Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.mft
File:                     4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.mft (raw, json)
Hash identifier:          gDTsLEGxBqB1AACDXs9mExJg6qki0BKS70kZLskCPhA=
Subject key identifier:   0C:B7:29:EF:B0:5A:C3:E1:44:0E:7D:96:AB:9F:D7:02:31:E5:79:34
Authority key identifier: 4A:AC:30:C2:DB:C3:1A:CD:C2:E2:45:55:F5:03:1C:3C:F6:BA:0D:EE
Certificate issuer:       /CN=4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE
Certificate serial:       3BE9EDD9AE6FCC4A3886A654A9CD31E03474E10E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.mft
Manifest number:          A4
Signing time:             Thu 30 Jan 2025 06:17:18 +0000
Manifest this update:     Thu 30 Jan 2025 06:12:18 +0000
Manifest next update:     Tue 04 Feb 2025 19:15:18 +0000
Files and hashes:         1: 4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.crl (hash: VBVTrjsR0uoMH4lz+2+aiAxyCbFtLJ8TbHiSFV2FtEE=)
                          2: 323830333a6536303a3a2f33322d3334203d3e20323637393133.roa (hash: fkONi8r4oi0aZNV/q4otCv/D2lSoU0doB/VUX8WXCSU=)
                          3: 34352e3137392e39322e302f32322d3234203d3e20323637393133.roa (hash: 70lvDBMAaQPsPDPESBJD2V5aGWDCOqjdXlGYyiTqg1U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e9:ed:d9:ae:6f:cc:4a:38:86:a6:54:a9:cd:31:e0:34:74:e1:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE
        Validity
            Not Before: Jan 30 06:12:18 2025 GMT
            Not After : Feb  4 19:15:18 2025 GMT
        Subject: CN=0CB729EFB05AC3E1440E7D96AB9FD70231E57934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:44:56:76:39:bb:4b:a0:39:32:65:e1:7a:fe:
                    40:d6:75:a0:12:59:66:c1:16:31:1d:d7:e3:55:68:
                    07:94:d9:3d:51:45:92:08:16:65:32:2a:ea:19:bf:
                    fe:7b:56:d2:6f:39:28:c8:2f:a4:5c:53:12:07:84:
                    33:87:47:11:80:d0:d1:c6:6f:da:3f:f5:b5:b3:03:
                    ea:dd:79:4d:bb:b8:d6:95:99:40:eb:09:4c:ce:b2:
                    94:64:c8:3e:76:59:b4:02:0f:63:42:4a:2b:8e:61:
                    fb:32:da:fe:ba:ce:88:a3:91:ca:cb:11:fc:9e:d0:
                    9e:26:47:fb:c9:02:da:65:44:9f:79:69:94:f5:bf:
                    4a:dd:ad:60:78:60:3b:42:7a:16:38:8c:57:d4:2b:
                    6a:05:fa:76:7a:14:c7:e4:04:02:e7:1d:b0:93:8f:
                    06:98:ea:bb:f4:5a:36:6d:a8:f8:f1:88:65:5b:c4:
                    bf:36:38:7d:45:22:30:60:6a:49:55:26:1d:4c:6f:
                    4b:ae:88:c0:cb:f7:35:ed:52:46:ab:cc:66:51:03:
                    c9:9f:48:91:02:15:de:ba:c9:a2:8b:50:06:3e:21:
                    16:30:c9:14:4c:a5:ac:88:d9:d4:7a:3b:c1:49:5b:
                    78:58:33:d5:22:77:3d:24:83:68:48:8a:d9:08:b9:
                    f3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B7:29:EF:B0:5A:C3:E1:44:0E:7D:96:AB:9F:D7:02:31:E5:79:34
            X509v3 Authority Key Identifier:
                keyid:4A:AC:30:C2:DB:C3:1A:CD:C2:E2:45:55:F5:03:1C:3C:F6:BA:0D:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:12:0c:8c:45:6a:c8:d8:f1:b8:d2:4e:ac:46:be:9c:aa:44:
         3c:69:ed:df:d8:46:c7:f8:04:0e:33:70:49:a2:7b:d7:83:77:
         43:c3:27:3c:aa:07:0f:f0:69:bd:91:0b:da:25:70:bd:9c:fa:
         de:39:73:7e:60:f4:c4:2e:76:5e:2e:4d:a7:e3:36:5f:ec:3f:
         ec:0c:7f:44:06:28:eb:3f:b7:a1:34:9f:14:c4:3c:03:89:db:
         50:4c:87:19:dd:3c:34:0a:e7:ea:63:7a:b3:e9:f7:b5:66:29:
         28:df:0d:16:22:99:03:fe:cf:df:9c:36:69:50:6c:c0:cc:39:
         ed:9c:2e:46:1c:a4:c7:2a:94:c2:dd:eb:52:c3:10:55:7f:51:
         d7:15:f2:50:2c:f7:4d:01:2f:0d:00:88:f0:3d:e0:5a:52:15:
         20:f0:d2:ce:ef:e3:80:0c:15:b8:50:84:03:72:5c:55:ae:cc:
         f8:56:e9:58:11:01:d4:a9:7e:5a:21:f9:f4:0a:20:f3:88:86:
         c5:70:ca:a1:71:38:56:17:bf:43:1b:1a:a6:20:d0:8c:7a:e1:
         de:f4:64:dd:18:03:29:bc:75:95:ce:82:f7:c0:84:13:7a:6f:
         32:8e:50:d2:05:b0:2f:15:82:26:bb:11:6f:84:8f:44:43:79:
         a6:b0:5f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----