Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A58DA6E62734E07F018689F32D2D4CE252954337DC0B5AF3D67D61E65B2CC282/0/22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.mft
File:                     22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.mft (raw, json)
Hash identifier:          iu96mSh2kv5NO6JbdTujN0z1jmCcL/5RPeO7bdQTRCI=
Subject key identifier:   82:9E:00:0F:40:F1:F5:8D:B1:C5:AA:3B:73:B9:46:5F:03:B1:56:99
Authority key identifier: 22:BA:0A:0A:E3:42:4D:55:CA:0D:E5:0C:3A:95:9C:C2:28:F7:B9:02
Certificate issuer:       /CN=22BA0A0AE3424D55CA0DE50C3A959CC228F7B902
Certificate serial:       2A430E4B5FF88E04447542274A1417D775486656
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A58DA6E62734E07F018689F32D2D4CE252954337DC0B5AF3D67D61E65B2CC282/0/22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.mft
Manifest number:          A8
Signing time:             Fri 31 Jan 2025 00:18:33 +0000
Manifest this update:     Fri 31 Jan 2025 00:13:33 +0000
Manifest next update:     Wed 05 Feb 2025 02:12:33 +0000
Files and hashes:         1: 323830333a346665303a3a2f33322d3336203d3e20323731373735.roa (hash: dhQtf/nMDKr2a3qsZq1fH99ZILzyRytRS2GIWLWQiMc=)
                          2: 22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.crl (hash: pSobbt8JwX55MMxMuRcY2pToHiAYI4dQ2q6Uzd+Z5Mk=)
                          3: 3139322e3233312e3131362e302f32342d3234203d3e20323731373735.roa (hash: QH6zdKWDF9fXU1tq5I3mOmwfwBDoW61DTtYOt/fpoG8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:43:0e:4b:5f:f8:8e:04:44:75:42:27:4a:14:17:d7:75:48:66:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22BA0A0AE3424D55CA0DE50C3A959CC228F7B902
        Validity
            Not Before: Jan 31 00:13:33 2025 GMT
            Not After : Feb  5 02:12:33 2025 GMT
        Subject: CN=829E000F40F1F58DB1C5AA3B73B9465F03B15699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:23:a0:27:88:8a:e3:fa:ee:6a:4d:e4:8d:41:
                    84:b7:f3:c6:13:a8:53:98:9a:da:f3:6c:0e:15:81:
                    dc:35:78:13:94:71:07:75:73:f3:d2:3e:06:c9:82:
                    00:db:63:13:eb:b7:c2:8e:3a:77:ca:e0:9d:ec:f9:
                    04:c4:87:44:d9:4c:3f:fc:2b:c3:e1:0a:bc:bd:7b:
                    95:36:e7:98:3e:f5:fa:eb:1a:9b:d4:51:dd:07:36:
                    34:06:85:9f:56:d5:5d:f3:ec:70:cb:f8:e0:d7:fd:
                    d2:f4:7b:d5:97:ed:98:1c:77:5d:fa:6f:5d:50:59:
                    ac:28:15:c8:11:fc:fd:9e:c7:59:e7:63:a1:a8:e3:
                    e9:f3:51:be:67:6a:0e:8a:32:3a:a8:ec:33:85:4e:
                    05:e8:bd:5b:37:5e:a4:67:4b:48:57:0b:af:2e:d5:
                    8c:25:ac:57:e3:cf:32:d3:f2:9f:e1:38:e1:b5:77:
                    22:f7:e2:6c:80:b9:85:3f:7b:11:59:7f:cf:1c:e5:
                    0f:b4:94:81:33:f1:08:42:9b:61:dd:00:5c:3b:f9:
                    4a:b0:c7:40:7f:05:3f:71:ac:e4:f4:3c:80:8e:1e:
                    2e:f1:04:eb:fb:46:7a:56:b1:8d:f4:c0:f6:1f:e2:
                    27:70:c2:ec:61:e0:a5:f3:67:9e:1a:37:a3:13:cd:
                    0f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9E:00:0F:40:F1:F5:8D:B1:C5:AA:3B:73:B9:46:5F:03:B1:56:99
