Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.mft
File:                     CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.mft (raw, json)
Hash identifier:          N2CSJkrVf8heLUPoAz0w9Mid4+ji9OSQNccP049wjD4=
Subject key identifier:   80:22:50:EC:37:28:41:73:08:5B:A8:33:51:B6:C1:50:4D:EA:3C:26
Authority key identifier: CA:3F:AF:C2:E5:5B:DF:D3:3A:26:03:F6:83:9D:05:EC:F5:2A:2C:EC
Certificate issuer:       /CN=CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC
Certificate serial:       7AB07225CACD9C1EF1E7B97BC10E743A023FB157
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.mft
Manifest number:          C3
Signing time:             Fri 28 Mar 2025 12:06:35 +0000
Manifest this update:     Fri 28 Mar 2025 12:01:35 +0000
Manifest next update:     Tue 01 Apr 2025 17:17:35 +0000
Files and hashes:         1: 34352e3136322e39302e302f32342d3234203d3e20323633323434.roa (hash: Q4cKad9QGPlMLuod8irBnRQ23Ij1FG6fmlLA2b5ejtE=)
                          2: CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.crl (hash: grqfsWMEHS47RX4S8gDcSW4Eg7srDLj4Wiu8E99oQxg=)
                          3: 34352e3136322e38382e302f32342d3234203d3e20323731383932.roa (hash: Hz9/vHLG1cNfo19Iu2PJF0VUWd2uW+O0Ukul+4U4WMk=)
                          4: 34352e3136322e39312e302f32342d3234203d3e20323633323434.roa (hash: 03mX5v3MX2e6J6dQF7uHPGxH6VtKTluYipMmrR59FcY=)
                          5: 34352e3136322e38392e302f32342d3234203d3e20323633323434.roa (hash: qLKgn92Pyz7kDri8smsoul5kq00cZGFJqKwuYPi8cxs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b0:72:25:ca:cd:9c:1e:f1:e7:b9:7b:c1:0e:74:3a:02:3f:b1:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC
        Validity
            Not Before: Mar 28 12:01:35 2025 GMT
            Not After : Apr  1 17:17:35 2025 GMT
        Subject: CN=802250EC37284173085BA83351B6C1504DEA3C26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:51:60:b2:66:a8:7c:14:7d:49:83:70:1d:4d:
                    90:b9:6f:fb:50:25:61:9d:12:89:3b:27:0e:05:98:
                    c4:52:34:44:63:79:6b:fb:dd:76:74:19:13:5f:f2:
                    71:ed:af:f4:dd:f8:41:13:75:bb:57:19:ff:25:03:
                    82:b2:d3:bc:3e:0e:8c:94:99:91:64:80:fd:37:3b:
                    49:d9:86:8c:e4:6d:ae:a9:18:af:4f:34:dd:34:c7:
                    aa:10:94:41:17:cf:43:30:11:09:f4:6e:7b:f2:ec:
                    88:e6:ba:a3:aa:e0:a4:8b:c5:0e:39:4a:43:a1:7a:
                    82:53:c8:76:e6:8c:5e:55:76:0f:08:46:83:7a:73:
                    43:1c:18:e1:3c:65:16:87:81:49:7f:b9:d1:ff:ce:
                    fb:4b:c2:88:0e:4b:36:db:82:6e:55:16:02:11:5c:
                    61:39:56:2a:e3:51:6b:73:7e:b8:2e:53:48:7d:62:
                    a3:23:69:97:0f:32:50:68:4c:a1:54:03:11:a2:62:
                    78:1d:49:cc:1c:28:74:82:74:90:94:da:c3:bb:71:
                    19:5c:5e:4a:21:7d:d4:44:26:42:4b:15:6e:02:38:
                    22:84:f1:9e:53:7b:6a:0c:ee:46:17:a8:a1:46:17:
                    74:12:ea:bf:7a:95:cc:e4:d9:66:a1:db:91:3e:ce:
