Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.mft
File:                     2152913C2D5333E6F48DA45B339F5C285841364B.mft (raw, json)
Hash identifier:          fUFiZr9lL/m3gBsNZoe3zYELXLLdicEu1AEY46hGl4U=
Subject key identifier:   1A:B4:53:DC:F4:28:9E:38:E9:11:A5:B4:5C:30:13:B5:80:7A:64:D6
Authority key identifier: 21:52:91:3C:2D:53:33:E6:F4:8D:A4:5B:33:9F:5C:28:58:41:36:4B
Certificate issuer:       /CN=2152913C2D5333E6F48DA45B339F5C285841364B
Certificate serial:       1BE81A3AB7E85647EDF0C24B411E6F81152474A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2152913C2D5333E6F48DA45B339F5C285841364B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.mft
Manifest number:          C2
Signing time:             Fri 28 Mar 2025 18:30:07 +0000
Manifest this update:     Fri 28 Mar 2025 18:25:07 +0000
Manifest next update:     Wed 02 Apr 2025 14:24:07 +0000
Files and hashes:         1: 3139302e3231312e3136302e302f32312d3234203d3e20323632353839.roa (hash: QSYklESbGpTBYnLlMXWGdGvmWPOvjNsNehXg1LCC/Ug=)
                          2: 323830303a3637303a3a2f33322d3332203d3e203532323830.roa (hash: IIQmN/x+wocKGfOczSd4773yu5gle/NafPpok1q1sBg=)
                          3: 3139302e3231312e3136302e302f32302d3234203d3e203532323830.roa (hash: 3tlV1KZH3rDVGHiIirxyLiiuTplF19WWHSCa2xYxI34=)
                          4: 3139302e3231312e3136382e302f32312d3234203d3e20323632353839.roa (hash: 7hL8H/QT0H3pNjeDIcC6CHdP9ozfDuFwvBu42dZF9c8=)
                          5: 2152913C2D5333E6F48DA45B339F5C285841364B.crl (hash: 97gRIHpAMLXGdP5BxMWXxT2O2pk34fS7d+34RY/wWw4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e8:1a:3a:b7:e8:56:47:ed:f0:c2:4b:41:1e:6f:81:15:24:74:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2152913C2D5333E6F48DA45B339F5C285841364B
        Validity
            Not Before: Mar 28 18:25:07 2025 GMT
            Not After : Apr  2 14:24:07 2025 GMT
        Subject: CN=1AB453DCF4289E38E911A5B45C3013B5807A64D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3b:7f:b8:22:b4:bc:c9:35:ed:b6:de:33:aa:
                    bd:81:b9:84:b1:a4:83:20:4a:d4:30:8e:6c:60:4f:
                    9c:3d:4f:8d:75:e4:fb:33:f9:0f:d7:94:74:1f:e3:
                    2f:b6:f2:6e:56:ae:cc:71:2d:83:b7:dd:01:b7:0e:
                    da:62:ff:d4:7e:73:86:cb:4a:29:82:a7:32:c5:1e:
                    49:ba:3c:a1:a1:be:91:3d:d9:60:a1:c6:dc:e4:af:
                    d4:2a:fc:28:d6:4d:db:de:1f:57:68:41:92:27:c3:
                    3d:8b:c5:d5:da:22:30:fa:8d:ad:af:20:04:5a:fa:
                    9b:27:0a:b2:32:74:21:c1:d4:47:be:03:ac:e3:0d:
                    99:11:21:e9:95:c9:39:ad:d9:f0:89:65:76:c4:17:
                    d8:82:c0:24:bb:70:d4:bd:cc:c8:98:33:d0:ae:39:
                    15:99:a4:10:02:87:3a:96:e6:85:c2:2d:7a:4e:57:
                    73:53:d4:7b:43:38:71:48:2d:2c:06:83:fc:1a:f6:
                    64:e2:11:b7:24:16:42:7a:91:34:e9:31:28:88:41:
                    db:c3:55:f6:8c:4b:d3:92:94:9c:e0:51:ef:5a:14:
                    0d:1e:c4:eb:57:74:92:c2:1e:a7:b2:34:5f:aa:59:
                    91:2f:a0:c6:31:d6:1f:90:16:83:a7:12:2f:1d:5c:
                    2b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B4:53:DC:F4:28:9E:38:E9:11:A5:B4:5C:30:13:B5:80:7A:64:D6
            X509v3 Authority Key Identifier:
                keyid:21:52:91:3C:2D:53:33:E6:F4:8D:A4:5B:33:9F:5C:28:58:41:36:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2152913C2D5333E6F48DA45B339F5C285841364B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:a8:08:55:e1:5f:93:87:63:1a:b8:21:84:31:2a:5f:48:b8:
         f6:91:99:ab:c6:46:e8:48:ed:5c:ec:04:60:52:51:84:e6:fe:
         e8:02:32:3b:68:fb:28:be:4e:0b:3c:57:82:a3:44:a0:ac:19:
         0f:c3:c5:d4:5c:39:1f:60:7d:98:59:e3:15:7f:a8:3c:82:62:
         75:e7:86:05:95:3b:02:f4:b6:73:21:9f:12:a4:de:e6:48:00:
         94:7c:90:60:09:08:8b:8f:24:23:aa:c9:f4:75:cb:3e:4b:6e:
         f1:60:e7:e2:f8:88:09:7d:21:5e:39:c5:83:ec:03:ff:0d:0f:
         89:1f:19:9a:07:b7:d8:29:26:8d:a5:ae:3d:14:77:f0:fc:21:
         01:61:b7:9a:e6:51:7a:58:5e:a5:b2:e5:c3:3d:eb:79:1b:0f:
         f5:37:f9:6e:db:ef:93:48:2d:5c:d3:ba:df:aa:88:82:c2:1d:
         48:bf:ac:06:be:9a:05:48:f2:5c:b2:db:b0:0d:83:df:8f:1f:
         4b:d4:c0:ad:1c:8e:63:d8:79:cd:23:e7:57:73:92:5a:e5:45:
         23:a5:f1:7f:9f:dc:33:56:a9:7d:ad:87:3c:c0:87:92:10:9f:
         9b:6b:98:f4:cb:eb:63:c9:5d:7b:41:2d:b8:29:95:2c:a2:21:
         5f:65:1d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----