Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8CA5C2B6FE4EA46710AE431C291F4701BF7F128BCF106F463C1B530C0E2405CD/0/4E10749617F934E1D6CBF359A4033D533EA752C4.mft
File:                     4E10749617F934E1D6CBF359A4033D533EA752C4.mft (raw, json)
Hash identifier:          3SP7qmQ0G2y1Xubg4bmG87E9x4c5WOUx0lkYpPmjutI=
Subject key identifier:   38:BD:07:51:96:57:0D:40:4B:B9:93:D2:29:9B:B0:11:63:E2:5B:AB
Authority key identifier: 4E:10:74:96:17:F9:34:E1:D6:CB:F3:59:A4:03:3D:53:3E:A7:52:C4
Certificate issuer:       /CN=4E10749617F934E1D6CBF359A4033D533EA752C4
Certificate serial:       63C22039FB1F2F6608BD6B587FE79FACB65E3D72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E10749617F934E1D6CBF359A4033D533EA752C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8CA5C2B6FE4EA46710AE431C291F4701BF7F128BCF106F463C1B530C0E2405CD/0/4E10749617F934E1D6CBF359A4033D533EA752C4.mft
Manifest number:          A4
Signing time:             Thu 30 Jan 2025 10:29:52 +0000
Manifest this update:     Thu 30 Jan 2025 10:24:52 +0000
Manifest next update:     Tue 04 Feb 2025 05:41:52 +0000
Files and hashes:         1: 34352e3136312e3136382e302f32322d3234203d3e20323730303231.roa (hash: yhUpxGsFr6sb4Ov5fNcACrxOFpzJIwPzdNhqU99lxbo=)
                          2: 4E10749617F934E1D6CBF359A4033D533EA752C4.crl (hash: C6p+VPMoffYQUJ/gmMNH4+LMCbfs8TQPX8Tbe9Df0II=)
                          3: 323830333a656561303a3a2f33322d3332203d3e20323730303231.roa (hash: WMdc8tvPGab5FM5zKaRg0zmts7BLb0iymU2tx6tK6Gs=)
                          4: 34352e3136312e3136392e302f32342d3234203d3e203238303933.roa (hash: 1pIemd+BUfg/bwoWqTivx+pbsb/qOny0IPBawV34Wbs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c2:20:39:fb:1f:2f:66:08:bd:6b:58:7f:e7:9f:ac:b6:5e:3d:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E10749617F934E1D6CBF359A4033D533EA752C4
        Validity
            Not Before: Jan 30 10:24:52 2025 GMT
            Not After : Feb  4 05:41:52 2025 GMT
        Subject: CN=38BD075196570D404BB993D2299BB01163E25BAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2b:75:0f:9e:fc:a0:55:78:77:a7:ac:19:a4:
                    22:be:d0:e4:39:97:cb:9e:da:d1:69:5f:41:37:d1:
                    d4:2c:61:58:db:a2:22:02:10:e7:8e:e4:23:a7:06:
                    67:fa:81:f5:f4:0a:85:76:ba:f4:e7:89:68:94:c7:
                    9d:75:34:77:bb:a9:2f:83:b7:c4:6b:58:db:38:f9:
                    3a:6f:13:2d:42:60:bf:c6:6e:3d:0e:83:76:87:cf:
                    2c:78:88:84:14:a2:bc:58:48:2c:55:4f:b3:5a:1f:
                    5a:6f:c9:71:85:f4:54:98:01:e6:b0:d1:95:25:9a:
                    9c:ba:52:3e:a4:46:b8:1d:1e:fc:a0:a8:d9:7b:8a:
                    c7:dd:cd:e9:05:86:ce:94:0a:35:1f:9d:39:10:5c:
                    ba:b3:3a:7f:1b:b2:c9:20:a2:98:0d:ea:59:fd:9c:
                    30:a5:16:ff:8a:a2:9c:48:95:ee:37:2e:32:a6:74:
                    2d:c4:4d:a4:53:9a:fe:19:96:c8:c3:ba:c6:ea:b6:
                    02:6b:80:27:f5:91:20:9e:fc:48:23:e7:ff:a0:59:
                    45:96:77:d6:9c:e6:a8:a9:00:fd:e7:fe:29:eb:94:
                    27:6c:e8:4e:aa:f7:54:89:dc:61:ae:0c:23:df:05:
                    a3:03:a6:8a:af:4c:97:93:86:af:10:d0:80:c9:58:
                    40:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:BD:07:51:96:57:0D:40:4B:B9:93:D2:29:9B:B0:11:63:E2:5B:AB
