Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.mft
File:                     68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.mft (raw, json)
Hash identifier:          79ZjGcQnjXTdcvzqQdGoqWattLodxZqSZ9UdbKq5Jp8=
Subject key identifier:   84:FE:9D:E7:F6:66:AE:68:6D:3D:0D:0A:EA:C1:D5:2D:B0:62:8D:57
Authority key identifier: 68:C8:54:2A:3C:A3:8B:CC:76:73:F1:7E:9F:11:BA:5D:D5:1B:25:E4
Certificate issuer:       /CN=68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4
Certificate serial:       3F05E0CDD64D000F1591B08FFCC741BB179F7EE2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.mft
Manifest number:          CB
Signing time:             Fri 28 Mar 2025 15:18:22 +0000
Manifest this update:     Fri 28 Mar 2025 15:13:22 +0000
Manifest next update:     Wed 02 Apr 2025 12:00:22 +0000
Files and hashes:         1: 68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.crl (hash: kB+KmB/M/EsCrVC6E8KJV9V6L6Uyum8zwPHUAA46Btw=)
                          2: 3136382e3139372e3137322e302f32322d3234203d3e20323634373733.roa (hash: 3rfNOwpMTnnVLYvbkknBiFpW3dsqoeSfVXWluCnVzC8=)
                          3: 323830333a663063303a3a2f33322d3438203d3e20323634373733.roa (hash: sjk5WmWZhtFvw0r5J943zXsm8e6u2OyVoreaWqwp8pA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:05:e0:cd:d6:4d:00:0f:15:91:b0:8f:fc:c7:41:bb:17:9f:7e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4
        Validity
            Not Before: Mar 28 15:13:22 2025 GMT
            Not After : Apr  2 12:00:22 2025 GMT
        Subject: CN=84FE9DE7F666AE686D3D0D0AEAC1D52DB0628D57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:54:76:21:d8:30:f1:e3:c2:ab:77:3d:9c:30:
                    6c:04:bd:9b:a2:52:e3:a8:6f:cd:15:6c:5b:50:cf:
                    aa:77:fd:12:07:38:6c:52:04:b4:23:c6:82:cc:41:
                    d8:96:b2:b5:ad:99:d2:da:82:70:e3:2a:ed:d1:75:
                    71:c8:01:50:d7:90:b9:49:4d:db:61:0f:68:b8:c7:
                    b8:83:b2:fd:57:d1:2a:88:17:aa:c5:d2:6b:9d:83:
                    f1:26:e8:f8:b8:6e:51:0d:c3:55:0f:67:2c:b1:f3:
                    34:4b:eb:a3:17:73:58:0a:5a:60:76:47:5b:48:88:
                    89:e4:ab:b9:7d:84:03:6c:64:23:9e:41:b7:fc:5a:
                    14:e3:c1:c3:38:b6:63:e9:cf:eb:71:f7:a5:4e:6e:
                    60:f1:c1:45:c3:3f:3a:aa:ce:7d:3b:4d:e0:78:13:
                    2a:21:90:ab:a8:dd:68:b5:2b:73:b8:27:55:4d:fc:
                    38:a7:67:f9:f7:40:d2:c8:2b:2f:b5:88:94:f1:f8:
                    4e:9f:23:47:49:c8:74:43:d4:a9:17:fc:d7:c8:7d:
                    79:e3:2b:9e:6e:25:16:51:7c:de:07:c2:e4:6e:d1:
                    c4:cc:2d:19:a6:61:90:38:f7:73:0d:50:c9:b9:f4:
                    97:e0:06:05:e4:16:fd:ec:7c:45:e7:65:49:dd:81:
                    5c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:FE:9D:E7:F6:66:AE:68:6D:3D:0D:0A:EA:C1:D5:2D:B0:62:8D:57
            X509v3 Authority Key Identifier:
                keyid:68:C8:54:2A:3C:A3:8B:CC:76:73:F1:7E:9F:11:BA:5D:D5:1B:25:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:63:c4:1a:d7:57:27:11:16:e8:0b:91:c2:12:ff:a9:45:ff:
         71:d9:96:ef:65:11:9f:6e:3e:aa:8f:07:85:08:30:0f:e6:13:
         41:31:87:1d:c2:77:7a:27:a9:b6:5d:4c:70:e6:15:8e:3e:2d:
         bb:42:88:7e:54:3b:ea:59:1b:61:22:45:be:6d:33:84:34:bc:
         1e:15:e7:99:cc:eb:0e:1f:6d:51:ab:74:ba:b6:f8:d0:97:67:
         a8:44:47:12:a8:7d:53:d2:b2:a5:a1:c0:88:ff:cb:3f:66:31:
         57:0d:dc:bd:6a:d6:4c:61:f2:4a:a9:1e:9e:2b:4c:2c:65:6f:
         d9:80:ad:08:af:3d:6c:df:e5:73:12:9f:53:d1:74:78:b6:d4:
         fe:f3:90:a6:c2:ec:b3:09:12:3b:a9:3a:c0:ca:2e:00:a4:70:
         19:ee:9e:17:5e:a5:a1:a2:8a:3b:67:a5:0c:8b:8c:fd:a0:88:
         58:3a:f4:cd:0e:e1:83:3c:65:ca:7c:c4:2c:49:05:72:87:19:
         2a:c2:a7:66:d5:1c:ee:3f:3b:62:0f:a8:68:17:9d:ff:2e:48:
         57:0b:2d:72:a4:cc:d1:aa:76:9d:17:6f:c4:5d:31:8f:cb:3a:
         d5:9b:c6:ba:f4:03:4c:f0:59:cd:13:ec:d6:dd:c6:c6:6a:fa:
         d5:39:9b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:59:15 2025 by rpki-client