Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft
File:                     42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft (raw, json)
Hash identifier:          rCjfbd9zY12qcTettqNbkMJpEuQtG+dgmVX/9NGph24=
Subject key identifier:   C4:1D:36:96:B5:E9:33:8C:AF:D7:24:2B:BD:C0:89:99:1A:3C:58:26
Authority key identifier: 42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9
Certificate issuer:       /CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9
Certificate serial:       380DE2E75B286FCCCC22C20E8E7A86C1E9751E8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft
Manifest number:          AB
Signing time:             Wed 29 Jan 2025 12:31:26 +0000
Manifest this update:     Wed 29 Jan 2025 12:26:26 +0000
Manifest next update:     Mon 03 Feb 2025 22:29:26 +0000
Files and hashes:         1: 323830333a353531303a3a2f33322d3634203d3e20323732303330.roa (hash: eFqi7V8tVMjlxkg6O4FmPIdgkMBqD7rirvOgH2c+Yx8=)
                          2: 42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl (hash: y6/wUp4Gg+ecM71UvO96gXJ71eQ+2Ih2xr59jig0Yvw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:0d:e2:e7:5b:28:6f:cc:cc:22:c2:0e:8e:7a:86:c1:e9:75:1e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9
        Validity
            Not Before: Jan 29 12:26:26 2025 GMT
            Not After : Feb  3 22:29:26 2025 GMT
        Subject: CN=C41D3696B5E9338CAFD7242BBDC089991A3C5826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:87:bf:3a:1a:99:16:d8:68:8b:e7:77:ab:f3:
                    5e:0e:f5:4d:34:cf:77:e5:1e:11:37:5e:a5:86:41:
                    21:58:b3:f4:26:fc:3e:01:dd:da:d3:07:a7:df:ee:
                    f7:b4:89:03:42:e9:e0:c4:dc:34:5e:cf:de:23:b7:
                    e7:76:8f:9a:5f:6d:f5:a0:34:d3:af:0d:bb:9b:96:
                    b4:81:c9:41:97:a8:98:e2:57:66:d2:88:46:fe:41:
                    88:2f:0e:18:33:67:53:ea:11:84:70:4d:aa:85:32:
                    30:ba:a7:c1:f6:86:5a:14:52:51:eb:69:24:1f:e5:
                    cf:00:46:31:e2:13:af:44:b1:ca:7b:d7:8d:f8:bf:
                    bb:75:36:42:00:15:46:1b:8a:8a:37:46:7c:23:4c:
                    86:9e:2f:ca:ee:72:21:cb:2a:99:16:60:2d:23:f1:
                    31:e3:2c:b8:93:01:8d:da:46:88:ad:ab:23:75:ad:
                    10:d1:d3:f5:4e:4d:80:ca:09:ee:12:1e:2a:74:fe:
                    9d:b4:c7:af:ce:04:12:c7:48:6b:f9:17:51:6d:2e:
                    e8:15:b4:18:bf:81:13:bd:25:26:ac:29:c8:db:02:
                    e5:24:fa:ba:23:f3:70:95:4d:f1:99:10:67:90:84:
                    3b:8b:ad:66:94:c3:2f:93:c6:df:49:ff:8f:6d:66:
                    93:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1D:36:96:B5:E9:33:8C:AF:D7:24:2B:BD:C0:89:99:1A:3C:58:26
            X509v3 Authority Key Identifier:
                keyid:42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:29:d7:d5:5a:0d:30:73:e5:52:29:81:13:36:24:d3:c3:30:
         1b:b9:19:d9:f5:35:f4:a4:7b:d4:e6:8a:98:13:a2:b8:a1:1a:
         78:95:ce:af:90:a7:32:be:7a:be:3a:c1:75:06:ad:1d:c5:55:
         75:06:ff:44:4e:f3:b2:3f:0e:81:08:a6:a9:d3:b9:5b:6b:af:
         7c:fd:20:e2:4b:38:a3:66:59:c1:56:61:32:18:66:77:56:22:
         e9:59:25:c6:97:95:dc:1f:e4:c2:92:df:41:f0:05:43:42:42:
         87:05:93:58:e8:fd:ff:dc:70:3a:46:e3:b4:d0:f5:d4:94:cd:
         b9:d5:dc:26:46:df:1a:06:f2:c5:9a:a3:ae:16:67:bf:bd:80:
         65:0d:c5:34:e2:bc:24:f8:4e:15:a1:82:90:11:c8:ce:82:31:
         96:d4:05:a1:33:ff:c0:f8:e5:59:07:71:ef:e6:ac:73:5b:8a:
         24:99:aa:7d:6b:75:ba:53:4d:0f:6a:15:bd:7b:e4:01:6d:18:
         fa:f3:c0:3b:07:d8:35:b6:c8:01:40:13:4c:31:28:d0:e6:4f:
         5b:64:51:92:2f:4c:82:84:dd:f9:f4:54:62:b7:0d:ff:f6:f9:
         fb:6e:2e:50:46:e4:8e:5d:28:65:98:ac:e0:fd:02:cc:ae:2f:
         c5:4c:c5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----