Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/178166256DCDD47F9A10C085E7D668758CDA17F028D86B166B55C5D96490AEDC/0/3A2E414DFFAF888C3670046DD819856FE5330921.mft
File:                     3A2E414DFFAF888C3670046DD819856FE5330921.mft (raw, json)
Hash identifier:          Y+yFUxgW2GYI2lHorJbwTkgkA8lihN9qRU1YPU9cuP0=
Subject key identifier:   F3:F3:05:04:BA:04:A8:FC:E7:58:C4:AE:09:52:E0:73:F2:E4:B3:05
Authority key identifier: 3A:2E:41:4D:FF:AF:88:8C:36:70:04:6D:D8:19:85:6F:E5:33:09:21
Certificate issuer:       /CN=3A2E414DFFAF888C3670046DD819856FE5330921
Certificate serial:       1FB58D4FF38A0109A05E1DF606A246A2AB64F933
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2E414DFFAF888C3670046DD819856FE5330921.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/178166256DCDD47F9A10C085E7D668758CDA17F028D86B166B55C5D96490AEDC/0/3A2E414DFFAF888C3670046DD819856FE5330921.mft
Manifest number:          D3
Signing time:             Thu 27 Mar 2025 17:10:36 +0000
Manifest this update:     Thu 27 Mar 2025 17:05:36 +0000
Manifest next update:     Tue 01 Apr 2025 15:17:36 +0000
Files and hashes:         1: 34352e3136342e3232382e302f32332d3234203d3e20323637373036.roa (hash: K0ADn3kWuo4FItRJLQ+QUVURknH7P362deqB6g21JLo=)
                          2: 3A2E414DFFAF888C3670046DD819856FE5330921.crl (hash: t72ghVAW+wha6Jq7iJ19cKPdslklAigjsyIfw1nRqGk=)
                          3: 34352e3136342e3232392e302f32342d3234203d3e20323637373036.roa (hash: 1EzhEvOzKoWPEniPOGZbHkMROdqTQT6lJeK7Zcuv/EE=)
                          4: 34352e3136342e3233312e302f32342d3234203d3e20323634373734.roa (hash: mGUBhifSaxYMIkhw0BSKGnOs+jZygw87SZqRsYiizT0=)
                          5: 34352e3136342e3233302e302f32342d3234203d3e20323637373036.roa (hash: uxtKLJqqjpo2VaO6z3rhsdjYGkMRXTiyNrHbB6p3D5Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b5:8d:4f:f3:8a:01:09:a0:5e:1d:f6:06:a2:46:a2:ab:64:f9:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A2E414DFFAF888C3670046DD819856FE5330921
        Validity
            Not Before: Mar 27 17:05:36 2025 GMT
            Not After : Apr  1 15:17:36 2025 GMT
        Subject: CN=F3F30504BA04A8FCE758C4AE0952E073F2E4B305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:31:b7:3f:51:5a:8c:12:84:e1:c2:d2:07:c0:
                    46:9e:31:53:61:51:c0:20:9d:20:75:19:1f:de:af:
                    7c:94:00:d6:00:d2:c9:5d:36:89:39:8d:84:32:a5:
                    a4:e7:33:f0:d7:4b:42:2f:fe:48:ad:88:de:81:f6:
                    0b:ee:6f:a1:66:48:23:fa:13:d7:89:57:1b:20:c1:
                    2c:5d:67:bb:5e:92:08:c6:55:21:b7:74:b8:c8:a8:
                    57:cc:5d:f0:48:ec:34:94:53:27:c6:97:73:f1:9e:
                    08:b0:a8:b9:23:0f:99:3a:f4:c3:08:77:25:cc:06:
                    de:70:23:71:8f:1b:31:c9:e2:c3:7a:53:e8:8c:f3:
                    e2:cf:30:5c:df:93:12:84:df:83:4b:69:a4:db:29:
                    1e:ab:04:6b:88:15:88:86:00:ce:89:5d:f5:ba:77:
                    e7:fc:c0:8d:4e:b4:ca:46:f7:68:bc:43:58:5c:72:
                    64:e0:b5:88:53:8a:b8:56:55:0c:3c:60:0c:07:99:
                    4e:16:49:ab:e1:7d:a7:59:4e:65:1b:13:09:0b:20:
                    ff:81:d0:a7:91:a0:45:53:9f:1d:1b:b2:60:76:40:
                    5a:8b:3a:1a:1f:0e:63:41:b2:df:ae:9e:62:50:b0:
                    d0:97:ea:75:36:2a:2d:6a:69:89:3b:cc:22:78:67:
                    ca:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F3:05:04:BA:04:A8:FC:E7:58:C4:AE:09:52:E0:73:F2:E4:B3:05
            X509v3 Authority Key Identifier:
                keyid:3A:2E:41:4D:FF:AF:88:8C:36:70:04:6D:D8:19:85:6F:E5:33:09:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/178166256DCDD47F9A10C085E7D668758CDA17F028D86B166B55C5D96490AEDC/0/3A2E414DFFAF888C3670046DD819856FE5330921.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2E414DFFAF888C3670046DD819856FE5330921.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/178166256DCDD47F9A10C085E7D668758CDA17F028D86B166B55C5D96490AEDC/0/3A2E414DFFAF888C3670046DD819856FE5330921.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:cf:e8:e4:7d:5b:51:96:03:de:7d:05:a7:98:af:36:26:25:
         08:0a:51:4d:7a:c4:56:65:95:68:bd:a7:9d:96:4b:bb:fb:82:
         4d:aa:10:d2:e5:44:e3:0e:88:68:bc:c0:b9:29:51:2f:14:52:
         e2:d3:eb:02:96:82:90:6d:9f:0a:95:8a:b4:27:88:fd:6a:84:
         9d:df:4a:ed:bc:dc:32:ed:10:01:4a:0f:7e:4a:fa:27:c0:8c:
         f2:31:87:f5:c2:c4:15:36:f9:2d:82:cd:eb:f6:cf:e8:5a:47:
         d3:04:64:d5:66:69:6e:7f:43:17:21:15:ba:89:87:2c:85:0f:
         1b:55:c9:c2:29:9e:03:37:14:d8:e4:00:55:e9:ef:9b:e0:03:
         ef:aa:89:dc:69:da:9d:ad:64:9c:25:03:24:52:73:68:22:a2:
         e1:9f:74:fc:21:55:08:1a:52:1e:9f:08:5d:44:14:9d:fc:10:
         05:c0:15:ce:8d:1e:16:33:c7:cf:c1:cb:62:ad:e4:47:c6:5a:
         fe:2c:d2:29:e5:a2:33:20:12:dc:83:9f:a5:23:8d:87:bf:0c:
         97:14:97:c9:af:91:ce:07:d0:7e:56:33:60:76:b2:5e:e7:b2:
         61:a1:fc:57:8f:01:eb:3d:6b:8e:be:69:47:48:5e:85:bf:a3:
         01:da:a4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:04:34 2025 by rpki-client