            X509v3 Authority Key Identifier:
                keyid:22:BA:0A:0A:E3:42:4D:55:CA:0D:E5:0C:3A:95:9C:C2:28:F7:B9:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A58DA6E62734E07F018689F32D2D4CE252954337DC0B5AF3D67D61E65B2CC282/0/22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A58DA6E62734E07F018689F32D2D4CE252954337DC0B5AF3D67D61E65B2CC282/0/22BA0A0AE3424D55CA0DE50C3A959CC228F7B902.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:c5:8a:41:be:10:0c:f3:b2:49:5a:6c:3e:a1:d1:b8:a5:96:
         64:5d:97:90:c2:1a:f4:f2:56:f2:0b:e7:b7:bd:45:a6:9c:87:
         00:fb:64:b1:04:39:bb:86:1f:6f:d9:04:40:6d:6d:e1:ed:1f:
         e1:8b:4d:12:fe:07:3d:d2:34:58:b4:f7:4b:90:2d:3e:7d:24:
         55:38:d3:b8:45:04:7b:67:c9:06:22:e4:65:bc:7f:d6:31:e7:
         d0:03:c8:45:7f:42:0f:1b:08:0a:68:20:e6:4e:f8:d9:be:87:
         24:b9:44:0b:bc:e5:1f:5f:5e:43:91:c3:e7:df:e6:a2:3d:0c:
         85:21:51:00:1b:6f:55:18:d7:bc:4c:77:60:72:18:67:f1:55:
         ff:1b:2a:4c:e6:54:7a:ea:04:0d:ac:88:e5:e1:6f:14:9e:2b:
         3c:10:ee:81:3b:91:f1:97:59:6a:ea:cb:59:bf:0f:06:a6:bb:
         46:72:94:7b:80:b1:f3:7a:4f:8a:a5:19:be:fa:f4:19:75:ba:
         31:05:c7:d6:d2:77:f5:f7:ec:fb:70:8a:81:80:ce:22:98:d3:
         2a:60:4c:4f:dd:09:9e:97:35:10:ff:1d:f1:fe:bf:2d:ef:a0:
         18:7f:3c:64:21:a6:85:36:b5:08:ae:a9:3f:42:2f:bf:71:e3:
         23:e9:2d:94
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUKkMOS1/4jgREdUInShQX13VIZlYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJCQTBBMEFFMzQyNEQ1NUNBMERFNTBDM0E5NTlDQzIy
OEY3QjkwMjAeFw0yNTAxMzEwMDEzMzNaFw0yNTAyMDUwMjEyMzNaMDMxMTAvBgNV
BAMTKDgyOUUwMDBGNDBGMUY1OERCMUM1QUEzQjczQjk0NjVGMDNCMTU2OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6I6AniIrj+u5qTeSNQYS388YT
qFOYmtrzbA4Vgdw1eBOUcQd1c/PSPgbJggDbYxPrt8KOOnfK4J3s+QTEh0TZTD/8
K8PhCry9e5U255g+9frrGpvUUd0HNjQGhZ9W1V3z7HDL+ODX/dL0e9WX7Zgcd136
b11QWawoFcgR/P2ex1nnY6Go4+nzUb5nag6KMjqo7DOFTgXovVs3XqRnS0hXC68u
1YwlrFfjzzLT8p/hOOG1dyL34myAuYU/exFZf88c5Q+0lIEz8QhCm2HdAFw7+Uqw
x0B/BT9xrOT0PICOHi7xBOv7RnpWsY30wPYf4idwwuxh4KXzZ54aN6MTzQ9LAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUgp4AD0Dx9Y2xxao7c7lGXwOxVpkwHwYDVR0j
BBgwFoAUIroKCuNCTVXKDeUMOpWcwij3uQIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNThEQTZFNjI3MzRFMDdGMDE4Njg5RjMyRDJENENFMjUy
OTU0MzM3REMwQjVBRjNENjdENjFFNjVCMkNDMjgyLzAvMjJCQTBBMEFFMzQyNEQ1
NUNBMERFNTBDM0E5NTlDQzIyOEY3QjkwMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMkJBMEEwQUUzNDI0RDU1Q0Ew
REU1MEMzQTk1OUNDMjI4RjdCOTAyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTU4REE2RTYyNzM0RTA3RjAxODY4OUYzMkQyRDRDRTI1Mjk1NDMzN0RD
MEI1QUYzRDY3RDYxRTY1QjJDQzI4Mi8wLzIyQkEwQTBBRTM0MjRENTVDQTBERTUw
QzNBOTU5Q0MyMjhGN0I5MDIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAXxYpBvhAM87JJWmw+odG4pZZk
XZeQwhr08lbyC+e3vUWmnIcA+2SxBDm7hh9v2QRAbW3h7R/hi00S/gc90jRYtPdL
kC0+fSRVONO4RQR7Z8kGIuRlvH/WMefQA8hFf0IPGwgKaCDmTvjZvockuUQLvOUf
X15DkcPn3+aiPQyFIVEAG29VGNe8THdgchhn8VX/GypM5lR66gQNrIjl4W8Unis8
EO6BO5Hxl1lq6stZvw8GprtGcpR7gLHzek+KpRm++vQZdboxBcfW0nf19+z7cIqB
gM4imNMqYExP3QmelzUQ/x3x/r8t76AYfzxkIaaFNrUIrqk/Qi+/ceMj6S2U
-----END CERTIFICATE-----