Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft
File:                     D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft (raw, json)
Hash identifier:          h8O8UZWQd4vjusAZDHBfAlNzJ1EfkfG2LA7pepOSD+Y=
Subject key identifier:   F3:87:28:F4:20:5B:30:B5:6F:5D:2F:94:1E:CD:A8:14:E1:49:CE:D0
Authority key identifier: D7:A4:86:F4:E8:E3:2E:BB:7C:A3:2A:25:A9:EF:E1:07:EF:5F:B2:5B
Certificate issuer:       /CN=D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B
Certificate serial:       034DEDA50D1A86363BF1A783EF6AAFDE1C9450DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft
Manifest number:          CA
Signing time:             Sat 29 Mar 2025 00:08:39 +0000
Manifest this update:     Sat 29 Mar 2025 00:03:38 +0000
Manifest next update:     Thu 03 Apr 2025 10:05:38 +0000
Files and hashes:         1: 3139302e39392e39362e302f32302d3234203d3e203532323431.roa (hash: O/46B4/u/eHOyJFeGsRSsHAhdDpnVI0nukknP3HeWiE=)
                          2: D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.crl (hash: Ub9y+gKfB1YqIWxm9CyW/uXcmcG2Hy+FAFZNtJTX06Q=)
                          3: 3139302e39392e39362e302f32302d3234203d3e203532333636.roa (hash: c7Jd2Hfbf5O72dBsGLHG8rBE6OFkyBn9EV8Lu0DYYmc=)
                          4: 323830333a623230303a3a2f33322d3438203d3e203532333636.roa (hash: XKA1MlyxnJrXu8kNyuF9oL4/BFd9LVJobp86M1utvUE=)
                          5: 323830333a623230303a3a2f33322d3438203d3e203532323431.roa (hash: 3On1XVpEl3GN2nuqEyHkkVcnUfGWvNLDTKqn000MRF0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:4d:ed:a5:0d:1a:86:36:3b:f1:a7:83:ef:6a:af:de:1c:94:50:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B
        Validity
            Not Before: Mar 29 00:03:38 2025 GMT
            Not After : Apr  3 10:05:38 2025 GMT
        Subject: CN=F38728F4205B30B56F5D2F941ECDA814E149CED0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6e:68:3c:65:52:e3:f2:29:18:4a:ac:a8:67:
                    3c:16:b7:a5:b5:c7:50:64:5b:44:83:00:9e:88:22:
                    bf:53:3b:83:49:fb:8a:2e:8f:3b:5d:49:22:f3:e3:
                    bb:68:ac:40:11:de:e3:65:5a:d9:3a:e9:76:68:eb:
                    80:4a:15:82:70:55:28:b1:60:5a:fd:8a:b5:10:33:
                    e9:f1:fa:16:16:58:05:e3:8d:22:58:10:2b:c2:7c:
                    81:78:de:2e:31:75:2b:a0:d4:31:53:dd:ec:87:d6:
                    50:41:34:0f:db:52:ad:11:10:ba:d4:70:f2:e6:47:
                    1e:2d:5f:36:e7:2d:cc:da:e8:f1:c6:73:d5:5b:c4:
                    93:59:2c:2d:76:51:c0:92:2c:44:ef:43:54:98:29:
                    1c:99:13:0a:f2:ca:72:a8:a6:f8:5f:7e:c3:8e:7a:
                    37:6e:87:72:47:28:fd:69:3b:3c:6b:50:ce:62:69:
                    3b:c1:ed:42:b1:b7:2a:21:cc:33:9b:96:43:3b:49:
                    a9:45:b2:7d:7f:f2:6b:3f:75:c5:93:ee:ae:0c:81:
                    76:d5:02:46:5b:3b:4c:72:f1:ec:ae:27:9d:0a:14:
                    ff:05:22:9b:69:1c:15:34:94:4d:2a:53:70:7b:27:
                    2a:61:9c:8d:2e:4d:bf:dd:fb:54:f3:f2:90:82:af:
                    e4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:87:28:F4:20:5B:30:B5:6F:5D:2F:94:1E:CD:A8:14:E1:49:CE:D0
            X509v3 Authority Key Identifier:
                keyid:D7:A4:86:F4:E8:E3:2E:BB:7C:A3:2A:25:A9:EF:E1:07:EF:5F:B2:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:25:38:40:45:d0:fa:e4:0b:73:55:70:32:af:2b:bc:52:ac:
         51:14:af:1a:1e:91:0b:1d:ee:81:26:93:f8:b5:2e:4d:a7:7b:
         e0:64:28:16:e7:34:11:c5:f8:c6:ab:87:52:31:1d:48:d8:59:
         8b:b1:c1:f9:7d:53:3c:a6:a5:6f:ac:69:d1:7d:bb:03:45:3a:
         6a:a1:a6:c0:43:67:9a:3d:48:38:59:d4:9c:fd:54:74:7e:82:
         ed:24:e0:d5:0e:ed:e0:0b:ef:c0:21:58:f3:bf:9f:4c:be:f1:
         24:d2:54:c3:57:6b:1b:25:93:17:1e:23:fd:a0:51:24:d3:86:
         21:23:57:24:37:5c:e2:18:37:b4:7d:77:85:ff:3d:f8:f7:81:
         bb:64:d2:f2:29:ca:b5:52:09:ec:dd:f8:42:f5:85:e7:1c:81:
         56:b5:72:6c:9f:de:72:d9:e8:f9:82:f6:94:1e:2c:82:62:3a:
         58:f4:ea:f6:27:0a:24:d5:33:79:7b:26:20:e6:3e:3e:d1:bb:
         c7:94:ea:4d:54:e7:a0:24:b5:3f:d9:87:da:4c:9b:66:41:77:
         e0:b1:7d:77:36:04:c7:df:f5:71:75:e8:63:79:e2:33:8c:ea:
         18:5b:92:18:39:39:96:e2:87:17:57:2a:e2:18:10:7f:3a:37:
         99:ba:bb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----