Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.mft
File:                     2AB6FC0008E3CB5A059B1D935090BD3A42310F93.mft (raw, json)
Hash identifier:          ksa7SHuvqxwI5eoa5JQgPbdapFFRlorjz4GcewX2e3I=
Subject key identifier:   B5:2A:AE:DF:C0:7D:69:22:0D:46:04:5A:C6:3B:E8:1E:A8:0D:EC:87
Authority key identifier: 2A:B6:FC:00:08:E3:CB:5A:05:9B:1D:93:50:90:BD:3A:42:31:0F:93
Certificate issuer:       /CN=2AB6FC0008E3CB5A059B1D935090BD3A42310F93
Certificate serial:       2C7CE06DEF5839D2709F4E0D39D6876B43A712F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.mft
Manifest number:          0E
Signing time:             Thu 30 Jan 2025 09:39:20 +0000
Manifest this update:     Thu 30 Jan 2025 09:34:20 +0000
Manifest next update:     Tue 04 Feb 2025 13:18:20 +0000
Files and hashes:         1: 3138312e3137362e35322e302f32322d3234203d3e20323632323130.roa (hash: 4JBa+7IgZm7YWNU7LuMqsm2fd/irssfNrup0VpA5VSE=)
                          2: 2AB6FC0008E3CB5A059B1D935090BD3A42310F93.crl (hash: oivPLVQXkR4P3A2zsaAGEtpefgqQHxhikveHTaXU9OE=)
                          3: 3138312e3137362e3132322e302f32342d3234203d3e20343031323138.roa (hash: vCl8KDWy9O0leGrCEgsnnqj2kxQUIVfr8pdhJCsh4O4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:7c:e0:6d:ef:58:39:d2:70:9f:4e:0d:39:d6:87:6b:43:a7:12:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AB6FC0008E3CB5A059B1D935090BD3A42310F93
        Validity
            Not Before: Jan 30 09:34:20 2025 GMT
            Not After : Feb  4 13:18:20 2025 GMT
        Subject: CN=B52AAEDFC07D69220D46045AC63BE81EA80DEC87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:da:96:8c:3e:4a:4e:b9:58:82:98:d0:c4:a8:
                    6d:50:27:b6:af:d5:8b:60:f0:7a:fa:68:7d:08:81:
                    30:c7:1e:27:c3:75:c9:98:28:a3:8d:0c:aa:dd:bd:
                    95:ba:49:93:5d:08:41:71:fd:bd:cf:0e:96:d2:bc:
                    91:5d:f0:3f:2e:81:69:74:89:c5:41:98:5b:f4:9b:
                    27:4f:ac:4d:5c:3f:eb:2b:db:95:f6:95:be:fc:4d:
                    ea:58:ba:2b:dd:68:1c:20:70:a6:6f:9d:04:d6:d6:
                    90:a8:0f:d1:a6:c6:74:94:df:ec:54:38:03:ad:b5:
                    15:dd:a8:35:c7:19:72:86:61:28:35:cf:53:78:8c:
                    66:16:22:93:2e:42:e3:64:d8:fa:06:d1:78:49:5c:
                    b0:f3:41:96:c6:4b:9e:63:7e:0e:9a:1f:a6:54:da:
                    2c:95:95:f9:6c:48:72:65:93:24:89:68:5b:d6:97:
                    84:00:fa:f7:99:90:ed:cc:70:58:af:87:5a:ac:75:
                    76:04:44:9d:59:22:c1:ef:91:42:a5:b8:60:44:93:
                    9b:44:d9:dc:b8:42:02:8b:3b:d0:26:ce:65:fa:b0:
                    0a:de:05:c2:57:73:80:96:cb:91:82:34:f5:7d:07:
                    39:b1:75:1c:fa:91:bf:4b:e0:ff:5b:d5:1d:dd:ca:
                    52:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:2A:AE:DF:C0:7D:69:22:0D:46:04:5A:C6:3B:E8:1E:A8:0D:EC:87
            X509v3 Authority Key Identifier:
                keyid:2A:B6:FC:00:08:E3:CB:5A:05:9B:1D:93:50:90:BD:3A:42:31:0F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:4e:c6:02:2c:37:de:a6:40:10:61:65:ca:89:95:9b:22:5e:
         6b:62:ad:bc:b3:59:2a:94:bc:f0:d6:fa:a7:31:5f:e9:4d:bb:
         8a:7b:74:67:04:60:a1:7c:23:9b:e2:11:a9:96:7e:bd:07:c8:
         e1:45:74:bd:1f:eb:b9:3c:97:67:0c:cf:d0:ad:71:4a:b9:87:
         73:03:0c:79:78:79:f6:ae:d8:76:41:f0:80:5a:d6:04:b1:ca:
         76:08:22:55:87:47:0b:1e:28:91:fd:80:15:52:d0:59:8d:db:
         6e:e8:f1:cd:32:52:16:48:0e:d7:20:eb:a8:77:bd:e4:80:c7:
         5f:36:01:8d:d5:51:ec:f6:a5:44:f4:06:e0:0e:b8:3b:4f:a5:
         52:a5:3b:13:18:e0:fc:5f:04:01:71:c3:3c:b1:f0:28:1f:8f:
         47:2e:f7:3d:91:05:e8:5b:2b:79:e3:66:5f:2a:86:e0:f5:b2:
         e1:be:77:cd:24:bf:ca:98:22:66:e0:cb:a8:87:3d:f4:ed:96:
         b8:88:8d:72:3b:40:cd:27:1d:39:d7:1c:55:91:df:db:ad:7b:
         13:bd:3f:0e:83:a3:6a:00:69:4d:f3:d5:db:1f:e7:f8:c3:03:
         52:bc:4a:b8:4b:ae:ae:6f:c5:11:0a:75:5f:e6:7c:c5:a3:1c:
         2c:60:f2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----