Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF074EDA9380C77938D60DDC25103A733CEF7859664E82C795EE19D7411AB38A/0/5F0CDDD5EE7E7A145A967535797D838518D4F4D7.mft
File:                     5F0CDDD5EE7E7A145A967535797D838518D4F4D7.mft (raw, json)
Hash identifier:          2bRsqPZIhu3nBEVXErh/WoKaReyWZDu4qFV2WK3MdJE=
Subject key identifier:   5D:96:5B:DD:61:58:E1:F3:C8:A6:F4:FD:64:74:A7:38:6E:8A:6D:F9
Authority key identifier: 5F:0C:DD:D5:EE:7E:7A:14:5A:96:75:35:79:7D:83:85:18:D4:F4:D7
Certificate issuer:       /CN=5F0CDDD5EE7E7A145A967535797D838518D4F4D7
Certificate serial:       14795B60D37E9F5079530E6E4DCABDF3827447E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F0CDDD5EE7E7A145A967535797D838518D4F4D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF074EDA9380C77938D60DDC25103A733CEF7859664E82C795EE19D7411AB38A/0/5F0CDDD5EE7E7A145A967535797D838518D4F4D7.mft
Manifest number:          A5
Signing time:             Thu 30 Jan 2025 17:29:15 +0000
Manifest this update:     Thu 30 Jan 2025 17:24:15 +0000
Manifest next update:     Tue 04 Feb 2025 16:41:15 +0000
Files and hashes:         1: 34352e3233392e3132302e302f32322d3234203d3e203631353033.roa (hash: LgXXODLODS6mLmyoWAfLpZ461W69XPzBGoItH79wR6A=)
                          2: 5F0CDDD5EE7E7A145A967535797D838518D4F4D7.crl (hash: WBG/h/y/djaEcW1suWz+LKwaJcM3yKcOkcMFONtJ6fw=)
                          3: 34352e3233392e3132302e302f32322d3234203d3e20323639373333.roa (hash: BtEumx61ZlJfnKpXhBxIAZFioJp2NTGXGcvgFWWXoCw=)
                          4: 34352e3233392e3132302e302f32322d3234203d3e20323635373033.roa (hash: Zh53URCSJL1Z0oeBG/U8q9JwGAFHSm7wuGxztKDIa+o=)
                          5: 34352e3233392e3132302e302f32322d3234203d3e20323636383532.roa (hash: 2nKOuT9VlyuNKRBQ/HFwnhoA3QI8k0LIDHz2PfnHHl8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:79:5b:60:d3:7e:9f:50:79:53:0e:6e:4d:ca:bd:f3:82:74:47:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F0CDDD5EE7E7A145A967535797D838518D4F4D7
        Validity
            Not Before: Jan 30 17:24:15 2025 GMT
            Not After : Feb  4 16:41:15 2025 GMT
        Subject: CN=5D965BDD6158E1F3C8A6F4FD6474A7386E8A6DF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6c:c2:2e:c3:0f:01:db:f3:db:00:e0:f7:37:
                    a0:36:9d:b4:d1:d6:a5:6e:44:45:a5:25:5c:1d:7b:
                    e8:5a:59:bc:d4:29:40:a6:28:62:13:3f:fe:f2:90:
                    99:b6:d1:2a:be:15:42:b8:b4:2b:12:45:ea:cf:77:
                    84:e2:1a:b6:96:73:79:da:91:d2:3f:ab:b9:77:d5:
                    bb:d0:2c:77:1d:92:64:8c:ff:6b:f1:e2:9d:b0:f1:
                    a5:38:e4:08:e0:23:9e:2a:57:10:91:fa:b1:c1:32:
                    53:d3:8f:44:e2:45:53:37:c3:24:74:7d:61:09:75:
                    ec:e0:80:30:9e:69:02:18:3a:4c:46:ed:28:e2:ef:
                    0f:40:96:2d:51:33:2d:0c:86:e6:e4:27:6a:5e:8a:
                    1e:32:69:ee:a5:1d:c3:6a:46:ac:ad:56:7d:6c:7d:
                    b5:4f:45:37:16:03:fe:6a:13:32:ea:a6:3f:59:0f:
                    e0:91:25:97:57:ce:f0:7c:65:f8:7a:e8:ca:36:bd:
                    5e:b9:0c:19:a0:dc:b7:93:ec:a0:10:5e:17:6e:cb:
                    ab:7e:ba:02:69:78:cd:94:00:7a:48:7b:dd:eb:e0:
                    d5:20:99:ba:25:99:df:36:46:51:05:aa:a5:af:dc:
                    4b:43:fa:c1:d0:45:a2:e6:12:e8:40:80:03:74:10:
                    1b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:96:5B:DD:61:58:E1:F3:C8:A6:F4:FD:64:74:A7:38:6E:8A:6D:F9
            X509v3 Authority Key Identifier:
                keyid:5F:0C:DD:D5:EE:7E:7A:14:5A:96:75:35:79:7D:83:85:18:D4:F4:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF074EDA9380C77938D60DDC25103A733CEF7859664E82C795EE19D7411AB38A/0/5F0CDDD5EE7E7A145A967535797D838518D4F4D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F0CDDD5EE7E7A145A967535797D838518D4F4D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF074EDA9380C77938D60DDC25103A733CEF7859664E82C795EE19D7411AB38A/0/5F0CDDD5EE7E7A145A967535797D838518D4F4D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:8c:cc:fe:09:70:3a:4c:8e:7a:a3:43:62:3f:47:88:fb:30:
         89:de:15:aa:1e:ea:ef:e1:48:00:09:17:3e:04:de:6b:67:be:
         5e:98:6d:8b:b9:b1:10:0d:99:1d:5e:ca:9c:b4:c5:76:66:38:
         be:da:8e:d7:3a:34:3b:33:6c:c2:a7:a5:5d:07:c9:ce:d1:72:
         12:a9:b7:1e:50:ab:04:5f:29:9e:96:93:de:ad:41:e7:0f:ad:
         ec:74:b7:78:cf:58:96:ec:8d:a1:a2:e2:0b:d7:a2:24:58:8d:
         5e:15:3c:f4:f8:17:a7:6e:9a:59:86:73:f3:3d:da:c6:a0:02:
         7b:dd:11:97:06:69:91:4b:32:35:cd:5e:b4:9a:3e:8c:7e:b3:
         e9:2e:c8:cf:37:71:49:e3:57:cf:67:56:22:90:9b:79:7d:b3:
         78:84:1f:74:dc:29:d0:59:d4:40:6d:ca:aa:91:40:d1:c2:a7:
         70:e4:1a:af:57:f5:0f:61:99:f3:fa:b8:a5:05:0a:aa:0b:28:
         ff:5e:b8:74:09:7d:d9:71:47:d0:2a:42:59:15:a4:23:45:b6:
         d6:c6:ce:9f:54:b1:92:f3:80:39:b9:70:c7:73:b9:c7:fc:16:
         2c:3b:00:be:76:f9:3a:27:29:61:f1:f4:8b:01:89:c5:3b:3f:
         a3:36:ab:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----