Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.mft
File:                     31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.mft (raw, json)
Hash identifier:          0i6hr2l4+EoqpJF3NNJnTc4ANDLoAIaPzNqvsnJZUvQ=
Subject key identifier:   95:1D:4F:DB:E1:49:8B:C0:E4:1E:07:D9:5F:7F:0B:B3:45:4A:EB:DD
Authority key identifier: 31:DB:F2:C4:90:8B:5E:E6:D3:D3:4A:E4:DE:B8:17:0B:E6:2F:23:A9
Certificate issuer:       /CN=31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9
Certificate serial:       6B9B0CB7934BBC5DF816611D4F19AE182302B586
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.mft
Manifest number:          C5
Signing time:             Fri 28 Mar 2025 10:25:42 +0000
Manifest this update:     Fri 28 Mar 2025 10:20:42 +0000
Manifest next update:     Wed 02 Apr 2025 12:10:42 +0000
Files and hashes:         1: 31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.crl (hash: M6h+YTtTkk69d7MUtXBA5yOGpbtBxYzScdpCKH/QTbk=)
                          2: 323830333a633339303a3a2f33322d3438203d3e20323733303133.roa (hash: lDnjpbO7/tGbG8jh0+fryDKYSvl34wfFaaYjg+KmMs0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:9b:0c:b7:93:4b:bc:5d:f8:16:61:1d:4f:19:ae:18:23:02:b5:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9
        Validity
            Not Before: Mar 28 10:20:42 2025 GMT
            Not After : Apr  2 12:10:42 2025 GMT
        Subject: CN=951D4FDBE1498BC0E41E07D95F7F0BB3454AEBDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:71:08:fb:3c:c7:6f:28:39:bc:c5:54:ad:a6:
                    c5:dd:a3:40:af:03:9d:70:2a:94:61:66:54:34:13:
                    a8:00:a0:59:59:2e:dd:62:11:59:ad:f4:92:02:f4:
                    89:e7:66:fc:72:82:26:9b:84:56:c2:af:cf:9b:39:
                    79:10:92:c5:bd:79:97:b1:39:a5:06:ae:4d:53:a2:
                    a9:3e:f1:af:1b:6b:41:b4:33:06:66:ca:ce:2e:ab:
                    09:43:70:95:f6:b4:b7:ef:6e:d0:ad:9f:af:25:3f:
                    67:86:6c:45:8e:b7:16:c6:23:6d:cc:f4:17:c7:2f:
                    c7:42:55:da:b8:6a:d3:3e:38:17:f8:9b:9a:a8:7d:
                    d9:ad:19:92:c3:c1:42:64:ce:20:91:d4:09:da:ce:
                    3f:30:46:c7:76:56:60:c6:13:f8:3f:ce:dd:8d:2d:
                    1f:08:ac:b9:19:f4:71:5b:c1:be:57:2e:53:dc:88:
                    53:b3:fe:3e:e4:b1:a2:f6:e8:fc:c2:94:ad:1d:be:
                    45:f4:04:75:c5:2d:18:2b:c4:c6:88:4e:80:46:29:
                    64:09:bd:90:44:c6:05:07:54:24:05:70:f8:9e:d0:
                    4c:c6:68:de:48:29:94:ba:bc:c0:d0:29:52:37:71:
                    38:65:59:c7:5e:39:3e:63:97:a2:28:e1:00:68:3b:
                    fc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:1D:4F:DB:E1:49:8B:C0:E4:1E:07:D9:5F:7F:0B:B3:45:4A:EB:DD
            X509v3 Authority Key Identifier:
                keyid:31:DB:F2:C4:90:8B:5E:E6:D3:D3:4A:E4:DE:B8:17:0B:E6:2F:23:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:cf:90:01:ff:c0:3d:4b:8d:18:ab:da:b2:95:ae:ae:a1:22:
         c6:56:28:84:f1:cc:7e:98:80:35:25:cf:bc:c9:ae:dc:4f:73:
         c7:85:46:f7:cf:cb:ac:e6:e5:2a:60:42:06:75:06:b9:d5:b9:
         48:77:75:d1:4d:7d:f4:67:80:22:a3:4e:d1:dc:d6:ba:c5:a9:
         af:e2:9f:0d:4e:dc:e6:3a:a1:fc:02:6d:e4:5d:65:a3:4a:7a:
         79:01:ad:16:74:28:e2:25:b8:ab:28:eb:be:86:9f:9a:54:9d:
         7e:88:a0:90:c3:53:44:fe:74:0a:bd:1d:a2:3d:81:0f:1a:8e:
         e3:11:67:4f:f0:ef:62:6e:08:53:97:a3:aa:66:1f:9a:30:96:
         a3:a0:35:0d:fe:1c:fc:cd:34:1a:12:58:6c:c1:82:c4:fc:d7:
         2d:46:40:6a:ac:50:55:0b:1e:a3:98:18:be:92:69:2f:0c:20:
         7c:01:26:f3:4f:44:ff:66:54:00:da:91:fc:77:88:b9:a8:52:
         12:60:14:0b:df:1a:36:cc:9e:48:5e:f9:40:58:b7:f8:ec:bb:
         d2:ab:bd:f8:b7:f7:17:04:f2:87:80:57:4a:2f:15:69:ff:9e:
         e5:e2:82:36:38:8a:67:6f:3a:36:3e:b9:2b:aa:99:8d:8a:72:
         1a:f8:bb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----