Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20B458667C96654F31165297EE6CD80ABD8757464D5127B0AE34AFAB8A4B5F8C/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.mft
File:                     39DA2872E102D36A2456FA542BEBDF503603A4A9.mft (raw, json)
Hash identifier:          qwAybhgbHDg2P9ADbR5XSxP6lBov5bHp7BxhjBt0sss=
Subject key identifier:   AD:DD:18:86:E0:CC:D6:FE:8E:2C:70:EE:B6:5D:5D:63:34:7A:8A:94
Authority key identifier: 39:DA:28:72:E1:02:D3:6A:24:56:FA:54:2B:EB:DF:50:36:03:A4:A9
Certificate issuer:       /CN=39DA2872E102D36A2456FA542BEBDF503603A4A9
Certificate serial:       17C6BEF16A3A49B6E4643005B15323110DC3FC30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20B458667C96654F31165297EE6CD80ABD8757464D5127B0AE34AFAB8A4B5F8C/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.mft
Manifest number:          A8
Signing time:             Wed 29 Jan 2025 20:16:23 +0000
Manifest this update:     Wed 29 Jan 2025 20:11:23 +0000
Manifest next update:     Tue 04 Feb 2025 00:56:23 +0000
Files and hashes:         1: 3230312e3138322e3138382e302f32322d3234203d3e20323635383035.roa (hash: b0+3xTKEtPHTApp/RUpKxRT0kuh19Y4ZhBC3WdMUg+w=)
                          2: 323830333a323832303a3a2f33322d3332203d3e20323635383035.roa (hash: 4NpwxYiWaNANPjlIKezm5AyXVGAPvLe08dvddcityFg=)
                          3: 39DA2872E102D36A2456FA542BEBDF503603A4A9.crl (hash: RdQzs4TJ9qafjehVNNfdgC0RqEuuP2CCReWKdUYXZFQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c6:be:f1:6a:3a:49:b6:e4:64:30:05:b1:53:23:11:0d:c3:fc:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39DA2872E102D36A2456FA542BEBDF503603A4A9
        Validity
            Not Before: Jan 29 20:11:23 2025 GMT
            Not After : Feb  4 00:56:23 2025 GMT
        Subject: CN=ADDD1886E0CCD6FE8E2C70EEB65D5D63347A8A94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8f:b0:6d:ae:ae:3e:1c:ac:f9:a7:8a:37:05:
                    93:64:3f:d5:a2:b2:6e:3e:ad:0e:c8:20:1c:2a:02:
                    58:3a:5b:59:0e:aa:d0:1c:33:b9:1b:e9:97:ca:1a:
                    2d:b7:b5:cc:39:cb:90:13:37:94:51:fe:53:52:e1:
                    43:88:0a:d8:1d:f0:ba:7d:b0:6e:3f:19:36:32:f5:
                    af:3e:d0:2b:6e:ae:4d:fa:99:20:69:e6:51:7a:48:
                    85:e1:be:a9:03:e5:3e:27:be:47:ef:76:87:7d:79:
                    5d:8b:5f:22:63:eb:a7:90:94:25:6d:86:2b:f9:f9:
                    3c:92:f1:03:6f:3f:64:c2:39:48:d4:73:f1:71:6c:
                    13:20:be:3a:22:92:e0:ca:f3:da:ec:24:e6:18:e6:
                    af:ba:b1:0e:5b:f4:84:f8:3c:40:a0:08:a5:fe:18:
                    b3:f9:e7:d8:7b:fe:8c:88:5e:8e:45:e3:6c:43:d9:
                    5c:07:58:4c:d9:62:96:dc:0a:ff:1f:83:60:b6:0d:
                    28:e6:1b:8d:a6:68:53:38:e9:c2:df:6b:12:94:7e:
                    2f:fb:73:a6:66:6c:3c:2d:98:4f:48:32:71:c0:d6:
                    cf:e4:ec:70:8f:c9:e2:f8:4c:86:11:0c:41:e9:58:
                    cd:fd:1a:ae:27:11:9e:ce:25:5f:93:f5:f0:b6:b6:
                    23:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DD:18:86:E0:CC:D6:FE:8E:2C:70:EE:B6:5D:5D:63:34:7A:8A:94
            X509v3 Authority Key Identifier:
                keyid:39:DA:28:72:E1:02:D3:6A:24:56:FA:54:2B:EB:DF:50:36:03:A4:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20B458667C96654F31165297EE6CD80ABD8757464D5127B0AE34AFAB8A4B5F8C/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20B458667C96654F31165297EE6CD80ABD8757464D5127B0AE34AFAB8A4B5F8C/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:46:f8:00:af:d7:4d:f5:f9:bd:ea:28:01:f8:16:bb:70:71:
         f3:e9:63:7d:a3:da:dd:57:cc:30:eb:d7:08:20:7f:ec:bd:9c:
         c5:c0:a4:bc:e4:fa:79:48:41:9c:05:fe:1b:b3:8c:1b:55:9f:
         12:78:93:bb:88:d1:e1:19:c9:30:09:c6:e7:74:5e:da:70:77:
         db:25:ba:e9:b8:b3:95:6a:f9:3f:fe:bc:a4:7f:c6:01:43:ff:
         68:cc:5e:bf:24:5b:55:aa:33:e8:de:d2:08:ab:2e:9f:3f:24:
         03:90:64:d6:1d:09:02:17:dd:65:88:14:cc:4b:9a:43:22:89:
         71:77:82:e6:c1:38:be:65:4e:7f:f4:93:1d:c7:87:ef:a6:82:
         d6:20:02:b2:66:e5:5c:08:da:06:cc:97:eb:45:1c:1a:f0:26:
         ad:dd:12:4f:5d:5f:4f:e5:a7:26:b4:ea:6b:9f:7f:01:b7:f2:
         ad:e3:25:b5:01:30:99:ce:9f:81:3f:a4:9f:17:22:f1:c9:29:
         77:3e:9f:1e:56:d5:ad:41:64:c5:d5:26:65:16:49:4d:42:92:
         78:fd:49:f2:8b:27:dd:ac:f8:19:ed:a1:5d:8b:69:b3:4e:55:
         d9:b5:a7:3b:38:94:f5:66:bb:a7:ec:8f:80:1c:86:82:c9:fe:
         32:30:79:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----