Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E42CBA476FC29B5B2D6EFD2BD6FC7783B45E1DE3AF8CA0321FCB343A6CDF7B8/0/C556AA3CC16346423FD48947E61ED84B443C6BD6.mft
File:                     C556AA3CC16346423FD48947E61ED84B443C6BD6.mft (raw, json)
Hash identifier:          kSExHZaqiI12FmvK4qZjrgnKP33DryBfGJGxDamJc2c=
Subject key identifier:   8C:70:F8:F4:5D:E3:F5:A2:41:36:F6:B0:7A:A6:AB:F1:BF:D4:4D:8E
Authority key identifier: C5:56:AA:3C:C1:63:46:42:3F:D4:89:47:E6:1E:D8:4B:44:3C:6B:D6
Certificate issuer:       /CN=C556AA3CC16346423FD48947E61ED84B443C6BD6
Certificate serial:       73C4F84E1C28CFC3CD636A2841A7A372BB5C9269
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C556AA3CC16346423FD48947E61ED84B443C6BD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8E42CBA476FC29B5B2D6EFD2BD6FC7783B45E1DE3AF8CA0321FCB343A6CDF7B8/0/C556AA3CC16346423FD48947E61ED84B443C6BD6.mft
Manifest number:          A0
Signing time:             Thu 30 Jan 2025 08:03:25 +0000
Manifest this update:     Thu 30 Jan 2025 07:58:25 +0000
Manifest next update:     Tue 04 Feb 2025 05:40:25 +0000
Files and hashes:         1: 34352e3136312e3131322e302f32322d3234203d3e20323636383931.roa (hash: am3SqkSm09poBdZvr0XCrvunJExC8oIcb4ZHiYJYC34=)
                          2: C556AA3CC16346423FD48947E61ED84B443C6BD6.crl (hash: qlxpIyzQJXZITpzyRd6t1o3WYnxxhh9MXW137fshPPA=)
                          3: 323830333a363661303a3a2f33322d3438203d3e20323636383931.roa (hash: MIXGErY+axR9oipaULZ3C9avYqGxYVOcoTDEwq24wrM=)
                          4: 34352e3136312e3131322e302f32322d3232203d3e20323636383931.roa (hash: /foEGlS4pdCvAO5Rqq0zozsx+YmfkTyhwjOUzhrkQds=)
                          5: 323830333a363661303a3a2f33322d3332203d3e20323636383931.roa (hash: ApD7YjMWGqCa1w0zxoLUfJXFahY97gEGiU9Avz1dDmE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c4:f8:4e:1c:28:cf:c3:cd:63:6a:28:41:a7:a3:72:bb:5c:92:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C556AA3CC16346423FD48947E61ED84B443C6BD6
        Validity
            Not Before: Jan 30 07:58:25 2025 GMT
            Not After : Feb  4 05:40:25 2025 GMT
        Subject: CN=8C70F8F45DE3F5A24136F6B07AA6ABF1BFD44D8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2a:63:14:93:70:2d:4a:91:ca:69:3a:8c:54:
                    89:de:c5:fe:b9:44:ac:86:42:e6:ba:bb:13:0d:54:
                    39:7a:fe:39:81:18:4b:57:c7:b1:89:a8:4f:76:34:
                    a6:a2:fb:fd:8f:58:19:ec:1e:8b:d7:47:e7:e6:c7:
                    76:8f:7e:73:40:80:ea:c9:2c:c2:fe:14:bd:20:68:
                    69:35:d1:4c:07:6f:c5:b5:9b:ac:22:5a:c3:c5:69:
                    be:2b:c8:df:02:11:b3:0c:14:f1:93:e4:0f:99:47:
                    4e:58:5d:f6:75:3e:6a:70:4b:6a:ba:4e:f4:6a:90:
                    5e:5c:2b:35:40:18:08:83:e5:89:e6:aa:1c:1e:2e:
                    1b:65:6b:fe:6f:b0:73:ab:65:8c:0a:0b:38:35:ef:
                    cf:61:16:f2:b7:7c:84:f9:99:16:42:44:e4:ef:b4:
                    b7:62:55:a4:2c:65:c2:8a:92:ab:24:f5:2f:07:59:
                    4e:32:e8:9c:5e:81:0c:55:e7:45:0d:4c:36:0d:da:
                    ef:95:a9:eb:1d:9c:22:42:25:17:bf:81:de:0e:96:
                    95:07:dd:ed:82:15:65:f1:40:f1:46:05:9d:9b:f5:
                    b2:81:ad:13:cc:1b:91:8d:a2:e4:68:f4:36:1f:75:
                    d4:51:73:52:f7:4e:05:26:9f:05:0c:ee:b5:67:c6:
                    a1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:70:F8:F4:5D:E3:F5:A2:41:36:F6:B0:7A:A6:AB:F1:BF:D4:4D:8E
            X509v3 Authority Key Identifier:
                keyid:C5:56:AA:3C:C1:63:46:42:3F:D4:89:47:E6:1E:D8:4B:44:3C:6B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8E42CBA476FC29B5B2D6EFD2BD6FC7783B45E1DE3AF8CA0321FCB343A6CDF7B8/0/C556AA3CC16346423FD48947E61ED84B443C6BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C556AA3CC16346423FD48947E61ED84B443C6BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E42CBA476FC29B5B2D6EFD2BD6FC7783B45E1DE3AF8CA0321FCB343A6CDF7B8/0/C556AA3CC16346423FD48947E61ED84B443C6BD6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:53:58:1e:b6:8f:3b:b5:0a:9c:c8:1f:e6:ac:53:92:55:e8:
         b9:b0:38:fd:5a:b3:e1:15:26:2a:fc:a2:63:b9:be:0d:bb:05:
         05:3f:83:fc:11:aa:aa:33:1b:c7:dc:32:d1:75:a4:40:24:e5:
         ef:cd:c3:33:f0:56:3f:d6:6e:01:50:b7:9b:a4:9e:64:45:ce:
         6a:20:f3:f0:38:c7:73:9c:c2:f3:21:da:7b:38:a5:46:ed:ed:
         2c:4c:12:58:fa:4b:37:2e:0c:93:d3:a2:ed:be:e0:1d:ca:10:
         c9:c5:67:9f:bc:10:1d:05:24:02:7b:b4:3f:f5:84:35:c2:ee:
         7e:e6:15:12:4c:c2:db:08:17:48:f5:1a:ff:c8:d8:94:a0:0a:
         5f:17:cb:b9:b7:9a:83:34:f5:70:32:eb:5c:49:d5:d6:17:44:
         a7:18:a5:6a:bb:2a:57:64:85:7c:9a:29:3e:5b:2f:28:15:c8:
         28:78:58:ae:fc:e0:1b:69:6b:60:5f:22:6e:00:79:38:3c:ac:
         54:24:89:6a:8e:57:d4:f7:44:00:0a:6a:11:ef:a4:46:22:ef:
         18:ba:28:39:e7:a7:a7:4c:93:6c:36:f8:40:ad:d2:af:46:f4:
         c9:b6:82:2b:5b:49:52:2d:f6:7c:98:72:95:ee:d3:cb:8e:3d:
         06:25:41:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----