Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C66D3C229C4AB37AD1602932D64C11066749064416F3924654E61CC2CBDC0404/0/1CE606048F2E548E6C388DF39C23BFAA9A351F57.mft
File:                     1CE606048F2E548E6C388DF39C23BFAA9A351F57.mft (raw, json)
Hash identifier:          x0Jih1ZDnHXfDtm9gCkGLukbDgqzrp+BSj+8n7SXWlA=
Subject key identifier:   69:91:46:C3:96:0B:53:86:44:8D:B3:52:75:7B:F2:2D:7B:22:43:CD
Authority key identifier: 1C:E6:06:04:8F:2E:54:8E:6C:38:8D:F3:9C:23:BF:AA:9A:35:1F:57
Certificate issuer:       /CN=1CE606048F2E548E6C388DF39C23BFAA9A351F57
Certificate serial:       498BF271316DED25642DC09E5D3A2128C218A4CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CE606048F2E548E6C388DF39C23BFAA9A351F57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C66D3C229C4AB37AD1602932D64C11066749064416F3924654E61CC2CBDC0404/0/1CE606048F2E548E6C388DF39C23BFAA9A351F57.mft
Manifest number:          A8
Signing time:             Fri 31 Jan 2025 03:10:21 +0000
Manifest this update:     Fri 31 Jan 2025 03:05:21 +0000
Manifest next update:     Wed 05 Feb 2025 01:47:21 +0000
Files and hashes:         1: 1CE606048F2E548E6C388DF39C23BFAA9A351F57.crl (hash: 64JgzNdTnW6s+JCTBvCWsaJ78Mo3UXIy8skXW+dm9bo=)
                          2: 34352e3233312e3134382e302f32322d3234203d3e20323634373436.roa (hash: /Y+3wde9UU+Gv5mVbflJaHIv1mtDd1fGfxQ5+lTc3Fg=)
                          3: 34352e3233312e3134382e302f32322d3234203d3e20323635373735.roa (hash: Qn4Rm5jaRW1etVVc10XqL6Kjf0kd8Mp/fclLJnN8V2o=)
                          4: 323830333a636232303a3a2f33322d3438203d3e20323635373735.roa (hash: 0jXtLp7J2pOCr5dV1FoGmDsycK1U7xmYOah3XFLunEs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:8b:f2:71:31:6d:ed:25:64:2d:c0:9e:5d:3a:21:28:c2:18:a4:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CE606048F2E548E6C388DF39C23BFAA9A351F57
        Validity
            Not Before: Jan 31 03:05:21 2025 GMT
            Not After : Feb  5 01:47:21 2025 GMT
        Subject: CN=699146C3960B5386448DB352757BF22D7B2243CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:23:12:0f:c6:92:6e:89:ba:8a:e9:00:b4:f1:
                    d4:a8:ff:ee:ad:67:7a:9e:78:01:31:b3:ed:8a:aa:
                    da:f5:b5:1d:15:22:d9:5e:0a:43:5a:86:54:7b:bb:
                    e6:03:11:a4:25:12:6d:0a:49:f7:35:21:3d:31:5a:
                    ee:2a:56:3f:e6:5e:42:ad:25:23:d6:75:40:99:b5:
                    9d:f6:5f:ca:59:9a:3c:ab:9f:3c:2d:11:1d:8c:58:
                    07:71:c0:90:ab:bb:c2:7e:40:28:7f:99:b1:b4:90:
                    95:28:5b:2a:58:e0:c1:84:44:83:48:6c:35:ac:bf:
                    01:a9:fd:9c:9b:c4:df:0a:f0:1f:75:04:09:84:0f:
                    e3:19:3a:ef:80:a8:09:d6:34:d5:d5:ea:bb:19:7c:
                    20:4a:70:55:a0:66:c7:3a:ea:d7:93:bf:7c:2d:15:
                    f9:8b:0b:9a:0a:19:e3:e9:b6:44:ef:b9:d2:b9:29:
                    0a:02:9a:43:13:ad:02:f6:dc:a3:2f:bc:05:9f:1c:
                    de:40:c1:0f:b6:b9:b3:3f:48:79:00:57:56:b8:8a:
                    a2:49:56:f7:f7:3b:e7:91:48:5d:6b:e5:4a:2f:96:
                    32:43:5f:e0:f5:72:ce:89:f0:6e:d9:6d:bb:a5:a3:
                    d5:93:46:33:18:12:27:81:60:1a:6e:f2:a7:9f:c8:
                    38:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:91:46:C3:96:0B:53:86:44:8D:B3:52:75:7B:F2:2D:7B:22:43:CD
