Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83DB4CAEA55DA087AA6E13EFE013BD42794D930D0944C9BD49BFECF50D6D49F1/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.mft
File:                     C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.mft (raw, json)
Hash identifier:          sF76FiWtXsTBIeY4PRBNW9FBKY52lDM9t1KHcPCubmk=
Subject key identifier:   5F:B0:64:38:36:1C:4F:E9:61:84:D0:A1:D7:B5:7A:29:46:2D:C9:FD
Authority key identifier: C2:BB:38:3B:12:78:5F:FD:BA:9D:BD:68:D6:01:BD:3B:A9:3B:25:95
Certificate issuer:       /CN=C2BB383B12785FFDBA9DBD68D601BD3BA93B2595
Certificate serial:       457C67C9A2DEB4DB28819810C3847F7F28E14304
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83DB4CAEA55DA087AA6E13EFE013BD42794D930D0944C9BD49BFECF50D6D49F1/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.mft
Manifest number:          9E
Signing time:             Fri 28 Mar 2025 23:53:29 +0000
Manifest this update:     Fri 28 Mar 2025 23:48:29 +0000
Manifest next update:     Thu 03 Apr 2025 03:47:29 +0000
Files and hashes:         1: 323830333a343939303a313330303a3a2f34312d3431203d3e20323732393436.roa (hash: B38PCAFxkcf+RyEh3YCtXmhDqgR9Nvf6ILjFDn+Q68s=)
                          2: C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.crl (hash: qf5yqWffeyW7zKln7lWlEZieYc2E/vwJrZ3475N6GVI=)
                          3: 323830333a343939303a343330303a3a2f34382d3438203d3e20323732393436.roa (hash: rznUJ67lVgZdDQbyWjRxqVjxCfb6cfFcIS35IMiK8xs=)
                          4: 323830333a343939303a3a2f33322d3434203d3e20323732393436.roa (hash: vkULfNlBbsi2p11YuFdECEOQLit9/D49YGCx8b7AnVc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:7c:67:c9:a2:de:b4:db:28:81:98:10:c3:84:7f:7f:28:e1:43:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2BB383B12785FFDBA9DBD68D601BD3BA93B2595
        Validity
            Not Before: Mar 28 23:48:29 2025 GMT
            Not After : Apr  3 03:47:29 2025 GMT
        Subject: CN=5FB06438361C4FE96184D0A1D7B57A29462DC9FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:17:a6:fe:01:9c:6b:f0:88:8b:a6:41:40:23:
                    0e:c1:e1:34:50:a1:72:2c:7e:b1:ec:d4:1c:35:b5:
                    d4:c3:bd:1b:5c:22:b2:f3:e8:e8:e4:7b:39:70:04:
                    68:4f:47:80:26:06:06:0d:dc:af:fe:f0:da:37:24:
                    d5:18:90:48:fd:e5:b2:1d:91:44:62:37:b8:5f:e8:
                    79:e5:f5:dd:38:17:03:f8:63:5e:58:7b:08:44:14:
                    7d:19:22:13:64:ee:b9:6b:16:9c:dc:2e:50:c8:2f:
                    57:e0:57:7d:c8:d7:1b:6e:f4:3f:e3:72:54:bb:b4:
                    2e:37:f3:c9:68:2a:6d:7a:c3:d5:8e:95:d9:d9:10:
                    41:a4:49:d1:90:b6:3e:31:df:66:4d:2a:8a:2a:74:
                    4d:e6:0b:f6:ba:26:a1:b9:0b:07:b9:2a:6d:dd:42:
                    8f:1b:0b:50:99:82:31:39:b2:51:f6:e8:71:3a:22:
                    7f:f1:19:3e:3b:d5:e6:26:85:19:f3:66:c5:34:b0:
                    54:bb:8d:4d:f6:6b:9d:86:05:74:17:ef:5d:ef:0d:
                    c0:22:0e:af:54:74:e2:93:81:42:76:7e:f9:9d:ce:
                    53:bc:a9:92:47:85:64:5b:2e:59:16:fe:77:8c:d2:
                    94:bf:24:4f:ab:ce:5f:6c:85:dd:e0:41:ab:db:6f:
                    6f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B0:64:38:36:1C:4F:E9:61:84:D0:A1:D7:B5:7A:29:46:2D:C9:FD
            X509v3 Authority Key Identifier:
                keyid:C2:BB:38:3B:12:78:5F:FD:BA:9D:BD:68:D6:01:BD:3B:A9:3B:25:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83DB4CAEA55DA087AA6E13EFE013BD42794D930D0944C9BD49BFECF50D6D49F1/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83DB4CAEA55DA087AA6E13EFE013BD42794D930D0944C9BD49BFECF50D6D49F1/0/C2BB383B12785FFDBA9DBD68D601BD3BA93B2595.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:9a:bb:57:f2:df:f9:f0:e7:13:7c:93:44:21:34:9f:f2:6d:
         ad:cb:99:69:02:77:34:e5:bc:1f:42:0a:af:21:40:38:b9:7f:
         ac:2b:2f:8e:fb:3d:65:56:a7:9a:05:2f:65:57:11:97:da:d9:
         a9:68:0a:fb:dd:21:75:34:d3:fc:a0:ff:7b:c6:60:93:b1:92:
         64:e9:4c:a5:0a:44:4d:69:00:51:8b:30:08:80:0f:99:c1:16:
         63:ae:a7:4b:72:ab:66:f3:10:25:5b:bc:ed:17:5a:c6:e7:ac:
         07:24:1a:47:0d:fc:0c:86:43:73:89:70:4a:de:ca:2c:df:85:
         08:40:ab:ff:b8:38:9a:fc:41:07:29:b7:e4:91:59:7d:aa:0c:
         23:0b:8f:1f:bd:1a:31:8d:0d:41:85:2a:fd:27:4f:d2:9a:dc:
         40:0f:eb:49:9f:40:31:ec:55:94:bb:7d:16:51:38:4a:1c:95:
         26:89:97:ea:80:75:27:ec:70:08:96:de:7a:b2:67:d6:0e:19:
         48:d9:32:b1:b0:71:6d:51:12:68:52:bb:e6:69:7b:6c:80:2d:
         3d:48:6e:17:02:c0:15:b8:1b:09:c2:a7:2d:0c:f4:45:45:30:
         e0:58:df:94:0a:31:5d:3b:ec:64:61:75:02:7e:05:df:10:56:
         eb:c0:d3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----