Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft
File:                     2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft (raw, json)
Hash identifier:          4uB7MTiAjz827fIZLX4dk3SRqiF17rJb+cYKqH0L6v4=
Subject key identifier:   BE:8A:90:6F:7C:B3:94:91:72:B1:0F:9B:4D:FD:2B:0E:C4:31:09:DB
Authority key identifier: 2B:2C:D4:D6:D4:5E:AC:25:EE:97:D5:E6:6B:E9:38:EF:31:A6:16:86
Certificate issuer:       /CN=2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686
Certificate serial:       17E6B9A99D284EC229608C44A7346C9FB8EE5F1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft
Manifest number:          A6
Signing time:             Thu 30 Jan 2025 09:44:24 +0000
Manifest this update:     Thu 30 Jan 2025 09:39:24 +0000
Manifest next update:     Wed 05 Feb 2025 00:22:24 +0000
Files and hashes:         1: 2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.crl (hash: 0EgWFItx+Up24ZbYdn5WSxG7hP0JOjKt60aBudue4y0=)
                          2: 3230302e3130382e3139302e302f32342d3234203d3e20323639393238.roa (hash: YJOOBjTH0hY08zJKJByMwm97i+rXWmWEE2hfJKFGfag=)
                          3: 323830333a333265303a3a2f33322d3332203d3e20323639393238.roa (hash: p7gTah0BIRS9tk3a931JntsFdHOIFtDXe98Zg0Ippdo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e6:b9:a9:9d:28:4e:c2:29:60:8c:44:a7:34:6c:9f:b8:ee:5f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686
        Validity
            Not Before: Jan 30 09:39:24 2025 GMT
            Not After : Feb  5 00:22:24 2025 GMT
        Subject: CN=BE8A906F7CB3949172B10F9B4DFD2B0EC43109DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1f:23:ad:82:e2:94:9c:a8:60:46:c4:22:95:
                    9a:62:a5:e9:2b:8c:e9:88:87:f1:a4:0a:be:92:7e:
                    ec:fe:0d:95:da:43:12:05:8e:ce:6d:3d:56:8d:4b:
                    c8:3f:a9:0a:8e:0a:50:1b:4a:b0:c9:19:54:e4:b3:
                    1d:c1:69:43:39:92:36:77:f4:13:24:d9:c6:e5:e7:
                    c5:d1:72:6a:56:fd:71:c8:90:fd:b8:7f:a8:ba:b0:
                    4b:b9:61:fe:18:71:09:b8:f6:c0:01:e4:88:56:8c:
                    a6:2c:f0:58:50:d3:f2:a8:18:4f:ec:08:7f:b5:ae:
                    c4:92:71:15:50:52:03:e0:3a:ff:00:43:64:9a:92:
                    69:b8:cc:ac:f5:a1:8f:9b:d9:10:aa:50:f8:22:8d:
                    ec:23:af:09:83:be:cb:58:2f:af:72:61:44:54:bc:
                    b3:89:39:42:3a:bb:fa:1b:0a:a9:f9:f7:9a:2e:9e:
                    c7:b1:d0:40:b4:b3:40:db:97:e9:e8:2b:d4:22:fe:
                    fc:c9:be:86:53:c4:71:01:99:5b:83:68:6b:2b:99:
                    2c:00:42:68:0a:9c:74:c4:d3:e5:aa:82:98:a2:79:
                    74:41:c8:d6:2f:0b:e7:23:cc:df:3d:4f:d8:b6:ee:
                    3b:10:ae:ab:b9:36:27:42:06:51:ee:0c:d0:34:b9:
                    cb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8A:90:6F:7C:B3:94:91:72:B1:0F:9B:4D:FD:2B:0E:C4:31:09:DB
