44:0a:1a:26:
                    33:83:f1:f8:cd:99:b9:55:87:50:d2:b2:46:c3:41:
                    83:db:7a:28:ab:1d:0e:75:54:78:3c:f8:f6:6c:f6:
                    c2:cd:b4:52:7a:ea:67:0b:c7:88:de:8b:ba:cb:b4:
                    da:8b:73:c3:b9:b1:62:79:e0:01:37:7d:33:56:55:
                    1e:34:53:75:f0:11:0d:e9:c5:e6:39:93:13:de:69:
                    f7:0e:e8:cc:41:b4:73:a1:f2:38:48:b5:c3:ea:ec:
                    19:12:69:23:a2:de:02:ab:78:c6:ce:ef:03:7a:ce:
                    1e:84:f7:b9:58:7c:d6:12:57:a0:a3:3d:30:05:a8:
                    5f:8e:52:2e:44:02:63:b5:da:a0:be:c7:3c:fa:14:
                    ff:83:1b:8f:a2:8c:82:a1:23:f1:74:40:e5:b4:e8:
                    79:d2:0b:49:79:c7:c4:bf:d1:66:36:25:6b:23:fc:
                    37:ab:fa:0f:70:f7:a1:36:db:27:0a:eb:ec:91:c9:
                    55:ca:11:75:e8:dd:82:dd:f5:22:00:e3:ac:89:4a:
                    2f:e9:ad:3b:9d:53:9f:f8:60:f3:89:56:57:90:ae:
                    27:66:37:13:1e:9e:ff:68:e5:c2:d4:50:8e:9f:9a:
                    e2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1D:48:02:76:FF:F1:2E:BD:2C:E5:1D:D0:79:67:13:E2:83:B5:CF
            X509v3 Authority Key Identifier:
                keyid:22:0A:E4:26:3E:C4:51:0B:DE:ED:A9:0B:2E:56:F5:0C:63:91:9D:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:a5:46:f3:c1:06:8e:25:05:4e:5a:80:9f:5d:08:4b:bd:52:
         9d:0b:66:51:aa:eb:70:51:70:41:bb:25:f9:67:f9:f4:a9:61:
         ed:39:a5:a7:e7:e7:24:91:69:8f:8c:b3:77:a9:0e:01:3d:af:
         41:a0:b6:4d:64:23:76:a5:6b:3f:18:72:5c:32:17:c0:8c:f0:
         e4:03:a3:b9:d0:37:b4:66:51:5f:2d:13:d9:24:b1:d7:b6:df:
         a2:d0:6c:b4:f6:bc:ca:16:f7:08:08:01:96:ef:eb:21:da:ca:
         ad:32:b2:db:2c:5f:00:4c:04:da:34:0d:1d:f9:89:1c:83:b7:
         2b:0c:f9:b9:54:d1:30:1e:51:bf:7c:a9:e9:bb:49:2d:98:39:
         c5:6b:b6:19:77:6f:ed:3e:f0:f6:07:f9:62:b2:56:47:7b:b8:
         0e:f3:8b:c3:d9:76:4e:7e:d1:08:f8:3a:07:04:6e:f1:0e:32:
         d1:a9:24:ab:be:b9:6d:09:01:09:3f:e9:2f:fe:72:d2:98:da:
         c5:84:69:3e:47:c0:8c:f0:f0:61:74:f2:56:1c:1b:30:e2:20:
         7f:30:8d:58:55:cf:75:c5:a8:cb:fc:5f:d4:d1:a4:2f:92:5f:
         48:62:52:a8:61:1c:8b:77:01:ad:9b:8f:3d:aa:1c:55:78:1b:
         1b:4a:70:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----