Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.mft
File:                     20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.mft (raw, json)
Hash identifier:          b8mj6zPBlknT7ndRlrHVkcw1WLsG90SqLUcOXfJYeSU=
Subject key identifier:   46:C9:03:2F:0B:44:1D:01:19:3F:91:E9:BC:52:94:A4:83:5A:E6:FA
Authority key identifier: 20:B5:80:A5:2C:15:A7:B0:EC:2B:5A:24:3E:5E:52:17:D6:DE:9E:75
Certificate issuer:       /CN=20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75
Certificate serial:       651836A6465D36C0D24913025FB49F811A77CA8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.mft
Manifest number:          B0
Signing time:             Thu 30 Jan 2025 15:12:49 +0000
Manifest this update:     Thu 30 Jan 2025 15:07:49 +0000
Manifest next update:     Tue 04 Feb 2025 23:27:49 +0000
Files and hashes:         1: 323830333a653363303a3a2f33322d3438203d3e20323635373339.roa (hash: 6pTHCpZb5Hp4WD55jouWOgaUzJ4fJqyZ/UVYQh2r7RU=)
                          2: 20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.crl (hash: IOPgl+pUe3DOMmpwfnAQH+VOwTw6db7etHkys4dWyqI=)
                          3: 34352e372e3235322e302f32322d3234203d3e20323635373339.roa (hash: AVy80RarUbZ5EBylYpyBoOm+x/GUoksJbDI0PVw+5sE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:18:36:a6:46:5d:36:c0:d2:49:13:02:5f:b4:9f:81:1a:77:ca:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75
        Validity
            Not Before: Jan 30 15:07:49 2025 GMT
            Not After : Feb  4 23:27:49 2025 GMT
        Subject: CN=46C9032F0B441D01193F91E9BC5294A4835AE6FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5e:c0:94:db:4c:89:4c:26:88:91:dd:ae:c2:
                    19:03:12:f7:fa:96:a3:c3:31:c0:95:cf:48:eb:96:
                    a4:4b:a6:08:ae:85:fc:f3:8c:08:cf:62:67:7b:1d:
                    f3:72:04:40:18:f5:95:96:79:35:d2:07:5a:38:0c:
                    2b:f6:75:6a:41:d6:9f:34:48:78:7c:fd:40:23:13:
                    7f:33:e3:f4:ff:7b:75:4d:00:5b:80:f9:18:f0:18:
                    7d:bc:e9:ca:90:fa:06:c9:0b:1f:e1:a3:00:de:a8:
                    61:8c:6c:43:ac:0f:8b:56:a9:f2:62:8c:0f:d9:ef:
                    0d:57:b5:bc:5b:87:43:4d:cb:d1:2f:8c:72:b2:a3:
                    9a:72:0b:dc:fe:16:83:b4:b8:a0:59:fe:da:35:60:
                    c2:fb:93:8b:91:b7:fa:8f:c7:7d:74:5a:c8:58:05:
                    58:fa:b8:cc:b7:1f:c8:a3:6a:ef:d9:22:b8:e6:5a:
                    51:a3:29:51:11:91:83:41:ae:00:f6:03:f3:be:9e:
                    2c:70:59:86:72:c2:21:0a:38:39:42:ff:d3:86:b3:
                    99:cc:68:9d:f5:f0:ad:f1:7e:cb:95:89:ce:ac:a8:
                    fe:c3:10:18:0c:b5:48:2d:a2:b0:90:65:84:4e:b9:
                    67:2f:93:12:86:4b:cb:fd:7a:bb:9c:c5:cb:8b:6b:
                    18:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C9:03:2F:0B:44:1D:01:19:3F:91:E9:BC:52:94:A4:83:5A:E6:FA
            X509v3 Authority Key Identifier:
                keyid:20:B5:80:A5:2C:15:A7:B0:EC:2B:5A:24:3E:5E:52:17:D6:DE:9E:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:bb:ec:42:ca:b7:5d:10:67:7a:9c:b7:48:72:a9:31:95:f8:
         66:a1:07:9f:9d:0b:be:d7:2b:24:20:00:35:6d:c1:97:5c:00:
         63:18:6f:1e:85:73:5f:2c:24:6f:82:39:36:4d:f8:d8:c8:a4:
         18:56:bc:21:d6:f2:d8:68:16:57:71:0e:d2:09:f6:54:54:e5:
         0d:05:9d:91:9f:2a:96:6d:13:d3:a0:a8:a6:74:69:b4:bc:06:
         a9:a5:0f:d6:d6:89:ee:33:5f:13:a0:ed:22:b9:58:60:2e:e6:
         1f:b3:eb:eb:9c:c2:55:ae:a4:0c:df:36:c4:7d:c8:54:e3:8f:
         94:bf:07:68:eb:71:df:23:28:d8:c3:65:91:03:ec:fb:b7:5f:
         ea:a3:87:f7:4c:ee:7a:dc:d6:41:71:53:18:94:cb:7a:99:67:
         ba:23:5a:b3:38:2d:8d:87:a5:cd:e1:5f:0b:08:a3:16:11:c5:
         f2:f3:43:20:3e:21:cd:3f:22:3f:3c:82:a5:cd:a9:08:f1:3b:
         08:d2:98:4e:8b:b5:63:68:91:39:6d:93:99:8d:26:a3:e5:6b:
         ab:47:86:e2:4d:9a:5f:61:e0:a0:5f:25:c1:a7:18:b5:b2:71:
         5a:45:d8:3e:b7:6d:a1:b3:b6:e7:a4:6d:16:0b:e8:82:b0:89:
         cf:59:c1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----