Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.mft
File:                     A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.mft (raw, json)
Hash identifier:          ia6avQS7CHO0ebVHDbg7GZyuqHCMdjvs4qX//gpt0I4=
Subject key identifier:   D1:6C:2A:3D:17:21:C0:33:CB:B0:E1:61:F8:9D:0C:61:C2:7F:6E:AD
Authority key identifier: A4:52:CC:0A:52:E6:76:6C:48:F9:C7:DF:2D:43:37:A9:11:BA:64:D1
Certificate issuer:       /CN=A452CC0A52E6766C48F9C7DF2D4337A911BA64D1
Certificate serial:       53169E20B077A3C95285D06DD485A54808545B8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.mft
Manifest number:          A8
Signing time:             Fri 31 Jan 2025 16:23:30 +0000
Manifest this update:     Fri 31 Jan 2025 16:18:30 +0000
Manifest next update:     Thu 06 Feb 2025 11:35:30 +0000
Files and hashes:         1: 34352e3137322e3134322e302f32342d3234203d3e20323634383030.roa (hash: LbNqcUGwWACDVPHvNeoEJtYThRl4ymQO+zsESkcdo74=)
                          2: 34352e3137322e3134332e302f32342d3234203d3e20323634383030.roa (hash: Dui99sskpkYgJRGHFHPS+u9LVVLlwmqd0cTTDuoT18c=)
                          3: 34352e3137322e3134312e302f32342d3234203d3e20323634383030.roa (hash: ZgIdh9N6o8sun4vo2X2LAoVrqylwV3e1UdrwgUMJf/8=)
                          4: A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.crl (hash: QyGnKFzyjppy+F+W/gUgelXRxID87PRtKLTpB32qsNc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:16:9e:20:b0:77:a3:c9:52:85:d0:6d:d4:85:a5:48:08:54:5b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A452CC0A52E6766C48F9C7DF2D4337A911BA64D1
        Validity
            Not Before: Jan 31 16:18:30 2025 GMT
            Not After : Feb  6 11:35:30 2025 GMT
        Subject: CN=D16C2A3D1721C033CBB0E161F89D0C61C27F6EAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7a:44:19:f0:bb:f2:c7:cd:16:2c:41:67:7a:
                    69:0e:7e:c1:ec:c2:8c:c1:a0:53:77:43:9c:2a:9f:
                    44:e9:4b:db:7e:3a:65:a7:b0:8e:57:84:7a:a9:de:
                    45:b2:e6:ad:e1:7e:b6:6e:4a:44:a5:6c:be:fb:52:
                    ff:2c:23:5f:fe:26:c1:35:d0:db:5f:b7:85:72:60:
                    77:c1:2f:aa:d2:dc:8d:a1:94:fb:c7:e6:9f:56:a3:
                    c2:35:f1:37:45:d4:a5:5d:f7:5d:88:29:e8:d8:a8:
                    5e:de:17:17:96:4b:3d:13:6f:32:2b:aa:c8:0e:13:
                    ff:0e:8e:b8:03:d7:2d:31:39:95:ca:22:d8:3a:2a:
                    6a:30:c8:d0:07:13:54:57:da:5f:b6:0b:9b:44:22:
                    38:09:93:69:53:6c:8d:2e:7d:7e:74:77:64:f2:2b:
                    d2:12:17:c6:66:df:f0:3d:af:99:fc:aa:a9:bf:7f:
                    5a:77:60:e5:16:7b:70:8b:26:0f:7f:d4:a4:fa:c4:
                    70:7b:87:77:50:d6:d0:60:b1:7c:60:8a:c0:ad:11:
                    0b:e5:3b:10:89:63:73:d2:1d:a1:96:77:ee:6b:a9:
                    0a:61:dd:3d:ea:58:ab:58:c0:0c:58:c2:61:c0:91:
                    bc:1e:54:9f:c0:c8:2c:af:2a:65:03:92:74:04:99:
                    c0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:6C:2A:3D:17:21:C0:33:CB:B0:E1:61:F8:9D:0C:61:C2:7F:6E:AD
            X509v3 Authority Key Identifier:
                keyid:A4:52:CC:0A:52:E6:76:6C:48:F9:C7:DF:2D:43:37:A9:11:BA:64:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:79:9a:cf:48:db:88:fe:f7:48:0f:4e:48:55:0f:c6:66:eb:
         21:fb:4d:f8:8d:55:4e:0a:c3:33:b4:a2:52:40:d7:95:b3:81:
         3e:0f:89:73:13:d7:d4:15:44:30:36:95:8a:5c:cb:d8:db:b6:
         d7:a3:21:17:f5:7f:b4:a8:bb:ee:a8:54:98:7d:e5:23:02:69:
         6f:c1:8a:84:e2:d3:ad:d2:87:8f:bd:5a:5c:94:ae:05:4e:60:
         03:5b:e1:88:13:5c:cc:ea:11:22:b7:1f:1f:e0:b2:9d:05:a0:
         75:af:f4:6a:91:9a:a1:65:d2:eb:5b:c2:fb:4d:4e:21:9e:5f:
         23:9a:5d:b3:a2:0e:da:39:94:c2:d0:7d:ab:9a:c0:18:bb:88:
         48:d5:4f:76:18:68:06:fc:a7:a5:d7:91:ef:f9:ec:40:44:ad:
         09:5c:d0:38:b5:a3:f4:65:7b:2f:89:f1:08:89:98:01:1b:ce:
         a4:bb:81:7f:85:c2:59:03:b0:13:39:93:59:3f:2b:78:f1:e7:
         18:d6:74:ee:79:bd:d1:49:68:ff:82:a5:0a:c4:f8:3c:9f:e2:
         bd:b9:97:70:7a:9e:25:42:02:4e:10:dd:f1:89:eb:c2:93:15:
         86:f7:6e:77:10:53:b6:7d:a0:25:92:a8:fb:37:51:57:68:40:
         dd:f4:2f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----