Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.mft
File:                     5A3D488DA45F1AFC6FFC9C444732139214BFD47A.mft (raw, json)
Hash identifier:          8K0wvGGa+u5tr95HdUt7jKWGHJfn5QoAl+QWTkdLP/8=
Subject key identifier:   2C:36:64:B4:7C:36:07:BD:DC:04:B0:79:C7:C4:3E:22:3E:9F:9C:F8
Authority key identifier: 5A:3D:48:8D:A4:5F:1A:FC:6F:FC:9C:44:47:32:13:92:14:BF:D4:7A
Certificate issuer:       /CN=5A3D488DA45F1AFC6FFC9C444732139214BFD47A
Certificate serial:       5EEA3C3E35B6A2806A7BBC18BD1F15A88C9633E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.mft
Manifest number:          A7
Signing time:             Wed 29 Jan 2025 10:20:06 +0000
Manifest this update:     Wed 29 Jan 2025 10:15:06 +0000
Manifest next update:     Tue 04 Feb 2025 04:46:06 +0000
Files and hashes:         1: 5A3D488DA45F1AFC6FFC9C444732139214BFD47A.crl (hash: +7gP+83dWaNuAA1r04vUcvsiS4+R9FqFcCDurIxkxfM=)
                          2: 3136382e3232382e3134302e302f32322d3234203d3e20323634363839.roa (hash: q/WvEhtd0GJDdM+K9iYwoZ9NW58kuKLlAv/GGA/tA+g=)
                          3: 323830333a323334303a3a2f33322d3332203d3e20323634363839.roa (hash: dIFIoWkj5HGdAAbwbepuNOBeuTj7XTS3g2TfUXgSBaE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ea:3c:3e:35:b6:a2:80:6a:7b:bc:18:bd:1f:15:a8:8c:96:33:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A3D488DA45F1AFC6FFC9C444732139214BFD47A
        Validity
            Not Before: Jan 29 10:15:06 2025 GMT
            Not After : Feb  4 04:46:06 2025 GMT
        Subject: CN=2C3664B47C3607BDDC04B079C7C43E223E9F9CF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5e:b1:51:b6:64:8f:70:5a:3d:9a:80:f9:60:
                    04:6e:04:08:5c:30:d3:63:b7:67:a6:6d:6a:f9:7f:
                    70:1c:c2:f9:29:9a:7a:61:fa:a1:4d:b7:da:3c:68:
                    a3:85:e6:3b:50:6f:ae:01:b0:47:49:42:76:09:76:
                    7f:63:6b:72:b6:23:80:e8:01:bf:67:44:6e:f1:f9:
                    7c:5c:ae:d4:1a:dd:90:9e:21:43:b1:dd:e6:b7:fd:
                    71:26:f0:6f:df:4f:56:1a:96:40:c3:42:91:81:c8:
                    7d:fe:34:36:88:d2:b5:f6:7f:f6:de:f2:75:87:80:
                    fb:31:21:d5:5d:82:30:f6:90:61:59:db:36:9c:21:
                    cf:81:c3:ce:73:cb:e2:8f:cc:5a:ba:be:ba:41:88:
                    e1:69:6d:24:32:be:bc:e0:92:88:07:e9:3c:4b:4b:
                    6e:5f:26:7b:9d:49:7d:be:56:2d:37:c2:4f:5b:f3:
                    ae:e5:9e:a9:61:1b:e9:b2:e8:86:c8:6b:9e:4f:eb:
                    bb:e9:f6:0e:ff:93:eb:9f:8a:16:21:30:e8:fe:65:
                    17:32:a0:87:3f:78:67:31:2a:23:68:51:23:b7:f5:
                    42:40:f3:30:05:c4:97:72:34:5e:65:71:04:9f:06:
                    6a:08:c6:ac:ab:59:c2:06:57:84:5d:44:9d:c3:18:
                    15:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:36:64:B4:7C:36:07:BD:DC:04:B0:79:C7:C4:3E:22:3E:9F:9C:F8
            X509v3 Authority Key Identifier:
                keyid:5A:3D:48:8D:A4:5F:1A:FC:6F:FC:9C:44:47:32:13:92:14:BF:D4:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:78:3d:e4:5c:b3:14:ad:b8:f5:be:c1:23:de:0b:5a:bf:c0:
         cc:77:3f:a6:40:38:bc:cc:9e:34:57:88:21:54:1c:97:86:49:
         b0:cd:cf:ac:a4:42:b2:81:66:dd:63:b8:3c:55:43:0b:46:6b:
         be:41:68:ff:24:e6:07:b5:bb:11:d9:51:3f:c4:29:9d:32:94:
         39:e6:a1:ee:62:f2:74:9e:5c:ef:bb:32:2d:4d:8e:99:f9:a2:
         01:cd:35:90:85:2c:15:4f:31:2a:68:b8:94:ee:26:38:0c:8a:
         9b:2b:9c:bf:44:b7:e9:3d:ee:4e:b1:e2:b7:91:0e:d4:be:f2:
         79:b1:3e:4f:83:4e:12:27:c6:7a:ee:23:f8:da:57:2e:db:0d:
         9c:97:83:a1:f3:55:d7:a0:a0:9f:3b:61:eb:64:53:38:9f:1c:
         b0:50:21:99:97:60:f5:9a:d7:a1:70:6e:fb:8e:c0:ff:40:59:
         a7:40:f4:34:59:cb:b6:22:40:51:80:0f:f5:35:a6:88:c5:fe:
         20:75:7a:ba:b3:bf:00:c3:db:f3:a4:92:17:ba:2c:33:e7:fb:
         47:5d:99:16:69:d8:c2:1d:e8:b8:3c:3d:21:88:9b:fd:4c:6e:
         a1:61:a2:a7:7e:c8:9b:97:df:83:07:e0:d4:07:c6:22:47:f4:
         9c:2f:c8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----