Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B1EB2B76E6B830A13849CDF275E9C0CC835ABACB57A4F9DFA63908906857E97E/0/68875356AC600E3FB6F6A0C7990E691A3CF30E7E.mft
File:                     68875356AC600E3FB6F6A0C7990E691A3CF30E7E.mft (raw, json)
Hash identifier:          i4HVqteMzWQSw6dFYWH6LtsX5iPP2delwBaP7NZ//m4=
Subject key identifier:   2D:75:BE:3D:D1:B2:9A:36:02:93:F7:96:69:F7:7B:A3:77:5A:EC:36
Authority key identifier: 68:87:53:56:AC:60:0E:3F:B6:F6:A0:C7:99:0E:69:1A:3C:F3:0E:7E
Certificate issuer:       /CN=68875356AC600E3FB6F6A0C7990E691A3CF30E7E
Certificate serial:       31595B0D4F31EB78C7A9ACE954106FB009823332
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68875356AC600E3FB6F6A0C7990E691A3CF30E7E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B1EB2B76E6B830A13849CDF275E9C0CC835ABACB57A4F9DFA63908906857E97E/0/68875356AC600E3FB6F6A0C7990E691A3CF30E7E.mft
Manifest number:          A7
Signing time:             Fri 31 Jan 2025 14:07:09 +0000
Manifest this update:     Fri 31 Jan 2025 14:02:09 +0000
Manifest next update:     Wed 05 Feb 2025 23:01:09 +0000
Files and hashes:         1: 3230302e32332e36362e302f32342d3234203d3e20323635353034.roa (hash: 6Ww/QwNwsLhY8GoHeXhCfVjtnM+sXSl284aYKvBiAw4=)
                          2: 68875356AC600E3FB6F6A0C7990E691A3CF30E7E.crl (hash: Vu/18qnhFEOmS2+LgUXyzgVstvHpmVg8E5uIxeQrPeA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:59:5b:0d:4f:31:eb:78:c7:a9:ac:e9:54:10:6f:b0:09:82:33:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68875356AC600E3FB6F6A0C7990E691A3CF30E7E
        Validity
            Not Before: Jan 31 14:02:09 2025 GMT
            Not After : Feb  5 23:01:09 2025 GMT
        Subject: CN=2D75BE3DD1B29A360293F79669F77BA3775AEC36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d4:91:23:e1:a1:ea:f4:e1:17:ad:24:f7:c1:
                    24:7f:d0:34:ad:24:ba:9a:ca:e8:d3:02:86:d8:e0:
                    d1:a9:12:1e:c7:e2:0a:62:a4:7c:75:07:4e:c0:f1:
                    a6:b2:7d:20:ae:92:6a:97:dd:70:2f:6e:02:b3:7c:
                    b8:f5:0d:68:c4:8b:5f:cc:46:cd:c1:d6:02:7c:12:
                    3d:2b:0a:d0:66:0a:5d:fa:7e:9c:e2:00:a0:7e:f2:
                    57:8f:bc:28:68:ea:af:00:48:91:08:26:d3:38:3a:
                    15:47:15:af:d3:3c:0d:ca:43:ca:05:05:73:d2:83:
                    7e:eb:2f:a7:f2:e7:83:30:19:fb:24:55:c6:e4:24:
                    76:a9:a8:8c:38:5e:a1:00:39:39:42:68:3d:6e:46:
                    b1:b2:d9:a9:58:26:b4:fc:6a:02:30:b0:6c:e5:46:
                    d1:cc:ef:a3:89:c8:5e:fa:01:d7:74:da:1a:fa:9f:
                    dd:04:9a:8a:94:12:30:b9:76:f4:dd:af:f5:b8:ec:
                    1d:cd:08:de:24:64:04:2b:47:ba:58:57:0a:74:db:
                    91:c3:46:70:70:51:57:e0:33:b9:fd:83:24:6d:18:
                    44:ce:fe:74:ff:39:0b:fe:9b:d1:37:20:c9:1b:43:
                    28:9f:03:45:ab:4a:c1:cc:f6:3f:09:37:6c:42:af:
                    77:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:75:BE:3D:D1:B2:9A:36:02:93:F7:96:69:F7:7B:A3:77:5A:EC:36
            X509v3 Authority Key Identifier:
                keyid:68:87:53:56:AC:60:0E:3F:B6:F6:A0:C7:99:0E:69:1A:3C:F3:0E:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B1EB2B76E6B830A13849CDF275E9C0CC835ABACB57A4F9DFA63908906857E97E/0/68875356AC600E3FB6F6A0C7990E691A3CF30E7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68875356AC600E3FB6F6A0C7990E691A3CF30E7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B1EB2B76E6B830A13849CDF275E9C0CC835ABACB57A4F9DFA63908906857E97E/0/68875356AC600E3FB6F6A0C7990E691A3CF30E7E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:bd:66:8b:30:2d:f2:7b:04:aa:5e:0f:56:21:de:04:47:6e:
         6a:45:eb:07:b3:59:98:de:f8:bb:9f:3b:f9:a5:74:75:5a:8a:
         32:66:af:6f:77:8b:45:e9:ef:c0:a2:00:e6:b3:48:5f:bb:97:
         d5:96:07:03:44:7b:8f:ee:11:ed:ad:3e:f3:25:f7:ee:9a:be:
         34:0e:48:92:fb:f6:9a:8a:84:ab:cb:72:ed:81:40:de:88:50:
         dd:3c:53:02:8a:ca:3e:cc:19:fb:8d:01:a9:09:1e:c8:e9:03:
         3c:a7:0a:8a:55:b1:b4:21:ab:38:7e:f4:06:f0:dc:ac:4e:2c:
         8b:1f:c4:89:45:0f:b6:a8:1e:8b:b5:a1:df:0c:38:45:63:27:
         b0:65:94:1e:e7:e1:20:a4:28:7c:6c:9d:2a:fa:0a:29:e2:b7:
         12:b7:fc:d6:a1:5a:79:b3:10:90:31:bc:0b:a2:20:2a:97:97:
         04:fa:14:ea:8c:68:94:9a:e0:ef:6b:70:aa:e2:55:68:4a:e5:
         f9:52:24:fb:75:bb:32:ed:61:42:ac:7c:03:e9:94:d8:a5:81:
         c7:b1:1a:1d:93:86:77:89:5d:0d:c3:ec:af:b3:a0:5e:ea:cd:
         bb:f3:f9:10:ce:5f:00:c2:71:32:fd:d3:a1:ed:f8:e7:88:0c:
         4c:fd:df:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----