Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/AADC68CACCD7A12B6A019949E964F33953EF7228.mft
File:                     AADC68CACCD7A12B6A019949E964F33953EF7228.mft (raw, json)
Hash identifier:          ZMgX2is8He8Q7czQPpY147HTSOzm717ziQ1qLoOGLAI=
Subject key identifier:   A1:28:92:4D:55:CF:B1:B9:B9:25:9E:25:B8:4A:4C:A5:B5:DD:11:27
Authority key identifier: AA:DC:68:CA:CC:D7:A1:2B:6A:01:99:49:E9:64:F3:39:53:EF:72:28
Certificate issuer:       /CN=AADC68CACCD7A12B6A019949E964F33953EF7228
Certificate serial:       7860A6DACAD290762742A3551072D9A24FB35EE2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AADC68CACCD7A12B6A019949E964F33953EF7228.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/AADC68CACCD7A12B6A019949E964F33953EF7228.mft
Manifest number:          A7
Signing time:             Fri 31 Jan 2025 16:38:40 +0000
Manifest this update:     Fri 31 Jan 2025 16:33:40 +0000
Manifest next update:     Tue 04 Feb 2025 19:07:40 +0000
Files and hashes:         1: 34352e36382e342e302f32322d3234203d3e20323731383835.roa (hash: wp5sFMlM7gscVjOwudkI7TP9yTLRQTKg2FT44dl9Mi8=)
                          2: 34352e36382e342e302f32322d3234203d3e203237393239.roa (hash: FG3AN0zCUN/VLcYi2Qy/1lQ5srrlgT/I1J3U7ZBiPQY=)
                          3: 323830313a31323a653830303a3a2f34382d3438203d3e20323731383835.roa (hash: DaJzABjQR7qckbUokvejdmej29CNINmJ2Tu0WlzBnP8=)
                          4: 323830313a31323a653830303a3a2f34382d3438203d3e203237393239.roa (hash: R3li1uW5Uo31az6bp+8jCAtncpuj5lFaucT8AJNBxeo=)
                          5: AADC68CACCD7A12B6A019949E964F33953EF7228.crl (hash: bdsTnRrN3MbhFzf1713lFrg/OO8o/94/DeAD8XBi9O0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:60:a6:da:ca:d2:90:76:27:42:a3:55:10:72:d9:a2:4f:b3:5e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AADC68CACCD7A12B6A019949E964F33953EF7228
        Validity
            Not Before: Jan 31 16:33:40 2025 GMT
            Not After : Feb  4 19:07:40 2025 GMT
        Subject: CN=A128924D55CFB1B9B9259E25B84A4CA5B5DD1127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:48:de:19:e1:01:6e:1f:5e:b9:8f:1e:f2:b3:
                    b1:5e:bb:65:93:d4:5f:cf:9a:7c:e7:f6:8e:3d:35:
                    71:6b:45:6c:57:1f:34:29:c1:51:e0:b5:5d:76:81:
                    3b:a6:ba:72:b1:b7:0c:71:0f:00:a7:aa:c4:46:64:
                    4b:2c:91:82:5a:5a:a7:6d:ed:73:57:6f:fe:06:f5:
                    28:29:4d:07:82:51:ee:af:c2:6e:47:aa:7c:10:a8:
                    1e:75:08:a1:47:95:f2:42:f9:ff:09:a5:27:0a:a3:
                    b2:e5:35:fb:d5:a2:08:62:00:30:64:5f:06:d6:52:
                    e7:1e:83:3b:90:eb:9e:1a:eb:87:a3:ac:36:e6:c6:
                    8d:96:f5:65:95:c5:c1:cc:71:9c:fa:41:c2:2f:08:
                    d0:d4:9a:cf:70:03:82:59:2f:9a:c0:1d:df:5e:8c:
                    ea:86:7f:46:18:5f:7e:c1:3c:bb:b0:12:ca:fa:54:
                    4f:69:66:dd:a2:cc:be:58:5e:5e:f7:2c:f0:d2:f4:
                    a3:b2:4c:e5:01:8a:c6:c4:34:d4:42:25:96:62:ff:
                    40:22:69:97:51:e7:44:6c:8e:3a:54:08:8b:2c:48:
                    f2:19:04:28:ba:c6:a0:17:ed:75:1b:54:48:b2:74:
                    c2:28:44:90:16:e3:d7:3e:df:62:fa:fc:3d:70:ed:
                    54:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:28:92:4D:55:CF:B1:B9:B9:25:9E:25:B8:4A:4C:A5:B5:DD:11:27
            X509v3 Authority Key Identifier:
                keyid:AA:DC:68:CA:CC:D7:A1:2B:6A:01:99:49:E9:64:F3:39:53:EF:72:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/AADC68CACCD7A12B6A019949E964F33953EF7228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AADC68CACCD7A12B6A019949E964F33953EF7228.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/AADC68CACCD7A12B6A019949E964F33953EF7228.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:52:28:80:7f:7e:a6:e0:bf:e0:74:2a:b4:48:75:73:db:37:
         f7:ae:20:66:6a:44:7e:77:95:65:a5:3c:b1:7b:77:43:1c:c7:
         d9:cb:f9:18:c1:20:69:34:16:e1:5d:21:1a:38:3a:d0:33:5e:
         bb:06:97:94:90:67:90:1d:9b:8d:d5:c6:da:68:7b:af:c4:ea:
         bc:9f:e3:79:70:b3:12:37:4b:65:b0:fb:13:8b:f5:51:ad:af:
         71:73:f0:be:c5:31:1e:c6:f1:25:d7:b2:3a:0b:85:e8:f9:ad:
         b8:de:29:09:7b:62:27:66:cb:dc:51:45:81:34:61:f3:8e:a3:
         69:d7:e7:ed:2d:a5:36:0c:41:40:f2:de:42:76:99:71:7d:c4:
         3c:7b:28:a1:68:d6:a9:9c:fd:45:51:e0:30:95:28:86:20:20:
         e2:c9:5f:8a:c7:24:70:00:83:bc:be:b2:cf:e8:04:67:9a:cd:
         78:80:46:4c:28:cb:6b:ec:85:60:8f:a8:b6:74:f9:8c:d9:c5:
         54:67:ae:b4:27:2d:62:31:f9:58:08:f6:07:ad:e2:d4:72:33:
         04:6d:76:80:e5:22:a7:d4:9c:ea:bc:a9:c0:35:ef:c1:e6:c6:
         a5:62:3a:9a:6d:ff:2c:bc:a8:1a:a5:43:fd:2a:c9:b7:a2:95:
         08:4e:c1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----