                    0f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:22:50:EC:37:28:41:73:08:5B:A8:33:51:B6:C1:50:4D:EA:3C:26
            X509v3 Authority Key Identifier:
                keyid:CA:3F:AF:C2:E5:5B:DF:D3:3A:26:03:F6:83:9D:05:EC:F5:2A:2C:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:bd:44:42:33:8a:fc:b4:d5:53:80:26:fb:b7:4e:b3:a8:3c:
         4b:9f:62:21:7a:b9:1b:96:3f:71:9d:14:97:04:e3:49:3e:4a:
         02:f6:7b:46:66:ee:66:99:50:ea:63:e1:b3:89:8d:50:0f:26:
         fa:76:8e:99:8b:9e:b1:cc:43:09:6b:1f:90:47:54:a2:46:16:
         fc:5e:cc:a6:80:9e:87:13:51:5b:24:c2:36:35:a2:b3:ef:66:
         c3:22:3d:75:59:c1:83:77:2b:8e:c5:4f:fd:b9:77:53:e6:82:
         6e:0a:a9:dc:f3:3a:13:7f:f9:70:54:89:f8:3c:1b:c9:d0:1a:
         36:da:42:74:3f:7e:3f:15:cb:9a:a7:3d:69:e4:8e:53:1f:22:
         c9:fe:3b:88:25:ff:b2:8b:1e:56:81:aa:a3:a3:b7:12:c9:65:
         ae:16:a8:2d:6d:34:a6:0a:02:20:dd:ba:b0:f5:17:9b:3b:8b:
         31:29:51:88:78:ba:cd:5b:c0:d1:43:5b:68:41:e2:8a:ae:a4:
         10:d1:ba:3a:e2:14:22:7b:5a:5c:b6:fc:6e:d7:10:a3:3c:e8:
         cb:0b:ca:9a:08:c9:31:e9:d8:1c:a2:51:0b:f6:7e:1e:13:35:
         9f:9f:95:80:fa:57:6a:da:3f:56:a3:39:71:00:bb:03:60:bb:
         c2:0f:01:81
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUerByJcrNnB7x57l7wQ50OgI/sVcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0EzRkFGQzJFNTVCREZEMzNBMjYwM0Y2ODM5RDA1RUNG
NTJBMkNFQzAeFw0yNTAzMjgxMjAxMzVaFw0yNTA0MDExNzE3MzVaMDMxMTAvBgNV
BAMTKDgwMjI1MEVDMzcyODQxNzMwODVCQTgzMzUxQjZDMTUwNERFQTNDMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpUWCyZqh8FH1Jg3AdTZC5b/tQ
JWGdEok7Jw4FmMRSNERjeWv73XZ0GRNf8nHtr/Td+EETdbtXGf8lA4Ky07w+DoyU
mZFkgP03O0nZhozkba6pGK9PNN00x6oQlEEXz0MwEQn0bnvy7IjmuqOq4KSLxQ45
SkOheoJTyHbmjF5Vdg8IRoN6c0McGOE8ZRaHgUl/udH/zvtLwogOSzbbgm5VFgIR
XGE5VirjUWtzfrguU0h9YqMjaZcPMlBoTKFUAxGiYngdScwcKHSCdJCU2sO7cRlc
XkohfdREJkJLFW4COCKE8Z5Te2oM7kYXqKFGF3QS6r96lczk2Wah25E+zg8XAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUgCJQ7DcoQXMIW6gzUbbBUE3qPCYwHwYDVR0j
BBgwFoAUyj+vwuVb39M6JgP2g50F7PUqLOwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85OEJGNUIzMEM4MzRBQkE1NkE2ODlBRUM2NjMxRjdDMkQ4
RTI1N0Q0QUQxOEE0MUZEQ0RDMDhDMTUxQUMyNkNDLzAvQ0EzRkFGQzJFNTVCREZE
MzNBMjYwM0Y2ODM5RDA1RUNGNTJBMkNFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQTNGQUZDMkU1NUJERkQzM0Ey
NjAzRjY4MzlEMDVFQ0Y1MkEyQ0VDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOThCRjVCMzBDODM0QUJBNTZBNjg5QUVDNjYzMUY3QzJEOEUyNTdENEFE
MThBNDFGRENEQzA4QzE1MUFDMjZDQy8wL0NBM0ZBRkMyRTU1QkRGRDMzQTI2MDNG
NjgzOUQwNUVDRjUyQTJDRUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAmvURCM4r8tNVTgCb7t06zqDxL
n2Iherkblj9xnRSXBONJPkoC9ntGZu5mmVDqY+GziY1QDyb6do6Zi56xzEMJax+Q
R1SiRhb8XsymgJ6HE1FbJMI2NaKz72bDIj11WcGDdyuOxU/9uXdT5oJuCqnc8zoT
f/lwVIn4PBvJ0Bo22kJ0P34/Fcuapz1p5I5THyLJ/juIJf+yix5Wgaqjo7cSyWWu
FqgtbTSmCgIg3bqw9RebO4sxKVGIeLrNW8DRQ1toQeKKrqQQ0bo64hQie1pctvxu
1xCjPOjLC8qaCMkx6dgcolEL9n4eEzWfn5WA+ldq2j9WozlxALsDYLvCDwGB
-----END CERTIFICATE-----
Generated at Wed Apr 9 13:42:03 2025 by rpki-client