Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228A1144F80DF4A77C0E4FAC62CB4207C688A7FC94E852E8C58941408A68ADAE/0/4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1.mft
File:                     4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1.mft (raw, json)
Hash identifier:          45lCOc0FxtIKkDw7Ihc/Gd9A8LlN+hxuc2SMGnnWkf4=
Subject key identifier:   27:A8:EC:3F:9D:9A:C5:02:07:3B:62:29:FE:34:DC:37:29:71:94:01
Authority key identifier: 4D:54:F9:2C:0C:41:A4:77:E9:B5:12:2A:4B:E2:DF:E8:3E:ED:8A:C1
Certificate issuer:       /CN=4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1
Certificate serial:       20F7E77B86AC48539C06368153FFE9A315FCB8CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/228A1144F80DF4A77C0E4FAC62CB4207C688A7FC94E852E8C58941408A68ADAE/0/4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1.mft
Manifest number:          C7
Signing time:             Thu 27 Mar 2025 20:57:56 +0000
Manifest this update:     Thu 27 Mar 2025 20:52:56 +0000
Manifest next update:     Tue 01 Apr 2025 17:33:56 +0000
Files and hashes:         1: 323830333a626161303a3a2f33322d3332203d3e20323636383738.roa (hash: Y0kBmoWb1ZNgAqc1aipgKWOHwgvCQVTmBmRqWi67pT4=)
                          2: 4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1.crl (hash: ZDIPUdDPFv3SQqY2qMXxLt6MMuQduqjC+7iQ2kHvHCQ=)
                          3: 34352e3136302e37322e302f32322d3234203d3e20323636383738.roa (hash: JVn3fcavKby4quwkN5M/vHapDj8boLd/2FIBS32mzP8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f7:e7:7b:86:ac:48:53:9c:06:36:81:53:ff:e9:a3:15:fc:b8:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1
        Validity
            Not Before: Mar 27 20:52:56 2025 GMT
            Not After : Apr  1 17:33:56 2025 GMT
        Subject: CN=27A8EC3F9D9AC502073B6229FE34DC3729719401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2f:76:e7:a8:3b:75:cf:62:d2:de:85:a1:6b:
                    f8:ea:75:cc:ee:20:c5:69:c7:e0:3c:b1:63:22:15:
                    f1:dd:a7:8b:60:93:19:84:e5:51:9a:f8:ab:95:a0:
                    c1:0d:e8:39:8a:26:a9:34:ce:15:ad:30:dc:b0:c5:
                    0e:0d:18:f6:57:50:38:d5:bc:5b:fd:97:0f:ed:d7:
                    20:54:ae:71:59:1f:0d:32:55:51:90:b6:8d:a5:36:
                    a7:aa:5e:b9:4c:84:b5:28:e5:b3:52:6d:58:62:6a:
                    f7:da:cc:01:05:24:52:ca:0b:d1:51:38:62:5e:8a:
                    62:0a:0b:00:28:37:33:e2:34:d0:d5:e2:9c:17:b7:
                    82:1f:87:dc:1e:cf:4b:92:f6:12:ac:92:2b:ee:a8:
                    f2:bf:64:b2:4d:a5:7e:6e:ee:c3:82:87:51:dd:8c:
                    81:89:ee:86:76:00:d4:98:f5:27:59:6d:22:62:e2:
                    e4:d9:f4:e2:2a:e2:ce:73:af:02:64:fb:d8:3f:9b:
                    9d:e9:1a:07:88:d2:9f:d8:6f:c2:72:82:14:d1:ae:
                    02:9c:ba:5b:b9:c7:14:17:d5:dc:25:a3:1b:27:8a:
                    fb:96:ba:b2:4c:23:41:1f:90:ec:5e:88:fc:5d:9c:
                    97:33:26:c0:43:87:f6:ee:d9:b1:15:3a:fa:36:3f:
                    d6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A8:EC:3F:9D:9A:C5:02:07:3B:62:29:FE:34:DC:37:29:71:94:01
