Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C036F36B432DC7B3BFBAA09993162934C6552881FBD938974FCFE0F2DE7813DD/0/09589E9040CA01AF46E7A39A74C8FBFD9EBA79F8.mft
File:                     09589E9040CA01AF46E7A39A74C8FBFD9EBA79F8.mft (raw, json)
Hash identifier:          JX4NrQmJgRZQnZKeSUG63MVf90eVCa+xRccqBo4iFwY=
Subject key identifier:   84:B5:63:2D:15:76:29:4B:78:4E:12:4F:DC:33:46:6B:2E:93:C7:AF
Authority key identifier: 09:58:9E:90:40:CA:01:AF:46:E7:A3:9A:74:C8:FB:FD:9E:BA:79:F8
Certificate issuer:       /CN=09589E9040CA01AF46E7A39A74C8FBFD9EBA79F8
Certificate serial:       63ACC0478FB078655424B4C96DF822DF5A71A03A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09589E9040CA01AF46E7A39A74C8FBFD9EBA79F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C036F36B432DC7B3BFBAA09993162934C6552881FBD938974FCFE0F2DE7813DD/0/09589E9040CA01AF46E7A39A74C8FBFD9EBA79F8.mft
Manifest number:          A3
Signing time:             Thu 30 Jan 2025 04:51:30 +0000
Manifest this update:     Thu 30 Jan 2025 04:46:29 +0000
Manifest next update:     Tue 04 Feb 2025 20:09:29 +0000
Files and hashes:         1: 34352e3138372e3231312e302f32342d3234203d3e20323634363337.roa (hash: t10drb06S3YqrgcwM/deqHoMOYJSWBnnErrW2gmA68s=)
                          2: 323830333a616636303a3a2f33322d3332203d3e20323634363337.roa (hash: C+UfJRUzeug6wjg6F1oiJ5iP9B/TwwwR39jqSLGO8d4=)
                          3: 34352e3138372e3231302e302f32342d3234203d3e20323634363337.roa (hash: cMpgywrp2jN3vt/659VoLqf18FgDwbgT07IAlI97KWU=)
                          4: 09589E9040CA01AF46E7A39A74C8FBFD9EBA79F8.crl (hash: tCGqs53zRg52s+gqIA/TXO7gfqYl8saZK4zduMaWcR4=)
                          5: 34352e3138352e33302e302f32342d3234203d3e20323634363337.roa (hash: XVFXX5DofskjUFQ5POyMaz6dui7gzjSMYDnkr0r5pBM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ac:c0:47:8f:b0:78:65:54:24:b4:c9:6d:f8:22:df:5a:71:a0:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09589E9040CA01AF46E7A39A74C8FBFD9EBA79F8
        Validity
            Not Before: Jan 30 04:46:29 2025 GMT
            Not After : Feb  4 20:09:29 2025 GMT
        Subject: CN=84B5632D1576294B784E124FDC33466B2E93C7AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d0:7b:5e:52:b4:43:5e:0f:0d:b6:cc:bf:71:
                    47:85:5f:b3:cb:b9:51:10:91:c4:36:c3:37:08:ce:
                    9f:63:e0:50:6a:c6:3a:f1:14:e8:e0:14:1f:12:00:
                    8d:51:87:08:c0:73:9a:31:f9:43:d9:af:26:29:5b:
                    07:17:d0:a8:45:10:bf:ff:dd:84:b1:5f:7f:44:4f:
                    24:1f:f7:e9:0a:eb:60:b6:81:59:f0:44:29:4c:a5:
                    e3:b7:14:cc:b9:89:13:e3:a7:a3:d7:bc:ed:31:de:
                    51:79:7c:aa:fe:21:57:40:6a:82:37:63:7e:b6:8d:
                    e5:68:86:2e:86:44:04:0d:d1:00:95:63:dd:7a:7b:
                    14:b6:2d:d5:32:9c:62:96:05:1f:93:09:47:6d:84:
                    02:5f:b8:2a:9d:bc:32:3b:63:5d:eb:5a:5b:e0:c8:
                    f5:a0:6b:1b:8a:8d:2e:81:ad:92:24:d8:08:f3:13:
                    17:77:9b:14:a0:19:68:ae:f7:9a:67:96:77:c7:23:
                    20:60:10:04:94:9f:4c:aa:9f:a4:de:09:0f:75:dc:
                    a8:64:76:4b:e3:ba:8e:b3:43:1a:d3:86:d5:13:d2:
                    b4:54:67:b0:1b:00:ff:91:77:bd:01:35:f3:14:41:
                    3c:1f:f7:e7:b1:63:bc:41:16:f3:a2:1c:d4:16:37:
                    96:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B5:63:2D:15:76:29:4B:78:4E:12:4F:DC:33:46:6B:2E:93:C7:AF
            X509v3 Authority Key Identifier:
                keyid:09:58:9E:90:40:CA:01:AF:46:E7:A3:9A:74:C8:FB:FD:9E:BA:79:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C036F36B432DC7B3BFBAA09993162934C6552881FBD938974FCFE0F2DE7813DD/0/09589E9040CA01AF46E7A39A74C8FBFD9EBA79F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09589E9040CA01AF46E7A39A74C8FBFD9EBA79F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C036F36B432DC7B3BFBAA09993162934C6552881FBD938974FCFE0F2DE7813DD/0/09589E9040CA01AF46E7A39A74C8FBFD9EBA79F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:4a:26:84:56:e5:5c:6d:42:c3:9e:6c:3a:61:34:41:f3:90:
         81:0c:ad:91:97:7f:31:85:11:ea:ef:2d:c8:2c:37:53:f5:b4:
         aa:15:f9:b0:66:6d:5f:d0:dd:73:a2:80:d4:48:33:8e:41:81:
         ae:d1:ff:9d:14:96:61:22:f6:8c:fd:2f:b3:59:57:bb:ed:22:
         ca:52:6d:d6:ca:2e:9d:49:5e:48:32:43:73:6d:5f:65:7f:0f:
         b5:49:af:94:ec:33:e0:35:fc:6d:54:fd:25:4c:62:4b:7d:d2:
         2b:36:ee:ec:1e:35:25:dd:2c:b8:d7:5c:0e:9e:56:35:46:61:
         6f:71:18:9c:b8:4e:fc:f9:6f:1c:1f:0e:3f:9c:24:c0:d6:d4:
         c0:a6:be:89:d3:af:11:b9:8a:81:84:ab:8a:f6:93:5b:ea:00:
         0a:32:f7:3a:6b:a8:ae:2e:18:63:e5:0b:6d:ff:9e:51:0e:d6:
         12:3e:a9:bb:43:30:a2:31:ff:5a:f5:4e:a3:43:2a:8f:51:fb:
         68:37:ae:ef:dd:24:86:56:26:e2:48:7a:92:75:af:c8:0a:94:
         cf:a4:d8:50:19:a7:e3:2f:b2:da:e8:68:b2:6b:f1:d8:79:0b:
         ab:03:cb:26:cf:4b:cb:98:c5:9f:39:8f:ee:a3:1e:88:f1:aa:
         d6:07:60:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----