Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A367470AFE6734E69072CE2E020B414FEE3FA1F7887B4509B81173481F55E9B/0/0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF.mft
File:                     0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF.mft (raw, json)
Hash identifier:          CBsVDToOx5GxG7QbfmJwNEavIEkQDVsT8XLUNR49EeI=
Subject key identifier:   20:1B:A6:14:AA:3B:06:B6:BB:D6:9E:A6:59:81:18:8A:A5:44:92:01
Authority key identifier: 0F:95:9E:8E:89:90:C6:B4:68:4A:74:EC:F5:D6:A8:A2:BE:22:B2:DF
Certificate issuer:       /CN=0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF
Certificate serial:       568944F6C7B92F3752E6C6AAF81324818DB5F4CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A367470AFE6734E69072CE2E020B414FEE3FA1F7887B4509B81173481F55E9B/0/0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF.mft
Manifest number:          B2
Signing time:             Wed 29 Jan 2025 09:59:56 +0000
Manifest this update:     Wed 29 Jan 2025 09:54:56 +0000
Manifest next update:     Mon 03 Feb 2025 20:36:56 +0000
Files and hashes:         1: 0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF.crl (hash: QIiXe1ctsm/s3+YqrsRVCHZnXABpo3n5oCQ74+LtPWU=)
                          2: 3137302e3233332e3132352e302f32342d3234203d3e20323634373635.roa (hash: xG7wRIVt8wiyxR9Ip9OXtVgb+2j5vB/PXHt8gU0/6Sk=)
                          3: 3137302e3233332e3132342e302f32342d3234203d3e20323634373337.roa (hash: sY6fD8qH5rght/ukvzuwyP1t9Y58Mvf+/Iqb9X6qJXE=)
                          4: 3137302e3233332e3132362e302f32332d3234203d3e20323634373635.roa (hash: 9IVDjsfSnczkaDs1n8YpLyx7MR8dNrNx0uwEmosI2Hk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:89:44:f6:c7:b9:2f:37:52:e6:c6:aa:f8:13:24:81:8d:b5:f4:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF
        Validity
            Not Before: Jan 29 09:54:56 2025 GMT
            Not After : Feb  3 20:36:56 2025 GMT
        Subject: CN=201BA614AA3B06B6BBD69EA65981188AA5449201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:80:49:3a:7a:2b:92:5c:6e:c9:4e:7d:51:9b:
                    aa:16:49:8a:61:07:a7:7f:cd:57:f7:ca:70:e6:30:
                    e4:7c:8f:ac:c4:bd:7d:19:58:4e:99:47:fa:dd:9a:
                    77:c7:aa:ca:4b:2a:8a:a2:2e:6c:4b:31:94:b5:6a:
                    d3:6c:83:f4:ab:80:d9:70:92:72:71:7f:e2:d9:7b:
                    98:2b:1f:e9:f6:25:d6:60:40:97:98:b6:6b:6c:10:
                    c2:ce:3e:b2:aa:38:34:2b:7a:a1:86:9e:d6:aa:4e:
                    b2:1f:96:90:bb:8f:96:bc:db:bd:b6:03:48:c7:4b:
                    81:97:5f:22:10:7a:ff:d8:97:81:8c:d5:ae:05:41:
                    09:ca:2d:81:4e:90:18:47:20:93:c7:90:ff:6b:0e:
                    ad:13:16:3d:01:6f:be:b7:9c:9b:03:bd:d8:50:3b:
                    ba:d5:0c:dc:f4:58:a9:18:f6:5a:44:c7:e1:14:78:
                    be:c7:43:1c:33:78:51:8a:78:1d:b9:69:6e:5b:79:
                    4a:e3:c3:ed:39:e2:1f:b9:10:08:69:27:4b:bd:58:
                    22:b4:6c:94:70:2c:91:3d:f4:fc:b5:36:d9:21:2d:
                    d6:07:a7:4e:ce:84:45:54:12:8c:18:ea:ed:62:c7:
                    d6:d4:5a:de:d0:2c:23:3e:0e:f5:81:df:16:5f:a0:
                    12:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:1B:A6:14:AA:3B:06:B6:BB:D6:9E:A6:59:81:18:8A:A5:44:92:01
            X509v3 Authority Key Identifier:
                keyid:0F:95:9E:8E:89:90:C6:B4:68:4A:74:EC:F5:D6:A8:A2:BE:22:B2:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A367470AFE6734E69072CE2E020B414FEE3FA1F7887B4509B81173481F55E9B/0/0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A367470AFE6734E69072CE2E020B414FEE3FA1F7887B4509B81173481F55E9B/0/0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ac:c6:79:b0:49:5a:6b:b1:7e:5e:b0:0d:06:10:37:35:d8:
         83:aa:c3:e2:90:42:df:1f:6c:d3:ff:ed:5a:e9:94:ba:46:b0:
         13:be:69:a4:e5:63:5e:24:c8:94:37:19:db:d0:16:12:35:01:
         1d:a6:e0:bb:16:02:a5:91:fd:d3:90:a4:55:37:c5:d3:33:57:
         c3:77:62:86:43:42:73:d7:ed:88:68:b4:6c:3c:1c:11:99:78:
         86:fb:f6:51:78:53:12:5e:d2:a7:46:71:3c:cb:d4:3d:5e:b2:
         32:19:87:0f:31:fc:3c:e2:f0:c6:cb:34:fa:cb:75:90:c8:a8:
         56:1e:9b:77:bf:38:40:b3:48:b0:d6:b3:32:37:9f:40:fe:a8:
         70:92:98:da:0e:69:5e:fa:13:9c:84:74:16:01:4b:4e:61:36:
         25:84:8f:09:91:19:9a:9e:7f:81:ad:60:0f:43:40:b4:8d:43:
         6a:3d:d5:de:2f:17:2a:f2:38:7f:1f:df:58:bf:1e:b4:aa:50:
         1d:7c:13:87:ab:dd:e0:a0:23:2e:57:6b:d9:86:01:cc:c6:b8:
         79:e6:88:37:1b:1c:51:80:53:4b:de:a6:82:44:6b:37:0f:37:
         e7:0f:60:64:f1:9d:43:f6:a0:5b:50:a6:0b:d4:4b:18:be:f4:
         d5:66:37:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----