            X509v3 Authority Key Identifier:
                keyid:4E:10:74:96:17:F9:34:E1:D6:CB:F3:59:A4:03:3D:53:3E:A7:52:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8CA5C2B6FE4EA46710AE431C291F4701BF7F128BCF106F463C1B530C0E2405CD/0/4E10749617F934E1D6CBF359A4033D533EA752C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E10749617F934E1D6CBF359A4033D533EA752C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CA5C2B6FE4EA46710AE431C291F4701BF7F128BCF106F463C1B530C0E2405CD/0/4E10749617F934E1D6CBF359A4033D533EA752C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ed:24:97:72:f0:24:ac:0f:61:31:a9:d2:7b:d1:f5:03:ce:
         3b:5e:e7:87:ce:ac:37:14:67:53:9e:bb:c4:79:43:43:a4:f6:
         04:f8:81:7d:9e:b9:06:a6:1b:5a:af:0e:b2:17:ed:6b:2b:3c:
         ed:ec:6e:ff:e9:c9:28:a6:62:c6:c5:f4:99:bd:53:72:56:5b:
         50:13:12:1c:10:a8:85:0c:25:31:29:4d:ff:9d:2f:d5:03:1e:
         00:59:f6:4a:59:95:8a:fc:05:ba:b1:43:fd:e0:05:00:94:78:
         36:c9:f0:aa:a1:b3:a8:51:ec:cb:41:43:a8:53:6b:96:84:e0:
         29:b6:80:ce:18:c2:64:a1:42:94:79:77:f3:93:a1:3b:10:c4:
         14:24:a9:af:53:21:72:4a:cf:3d:ec:2f:bd:e1:5d:ca:3c:de:
         f6:2b:b9:65:25:73:b9:d7:79:00:a8:9b:15:f2:9f:b3:3c:b3:
         92:09:81:8e:0f:c1:34:4c:d8:ba:1d:79:f0:78:49:92:8c:32:
         f3:bd:12:d4:2d:4d:d1:0c:01:a7:a3:e4:22:37:12:1e:45:0e:
         42:c7:ba:d8:24:3b:8e:ca:6a:80:1a:46:62:90:50:31:ac:e2:
         68:8c:c1:a6:4c:10:ea:f3:92:51:27:eb:fe:98:29:9f:6d:88:
         de:7e:04:82
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUY8IgOfsfL2YIvWtYf+efrLZePXIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEUxMDc0OTYxN0Y5MzRFMUQ2Q0JGMzU5QTQwMzNENTMz
RUE3NTJDNDAeFw0yNTAxMzAxMDI0NTJaFw0yNTAyMDQwNTQxNTJaMDMxMTAvBgNV
BAMTKDM4QkQwNzUxOTY1NzBENDA0QkI5OTNEMjI5OUJCMDExNjNFMjVCQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXK3UPnvygVXh3p6wZpCK+0OQ5
l8ue2tFpX0E30dQsYVjboiICEOeO5COnBmf6gfX0CoV2uvTniWiUx511NHe7qS+D
t8RrWNs4+TpvEy1CYL/Gbj0Og3aHzyx4iIQUorxYSCxVT7NaH1pvyXGF9FSYAeaw
0ZUlmpy6Uj6kRrgdHvygqNl7isfdzekFhs6UCjUfnTkQXLqzOn8bsskgopgN6ln9
nDClFv+KopxIle43LjKmdC3ETaRTmv4ZlsjDusbqtgJrgCf1kSCe/Egj5/+gWUWW
d9ac5qipAP3n/inrlCds6E6q91SJ3GGuDCPfBaMDpoqvTJeThq8Q0IDJWEAlAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUOL0HUZZXDUBLuZPSKZuwEWPiW6swHwYDVR0j
BBgwFoAUThB0lhf5NOHWy/NZpAM9Uz6nUsQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84Q0E1QzJCNkZFNEVBNDY3MTBBRTQzMUMyOTFGNDcwMUJG
N0YxMjhCQ0YxMDZGNDYzQzFCNTMwQzBFMjQwNUNELzAvNEUxMDc0OTYxN0Y5MzRF
MUQ2Q0JGMzU5QTQwMzNENTMzRUE3NTJDNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80RTEwNzQ5NjE3RjkzNEUxRDZD
QkYzNTlBNDAzM0Q1MzNFQTc1MkM0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOENBNUMyQjZGRTRFQTQ2NzEwQUU0MzFDMjkxRjQ3MDFCRjdGMTI4QkNG
MTA2RjQ2M0MxQjUzMEMwRTI0MDVDRC8wLzRFMTA3NDk2MTdGOTM0RTFENkNCRjM1
OUE0MDMzRDUzM0VBNzUyQzQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB37SSXcvAkrA9hManSe9H1A847
XueHzqw3FGdTnrvEeUNDpPYE+IF9nrkGphtarw6yF+1rKzzt7G7/6ckopmLGxfSZ
vVNyVltQExIcEKiFDCUxKU3/nS/VAx4AWfZKWZWK/AW6sUP94AUAlHg2yfCqobOo
UezLQUOoU2uWhOAptoDOGMJkoUKUeXfzk6E7EMQUJKmvUyFySs897C+94V3KPN72
K7llJXO513kAqJsV8p+zPLOSCYGOD8E0TNi6HXnweEmSjDLzvRLULU3RDAGno+Qi
NxIeRQ5Cx7rYJDuOymqAGkZikFAxrOJojMGmTBDq85JRJ+v+mCmfbYjefgSC
-----END CERTIFICATE-----