Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/98B8039082392EEC18A02E434A8730B491087BE7.mft
File:                     98B8039082392EEC18A02E434A8730B491087BE7.mft (raw, json)
Hash identifier:          VJEHIA9oOFQpwjlg9sEUFybTFZTIQoan4kSbHt4TYwg=
Subject key identifier:   F2:A5:68:0A:4C:DF:F0:88:8C:6A:5B:EE:62:73:36:AC:6E:0E:F3:3B
Authority key identifier: 98:B8:03:90:82:39:2E:EC:18:A0:2E:43:4A:87:30:B4:91:08:7B:E7
Certificate issuer:       /CN=98B8039082392EEC18A02E434A8730B491087BE7
Certificate serial:       070E8A6C84F291365D033C31A4F294C9B37980C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B8039082392EEC18A02E434A8730B491087BE7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/98B8039082392EEC18A02E434A8730B491087BE7.mft
Manifest number:          C3
Signing time:             Fri 28 Mar 2025 08:09:27 +0000
Manifest this update:     Fri 28 Mar 2025 08:04:27 +0000
Manifest next update:     Wed 02 Apr 2025 11:17:27 +0000
Files and hashes:         1: 3139302e38332e3130342e302f32322d3232203d3e20323639393336.roa (hash: SdBy6bXYTPC3d1++pD+N2Qn+Aqzjb/wV4KKV5Z4uXzo=)
                          2: 3139302e38332e3130342e302f32322d3234203d3e20323637363834.roa (hash: OMPnfkN5egzd9PA+gyG20bSDLao2PFsMQrNqnr2I4BA=)
                          3: 98B8039082392EEC18A02E434A8730B491087BE7.crl (hash: 6SXQThgx4vZ0wHNcRYZhtkcQN7e6YkRDv6pmYavS7uI=)
                          4: 3139302e38332e3130342e302f32322d3234203d3e20323639393336.roa (hash: 1ioYRlDsi1+Lz/jX0AUqZ0YFFpdUqz5soO/JaWinRac=)
                          5: 323830333a616165303a3a2f33322d3438203d3e20323637363834.roa (hash: 6RpsALmCyh6fioxJSy2Yew0rQTJcmTJJdrTvpQPRDvU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:0e:8a:6c:84:f2:91:36:5d:03:3c:31:a4:f2:94:c9:b3:79:80:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98B8039082392EEC18A02E434A8730B491087BE7
        Validity
            Not Before: Mar 28 08:04:27 2025 GMT
            Not After : Apr  2 11:17:27 2025 GMT
        Subject: CN=F2A5680A4CDFF0888C6A5BEE627336AC6E0EF33B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:07:85:f2:1f:f1:f7:09:51:46:84:98:13:82:
                    e1:73:99:e6:4f:0c:f1:73:ec:74:de:f1:ae:9f:34:
                    ed:94:09:32:42:90:89:8e:6e:7f:a3:b6:40:93:23:
                    35:38:b2:99:a3:5a:74:ae:d4:ee:85:2e:ee:40:ff:
                    75:be:f9:55:59:bd:e0:03:42:b9:4f:60:0f:6d:70:
                    b8:be:20:37:19:fb:6c:29:ad:ce:97:64:42:20:2e:
                    62:5d:11:42:51:b9:cd:bd:8e:ce:31:18:96:24:49:
                    ed:a4:44:72:77:a7:80:b1:73:35:69:94:10:db:c4:
                    8c:99:a3:b5:1b:c1:b1:7e:12:c8:ca:a0:79:fd:55:
                    64:9a:5d:5e:99:06:35:fa:f6:84:22:ee:12:31:72:
                    34:74:9b:11:0d:d1:39:2d:be:27:41:41:86:77:33:
                    c9:f5:39:8e:7b:f8:81:a2:45:25:57:e7:a8:08:74:
                    5e:a9:fd:6f:21:44:bb:14:8e:f8:42:64:14:73:b1:
                    9a:fa:e7:8e:d1:aa:0a:5f:da:5a:1b:d0:d0:11:5b:
                    d7:c7:ba:97:8c:d5:47:52:42:6e:a8:ac:8a:c9:c0:
                    29:12:31:94:a7:1c:7a:4e:0b:58:bf:c2:37:4c:7e:
                    74:f8:e3:ca:9c:90:a2:c9:6a:a9:ea:b6:9c:70:f3:
                    1c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A5:68:0A:4C:DF:F0:88:8C:6A:5B:EE:62:73:36:AC:6E:0E:F3:3B
            X509v3 Authority Key Identifier:
                keyid:98:B8:03:90:82:39:2E:EC:18:A0:2E:43:4A:87:30:B4:91:08:7B:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/98B8039082392EEC18A02E434A8730B491087BE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B8039082392EEC18A02E434A8730B491087BE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/98B8039082392EEC18A02E434A8730B491087BE7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:59:6d:a8:2e:bc:38:f5:37:ae:4c:9a:e0:7b:ad:8d:4c:91:
         2b:c7:80:72:40:9a:62:a1:c7:69:00:08:ec:96:ec:cc:4d:af:
         68:37:0f:50:f8:ac:49:c0:93:d7:87:67:22:b0:b8:18:88:61:
         8c:86:c1:e1:14:be:a0:b1:f8:65:75:d0:d1:5f:40:63:2a:e3:
         cb:d5:84:4d:e0:06:3b:7d:60:b5:22:62:d2:44:17:cf:c9:ed:
         99:27:94:ba:ac:42:a5:c1:55:aa:f0:0f:c6:0f:cc:7b:f3:73:
         25:6c:61:69:1a:8b:f7:79:f6:df:54:d8:07:49:21:af:e0:6b:
         b8:af:21:75:6a:0c:fe:54:b9:01:cd:42:87:ae:17:b2:c6:60:
         0d:79:78:d6:d3:36:63:f0:87:d6:f0:f0:85:bf:81:f7:32:88:
         5e:3b:c7:c3:b1:6e:98:86:39:25:ec:82:12:69:85:d0:73:d0:
         24:7f:a4:9c:b6:e7:c9:4b:dc:a8:99:9e:4e:8c:75:fc:1f:ea:
         8b:45:92:60:18:2b:e6:5f:e2:d5:d2:4f:e3:bf:6e:6a:c1:97:
         60:72:4c:65:1f:1c:2d:51:bb:7c:81:f9:58:1d:c9:c0:a2:27:
         7b:29:67:9d:1a:4e:3a:e1:53:ef:de:f7:3d:f6:13:63:05:f3:
         4e:1a:30:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----