Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.mft
File:                     4F43917327673645BD0B520BF95E9CA235CEFEB8.mft (raw, json)
Hash identifier:          axhvixWBRoQcfDqJXMDWocSvyzN/tpzSLJq2TkDS68I=
Subject key identifier:   79:8A:EE:99:75:F9:AC:03:07:25:B8:FA:AF:74:49:50:15:A6:E2:E4
Authority key identifier: 4F:43:91:73:27:67:36:45:BD:0B:52:0B:F9:5E:9C:A2:35:CE:FE:B8
Certificate issuer:       /CN=4F43917327673645BD0B520BF95E9CA235CEFEB8
Certificate serial:       2E8EF5ED1D568532839475AF58CED7C0BC2BEEF7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.mft
Manifest number:          AA
Signing time:             Thu 30 Jan 2025 06:52:38 +0000
Manifest this update:     Thu 30 Jan 2025 06:47:38 +0000
Manifest next update:     Tue 04 Feb 2025 10:38:38 +0000
Files and hashes:         1: 3230312e3133312e362e302f32332d3234203d3e203238333932.roa (hash: ejE7X0gFIGJa6nE//IXmQLegQ+EII5VLV1b4f4woXV8=)
                          2: 323830313a63343a62343a3a2f34382d3438203d3e203238333932.roa (hash: n1sNG4sFwjSi2LPhQ0IrBsiAsk795Q7hrqoJpk7TQyA=)
                          3: 4F43917327673645BD0B520BF95E9CA235CEFEB8.crl (hash: uXtY9lCRko5WC9BaGv5basANw8r+Fgz0MOsLdTvUaTc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:8e:f5:ed:1d:56:85:32:83:94:75:af:58:ce:d7:c0:bc:2b:ee:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F43917327673645BD0B520BF95E9CA235CEFEB8
        Validity
            Not Before: Jan 30 06:47:38 2025 GMT
            Not After : Feb  4 10:38:38 2025 GMT
        Subject: CN=798AEE9975F9AC030725B8FAAF74495015A6E2E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:95:c2:0f:b1:19:b6:71:7f:d3:ea:86:83:4c:
                    ce:07:28:64:23:a9:d9:94:5a:b3:84:47:c1:bd:77:
                    ab:42:aa:b5:29:c2:45:5c:12:58:de:ed:81:4f:a2:
                    29:d6:1a:4c:c0:c9:75:ea:15:a1:8b:70:41:6d:8e:
                    11:88:2f:4f:27:c1:d6:9d:71:84:69:45:39:7c:66:
                    fd:e7:e9:66:8a:84:10:91:73:37:6d:5b:eb:f9:ac:
                    ce:0b:1f:10:01:62:4b:5b:47:92:aa:12:df:a5:f2:
                    6a:3a:67:d5:b3:4d:f3:e9:93:ae:39:0b:68:c8:6c:
                    a4:2e:65:5e:aa:cd:6a:80:c7:4b:10:7f:f8:2d:16:
                    ed:2a:79:8e:45:eb:10:81:c2:32:31:40:75:1d:04:
                    9d:6f:c2:5a:47:7a:7e:58:65:59:75:70:01:f1:94:
                    98:ab:18:c4:68:bd:51:10:7a:66:47:23:96:49:4b:
                    8a:3c:f7:00:4c:b0:53:79:61:5e:a3:2e:4d:53:69:
                    46:0e:ef:a7:b1:2b:92:35:f2:5b:2e:6d:da:95:e4:
                    66:b6:9a:24:17:e4:cc:dd:dd:b7:6f:f4:f5:bc:3a:
                    85:87:9f:ec:5b:bd:bc:95:ee:d3:3f:6a:66:d6:41:
                    76:99:6a:00:14:80:96:ea:87:ff:00:89:bb:5a:2d:
                    0e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8A:EE:99:75:F9:AC:03:07:25:B8:FA:AF:74:49:50:15:A6:E2:E4
            X509v3 Authority Key Identifier:
                keyid:4F:43:91:73:27:67:36:45:BD:0B:52:0B:F9:5E:9C:A2:35:CE:FE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:d7:0c:8a:18:08:fe:d5:ee:1b:e2:a9:39:71:91:d0:83:2a:
         12:08:ca:02:2d:b8:91:bb:04:85:cb:3a:30:e4:25:59:68:b5:
         fd:1a:55:d8:26:89:6c:9c:75:1c:30:84:dc:f4:d2:1c:48:0d:
         3e:4f:73:42:90:28:a8:71:e8:41:0f:f9:03:37:e9:7b:2f:8b:
         0d:bc:73:a8:9c:a1:ab:66:1a:61:6e:4d:c1:5c:24:99:31:8f:
         f1:39:2f:21:12:e8:7b:41:48:5e:3f:16:d7:48:9c:44:5b:72:
         fe:35:a6:d7:f7:6c:65:d6:a7:44:08:b4:1e:93:47:af:fd:29:
         48:0e:b2:4e:ac:bc:f9:37:73:a5:e5:5e:08:62:48:b7:77:9a:
         f5:cb:6c:48:d2:95:e1:9f:a8:9e:f3:1d:0f:4f:73:34:22:94:
         ed:f7:49:a9:84:fe:14:40:da:76:0c:33:5b:ec:7e:a8:f5:aa:
         b4:ef:b7:f1:52:fd:08:ec:f0:5d:b1:5b:2c:5f:16:d0:84:a3:
         76:9c:d2:10:72:6a:36:dd:5d:31:b7:a4:ff:ee:aa:64:57:58:
         08:58:1c:a5:77:fc:bb:0d:e5:7c:b9:9f:78:d7:05:1a:47:ef:
         08:c2:4d:04:42:06:c8:bd:b7:b3:47:84:cc:2e:38:1c:8a:b8:
         cd:3a:61:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----