Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/223BFAFC2FA8134604556AE745EB5778F03F66599A0A28E194300C86D8387315/0/74A6C6DAF3A2921015035571DAA0FE9317086F2A.mft
File:                     74A6C6DAF3A2921015035571DAA0FE9317086F2A.mft (raw, json)
Hash identifier:          HOGtmhXLcPF/LibMLNRBHKlEysvAP6Zn/O8gMkJYcx8=
Subject key identifier:   F6:21:36:E9:2B:BD:CF:88:EA:F9:FA:4C:E8:1A:74:0A:AC:74:8F:82
Authority key identifier: 74:A6:C6:DA:F3:A2:92:10:15:03:55:71:DA:A0:FE:93:17:08:6F:2A
Certificate issuer:       /CN=74A6C6DAF3A2921015035571DAA0FE9317086F2A
Certificate serial:       09DD6891A6828CC8EEEEC041A4E9EAA5216746C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74A6C6DAF3A2921015035571DAA0FE9317086F2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/223BFAFC2FA8134604556AE745EB5778F03F66599A0A28E194300C86D8387315/0/74A6C6DAF3A2921015035571DAA0FE9317086F2A.mft
Manifest number:          AA
Signing time:             Thu 30 Jan 2025 14:17:12 +0000
Manifest this update:     Thu 30 Jan 2025 14:12:12 +0000
Manifest next update:     Wed 05 Feb 2025 13:00:12 +0000
Files and hashes:         1: 3139322e3233312e3132302e302f32332d3233203d3e20323633373138.roa (hash: 9gBeMP8I7ADEMXhopn2F4WPwan816X+HXWH3EPXZTW0=)
                          2: 323830313a31373a363030303a3a2f34382d3438203d3e20323633373138.roa (hash: CJpe5DYvzodxb+BsGeMRP9tOaO5eL1s5OJTHHM6VsMc=)
                          3: 74A6C6DAF3A2921015035571DAA0FE9317086F2A.crl (hash: RQcNZy+jEjmxKHxRZSrzWAVtcKP/qF5snjtXPTKSUY0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:dd:68:91:a6:82:8c:c8:ee:ee:c0:41:a4:e9:ea:a5:21:67:46:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74A6C6DAF3A2921015035571DAA0FE9317086F2A
        Validity
            Not Before: Jan 30 14:12:12 2025 GMT
            Not After : Feb  5 13:00:12 2025 GMT
        Subject: CN=F62136E92BBDCF88EAF9FA4CE81A740AAC748F82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4b:25:8e:72:81:8d:76:f7:86:b4:6d:c0:5c:
                    27:45:37:ef:4e:ac:31:c8:29:52:a7:e9:b2:ef:ab:
                    f8:52:7b:1f:0e:cb:fc:46:2e:6f:f5:98:19:d9:61:
                    7e:9f:58:c4:25:fb:d3:54:b2:1e:01:8c:1c:fd:91:
                    6c:bb:72:98:ad:33:2c:dd:61:92:db:f1:dd:10:54:
                    74:c2:57:1c:29:e2:d5:9a:5e:e9:5f:53:fc:d3:ec:
                    44:97:50:b4:77:58:77:b1:4d:81:81:fc:f2:5b:d3:
                    ed:29:55:81:26:e5:31:6c:0c:5d:c5:65:0b:30:f3:
                    c3:df:7e:8a:e7:ed:f3:e3:9d:bf:38:ee:dc:61:69:
                    22:7a:de:f1:49:8a:ce:74:f1:32:dc:cb:92:91:a6:
                    00:17:43:f3:26:7c:f9:82:ce:b3:54:da:ad:44:3a:
                    a4:b9:01:86:37:39:a2:f8:fd:32:2f:54:19:2c:6d:
                    21:fe:1c:72:24:31:62:de:f5:5b:e7:96:45:2f:38:
                    0f:d6:5d:0c:71:04:18:08:c7:c4:1d:78:e8:58:1b:
                    a5:c6:a4:1c:c5:a8:b1:f8:10:e3:96:0c:e6:e9:0a:
                    7d:aa:ea:08:f6:01:f9:17:aa:52:ef:1c:52:9d:cd:
                    91:0f:8e:21:f6:c6:2f:e7:09:b1:b7:bc:48:46:f3:
                    08:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:21:36:E9:2B:BD:CF:88:EA:F9:FA:4C:E8:1A:74:0A:AC:74:8F:82
            X509v3 Authority Key Identifier:
                keyid:74:A6:C6:DA:F3:A2:92:10:15:03:55:71:DA:A0:FE:93:17:08:6F:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/223BFAFC2FA8134604556AE745EB5778F03F66599A0A28E194300C86D8387315/0/74A6C6DAF3A2921015035571DAA0FE9317086F2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74A6C6DAF3A2921015035571DAA0FE9317086F2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/223BFAFC2FA8134604556AE745EB5778F03F66599A0A28E194300C86D8387315/0/74A6C6DAF3A2921015035571DAA0FE9317086F2A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:08:af:7d:62:0f:e7:4e:36:4a:b4:32:57:c3:b2:1c:99:7f:
         47:3d:a7:56:f2:41:43:c2:b0:60:dd:2f:c3:cb:97:c0:b7:68:
         62:f9:67:9e:bb:e8:4a:b9:6b:eb:55:f8:70:71:fb:9a:e6:ac:
         e4:6e:62:c0:cc:a1:98:8c:da:b6:67:d8:0a:a8:34:9d:5a:09:
         6b:12:a3:85:25:58:1e:68:d9:67:e7:43:6a:4d:b2:96:a1:9a:
         56:8e:e7:b6:25:e8:30:e5:0d:04:99:74:d0:7b:51:4b:fb:1a:
         d7:df:9f:e5:2d:66:69:96:47:25:1f:a8:4c:4e:82:e6:ee:bb:
         66:9b:d9:5b:a1:9a:35:d4:9a:2b:44:62:53:c0:a3:33:e4:94:
         1b:78:73:fe:f6:e9:65:11:79:8d:57:cb:62:20:12:f0:ca:fb:
         3d:6b:f5:6b:6e:6f:6b:a2:89:66:db:ec:c6:e9:a1:18:44:43:
         06:51:0f:c0:55:6e:a7:63:2d:91:c7:c3:1c:53:92:b6:1c:22:
         ad:db:f5:09:74:a6:68:9c:4e:79:44:6a:16:5c:9e:06:8d:4c:
         81:b0:f9:d9:24:be:41:da:4e:44:e5:b8:c0:5d:5d:cc:db:e4:
         46:1c:4f:84:5a:9e:e5:56:39:1c:de:f6:82:0b:4a:37:07:41:
         cb:b7:bd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----