            X509v3 Authority Key Identifier:
                keyid:4D:54:F9:2C:0C:41:A4:77:E9:B5:12:2A:4B:E2:DF:E8:3E:ED:8A:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/228A1144F80DF4A77C0E4FAC62CB4207C688A7FC94E852E8C58941408A68ADAE/0/4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228A1144F80DF4A77C0E4FAC62CB4207C688A7FC94E852E8C58941408A68ADAE/0/4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:dc:11:58:74:14:07:76:c2:30:36:6d:04:62:da:c5:ed:f0:
         6c:11:3e:16:46:b4:2b:0d:97:c8:04:9c:b6:2c:ed:aa:3b:6b:
         f5:4c:93:84:6b:fe:52:f7:42:58:a6:24:0f:77:11:07:56:ee:
         ae:2e:aa:7d:75:5d:24:89:0f:e2:dc:d8:e5:ce:ec:6a:94:04:
         a8:7d:0f:ad:98:fd:8c:3f:60:93:d6:57:e1:d1:e9:5d:79:7b:
         1d:ee:fe:51:90:03:ff:f7:ce:54:67:68:3f:fd:1b:19:a5:c0:
         45:5f:91:60:f8:70:37:e7:c8:80:b4:fd:4b:48:f2:d8:bd:ee:
         0b:eb:f8:08:54:14:0d:5b:8b:8e:70:56:df:9f:ef:74:a8:ab:
         59:d9:64:8f:f5:08:d4:88:99:75:d5:df:22:07:cf:15:4c:b2:
         ec:3d:d0:8a:3b:49:a4:81:9b:b0:bd:16:1b:aa:58:fc:bd:e9:
         02:f2:ab:46:45:a1:7d:5d:65:8d:53:f1:87:43:90:b4:9c:20:
         b9:f7:01:59:0b:5b:1a:28:5e:79:fa:a1:81:3f:d6:27:db:b4:
         66:a6:57:e3:a8:33:94:34:43:eb:5c:78:c2:23:46:6e:ef:18:
         b6:bb:25:4c:25:b9:f6:6b:81:96:ad:67:51:94:17:49:e0:b9:
         0a:6c:03:df
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUIPfne4asSFOcBjaBU//poxX8uMwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ1NEY5MkMwQzQxQTQ3N0U5QjUxMjJBNEJFMkRGRTgz
RUVEOEFDMTAeFw0yNTAzMjcyMDUyNTZaFw0yNTA0MDExNzMzNTZaMDMxMTAvBgNV
BAMTKDI3QThFQzNGOUQ5QUM1MDIwNzNCNjIyOUZFMzREQzM3Mjk3MTk0MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdL3bnqDt1z2LS3oWha/jqdczu
IMVpx+A8sWMiFfHdp4tgkxmE5VGa+KuVoMEN6DmKJqk0zhWtMNywxQ4NGPZXUDjV
vFv9lw/t1yBUrnFZHw0yVVGQto2lNqeqXrlMhLUo5bNSbVhiavfazAEFJFLKC9FR
OGJeimIKCwAoNzPiNNDV4pwXt4Ifh9wez0uS9hKskivuqPK/ZLJNpX5u7sOCh1Hd
jIGJ7oZ2ANSY9SdZbSJi4uTZ9OIq4s5zrwJk+9g/m53pGgeI0p/Yb8JyghTRrgKc
ulu5xxQX1dwloxsnivuWurJMI0EfkOxeiPxdnJczJsBDh/bu2bEVOvo2P9bLAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUJ6jsP52axQIHO2Ip/jTcNylxlAEwHwYDVR0j
BBgwFoAUTVT5LAxBpHfptRIqS+Lf6D7tisEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMjhBMTE0NEY4MERGNEE3N0MwRTRGQUM2MkNCNDIwN0M2
ODhBN0ZDOTRFODUyRThDNTg5NDE0MDhBNjhBREFFLzAvNEQ1NEY5MkMwQzQxQTQ3
N0U5QjUxMjJBNEJFMkRGRTgzRUVEOEFDMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80RDU0RjkyQzBDNDFBNDc3RTlC
NTEyMkE0QkUyREZFODNFRUQ4QUMxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjI4QTExNDRGODBERjRBNzdDMEU0RkFDNjJDQjQyMDdDNjg4QTdGQzk0
RTg1MkU4QzU4OTQxNDA4QTY4QURBRS8wLzRENTRGOTJDMEM0MUE0NzdFOUI1MTIy
QTRCRTJERkU4M0VFRDhBQzEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC63BFYdBQHdsIwNm0EYtrF7fBs
ET4WRrQrDZfIBJy2LO2qO2v1TJOEa/5S90JYpiQPdxEHVu6uLqp9dV0kiQ/i3Njl
zuxqlASofQ+tmP2MP2CT1lfh0eldeXsd7v5RkAP/985UZ2g//RsZpcBFX5Fg+HA3
58iAtP1LSPLYve4L6/gIVBQNW4uOcFbfn+90qKtZ2WSP9QjUiJl11d8iB88VTLLs
PdCKO0mkgZuwvRYbqlj8vekC8qtGRaF9XWWNU/GHQ5C0nCC59wFZC1saKF55+qGB
P9Yn27RmplfjqDOUNEPrXHjCI0Zu7xi2uyVMJbn2a4GWrWdRlBdJ4LkKbAPf
-----END CERTIFICATE-----