Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/767A17E06C05B5B1854014B624E682AB2D2796B2CB4556AE009812CEA525CACF/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.mft
File:                     D25A645BA2C0882CC1322B6810B60CBBEFE3793E.mft (raw, json)
Hash identifier:          PgTDtaqdpJMySKIbrEbJNxs/YcRnnF0lNI2Su8ku6fU=
Subject key identifier:   2D:1F:21:71:72:0F:E7:19:CB:88:91:DA:FB:9B:CA:55:34:AA:A4:50
Authority key identifier: D2:5A:64:5B:A2:C0:88:2C:C1:32:2B:68:10:B6:0C:BB:EF:E3:79:3E
Certificate issuer:       /CN=D25A645BA2C0882CC1322B6810B60CBBEFE3793E
Certificate serial:       698773209B68064873E78C57B5C84B55A8DEA131
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/767A17E06C05B5B1854014B624E682AB2D2796B2CB4556AE009812CEA525CACF/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.mft
Manifest number:          C7
Signing time:             Fri 28 Mar 2025 14:48:05 +0000
Manifest this update:     Fri 28 Mar 2025 14:43:05 +0000
Manifest next update:     Thu 03 Apr 2025 03:21:05 +0000
Files and hashes:         1: D25A645BA2C0882CC1322B6810B60CBBEFE3793E.crl (hash: m4i8KOGWy+DpRFYq2pTzwI/tduzRQ2wmu94HdsUYoVw=)
                          2: 3138372e3130322e3230302e302f32322d3234203d3e20323730303435.roa (hash: lbDJBjg5ib4+0LIN+kyZNYPr4h+yROXdNdd4k5cOkzQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:87:73:20:9b:68:06:48:73:e7:8c:57:b5:c8:4b:55:a8:de:a1:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D25A645BA2C0882CC1322B6810B60CBBEFE3793E
        Validity
            Not Before: Mar 28 14:43:05 2025 GMT
            Not After : Apr  3 03:21:05 2025 GMT
        Subject: CN=2D1F2171720FE719CB8891DAFB9BCA5534AAA450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9b:92:f4:f6:f2:a6:d6:ca:c4:e3:a0:c2:bf:
                    7c:16:70:6c:4c:6e:09:34:3c:b7:d7:48:2b:4d:d8:
                    e6:d8:9c:de:a2:cb:e6:53:22:4f:2c:4a:98:22:3b:
                    e5:4e:3f:e4:48:5b:f6:62:c2:a0:24:55:3a:ca:a8:
                    3b:fd:a5:9b:77:ea:44:fd:5e:d8:f1:4c:0e:ad:53:
                    f0:bf:a4:ec:6b:e5:b4:ed:24:62:cf:68:de:fd:54:
                    95:2e:f6:bb:bf:a7:a4:37:f2:df:f9:f4:b4:a0:09:
                    ac:83:ff:ce:f8:4b:37:c3:62:a8:90:fa:ab:65:b2:
                    1f:e5:95:18:5e:47:88:ac:68:26:d5:02:3a:e8:cc:
                    c3:14:6a:0e:c6:a6:4f:e8:98:1c:6b:ee:03:0d:f3:
                    ef:8b:4c:c5:9e:32:71:67:01:20:bf:5f:4b:85:4b:
                    4f:b3:38:a1:c8:63:17:24:46:2e:32:ce:31:a7:ac:
                    17:4a:19:7c:b4:d7:4d:df:fc:07:15:11:f8:56:23:
                    da:d0:ea:1e:83:fb:e6:3e:c4:5c:5a:04:cf:8a:e7:
                    14:9a:08:70:25:b1:d9:35:42:80:79:8b:d4:ce:d6:
                    74:95:b2:0b:c6:34:8a:39:5e:fb:43:25:d3:5c:ad:
                    5b:11:6e:b5:2f:f4:c2:a3:af:14:6a:9c:34:7c:f9:
                    11:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1F:21:71:72:0F:E7:19:CB:88:91:DA:FB:9B:CA:55:34:AA:A4:50
            X509v3 Authority Key Identifier:
                keyid:D2:5A:64:5B:A2:C0:88:2C:C1:32:2B:68:10:B6:0C:BB:EF:E3:79:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/767A17E06C05B5B1854014B624E682AB2D2796B2CB4556AE009812CEA525CACF/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/767A17E06C05B5B1854014B624E682AB2D2796B2CB4556AE009812CEA525CACF/0/D25A645BA2C0882CC1322B6810B60CBBEFE3793E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:08:4c:ce:06:92:7c:eb:dd:c1:aa:60:0e:85:e0:69:f2:85:
         24:03:44:50:2b:d9:e5:b0:dc:e0:9b:45:52:cd:70:81:a1:46:
         50:60:0b:fa:14:d0:14:f3:59:62:1d:81:a8:c5:41:1e:b9:f9:
         29:64:04:7b:e9:aa:f4:51:2d:91:9b:92:3e:38:51:95:58:36:
         21:16:3b:f5:e6:8d:d6:05:67:34:09:41:da:7e:cc:8f:ce:23:
         7a:95:8e:c1:5b:9b:de:24:e8:bd:4a:1b:64:ee:2f:17:2e:96:
         4b:41:7a:ee:33:44:d3:cf:b9:29:b6:0a:1a:93:fd:7b:55:89:
         42:e7:d5:6d:c5:cc:77:86:9f:bb:85:b0:0c:20:24:f4:3b:74:
         26:1f:e8:a0:71:bf:69:c9:b7:91:24:79:52:59:c6:7c:4e:6a:
         ea:61:2c:0f:e0:f8:30:ee:20:ec:e8:89:bb:f9:0d:a2:47:39:
         7d:f2:54:87:d9:b8:4f:48:99:93:bc:86:ac:33:f5:d9:f1:e5:
         1d:6e:42:8c:db:de:64:37:de:ae:e4:97:4e:45:6d:a4:0b:91:
         8d:39:86:a5:be:4f:d6:4d:4a:38:48:ad:f4:df:13:7c:c9:1b:
         e2:f6:46:84:99:8e:8f:2b:b7:6b:90:0c:57:03:18:51:fc:a3:
         40:b4:0a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----