Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.mft
File:                     8EC1CB2683B25FA680C1E3BB66561D382F62547C.mft (raw, json)
Hash identifier:          zzm/SuBGfdbuRH6EXCp09C2o4z724l/5PD+a54G0QHE=
Subject key identifier:   4F:BC:DF:51:67:93:57:2A:58:67:88:7D:AD:51:10:C7:02:FD:A3:07
Authority key identifier: 8E:C1:CB:26:83:B2:5F:A6:80:C1:E3:BB:66:56:1D:38:2F:62:54:7C
Certificate issuer:       /CN=8EC1CB2683B25FA680C1E3BB66561D382F62547C
Certificate serial:       65FAEDF019A8F15110442B2FDD366257A292A56C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.mft
Manifest number:          A6
Signing time:             Thu 30 Jan 2025 09:24:12 +0000
Manifest this update:     Thu 30 Jan 2025 09:19:12 +0000
Manifest next update:     Tue 04 Feb 2025 16:04:12 +0000
Files and hashes:         1: 3138392e39302e3232382e302f32332d3234203d3e203237393838.roa (hash: aIjFNB2jcUm3XEjjhdPtfAKGmpHujeW+bdgVk42UbtQ=)
                          2: 3138392e39302e3233302e302f32342d3234203d3e20323732303330.roa (hash: VNhMidyCLTokS0zWWrdf2jlDE7PZjO41PiK0yLIcnic=)
                          3: 323830333a383165303a3a2f33322d3332203d3e20323730303535.roa (hash: dNQMubodO7AxlqZf4AvwUwzwERgztFoOsCzmV3J9E/c=)
                          4: 8EC1CB2683B25FA680C1E3BB66561D382F62547C.crl (hash: dbnxRwwrYdoxYf6K8Mg5Y2swaLq7eU2sl3POq51h5xs=)
                          5: 3138392e39302e3233312e302f32342d3234203d3e20323730303535.roa (hash: 4GOHHvX0exbW/jW3fUXIAUB9V7u96yNaYrfaa2+Dzvc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:fa:ed:f0:19:a8:f1:51:10:44:2b:2f:dd:36:62:57:a2:92:a5:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EC1CB2683B25FA680C1E3BB66561D382F62547C
        Validity
            Not Before: Jan 30 09:19:12 2025 GMT
            Not After : Feb  4 16:04:12 2025 GMT
        Subject: CN=4FBCDF516793572A5867887DAD5110C702FDA307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a2:78:27:f6:5b:bb:47:18:6d:db:75:b8:e2:
                    05:37:c7:68:e2:e7:e3:2a:7c:7b:c6:06:84:7c:43:
                    69:4a:15:02:95:f0:cd:14:75:be:b0:1c:5f:4b:ea:
                    99:19:24:51:53:47:ca:54:d7:83:15:8a:be:e2:04:
                    a1:41:5f:23:9b:d2:96:8f:43:81:fc:a2:58:f0:7b:
                    8a:98:9e:5e:3f:54:48:a2:bb:c6:52:0a:74:24:4a:
                    b9:98:4d:db:c3:1c:aa:7e:ed:96:2c:01:45:a6:4a:
                    5f:c9:d7:4a:1e:16:9e:23:80:e7:e1:50:29:f5:50:
                    52:c3:9b:c4:82:ed:86:64:db:d0:85:5b:0d:19:21:
                    9b:e6:75:3d:59:dc:58:3a:c0:fb:6d:8c:3b:94:e9:
                    dd:f8:d6:e3:6a:6f:ef:86:83:62:5f:c3:07:c3:6e:
                    18:70:a2:d2:a3:f7:74:80:02:6a:84:d8:3c:17:11:
                    6c:dd:40:ef:9d:20:b5:fd:41:25:d9:89:5c:32:4e:
                    87:79:da:4e:b2:1b:67:d5:4c:4b:fb:44:90:a9:e9:
                    81:66:ff:fe:58:4c:c6:fc:e4:2f:48:d4:2b:03:5b:
                    b6:df:26:5d:7d:d5:d9:9a:d4:8f:30:60:ad:5f:ce:
                    48:d2:1d:4b:6e:25:cf:19:35:78:2f:52:1f:24:90:
                    ed:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BC:DF:51:67:93:57:2A:58:67:88:7D:AD:51:10:C7:02:FD:A3:07
            X509v3 Authority Key Identifier:
                keyid:8E:C1:CB:26:83:B2:5F:A6:80:C1:E3:BB:66:56:1D:38:2F:62:54:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:a5:9a:60:b2:8a:27:72:30:9c:24:76:36:3f:5a:a9:11:c7:
         36:d3:47:6a:15:a1:f6:65:49:07:44:27:e0:fd:2d:bb:85:02:
         5a:12:df:c9:92:1f:c6:65:f0:63:c7:6e:57:3d:23:3d:cd:4a:
         0f:0f:5b:45:ab:a7:9d:93:dd:9e:94:d7:b8:2b:cb:74:94:a8:
         69:67:1e:29:de:a6:3e:a1:a0:85:9a:76:da:47:eb:2a:24:1f:
         34:cb:4d:a4:8e:00:44:38:69:fd:6f:4d:1b:27:c2:59:74:d5:
         dc:f8:6b:09:24:95:dd:bc:25:c0:aa:42:0b:10:bc:54:d8:53:
         15:6e:23:bf:e7:c9:eb:ae:6e:c3:f7:2a:e3:fd:d3:94:92:56:
         52:b6:2b:e9:68:54:e9:c3:9f:37:4a:b6:54:c7:ce:c0:93:81:
         aa:e7:65:7a:7b:e2:47:6a:16:b6:35:ff:7c:8f:8a:06:27:07:
         60:38:83:d7:fb:fa:ef:ff:35:c3:37:ff:3e:53:38:fd:13:1c:
         66:16:67:7c:ff:29:92:04:9c:c5:d7:0c:b2:9a:a6:f0:22:8a:
         f6:af:e1:82:79:46:dd:fd:84:4a:e2:cc:01:07:51:7c:9d:9f:
         54:e3:58:70:74:9e:2a:f7:ab:c1:44:f3:a7:7c:1f:97:07:63:
         21:df:17:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----