Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/FA40F4074261959953C6B11359AE13D2C4B837D3.mft
File:                     FA40F4074261959953C6B11359AE13D2C4B837D3.mft (raw, json)
Hash identifier:          QruXD/3qLiFO4LKxt9HkBoJZoSNvCeEUTa/HMcvXD74=
Subject key identifier:   BD:F2:92:A1:7C:91:6C:F7:98:6D:75:A5:7F:89:AF:0E:1A:B8:A3:FE
Authority key identifier: FA:40:F4:07:42:61:95:99:53:C6:B1:13:59:AE:13:D2:C4:B8:37:D3
Certificate issuer:       /CN=FA40F4074261959953C6B11359AE13D2C4B837D3
Certificate serial:       244C3AB2E20E84061E650DEBBCA1F6FD98BB7088
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA40F4074261959953C6B11359AE13D2C4B837D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/FA40F4074261959953C6B11359AE13D2C4B837D3.mft
Manifest number:          C4
Signing time:             Fri 28 Mar 2025 09:10:01 +0000
Manifest this update:     Fri 28 Mar 2025 09:05:01 +0000
Manifest next update:     Tue 01 Apr 2025 12:57:01 +0000
Files and hashes:         1: 34352e3137342e3137322e302f32322d3234203d3e20323635353738.roa (hash: edgFkGcxkCm91xM+uyMsNz59LzNDLj7cGSCgYABjhXk=)
                          2: FA40F4074261959953C6B11359AE13D2C4B837D3.crl (hash: 5dLaD/PDW11sisvhSgUJp8LUNEBT9lTgZ7+XQ+wCMs4=)
                          3: 323830363a3333323a3a2f33322d3438203d3e20323635353738.roa (hash: dVsNOyPKu6XffJQutRoMAelX/LHC5UntUohEGpULlLM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:4c:3a:b2:e2:0e:84:06:1e:65:0d:eb:bc:a1:f6:fd:98:bb:70:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA40F4074261959953C6B11359AE13D2C4B837D3
        Validity
            Not Before: Mar 28 09:05:01 2025 GMT
            Not After : Apr  1 12:57:01 2025 GMT
        Subject: CN=BDF292A17C916CF7986D75A57F89AF0E1AB8A3FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f5:17:65:23:e5:77:2e:96:f4:4c:2a:a5:bf:
                    64:a0:a5:3d:d0:b2:cb:9c:15:b4:e8:be:be:7f:e7:
                    1e:e4:dd:cc:a0:15:d8:e9:f2:89:eb:aa:31:69:79:
                    0e:11:33:a3:f7:c0:d0:cc:ad:1b:64:b2:c9:19:f2:
                    1c:ba:61:61:22:2c:fe:0e:6c:41:43:53:aa:3a:99:
                    f4:69:f6:fa:bc:c2:95:cc:a7:27:0d:30:84:e7:13:
                    e3:e7:e2:38:70:a4:07:b4:06:1d:05:d1:b2:36:5a:
                    73:29:49:4c:f9:53:d7:7a:18:45:07:45:77:f6:c2:
                    38:23:af:8e:33:5f:37:ff:fb:16:66:d6:48:0d:3f:
                    9e:23:71:3d:aa:8b:6e:5a:c1:21:2c:60:55:0b:83:
                    3e:15:c5:23:88:47:f6:95:24:b6:f7:6c:a1:58:dc:
                    0d:48:d2:32:82:92:bb:35:11:3d:65:6c:12:ec:b9:
                    b6:e9:c2:bc:d5:bf:4d:31:46:ff:cd:19:7d:42:c2:
                    25:26:cf:3d:63:a6:03:d9:ad:7a:be:f9:41:2a:eb:
                    ef:49:b6:41:6a:50:e8:2f:e6:9a:11:d1:c9:aa:61:
                    d2:77:60:a1:e1:49:77:70:7b:fd:d2:f0:51:df:a7:
                    11:b6:4e:6a:52:8d:f6:27:0a:d2:6c:49:12:8f:77:
                    26:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F2:92:A1:7C:91:6C:F7:98:6D:75:A5:7F:89:AF:0E:1A:B8:A3:FE
            X509v3 Authority Key Identifier:
                keyid:FA:40:F4:07:42:61:95:99:53:C6:B1:13:59:AE:13:D2:C4:B8:37:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/FA40F4074261959953C6B11359AE13D2C4B837D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA40F4074261959953C6B11359AE13D2C4B837D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/FA40F4074261959953C6B11359AE13D2C4B837D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:a1:f7:2f:ce:15:c6:2c:32:15:e1:fa:d9:41:5d:77:64:16:
         c8:f4:87:fd:a9:ec:63:73:ea:66:4d:39:24:5e:84:c9:f6:94:
         63:1a:bc:7f:b2:6a:dd:5e:09:66:4c:26:92:5a:89:72:67:07:
         c9:bc:59:bf:39:ba:64:47:3e:78:ed:7a:82:40:0a:06:e0:39:
         5f:65:3f:b6:a4:3d:e3:53:16:fd:aa:f3:c1:38:59:16:d1:cc:
         d8:8a:3c:e3:87:c2:a5:39:92:f8:d6:46:bd:2a:05:6c:ca:c7:
         ea:4d:f5:50:49:4d:86:b4:82:c9:93:78:0b:bb:a5:cf:14:31:
         a3:e8:1f:05:ca:37:74:ee:1a:cb:5c:77:13:95:fe:ab:a7:48:
         5b:01:e1:07:e3:54:84:59:d4:10:38:a4:6d:9b:c0:30:b5:ad:
         47:9f:50:7f:3f:af:35:f1:9d:7f:44:a9:3d:ec:b3:2b:c0:87:
         bd:23:16:c6:a1:c6:75:56:8a:a4:25:4b:8c:62:be:fb:60:df:
         98:af:08:f4:b5:7b:b0:73:e4:71:7c:34:f5:39:23:26:59:89:
         14:5e:a8:6f:6d:fb:31:af:74:d1:09:73:13:9d:32:1b:41:31:
         9d:96:71:4a:51:d9:ff:b6:ec:51:5b:af:72:89:f8:4b:38:f5:
         2e:67:ae:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----