Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.mft
File:                     4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.mft (raw, json)
Hash identifier:          3w5CNTT3ooIn/xtsD6R+cH2lCPJMN0wQDCHBZVjcrVs=
Subject key identifier:   04:23:52:4E:F1:47:D8:76:05:FF:47:2F:F4:F1:9A:72:22:87:B2:4C
Authority key identifier: 4D:DC:EA:5D:BD:5D:CD:00:B0:3C:21:E4:F3:46:9B:F7:D1:F8:BC:E2
Certificate issuer:       /CN=4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2
Certificate serial:       376D5FE9FD5B90BD4FAA2484E19597941F83A0DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.mft
Manifest number:          C8
Signing time:             Sat 29 Mar 2025 02:50:21 +0000
Manifest this update:     Sat 29 Mar 2025 02:45:21 +0000
Manifest next update:     Wed 02 Apr 2025 18:09:21 +0000
Files and hashes:         1: 4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.crl (hash: XcE9Y+/4opv+XOwPLg+vu2cjVtxfynY4V56sDR/4HdY=)
                          2: 3134332e3230382e36342e302f32322d3232203d3e203332303334.roa (hash: mIKWkdMKyZAa2lLWVlxa3L5zNX5+6kV+s4L5AMIQSGo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:6d:5f:e9:fd:5b:90:bd:4f:aa:24:84:e1:95:97:94:1f:83:a0:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2
        Validity
            Not Before: Mar 29 02:45:21 2025 GMT
            Not After : Apr  2 18:09:21 2025 GMT
        Subject: CN=0423524EF147D87605FF472FF4F19A722287B24C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:24:02:4d:15:96:ff:77:c9:88:53:ac:06:6c:
                    1f:30:8e:40:1d:ef:10:80:a8:c6:a2:e8:fe:69:a2:
                    9f:a3:f5:12:2e:4e:9e:ad:c8:25:d9:51:d8:46:70:
                    f4:ef:d3:6c:a7:79:ba:40:18:54:23:f2:08:7a:0b:
                    ea:d5:a4:47:ca:55:82:f4:87:1a:2e:12:d7:69:88:
                    b3:5d:e1:f3:6a:a2:1f:e9:6f:5b:f8:a7:19:5f:4c:
                    3a:ed:0f:3e:81:ee:fa:bb:2d:56:66:01:02:8c:86:
                    9b:f6:54:f2:cb:26:57:dc:5a:71:b8:51:ed:82:09:
                    8d:48:b1:b5:89:71:15:35:95:44:d5:a6:6f:96:24:
                    61:4a:8e:47:ed:dc:0c:d0:ca:48:82:aa:33:f7:26:
                    1a:10:c2:20:d0:09:6c:6d:1d:85:11:bd:60:fd:d7:
                    5e:7e:f9:a8:fd:45:af:cb:42:eb:90:7a:eb:60:3e:
                    78:40:08:29:85:aa:a6:61:8b:82:08:70:61:77:aa:
                    83:4a:46:42:55:78:de:f2:06:25:19:18:b8:b3:43:
                    1d:2a:45:94:a1:2c:95:b2:3e:d8:18:1f:7d:fd:2b:
                    71:19:94:22:68:52:0c:05:08:0d:cf:19:eb:fe:e6:
                    3a:9c:b2:46:0b:1f:ee:da:b8:f7:1a:ae:4d:27:a1:
                    59:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:23:52:4E:F1:47:D8:76:05:FF:47:2F:F4:F1:9A:72:22:87:B2:4C
            X509v3 Authority Key Identifier:
                keyid:4D:DC:EA:5D:BD:5D:CD:00:B0:3C:21:E4:F3:46:9B:F7:D1:F8:BC:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:22:27:99:8e:03:07:f2:b6:a7:df:6a:f6:c3:2e:5e:e6:e2:
         9a:a2:3e:27:1c:bd:d5:93:61:cd:d7:e9:33:dd:ac:8f:75:eb:
         ac:96:57:c7:2f:d3:6b:7d:d5:9f:0b:7b:06:3f:0b:3c:70:c0:
         e6:8f:b5:d8:12:2c:68:ef:3d:9f:6e:45:ed:a0:a8:6d:77:2c:
         fb:f4:68:7b:e4:41:7e:99:58:d1:7a:f0:d0:09:8e:47:dd:31:
         41:6f:d7:63:24:d4:2c:bf:4e:03:f4:7c:0b:df:7a:03:fa:b0:
         ee:92:fc:7b:ae:1c:94:fe:01:bd:62:c6:9e:3b:e4:a0:99:a3:
         5a:75:05:b0:5b:d8:c8:8b:f7:7d:ca:c6:79:a4:d7:9e:7d:42:
         0a:2d:c4:82:c6:da:51:c3:de:b3:f3:30:21:02:08:60:f6:5d:
         55:16:db:22:76:b4:d1:5d:02:3c:46:67:7d:c8:ed:d6:cb:e7:
         9a:e7:8b:d2:95:18:c6:d7:33:a2:ae:52:73:2b:2a:c8:89:3a:
         91:78:df:2f:f6:1f:60:03:35:43:3c:e8:8f:ac:16:19:6e:4f:
         96:1c:8e:8e:61:b2:f9:5c:9f:a3:31:f6:dd:39:23:a5:9e:e1:
         f9:58:7c:24:58:ae:39:1e:40:19:3d:34:79:44:2c:8b:9d:f3:
         41:ed:a4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----