            X509v3 Authority Key Identifier:
                keyid:2B:2C:D4:D6:D4:5E:AC:25:EE:97:D5:E6:6B:E9:38:EF:31:A6:16:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:ce:66:38:68:b3:74:01:c2:4e:72:cf:9b:3e:bf:72:19:90:
         a9:57:9f:1c:32:51:5f:b3:4d:27:3b:8d:dc:5f:92:7e:51:de:
         74:d3:b2:13:0f:be:5e:01:b5:43:c2:07:6c:fa:ba:50:45:cf:
         29:b7:3f:f6:88:f9:fa:14:41:a5:4a:38:bc:86:d7:bd:8d:7d:
         e4:46:b2:6c:9d:70:0a:80:e8:0c:56:e6:fc:fc:8a:b8:e0:89:
         8d:40:a1:92:d6:e0:b7:02:aa:3c:02:c4:c6:27:28:f8:74:1c:
         f4:75:fe:c9:33:0f:21:57:10:ef:89:24:25:5d:84:2a:70:56:
         24:8c:1b:7c:e6:18:70:b3:a2:13:1f:5e:b1:c0:1f:bb:e6:2a:
         41:d3:16:b8:28:2a:8f:c5:b0:8b:c6:05:bc:a1:bb:ba:4b:94:
         87:17:44:a6:bc:f6:1c:8f:61:05:df:99:72:55:4c:01:03:59:
         47:c3:c7:bf:99:33:8d:a1:30:28:c4:fe:7e:07:c1:ec:aa:dd:
         5d:4e:2e:14:26:d2:2e:29:86:ae:43:0e:51:eb:04:5f:18:b1:
         fd:e2:96:4f:55:f0:fe:23:b2:47:8e:e7:b7:43:12:37:fa:4e:
         df:29:ff:e2:40:75:2e:3e:fe:fb:df:43:72:5b:66:89:f1:16:
         8a:42:4c:c5
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUF+a5qZ0oTsIpYIxEpzRsn7juXx4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkIyQ0Q0RDZENDVFQUMyNUVFOTdENUU2NkJFOTM4RUYz
MUE2MTY4NjAeFw0yNTAxMzAwOTM5MjRaFw0yNTAyMDUwMDIyMjRaMDMxMTAvBgNV
BAMTKEJFOEE5MDZGN0NCMzk0OTE3MkIxMEY5QjRERkQyQjBFQzQzMTA5REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSHyOtguKUnKhgRsQilZpipekr
jOmIh/GkCr6Sfuz+DZXaQxIFjs5tPVaNS8g/qQqOClAbSrDJGVTksx3BaUM5kjZ3
9BMk2cbl58XRcmpW/XHIkP24f6i6sEu5Yf4YcQm49sAB5IhWjKYs8FhQ0/KoGE/s
CH+1rsSScRVQUgPgOv8AQ2Sakmm4zKz1oY+b2RCqUPgijewjrwmDvstYL69yYURU
vLOJOUI6u/obCqn595ounsex0EC0s0Dbl+noK9Qi/vzJvoZTxHEBmVuDaGsrmSwA
QmgKnHTE0+WqgpiieXRByNYvC+cjzN89T9i27jsQrqu5NidCBlHuDNA0ucutAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUvoqQb3yzlJFysQ+bTf0rDsQxCdswHwYDVR0j
BBgwFoAUKyzU1tRerCXul9Xma+k47zGmFoYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84Qjg4NEY1QTlGQTQ3MjhFODYwOEEzRERGODIxODA4NDkx
M0I4QzE2QzdEMEZDOUZCMUUzODU3NEZERDE1NDU0LzAvMkIyQ0Q0RDZENDVFQUMy
NUVFOTdENUU2NkJFOTM4RUYzMUE2MTY4Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjJDRDRENkQ0NUVBQzI1RUU5
N0Q1RTY2QkU5MzhFRjMxQTYxNjg2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEI4ODRGNUE5RkE0NzI4RTg2MDhBM0RERjgyMTgwODQ5MTNCOEMxNkM3
RDBGQzlGQjFFMzg1NzRGREQxNTQ1NC8wLzJCMkNENEQ2RDQ1RUFDMjVFRTk3RDVF
NjZCRTkzOEVGMzFBNjE2ODYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCAzmY4aLN0AcJOcs+bPr9yGZCp
V58cMlFfs00nO43cX5J+Ud5007ITD75eAbVDwgds+rpQRc8ptz/2iPn6FEGlSji8
hte9jX3kRrJsnXAKgOgMVub8/Iq44ImNQKGS1uC3Aqo8AsTGJyj4dBz0df7JMw8h
VxDviSQlXYQqcFYkjBt85hhws6ITH16xwB+75ipB0xa4KCqPxbCLxgW8obu6S5SH
F0SmvPYcj2EF35lyVUwBA1lHw8e/mTONoTAoxP5+B8Hsqt1dTi4UJtIuKYauQw5R
6wRfGLH94pZPVfD+I7JHjue3QxI3+k7fKf/iQHUuPv7730NyW2aJ8RaKQkzF
-----END CERTIFICATE-----