Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4053E15793D8BA738124B70F97D5B90469FF1A29B0A57E142AF6DD4D81111C9/0/2F04FD11390F25856E2C138CD67BF473814525F2.mft
File:                     2F04FD11390F25856E2C138CD67BF473814525F2.mft (raw, json)
Hash identifier:          ACw4t0PVYUVBACw3HLlGiKgEGOFW0Otr1qbYj+G+nsc=
Subject key identifier:   2C:02:AD:CE:58:9B:59:26:1C:65:65:B3:8A:98:79:27:58:C5:F0:A1
Authority key identifier: 2F:04:FD:11:39:0F:25:85:6E:2C:13:8C:D6:7B:F4:73:81:45:25:F2
Certificate issuer:       /CN=2F04FD11390F25856E2C138CD67BF473814525F2
Certificate serial:       6326F1FDF90A38C62E995A5DD0CCEEFB73930250
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F04FD11390F25856E2C138CD67BF473814525F2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4053E15793D8BA738124B70F97D5B90469FF1A29B0A57E142AF6DD4D81111C9/0/2F04FD11390F25856E2C138CD67BF473814525F2.mft
Manifest number:          15
Signing time:             Thu 30 Jan 2025 23:53:19 +0000
Manifest this update:     Thu 30 Jan 2025 23:48:19 +0000
Manifest next update:     Tue 04 Feb 2025 07:53:19 +0000
Files and hashes:         1: 323830333a316631303a3a2f33322d3438203d3e20323732313532.roa (hash: zTSGhGTkTCAH6zsxvvBlAjk40oGDytEBhp7Bbe3b3F0=)
                          2: 3138312e3233322e3138342e302f32322d3234203d3e20323732313532.roa (hash: D0BBlOT/TvG3K7alLZh9sUJL9g2iXx3iUdWEBhbFLm4=)
                          3: 2F04FD11390F25856E2C138CD67BF473814525F2.crl (hash: 059SrmNQRBVJhfdFAhi4Gek6PS8Rq86DvUFNROge5fQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:26:f1:fd:f9:0a:38:c6:2e:99:5a:5d:d0:cc:ee:fb:73:93:02:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F04FD11390F25856E2C138CD67BF473814525F2
        Validity
            Not Before: Jan 30 23:48:19 2025 GMT
            Not After : Feb  4 07:53:19 2025 GMT
        Subject: CN=2C02ADCE589B59261C6565B38A98792758C5F0A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a7:bf:bd:54:6c:06:33:3f:e6:0e:e1:36:80:
                    8a:06:d8:ad:c2:45:54:2f:54:29:37:43:42:83:90:
                    4f:f4:00:2d:60:2a:70:6f:ff:4c:3f:d6:a0:11:9e:
                    21:14:d3:b3:30:d2:7b:90:e2:63:80:b8:db:17:97:
                    10:ca:b7:dd:c9:fa:8b:fd:53:cf:d6:e2:24:f8:75:
                    5e:7b:e7:dd:da:99:44:e8:6d:02:bb:d6:95:d9:cc:
                    6c:4f:12:9c:a6:6f:93:ad:6b:e3:d4:79:c7:63:a4:
                    da:5c:43:18:31:ee:85:33:62:93:98:15:fd:4c:0e:
                    28:9d:cc:1c:44:93:08:ad:9c:2c:71:b8:95:3d:53:
                    df:bc:3a:8c:14:23:24:c9:b8:a6:9e:91:0d:eb:66:
                    8e:80:31:c2:bf:5f:25:94:40:1b:15:11:35:42:f9:
                    6a:f4:c8:33:e9:f0:b2:bf:bd:52:77:48:cb:01:b6:
                    85:63:cb:41:c6:66:89:89:c6:b8:23:93:3f:99:b3:
                    ee:49:2e:7d:82:91:68:98:2a:32:8a:ad:bd:1b:7f:
                    b8:44:63:2b:45:d7:c1:59:37:69:91:4c:f0:05:fe:
                    e5:9d:16:93:1c:86:ee:b6:47:ee:94:76:83:90:bb:
                    7f:32:d7:9e:07:5b:b1:ab:ca:27:d1:c4:8f:93:39:
                    9e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:02:AD:CE:58:9B:59:26:1C:65:65:B3:8A:98:79:27:58:C5:F0:A1
            X509v3 Authority Key Identifier:
                keyid:2F:04:FD:11:39:0F:25:85:6E:2C:13:8C:D6:7B:F4:73:81:45:25:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4053E15793D8BA738124B70F97D5B90469FF1A29B0A57E142AF6DD4D81111C9/0/2F04FD11390F25856E2C138CD67BF473814525F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F04FD11390F25856E2C138CD67BF473814525F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4053E15793D8BA738124B70F97D5B90469FF1A29B0A57E142AF6DD4D81111C9/0/2F04FD11390F25856E2C138CD67BF473814525F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:c8:85:8a:31:f0:00:75:7c:84:b9:68:fb:af:2b:1f:cf:9f:
         bb:ec:03:11:96:91:8e:24:15:88:b8:86:0f:39:34:d8:0a:03:
         ea:67:ef:b4:44:b5:8d:86:b5:25:70:67:7a:75:60:b8:f0:b5:
         08:1b:67:08:b4:22:f0:02:18:fb:d2:f0:7a:50:22:64:52:82:
         3f:13:11:12:4c:ee:17:c1:24:4b:91:d6:f4:72:62:84:c4:0f:
         14:de:7f:96:d8:63:92:b1:bf:4b:d9:87:59:af:89:75:a7:97:
         ee:39:1b:3c:c4:50:19:a0:c5:2b:72:b3:72:31:1c:20:a3:a1:
         32:3b:9f:a6:09:a0:d0:9a:2c:29:6e:79:8d:d9:cd:a3:b6:49:
         d4:44:26:0d:aa:96:eb:59:84:0d:d1:74:22:4b:86:51:d2:8f:
         42:a8:a5:8d:a9:52:b0:bd:02:86:51:ba:2c:97:13:f7:b3:4c:
         d6:83:49:f7:79:be:55:f9:03:a9:ad:e0:9d:6f:49:05:b1:0e:
         be:fb:f3:53:60:8a:a1:b8:bd:d6:6b:b6:3f:68:c7:09:e4:c0:
         d1:a9:95:0c:d2:6d:7c:fe:f1:1d:62:16:46:80:65:2f:2e:77:
         27:91:07:68:1a:31:50:2d:e2:01:ab:33:44:b5:3c:6f:38:5b:
         aa:98:c4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----