Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
File:                     CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft (raw, json)
Hash identifier:          HWNkaI7zl/BCABMaPzA16oC5zc/9PgxE0mq6Qn1wf8w=
Subject key identifier:   13:29:E3:F7:60:31:80:B7:85:CB:A3:EB:B9:A5:B0:9C:90:36:C4:D9
Authority key identifier: CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9
Certificate issuer:       /CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9
Certificate serial:       7F63C9ECBDAEABCFF216F572E8C81D8DE40D9554
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
Manifest number:          AA
Signing time:             Fri 31 Jan 2025 10:14:46 +0000
Manifest this update:     Fri 31 Jan 2025 10:09:46 +0000
Manifest next update:     Wed 05 Feb 2025 15:53:46 +0000
Files and hashes:         1: 34352e3136302e31322e302f32322d3234203d3e203631353033.roa (hash: 2iyjl3KWydu2EVyzYs/WwV2dBw0z51vWKtaRRMogG+s=)
                          2: 34352e3136302e31322e302f32322d3234203d3e20323639373333.roa (hash: cNZs1lwYGd2Cy5Y8Ki6cpaNItt5cYr35yejlTMpAdmg=)
                          3: 34352e3136302e31322e302f32322d3234203d3e20323635373033.roa (hash: GuRrz5JE7Zxoean1/PZlFsibWvsYs6FttgcpXxRURAk=)
                          4: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl (hash: vUlTqr40eoWTWs7fA5S2Ly8eQZdWulvFzODqLra6Nws=)
                          5: 34352e3136302e31322e302f32322d3234203d3e20323636383730.roa (hash: bGvQhhq3zAdxN464HB3VVzSe9rPYzdcGacZSRUnUw4M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:63:c9:ec:bd:ae:ab:cf:f2:16:f5:72:e8:c8:1d:8d:e4:0d:95:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9
        Validity
            Not Before: Jan 31 10:09:46 2025 GMT
            Not After : Feb  5 15:53:46 2025 GMT
        Subject: CN=1329E3F7603180B785CBA3EBB9A5B09C9036C4D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b0:19:87:ad:09:25:3b:c4:aa:f0:6d:a1:59:
                    15:4f:73:67:ea:84:b9:0f:a7:84:52:ad:b7:21:37:
                    25:ce:bd:23:b6:48:22:47:f6:af:93:da:4b:3a:4b:
                    10:bd:83:85:ff:ad:11:0b:7f:04:12:54:34:8c:71:
                    d1:f0:14:27:55:36:ea:27:75:e4:9f:03:29:38:ca:
                    2a:79:b4:e8:7f:be:fd:52:92:b0:57:1a:6a:9c:fd:
                    a4:a4:16:44:a6:94:11:d7:08:79:2b:d4:df:bf:26:
                    6f:d6:a6:a8:3e:7a:83:68:49:98:30:2c:b8:ef:c3:
                    37:86:aa:bf:55:02:f4:12:4f:57:65:35:a2:e0:ab:
                    06:0c:a1:c4:41:32:a5:b8:18:ed:bb:9d:b8:45:95:
                    01:58:e7:22:27:ff:c3:dd:d7:0e:78:73:aa:a4:db:
                    7b:5d:92:20:39:4c:63:d1:12:1b:07:5f:b9:43:55:
                    29:73:04:ac:c1:0e:73:2a:ff:69:ba:c3:45:42:7a:
                    ee:f1:3c:8f:be:33:3d:ff:d2:29:8c:84:cc:3e:f6:
                    09:45:4c:9d:11:aa:bb:7e:19:5b:98:e5:16:bc:21:
                    16:0d:ac:93:fd:ff:a5:b1:d8:fe:46:33:12:69:86:
                    13:bd:7c:4e:e9:51:7b:dd:c2:16:5b:7d:37:80:85:
                    10:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:29:E3:F7:60:31:80:B7:85:CB:A3:EB:B9:A5:B0:9C:90:36:C4:D9
            X509v3 Authority Key Identifier:
                keyid:CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:54:a0:0c:af:8e:3a:7a:d9:41:32:e5:37:1c:b3:c9:ba:55:
         0b:3d:d0:8b:34:b8:c6:5e:08:08:9e:15:c2:21:ea:a6:1d:c6:
         cc:4a:02:90:37:fd:c2:fd:13:5d:f5:fd:10:37:5c:76:79:2a:
         36:4e:09:d9:75:17:c8:53:b2:78:c9:65:85:ab:f5:e1:de:4b:
         8f:c8:e0:1d:a5:4a:85:fa:a5:4f:a4:b0:8b:44:6c:6d:d5:c2:
         8f:86:b4:37:56:fa:67:82:12:81:14:ff:9c:6d:e7:3d:8f:de:
         d6:6d:d7:8b:98:dd:03:e3:f9:83:37:47:88:bc:ed:ec:aa:7c:
         6b:21:25:00:3a:56:1d:52:20:10:64:3b:f3:2a:67:e9:60:54:
         e1:c3:0f:24:2f:64:21:9b:d6:76:a2:3a:4f:75:eb:87:c1:3e:
         97:cf:43:d2:1f:20:ac:f3:c6:59:cd:9e:3b:d0:1f:e0:52:77:
         f2:f4:0a:8a:05:8f:e7:db:da:b6:1e:4b:a3:49:e9:f4:d7:78:
         bf:ab:e6:08:55:76:95:33:8a:41:5f:d2:8a:0a:9c:47:07:9e:
         64:64:55:91:aa:94:44:f7:b5:7d:24:e7:a3:ce:a8:59:f4:7e:
         eb:d6:2c:5b:cf:69:0c:d7:88:f9:65:50:6f:c8:98:05:16:37:
         a9:86:c6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:15:55 2025 by rpki-client