Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87F5D26BEC6E7F7A647F76BC0689594595D89196B4CD8251EECE9AADF0A39DBB/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.mft
File:                     4C8316B6CF34B7C2F1C2C530327209662EFB61C7.mft (raw, json)
Hash identifier:          2Ly422T5CrwvgDeiWnjs+AEO7zMLP6+MU3x9p9sY+C8=
Subject key identifier:   D0:96:A6:F7:20:11:9B:6C:88:89:C4:21:20:4F:75:2D:DA:09:EE:3B
Authority key identifier: 4C:83:16:B6:CF:34:B7:C2:F1:C2:C5:30:32:72:09:66:2E:FB:61:C7
Certificate issuer:       /CN=4C8316B6CF34B7C2F1C2C530327209662EFB61C7
Certificate serial:       6631B239E632FA95FA4B75EE820F4871758360E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87F5D26BEC6E7F7A647F76BC0689594595D89196B4CD8251EECE9AADF0A39DBB/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.mft
Manifest number:          AB
Signing time:             Thu 30 Jan 2025 22:57:45 +0000
Manifest this update:     Thu 30 Jan 2025 22:52:45 +0000
Manifest next update:     Wed 05 Feb 2025 13:12:45 +0000
Files and hashes:         1: 3230302e3132342e3132362e302f32342d3234203d3e20323632323031.roa (hash: b14K+S8K3WkKx2kWPflv1ieXrfNpWVy1jSWeIHgc0As=)
                          2: 4C8316B6CF34B7C2F1C2C530327209662EFB61C7.crl (hash: SLSQPEPQnfA6q+4NBG7SPYiPaEpt1GJpyEp//L6Kf3Y=)
                          3: 323830313a303a3239303a3a2f34382d3438203d3e20323632323031.roa (hash: d+l1L+V//9cGDEhf0yVeNWeS6IsCWH9F8PAwJ6UgmFg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:31:b2:39:e6:32:fa:95:fa:4b:75:ee:82:0f:48:71:75:83:60:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C8316B6CF34B7C2F1C2C530327209662EFB61C7
        Validity
            Not Before: Jan 30 22:52:45 2025 GMT
            Not After : Feb  5 13:12:45 2025 GMT
        Subject: CN=D096A6F720119B6C8889C421204F752DDA09EE3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:2f:e4:35:46:8e:75:28:7b:a4:b8:ef:73:00:
                    c8:72:bc:0f:7f:be:ed:a0:d5:26:92:0e:8d:bc:2b:
                    50:d1:34:10:0c:52:6f:fb:ca:6e:f3:75:bb:0e:7c:
                    54:bb:4c:00:23:6f:e4:9a:c3:e4:89:d6:ba:ae:12:
                    c9:e0:b2:a5:ff:1e:c1:20:cb:c5:f1:59:73:be:cb:
                    ca:1e:13:68:28:89:52:0f:85:82:27:82:cc:4f:95:
                    5e:eb:bc:b1:f2:a1:60:8f:40:4d:47:53:92:27:04:
                    7f:85:a0:5e:c4:83:bf:4e:f1:ce:bd:2b:b0:87:25:
                    a8:ee:a6:98:d4:10:c1:05:0d:77:fa:e2:d9:04:b3:
                    12:a5:0b:e8:38:da:38:eb:e9:88:02:e9:0b:a7:8b:
                    79:c6:a7:12:e8:e8:05:a1:d8:67:24:9a:92:1f:a6:
                    39:d8:4f:76:ac:90:67:d0:f4:c9:4e:65:3d:74:64:
                    33:92:0a:ef:94:05:a7:09:28:4e:cd:f0:56:1c:5b:
                    c8:8f:c9:f8:3b:a9:06:0d:44:96:a8:26:d0:d3:23:
                    1f:9f:2a:71:98:5f:73:26:23:d3:2d:e5:72:df:99:
                    55:73:62:2a:5f:e9:bc:14:90:e4:43:c1:8d:db:63:
                    31:80:d9:4d:63:42:89:27:b5:a5:3b:27:51:2f:e0:
                    36:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:96:A6:F7:20:11:9B:6C:88:89:C4:21:20:4F:75:2D:DA:09:EE:3B
            X509v3 Authority Key Identifier:
                keyid:4C:83:16:B6:CF:34:B7:C2:F1:C2:C5:30:32:72:09:66:2E:FB:61:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87F5D26BEC6E7F7A647F76BC0689594595D89196B4CD8251EECE9AADF0A39DBB/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87F5D26BEC6E7F7A647F76BC0689594595D89196B4CD8251EECE9AADF0A39DBB/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:3d:2c:91:7c:7c:f4:75:7f:c9:ad:1f:4a:8a:98:da:2f:f0:
         56:75:2c:79:78:fa:f9:f4:a3:89:ed:a5:e3:7c:ab:70:68:53:
         57:02:aa:3c:4b:04:48:0f:8c:5c:db:57:80:3b:b7:bb:79:af:
         57:a7:50:77:da:91:55:8a:f0:fc:07:28:19:6d:01:7b:9a:4c:
         c9:2d:54:7a:c1:2c:7a:3f:97:35:3d:ea:e5:63:b5:19:c0:28:
         a1:36:be:e9:ba:3b:24:83:77:72:a4:92:3e:45:a9:0f:52:df:
         7e:76:ba:95:8e:47:f1:c9:14:b4:fe:b3:a0:67:13:47:cc:33:
         4f:e3:9e:eb:d7:3f:39:cc:1c:54:39:6a:47:0d:9b:b4:a6:2e:
         6b:8f:ac:f5:1e:a4:c2:e2:55:33:6a:27:7a:68:fe:aa:97:39:
         8b:a4:e9:c3:d9:4a:31:08:8c:91:fe:6e:1e:22:2c:62:19:a3:
         50:c4:f2:1f:c1:2b:3a:23:e1:43:3e:bc:cf:5a:76:00:d7:89:
         64:f3:18:9a:39:b3:d7:a2:1d:b4:a8:d3:6a:bb:96:8d:75:11:
         6f:13:54:be:3e:b0:58:51:7c:ba:c4:bc:67:95:3a:d8:56:fa:
         8c:71:66:09:f3:27:fc:aa:a3:ed:9f:a8:63:ee:5f:2e:b4:1f:
         42:f6:f9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----