Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/124650AA869959E50101F007463E8A04CD82187D3487D6E94536A4E8926B30BB/0/1D5CEF406A72433445147FEB34D82682345AF563.mft
File:                     1D5CEF406A72433445147FEB34D82682345AF563.mft (raw, json)
Hash identifier:          8ANBUNohmDxWS9WvkeNvmITNkyxcCEjoPVwFs/LdiHs=
Subject key identifier:   68:A2:8D:B1:F3:19:7F:EE:04:F8:97:09:BB:7F:EA:2F:44:A7:93:AB
Authority key identifier: 1D:5C:EF:40:6A:72:43:34:45:14:7F:EB:34:D8:26:82:34:5A:F5:63
Certificate issuer:       /CN=1D5CEF406A72433445147FEB34D82682345AF563
Certificate serial:       209B27B4F532651CE01DDD97B3F0F5A4C79F1786
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D5CEF406A72433445147FEB34D82682345AF563.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/124650AA869959E50101F007463E8A04CD82187D3487D6E94536A4E8926B30BB/0/1D5CEF406A72433445147FEB34D82682345AF563.mft
Manifest number:          C0
Signing time:             Thu 27 Mar 2025 05:18:31 +0000
Manifest this update:     Thu 27 Mar 2025 05:13:31 +0000
Manifest next update:     Tue 01 Apr 2025 18:06:31 +0000
Files and hashes:         1: 34352e3138302e34362e302f32332d3234203d3e20323637393234.roa (hash: R41dtKpk4eBGy0wf1uCdO3UCsRRlyTDKjsv8tJPGlu0=)
                          2: 34352e3138302e34352e302f32342d3234203d3e20323637393234.roa (hash: ilixX6R+aKBUvEenoHDO3WEekhI78FZx//JL6pHM43o=)
                          3: 1D5CEF406A72433445147FEB34D82682345AF563.crl (hash: /eqYk3uJRazMFtektTqrbEoTnePrxnu6y0Rv/MReVhg=)
                          4: 34352e3138302e34352e302f32342d3234203d3e20323634363638.roa (hash: ODu4cvpjGVUquXRp2HF28F1r/zVyrll8rmF0++GxTXI=)
                          5: 323830333a646536303a3a2f33322d3438203d3e20323637393234.roa (hash: QZyRFbtl0zxrpWGiFQmj/Kve6Ulxsh7k9zxrRQCgA5M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:9b:27:b4:f5:32:65:1c:e0:1d:dd:97:b3:f0:f5:a4:c7:9f:17:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D5CEF406A72433445147FEB34D82682345AF563
        Validity
            Not Before: Mar 27 05:13:31 2025 GMT
            Not After : Apr  1 18:06:31 2025 GMT
        Subject: CN=68A28DB1F3197FEE04F89709BB7FEA2F44A793AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f3:b9:3c:28:bc:69:3d:02:1e:81:77:93:e8:
                    a4:e7:cd:e6:b6:d5:b4:e2:1e:32:12:8f:e7:69:23:
                    9b:cd:c7:e5:b3:49:a7:08:a2:0e:12:a8:6e:dc:ea:
                    a7:04:9c:e4:c1:95:d8:68:7b:19:1b:0d:99:fa:82:
                    72:73:92:d4:3b:18:12:c3:8b:ec:d8:0b:30:70:8c:
                    ca:6b:10:65:15:2f:28:db:62:a7:ab:a4:6f:8e:f4:
                    d9:c9:5a:1e:c9:f2:92:ba:52:6a:f8:19:34:ff:1b:
                    78:db:30:3d:bd:cd:62:4d:83:25:59:42:24:ef:d4:
                    7c:56:14:2c:98:cb:5a:78:d8:26:ce:86:1f:23:f4:
                    f4:0a:8b:42:4b:4c:9b:79:50:f1:b0:48:3b:79:9d:
                    d9:0e:de:f0:58:82:46:16:6d:7c:7a:13:47:3d:42:
                    ae:f7:56:04:76:a4:16:f5:bf:d4:28:ee:4b:7a:f3:
                    68:4d:d1:14:95:da:8a:ca:b8:57:5e:c8:d0:1d:ea:
                    5b:1c:5f:0c:82:b2:d2:51:2b:22:c0:b9:95:f3:36:
                    d9:c5:16:8c:da:b9:76:16:3c:4e:cf:21:3a:b1:3e:
                    b8:e6:96:11:e7:9f:eb:0d:3a:65:20:6e:f6:a8:7c:
                    d0:9e:be:1b:9a:d3:d6:a5:3f:40:61:35:7d:92:90:
                    0f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A2:8D:B1:F3:19:7F:EE:04:F8:97:09:BB:7F:EA:2F:44:A7:93:AB
            X509v3 Authority Key Identifier:
                keyid:1D:5C:EF:40:6A:72:43:34:45:14:7F:EB:34:D8:26:82:34:5A:F5:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/124650AA869959E50101F007463E8A04CD82187D3487D6E94536A4E8926B30BB/0/1D5CEF406A72433445147FEB34D82682345AF563.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D5CEF406A72433445147FEB34D82682345AF563.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/124650AA869959E50101F007463E8A04CD82187D3487D6E94536A4E8926B30BB/0/1D5CEF406A72433445147FEB34D82682345AF563.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:76:be:44:0f:24:74:c9:35:65:39:98:e9:42:e5:de:a5:f9:
         4a:4f:66:25:c2:d9:02:04:1d:6d:c0:7e:e7:b9:4d:76:8e:eb:
         e7:65:7a:39:bf:f0:bb:7e:5f:8b:e5:f2:fe:01:e3:c6:3f:aa:
         af:08:25:3d:d4:d7:9a:f0:3e:14:c8:3d:59:6e:57:b8:61:f8:
         11:e0:56:44:18:b2:09:0e:f9:f4:e2:21:b4:e9:74:a4:46:49:
         cb:b5:b3:c7:a9:b3:45:73:18:db:e5:fb:e1:60:82:67:dd:7b:
         81:27:95:87:d0:ff:1a:bc:dd:05:ff:0b:24:e9:8c:f8:cf:03:
         e9:ad:61:bd:fe:8e:c8:61:f1:de:de:7c:b1:6c:8a:6d:ea:a8:
         f7:22:8a:92:08:67:d2:19:0e:2b:cd:ec:76:01:68:48:d1:15:
         cc:bc:93:e1:c8:0f:77:f9:29:65:a6:55:8b:7f:78:ff:5f:e0:
         17:57:58:da:5d:2a:0e:c9:c5:29:b7:9a:25:26:29:0e:44:74:
         bb:8f:28:69:20:34:73:92:f8:89:1a:ba:a2:5c:91:c8:2c:9c:
         07:cd:ae:7c:38:ba:66:eb:a2:f4:83:7b:11:13:f2:38:9b:11:
         fa:e6:aa:51:3e:40:da:11:57:7e:20:db:a3:09:c5:e9:82:c4:
         b0:f8:18:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----