Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5A734E16E6ABBB53E15B4D68B29F4F67D8872E668327E80D621317B44EC9F43/0/4B3F2C3B9400A00589FBD7508D0121FE03E18E0E.mft
File:                     4B3F2C3B9400A00589FBD7508D0121FE03E18E0E.mft (raw, json)
Hash identifier:          2gd4eADsr11QzGctMMFnb/uNwBMqT2V1QdH54RdHpzI=
Subject key identifier:   5F:7B:B3:BC:50:21:F4:70:99:A0:2A:7A:89:D4:8C:8F:CC:D0:DA:27
Authority key identifier: 4B:3F:2C:3B:94:00:A0:05:89:FB:D7:50:8D:01:21:FE:03:E1:8E:0E
Certificate issuer:       /CN=4B3F2C3B9400A00589FBD7508D0121FE03E18E0E
Certificate serial:       0BC71936A82D8D14E3EEC5605C2818428444A957
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B3F2C3B9400A00589FBD7508D0121FE03E18E0E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5A734E16E6ABBB53E15B4D68B29F4F67D8872E668327E80D621317B44EC9F43/0/4B3F2C3B9400A00589FBD7508D0121FE03E18E0E.mft
Manifest number:          AE
Signing time:             Fri 31 Jan 2025 07:12:59 +0000
Manifest this update:     Fri 31 Jan 2025 07:07:59 +0000
Manifest next update:     Wed 05 Feb 2025 02:09:59 +0000
Files and hashes:         1: 4B3F2C3B9400A00589FBD7508D0121FE03E18E0E.crl (hash: D/HKPEMd7KD5yVu0rl+TPkYCwOaryR9GYmTkDrdsWcM=)
                          2: 323830333a633530303a3a2f33322d3332203d3e20323633323330.roa (hash: OvAvnFqNYTWMNM/wPBh09HyHTbDEcE71YV9qaPskwZM=)
                          3: 3230302e3132332e3231362e302f32312d3234203d3e20323633323330.roa (hash: hQiC4X3xtG/af5YsjEXBcVvnPy9ZtgT6X5fqMuvbbjI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c7:19:36:a8:2d:8d:14:e3:ee:c5:60:5c:28:18:42:84:44:a9:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B3F2C3B9400A00589FBD7508D0121FE03E18E0E
        Validity
            Not Before: Jan 31 07:07:59 2025 GMT
            Not After : Feb  5 02:09:59 2025 GMT
        Subject: CN=5F7BB3BC5021F47099A02A7A89D48C8FCCD0DA27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:51:8b:5f:01:ac:b3:cc:51:c6:11:b8:7a:9c:
                    91:fc:5d:d0:df:70:28:92:cd:f6:38:8c:c1:2d:5f:
                    17:f2:44:aa:0d:b2:3b:3c:dd:d2:e4:6f:f1:be:97:
                    99:aa:e3:5e:4e:7b:19:d7:7a:f9:90:b1:ca:fd:b1:
                    7c:f8:ce:d3:78:f6:04:a6:d0:2a:87:44:98:ad:79:
                    4f:6b:bf:89:7e:a1:92:a8:32:be:40:c4:ff:08:6e:
                    13:79:2e:19:d0:c1:89:d0:c5:67:41:15:58:bd:c9:
                    bc:d6:c8:5e:ca:94:9f:d8:df:f6:f6:49:eb:2f:ce:
                    6b:aa:99:b5:00:1f:d0:c2:fe:55:00:8a:b0:57:fd:
                    ab:03:53:64:88:58:19:e3:8a:df:57:24:30:3d:0c:
                    31:e2:77:97:7c:39:12:ca:ca:76:92:3b:2d:e2:12:
                    70:c8:e5:9d:3a:52:ec:94:c9:1c:5c:90:75:7b:25:
                    75:79:ec:2b:4a:a8:34:b8:5e:d4:1b:29:0f:0b:22:
                    1c:2f:dd:da:3b:66:72:79:02:6a:a4:99:ba:58:a1:
                    80:c5:47:d8:de:bf:fb:3d:5a:41:c9:c6:c3:79:f9:
                    cf:7b:e9:fb:8f:03:f0:58:ed:29:8b:b8:34:54:71:
                    80:fe:8d:88:c9:64:3a:93:77:3d:da:3d:41:69:0c:
                    42:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7B:B3:BC:50:21:F4:70:99:A0:2A:7A:89:D4:8C:8F:CC:D0:DA:27
            X509v3 Authority Key Identifier:
                keyid:4B:3F:2C:3B:94:00:A0:05:89:FB:D7:50:8D:01:21:FE:03:E1:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5A734E16E6ABBB53E15B4D68B29F4F67D8872E668327E80D621317B44EC9F43/0/4B3F2C3B9400A00589FBD7508D0121FE03E18E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B3F2C3B9400A00589FBD7508D0121FE03E18E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5A734E16E6ABBB53E15B4D68B29F4F67D8872E668327E80D621317B44EC9F43/0/4B3F2C3B9400A00589FBD7508D0121FE03E18E0E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:60:81:99:bc:c4:a2:23:5e:81:42:62:0c:e5:aa:ed:7e:8b:
         ae:b6:b1:2a:c7:1a:3f:81:86:b4:78:1b:a9:87:90:96:5c:24:
         e6:9e:71:c6:85:14:77:d0:4f:a5:1b:22:41:b1:26:02:30:c3:
         b0:e0:88:c3:2a:d8:66:cb:68:22:a9:ed:0f:6d:b4:b8:04:56:
         09:9f:eb:58:85:82:30:03:de:15:47:62:ee:76:49:a8:40:92:
         2c:1e:a9:fe:06:a7:57:26:ee:f2:1a:8a:e8:07:7b:22:69:11:
         5a:c1:95:a6:58:86:1e:f6:10:e3:cf:fd:42:d8:65:6c:3d:06:
         0d:c5:43:75:52:0c:66:46:c8:0b:20:be:93:29:09:1e:a0:b0:
         2f:ac:12:3e:a3:33:a5:79:f6:08:d1:ec:3d:3f:09:bd:45:26:
         7d:27:24:ec:92:e0:5b:8a:ce:be:21:48:65:33:af:b7:74:a2:
         a6:d6:77:cf:4a:d9:bf:ea:2b:ed:b7:e8:d3:65:df:7b:07:d1:
         d1:fd:fa:c1:0c:07:8b:0f:68:3a:b4:78:37:89:e6:39:fc:61:
         21:c7:c8:3f:75:51:90:c2:1d:5f:68:55:f0:8a:89:64:6e:58:
         15:e8:44:39:6d:73:cc:ce:d5:df:30:98:d8:dd:b4:6a:a2:d4:
         a1:ca:49:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----