Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.mft
File:                     209A4B66D92052DAA8A5358DB465449F02D52BAB.mft (raw, json)
Hash identifier:          llXS1v4Ol4hSFoZ69Gq/FNQIWpkcgAEEkhv/mA2SXco=
Subject key identifier:   A0:3E:7D:C1:0B:37:05:2C:81:8E:4F:6F:E5:E6:62:64:83:13:29:30
Authority key identifier: 20:9A:4B:66:D9:20:52:DA:A8:A5:35:8D:B4:65:44:9F:02:D5:2B:AB
Certificate issuer:       /CN=209A4B66D92052DAA8A5358DB465449F02D52BAB
Certificate serial:       19C66231BA7BF6DB28714182B3FB13E5147E6601
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.mft
Manifest number:          C7
Signing time:             Fri 28 Mar 2025 03:01:08 +0000
Manifest this update:     Fri 28 Mar 2025 02:56:08 +0000
Manifest next update:     Tue 01 Apr 2025 15:39:08 +0000
Files and hashes:         1: 3138362e3135392e3132342e302f32332d3233203d3e2037333033.roa (hash: lYZWMlYpmfMDp3ju1RIgj30QNsgUeyZ+rCwATmt20c8=)
                          2: 3138362e3135392e3132302e302f32322d3234203d3e203532333731.roa (hash: dv2gwDXuAYLH5yjpY40LpucgqLAz9M8RQBrZW0KPQfo=)
                          3: 209A4B66D92052DAA8A5358DB465449F02D52BAB.crl (hash: usny4xn21DP+fXZZEi+zwTnwX5e6I+MdkF75rLha6c0=)
                          4: 3138362e3135392e3132362e302f32342d3234203d3e203532333731.roa (hash: vMojf10tlv6dUJu4HXG+e1AFhjezg2kPJaiaqq+iuAw=)
                          5: 3138362e3135392e3132352e302f32342d3234203d3e203532333731.roa (hash: 8+boctzqfyfnVa1UI5DKkkyWZd7W2yDzp24h4BvgrKM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c6:62:31:ba:7b:f6:db:28:71:41:82:b3:fb:13:e5:14:7e:66:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209A4B66D92052DAA8A5358DB465449F02D52BAB
        Validity
            Not Before: Mar 28 02:56:08 2025 GMT
            Not After : Apr  1 15:39:08 2025 GMT
        Subject: CN=A03E7DC10B37052C818E4F6FE5E6626483132930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:81:94:84:47:00:a3:ff:da:29:6a:5f:51:18:
                    4d:81:23:9d:83:84:8e:ee:8e:9c:51:4d:e3:84:6d:
                    b3:bf:67:fd:c1:51:14:f7:69:fa:d3:2c:bb:4c:03:
                    82:fb:32:33:da:75:91:97:74:8f:fa:98:ab:bf:17:
                    17:7e:a2:59:2d:00:d8:b3:43:e9:cf:62:df:92:52:
                    8e:d3:ce:ec:e5:7b:83:6f:ad:9e:0c:96:fa:c5:56:
                    c3:d1:31:30:ea:84:d2:16:26:ce:3e:f4:c7:52:4f:
                    5b:bc:b8:d2:51:3d:42:e7:68:d7:7c:7e:43:85:9c:
                    39:69:fe:30:8a:3f:27:e1:fe:0e:7c:06:dd:81:7d:
                    27:55:3d:da:11:31:1e:14:71:75:89:b6:f7:1a:47:
                    36:76:92:58:41:c1:0e:a4:6d:47:b9:84:02:e2:4c:
                    b3:7c:43:ff:74:5d:d0:d8:d8:01:d7:f8:39:54:e4:
                    8d:4c:f9:e9:f1:66:b4:b8:de:9b:91:87:32:1a:c4:
                    6d:05:10:c5:0a:d6:42:64:c8:98:29:28:f2:84:57:
                    96:42:3b:da:31:a4:4e:b4:23:c5:19:ca:e4:c1:6c:
                    2b:e1:e0:17:b1:d3:f2:fb:4a:35:03:5c:3b:8f:13:
                    1d:6c:c9:18:22:30:88:38:45:85:61:95:2f:a1:df:
                    8f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:3E:7D:C1:0B:37:05:2C:81:8E:4F:6F:E5:E6:62:64:83:13:29:30
            X509v3 Authority Key Identifier:
                keyid:20:9A:4B:66:D9:20:52:DA:A8:A5:35:8D:B4:65:44:9F:02:D5:2B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:c5:90:47:2f:4c:c9:a6:8d:a4:11:e9:b8:1a:fc:f6:35:34:
         67:81:f3:c9:3f:4e:40:97:6f:4b:fa:61:27:16:b2:2f:2d:bf:
         73:4a:9f:2a:96:7a:b3:0f:0b:57:60:59:25:72:47:de:26:fa:
         09:1b:8a:b9:16:60:c3:5f:c0:86:b0:2d:e1:63:ea:45:56:f0:
         20:ca:e2:69:7e:48:8b:56:7b:30:2e:ce:13:91:99:41:8a:f9:
         9e:87:72:c9:2d:ac:26:e3:f5:ca:51:85:96:31:75:19:c8:5d:
         0a:36:5b:57:52:40:98:2d:78:d6:c2:c4:8f:a5:21:c6:a6:fc:
         f3:b9:47:5b:d1:76:28:c2:4c:5f:d0:b9:73:c4:1c:99:ef:11:
         09:b2:7e:f8:4d:01:b3:31:d8:b7:90:04:c5:b2:8f:dd:14:57:
         c7:68:c3:a6:6d:e9:0a:04:ad:95:c1:2b:41:c7:e8:8d:f6:0c:
         c7:9e:80:3a:e6:4e:bd:1e:bc:05:cb:db:64:79:0e:0f:be:52:
         58:8b:d7:6c:2f:bc:58:52:bb:29:ef:db:d8:d6:28:95:6a:c0:
         26:25:24:1b:05:8a:3b:05:89:4a:62:2a:84:2e:d3:ab:6e:b5:
         86:01:8d:3c:5e:a5:79:85:df:dd:ca:e7:8a:96:f7:2e:06:33:
         9e:4f:ff:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----