Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.mft
File:                     89CB216508CEF38CB2A68E45EBF4D418531E3799.mft (raw, json)
Hash identifier:          EuZY9gw4m/q1mBrcHajFrdfM1YXK0RWnLYVInwx8VBk=
Subject key identifier:   07:2C:70:67:B0:01:FE:63:62:4B:20:3E:27:56:F0:C6:6A:04:48:3A
Authority key identifier: 89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99
Certificate issuer:       /CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
Certificate serial:       28F97857E29C61A5F8D631F037AB9582FBC20B70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.mft
Manifest number:          AD
Signing time:             Wed 29 Jan 2025 23:28:08 +0000
Manifest this update:     Wed 29 Jan 2025 23:23:08 +0000
Manifest next update:     Tue 04 Feb 2025 04:35:08 +0000
Files and hashes:         1: 323830333a653738303a3a2f33322d3438203d3e20323633373137.roa (hash: 6m2s0BJiv2+qXgKhT3S1N65EJzkuoSik9oKFy/Imbew=)
                          2: 89CB216508CEF38CB2A68E45EBF4D418531E3799.crl (hash: 4vEIl34CSqFVOp2rx8Tm1nek96Z6pNkodQ9kUm3urO0=)
                          3: 3133322e3235352e3136342e302f32322d3234203d3e20323633373137.roa (hash: VYuN+1SZYRbml5XyWPT7jWYPiYGUcCBo6ec5m9YgLds=)
                          4: 3137302e38322e3134342e302f32322d3234203d3e20323633373137.roa (hash: t3Vt0PpjI30mKNT/o9qN9cagKH/8Oazb4O3O+jK/w2o=)
                          5: 3137302e38342e3137322e302f32322d3234203d3e20323633373137.roa (hash: VA5ScRyzPd1EFBYk9wBcRKmWYTcZoYnmyv80lKUFncM=)
                          6: 3136372e3235302e33362e302f32322d3234203d3e20323633373137.roa (hash: uCuDRygBxVGyBckzgItGZTHK8ZbswTVWCmjrmdMZzVM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f9:78:57:e2:9c:61:a5:f8:d6:31:f0:37:ab:95:82:fb:c2:0b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
        Validity
            Not Before: Jan 29 23:23:08 2025 GMT
            Not After : Feb  4 04:35:08 2025 GMT
        Subject: CN=072C7067B001FE63624B203E2756F0C66A04483A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ee:7b:d1:a5:54:c6:c0:11:4a:e8:c1:30:8d:
                    cc:73:e8:5e:5f:f3:df:48:46:2b:b9:58:f4:24:2f:
                    a9:7d:2b:9f:a0:42:9d:44:7b:e6:93:f9:79:5c:b2:
                    90:94:29:9c:2d:22:2c:d3:f1:29:df:33:b1:e6:88:
                    54:c0:c1:69:e3:25:10:9d:88:e6:38:4d:ff:b1:4d:
                    ac:11:24:3c:bb:68:a3:f3:22:6e:3d:5e:67:12:83:
                    57:78:d5:11:3d:9c:df:0e:7f:a1:f4:35:db:61:3e:
                    4d:ae:7e:ac:85:f9:76:3b:45:9c:16:cb:91:b0:dd:
                    d1:90:7e:d8:e5:10:7c:3a:d9:e2:3a:a1:be:dc:c6:
                    3a:dd:d4:f5:16:51:94:f8:52:ab:fd:77:fc:95:a5:
                    61:81:ee:70:f0:11:a3:70:1f:09:d1:15:6b:61:a5:
                    40:a7:e5:16:68:e7:d4:f9:43:41:4c:97:95:8c:55:
                    45:67:3f:f4:ff:ad:75:2a:24:c9:b5:5f:3f:6b:a7:
                    d5:4d:19:46:87:69:9b:b9:24:70:ee:b6:0d:ac:4d:
                    12:ab:aa:25:67:3a:72:04:e4:56:fa:5f:fc:1c:7d:
                    cd:fd:1a:85:64:86:5e:3f:6f:28:c1:93:22:27:15:
                    2c:c9:38:ea:6c:a5:a7:c3:b7:6a:39:e6:63:17:af:
                    e7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:2C:70:67:B0:01:FE:63:62:4B:20:3E:27:56:F0:C6:6A:04:48:3A
            X509v3 Authority Key Identifier:
                keyid:89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:37:1d:10:a6:b2:51:9a:24:22:24:55:89:d8:80:8e:89:b8:
         36:e4:9d:5d:71:71:e4:4d:3c:cd:ff:7a:9b:85:50:a0:b8:40:
         cb:3e:2d:05:c2:2f:24:64:23:55:68:b5:8b:c7:31:52:f9:af:
         2a:60:35:39:ef:9a:20:6b:0c:c2:eb:7a:8e:83:4a:57:38:b2:
         bc:ca:cf:cb:8c:11:cd:c1:fc:66:89:d1:64:d9:7c:3f:48:a9:
         d4:4a:aa:1e:7a:48:6f:00:8c:52:21:69:9b:a5:fa:0a:27:7d:
         b1:56:90:2b:76:f5:03:29:75:3c:06:49:8f:50:04:90:6f:45:
         ea:7f:5e:7e:10:89:39:b9:8e:ed:5a:b9:4c:d9:f2:e1:08:1f:
         85:71:0e:df:1f:3a:79:e1:0f:ad:6a:cc:64:1d:ec:7e:49:c2:
         2e:60:8a:c2:3f:d7:56:14:62:cf:8d:4b:5f:32:17:bf:6e:5b:
         67:1a:d1:a3:03:40:fc:49:af:c2:3c:60:b5:d1:79:00:9a:3d:
         45:31:07:cf:a2:15:40:d4:75:b9:93:95:a0:6c:f4:b3:6d:7c:
         c0:a8:4d:fe:c5:ea:d8:2b:cc:65:90:8a:28:31:07:82:96:47:
         ce:04:da:20:e6:72:ee:0f:01:70:62:41:44:53:e6:5d:f0:73:
         e4:63:9e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:09:07 2025 by rpki-client