Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.mft
File:                     B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.mft (raw, json)
Hash identifier:          SjSHSogfPrItPgl/N3D1sYcmyIm4/DfZZjmoHYeitnE=
Subject key identifier:   9F:F4:11:FF:9A:87:44:A8:55:1D:73:28:3B:59:DD:25:7F:58:FD:06
Authority key identifier: B9:C8:69:5C:8A:81:EF:89:CF:9F:A7:B4:2E:15:9E:98:A8:EC:0B:B6
Certificate issuer:       /CN=B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6
Certificate serial:       3F1D2785B7391A314447270A041E457FE09D8386
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.mft
Manifest number:          AC
Signing time:             Fri 31 Jan 2025 17:59:37 +0000
Manifest this update:     Fri 31 Jan 2025 17:54:37 +0000
Manifest next update:     Thu 06 Feb 2025 07:41:37 +0000
Files and hashes:         1: 323830313a31303a353030303a3a2f34382d3438203d3e20323634373437.roa (hash: l1Cw4+1F3S4pmpd0BhuowlZBgSGhYLNFI/+X10OraLE=)
                          2: B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.crl (hash: joZDT7A90Pbzhqa3dYAhBAIYW/e5Y1iZsYZqrzjAz7I=)
                          3: 3230302e33332e3131332e302f32342d3234203d3e20323634373437.roa (hash: 5sYZ1LQA0IHbO7VVf6DkATLCz0enfaxQQ559QkeFJNU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:1d:27:85:b7:39:1a:31:44:47:27:0a:04:1e:45:7f:e0:9d:83:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6
        Validity
            Not Before: Jan 31 17:54:37 2025 GMT
            Not After : Feb  6 07:41:37 2025 GMT
        Subject: CN=9FF411FF9A8744A8551D73283B59DD257F58FD06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:07:ec:97:eb:55:54:80:a9:f8:5b:2a:c2:38:
                    a7:8c:c8:18:60:6a:3a:d2:a6:14:8b:3f:65:f8:44:
                    ee:12:69:6e:14:1b:c7:c0:33:2d:ed:27:c0:d0:22:
                    b2:53:c6:fb:ec:10:74:42:0d:f4:30:7f:22:a0:9d:
                    71:18:43:1e:0d:ff:79:4f:b6:f6:91:56:9f:8a:73:
                    df:63:b7:2d:68:68:f1:9d:26:83:86:ff:00:86:51:
                    b7:c6:df:8f:3e:d9:16:82:34:e4:24:fb:11:3e:b5:
                    f8:a7:24:da:8e:cc:07:a1:98:c9:45:ba:f5:a0:ef:
                    74:d6:96:71:6b:55:a4:d1:aa:af:fd:07:52:5d:e7:
                    b7:91:11:d0:68:20:e0:ad:b6:57:d3:df:79:2b:91:
                    c8:48:7b:c0:34:80:8c:5c:79:4a:18:e2:62:95:32:
                    89:47:1e:a4:19:97:25:32:c3:7f:15:ca:cc:d4:d4:
                    05:92:1d:2d:8c:1a:c0:d7:09:2b:a3:4e:2a:a2:91:
                    87:be:78:69:5c:33:07:fe:33:df:4a:ce:cf:b2:65:
                    25:35:88:16:fa:f7:81:ad:f0:26:33:d2:03:1c:11:
                    5c:34:bb:97:2a:bb:b0:a2:ab:c8:c8:c1:c9:a1:a4:
                    44:1e:52:ae:e0:8a:1c:76:e5:10:1c:7a:36:f2:03:
                    06:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F4:11:FF:9A:87:44:A8:55:1D:73:28:3B:59:DD:25:7F:58:FD:06
            X509v3 Authority Key Identifier:
                keyid:B9:C8:69:5C:8A:81:EF:89:CF:9F:A7:B4:2E:15:9E:98:A8:EC:0B:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:c9:8c:b5:7e:6b:3e:ad:49:0d:b7:22:69:0c:7d:ca:1c:2b:
         b9:42:55:29:8c:14:a0:98:12:ad:89:6f:98:1b:a4:84:9f:13:
         8c:01:c2:c6:bb:5a:d7:87:40:b8:d8:28:60:57:65:06:87:d8:
         27:83:b9:b1:28:c3:f2:3d:01:27:b2:ae:82:cb:3a:aa:dd:5b:
         7c:d1:71:b7:d6:b7:da:94:00:34:74:06:f9:7d:0e:0c:7e:67:
         59:e2:6b:6f:1c:d0:2c:e3:1d:de:a2:95:60:12:8b:ab:5d:cf:
         9a:91:8c:8d:0e:41:64:ca:c2:8e:0d:54:5c:e4:35:4e:a9:67:
         e2:e8:56:53:00:d1:0e:82:8f:ea:4a:4c:d6:78:06:62:e0:f1:
         64:89:74:95:cc:25:5c:09:62:45:04:cb:a9:2a:30:b0:7a:6e:
         60:d6:c3:db:01:67:04:f1:d6:70:48:6c:d2:dd:69:04:ac:3b:
         53:a2:aa:90:a0:61:80:4f:ac:06:4b:54:a5:cc:e9:51:76:7d:
         75:6e:85:8c:6d:bd:0a:91:e1:7a:95:12:72:5d:46:80:16:67:
         e2:30:f0:4c:b1:e6:21:ea:55:2e:9a:5a:42:64:e6:de:39:f1:
         d9:0d:e3:e5:ce:56:2d:8f:f4:e1:d3:7d:c9:87:c4:da:6a:31:
         95:1e:d5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----