Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/2D2BA350074219D08DFBB94550147A89F29E05B9.mft
File:                     2D2BA350074219D08DFBB94550147A89F29E05B9.mft (raw, json)
Hash identifier:          hEJss96VVwQhbZD4FHCH1zoTAX+Jciw9J4+v3lBCJGI=
Subject key identifier:   D1:5A:73:E0:FB:3C:0F:75:DB:93:65:01:0C:67:22:7D:19:40:62:E1
Authority key identifier: 2D:2B:A3:50:07:42:19:D0:8D:FB:B9:45:50:14:7A:89:F2:9E:05:B9
Certificate issuer:       /CN=2D2BA350074219D08DFBB94550147A89F29E05B9
Certificate serial:       162A1715FC71EBA59E48A081AF1F3C55455D1208
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D2BA350074219D08DFBB94550147A89F29E05B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/2D2BA350074219D08DFBB94550147A89F29E05B9.mft
Manifest number:          5F
Signing time:             Fri 31 Jan 2025 11:50:48 +0000
Manifest this update:     Fri 31 Jan 2025 11:45:48 +0000
Manifest next update:     Thu 06 Feb 2025 09:35:48 +0000
Files and hashes:         1: 3136372e3234392e34342e302f32322d3234203d3e203532343236.roa (hash: CQ2m+g/h87/WMvyb1olCycnrBdosbqNlOCCe3F0IG4s=)
                          2: 2D2BA350074219D08DFBB94550147A89F29E05B9.crl (hash: lGn+ctdjlA2H6imgsD6wHdkoNy4p3stVbH6ThrffgSU=)
                          3: 323830333a343130303a3a2f33322d3332203d3e203532343236.roa (hash: IgaepcuJgoX8noxR5f2zjJStn/z4jwzgBKLQfxqL5Q0=)
                          4: 3139302e352e3231362e302f32312d3234203d3e203532343236.roa (hash: XnjWAZo5b4/a7++wTTQ//rF6RjCbHhfzRWL8unTCHjA=)
                          5: 3133382e302e35362e302f32322d3234203d3e203532343236.roa (hash: j1sn74zJwCm1wE3C6O0/pAQbXGgmMfi9zlbQCjB87DU=)
                          6: 3137392e34332e36342e302f32302d3234203d3e203532343236.roa (hash: oflB0Z61pYMTjgNi0TOV5fgyPH5QOHEI6KwZHzMOWdc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:2a:17:15:fc:71:eb:a5:9e:48:a0:81:af:1f:3c:55:45:5d:12:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D2BA350074219D08DFBB94550147A89F29E05B9
        Validity
            Not Before: Jan 31 11:45:48 2025 GMT
            Not After : Feb  6 09:35:48 2025 GMT
        Subject: CN=D15A73E0FB3C0F75DB9365010C67227D194062E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ea:a1:57:7d:59:05:06:23:10:5b:92:7a:ea:
                    25:f3:3c:b4:80:76:48:73:36:3b:76:78:e1:48:1e:
                    2a:fa:71:32:1d:40:3d:a7:42:9a:52:38:39:68:31:
                    3b:62:42:47:e7:b7:aa:72:4e:db:1d:13:86:f4:96:
                    a2:9c:01:3a:61:32:ce:89:69:fe:32:ef:30:b5:ac:
                    94:cc:a7:d1:9f:36:4f:32:eb:fb:31:1e:71:4a:aa:
                    63:8a:fc:83:e7:c5:8a:68:e2:57:7f:0a:db:d3:ff:
                    e1:8c:31:e0:34:7c:a0:ab:a1:ee:47:b7:fa:39:70:
                    99:bf:fa:87:3d:8f:ea:c8:16:91:35:4b:10:d3:fa:
                    25:d4:62:66:56:9f:68:9b:ee:07:e7:43:53:d9:d7:
                    12:c6:dc:15:40:71:b2:ce:1e:04:a5:ce:c5:a6:58:
                    ed:a3:aa:a0:08:ea:cb:03:c0:7a:74:97:2a:4e:0e:
                    a6:52:44:9a:0f:4e:0a:33:47:a5:9a:4a:f1:99:07:
                    ed:c5:fa:81:18:2a:74:82:ad:01:d5:31:0b:49:cd:
                    8a:d6:dc:ca:44:c3:15:30:6d:fc:95:18:dd:f9:d7:
                    cf:f4:01:82:27:fb:17:b5:de:6e:1a:50:9a:2f:81:
                    b2:12:ac:b9:92:d1:bd:15:cd:3f:48:60:dc:6d:71:
                    c6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5A:73:E0:FB:3C:0F:75:DB:93:65:01:0C:67:22:7D:19:40:62:E1
            X509v3 Authority Key Identifier:
                keyid:2D:2B:A3:50:07:42:19:D0:8D:FB:B9:45:50:14:7A:89:F2:9E:05:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/2D2BA350074219D08DFBB94550147A89F29E05B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D2BA350074219D08DFBB94550147A89F29E05B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/2D2BA350074219D08DFBB94550147A89F29E05B9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:88:30:f3:c2:59:74:71:40:1a:2c:47:22:59:32:8f:78:23:
         60:f6:7b:e6:8b:c3:ea:85:93:d5:d7:d0:a2:a5:b3:eb:57:62:
         fc:6a:ae:a2:61:c1:5e:a0:62:5d:24:7f:76:35:4e:7f:50:9b:
         d3:19:b7:d5:fc:8a:75:04:2a:da:be:13:0d:da:b5:94:e9:9c:
         44:fe:67:f7:df:b5:29:20:bf:83:7b:50:1b:34:07:bb:92:eb:
         39:9a:77:2d:51:51:2f:83:e2:47:9d:c8:a9:17:51:a6:90:a1:
         d7:4c:dc:87:d6:17:02:5e:c2:9d:b2:71:bf:93:a1:b3:86:76:
         94:6a:6d:f1:5b:76:6d:b0:1e:85:bd:7b:a6:4e:a4:65:0b:c7:
         af:8c:1d:42:c8:f1:c0:1b:41:82:c2:a2:f5:e7:a6:45:32:21:
         6f:46:cb:d1:c0:4b:11:24:60:c4:05:7a:19:c4:ef:3e:dc:ee:
         f0:d8:f7:dd:1a:bb:95:ff:25:62:ef:b4:fb:93:76:ea:b8:ee:
         a2:68:e9:68:3d:17:92:08:b8:f8:4d:bc:b9:fd:b8:c6:44:57:
         ad:f1:4c:bb:23:ba:09:0a:88:0a:87:9d:b1:65:b5:52:be:cc:
         96:1f:40:6f:c2:de:17:b6:34:02:47:a4:2c:03:1a:2b:a0:c6:
         9d:70:28:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:04:06 2025 by rpki-client