            X509v3 Authority Key Identifier:
                keyid:1C:E6:06:04:8F:2E:54:8E:6C:38:8D:F3:9C:23:BF:AA:9A:35:1F:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C66D3C229C4AB37AD1602932D64C11066749064416F3924654E61CC2CBDC0404/0/1CE606048F2E548E6C388DF39C23BFAA9A351F57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CE606048F2E548E6C388DF39C23BFAA9A351F57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C66D3C229C4AB37AD1602932D64C11066749064416F3924654E61CC2CBDC0404/0/1CE606048F2E548E6C388DF39C23BFAA9A351F57.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:e3:f2:d1:ab:b9:34:4b:37:ef:65:28:cf:e2:bf:0a:05:6e:
         f0:a2:4f:f9:ed:f6:03:7d:a4:a2:cc:57:ef:ae:4a:f8:35:12:
         a1:a6:54:22:3f:df:49:5e:6e:1d:6c:62:da:1e:c2:e7:8e:9f:
         67:7e:ff:59:1e:01:bb:db:35:0c:4c:48:c2:a2:3a:55:6f:6d:
         2f:5e:df:0d:ad:bd:44:db:22:1e:4a:d2:ad:bb:7f:88:19:3f:
         53:98:b0:d3:b4:3e:c0:94:22:4b:6b:c6:82:24:fb:e2:17:55:
         ec:5d:8f:4e:d4:f3:2e:3c:f4:50:14:2b:5b:74:81:2f:5b:50:
         e5:b6:62:20:a9:80:f0:fa:5f:13:c5:2b:ed:d6:c1:89:f4:51:
         65:ba:68:4d:e2:52:f2:22:59:99:bd:f5:43:04:1e:18:76:45:
         15:40:2c:c7:9a:da:f4:cf:23:52:e0:ec:17:85:93:14:ae:74:
         55:80:5d:f0:56:91:35:de:08:73:42:7c:78:75:3e:17:6b:8a:
         ee:64:72:0c:25:e0:60:05:32:81:6d:f5:03:65:b2:2b:f0:e9:
         44:b9:e8:0a:ca:0b:ba:9d:48:74:6f:7f:11:3a:ef:86:ec:f0:
         b5:ae:69:96:c0:00:fe:8e:b5:bc:97:6a:ac:3b:a4:d7:96:b7:
         f2:44:9b:eb
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUSYvycTFt7SVkLcCeXTohKMIYpM4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUNFNjA2MDQ4RjJFNTQ4RTZDMzg4REYzOUMyM0JGQUE5
QTM1MUY1NzAeFw0yNTAxMzEwMzA1MjFaFw0yNTAyMDUwMTQ3MjFaMDMxMTAvBgNV
BAMTKDY5OTE0NkMzOTYwQjUzODY0NDhEQjM1Mjc1N0JGMjJEN0IyMjQzQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9IxIPxpJuibqK6QC08dSo/+6t
Z3qeeAExs+2Kqtr1tR0VItleCkNahlR7u+YDEaQlEm0KSfc1IT0xWu4qVj/mXkKt
JSPWdUCZtZ32X8pZmjyrnzwtER2MWAdxwJCru8J+QCh/mbG0kJUoWypY4MGERINI
bDWsvwGp/ZybxN8K8B91BAmED+MZOu+AqAnWNNXV6rsZfCBKcFWgZsc66teTv3wt
FfmLC5oKGePptkTvudK5KQoCmkMTrQL23KMvvAWfHN5AwQ+2ubM/SHkAV1a4iqJJ
Vvf3O+eRSF1r5UovljJDX+D1cs6J8G7Zbbulo9WTRjMYEieBYBpu8qefyDitAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUaZFGw5YLU4ZEjbNSdXvyLXsiQ80wHwYDVR0j
BBgwFoAUHOYGBI8uVI5sOI3znCO/qpo1H1cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNjZEM0MyMjlDNEFCMzdBRDE2MDI5MzJENjRDMTEwNjY3
NDkwNjQ0MTZGMzkyNDY1NEU2MUNDMkNCREMwNDA0LzAvMUNFNjA2MDQ4RjJFNTQ4
RTZDMzg4REYzOUMyM0JGQUE5QTM1MUY1Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQ0U2MDYwNDhGMkU1NDhFNkMz
ODhERjM5QzIzQkZBQTlBMzUxRjU3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzY2RDNDMjI5QzRBQjM3QUQxNjAyOTMyRDY0QzExMDY2NzQ5MDY0NDE2
RjM5MjQ2NTRFNjFDQzJDQkRDMDQwNC8wLzFDRTYwNjA0OEYyRTU0OEU2QzM4OERG
MzlDMjNCRkFBOUEzNTFGNTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCj4/LRq7k0SzfvZSjP4r8KBW7w
ok/57fYDfaSizFfvrkr4NRKhplQiP99JXm4dbGLaHsLnjp9nfv9ZHgG72zUMTEjC
ojpVb20vXt8Nrb1E2yIeStKtu3+IGT9TmLDTtD7AlCJLa8aCJPviF1XsXY9O1PMu
PPRQFCtbdIEvW1DltmIgqYDw+l8TxSvt1sGJ9FFlumhN4lLyIlmZvfVDBB4YdkUV
QCzHmtr0zyNS4OwXhZMUrnRVgF3wVpE13ghzQnx4dT4Xa4ruZHIMJeBgBTKBbfUD
ZbIr8OlEuegKygu6nUh0b38ROu+G7PC1rmmWwAD+jrW8l2qsO6TXlrfyRJvr
-----END CERTIFICATE-----