Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/74CB08D6E0688F8E499DD91190E49000CC837759.mft
File:                     74CB08D6E0688F8E499DD91190E49000CC837759.mft (raw, json)
Hash identifier:          s5qjTkZGKzBmkGBB8eyYSGjdoSNCVgnjMCLpoKbP2q0=
Subject key identifier:   A8:3C:FE:22:90:4C:33:FA:9B:4C:93:07:73:BC:95:72:B2:B7:06:03
Authority key identifier: 74:CB:08:D6:E0:68:8F:8E:49:9D:D9:11:90:E4:90:00:CC:83:77:59
Certificate issuer:       /CN=74CB08D6E0688F8E499DD91190E49000CC837759
Certificate serial:       762341A6A68A32953E486494996D967BF78A4862
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74CB08D6E0688F8E499DD91190E49000CC837759.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/74CB08D6E0688F8E499DD91190E49000CC837759.mft
Manifest number:          A3
Signing time:             Fri 31 Jan 2025 05:52:10 +0000
Manifest this update:     Fri 31 Jan 2025 05:47:10 +0000
Manifest next update:     Wed 05 Feb 2025 17:45:10 +0000
Files and hashes:         1: 323830333a383163303a3a2f33322d3634203d3e20323633323338.roa (hash: SgTxLSzLsdjhWkmTg/RfWntYsGeU9Wtn9FMqJgBTNg8=)
                          2: 74CB08D6E0688F8E499DD91190E49000CC837759.crl (hash: rCEwllEtjcwfDFHwiVkc4ZYBm4VVOX4b47GDHRod/qc=)
                          3: 3137392e36302e3138382e302f32322d3234203d3e20323633323338.roa (hash: dlYbca+82U/jtrVPfJ4eS6rTi1fcEfY19Lua4m8BPzg=)
                          4: 34352e342e3230302e302f32322d3234203d3e20323633323338.roa (hash: PH1Qo1MoMGVz5CtYTA5Ly0hAQBuytNdtai0GP2nR8XM=)
                          5: 3139332e33302e31322e302f32322d3234203d3e20323633323338.roa (hash: nwGQ3yqUuxGGg+SJxDgb2f6R5B+Ve2SIdikAMF2rjlc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:23:41:a6:a6:8a:32:95:3e:48:64:94:99:6d:96:7b:f7:8a:48:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74CB08D6E0688F8E499DD91190E49000CC837759
        Validity
            Not Before: Jan 31 05:47:10 2025 GMT
            Not After : Feb  5 17:45:10 2025 GMT
        Subject: CN=A83CFE22904C33FA9B4C930773BC9572B2B70603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6b:34:a6:41:2d:71:2f:89:ad:db:a2:35:03:
                    87:9c:99:4b:b1:65:6f:cc:6e:28:b2:f4:42:1b:96:
                    f9:22:ac:e3:e9:95:a9:f3:da:4a:3f:22:62:7d:43:
                    04:8a:2e:85:14:5e:b5:a3:2f:a0:f1:f8:44:82:ac:
                    e2:6a:c6:80:ae:30:78:2e:76:17:5c:27:4e:dd:bb:
                    47:af:53:4e:3c:47:49:87:ff:6f:8e:cc:e9:05:c5:
                    67:a6:3c:57:90:49:d6:61:34:fa:a4:83:1b:0e:3b:
                    83:eb:83:b9:fd:6a:bf:76:fe:eb:02:f2:fd:4e:10:
                    c6:36:00:8c:3e:81:b2:15:59:41:22:bc:a1:f2:36:
                    38:61:ed:bd:b6:bd:60:50:81:ae:23:69:a5:03:23:
                    9b:8c:ce:df:41:97:ee:86:7e:3c:80:eb:fc:2b:49:
                    ef:3c:99:43:07:80:50:1f:2a:3b:b4:be:dc:b9:8f:
                    71:99:62:ac:ba:30:9a:16:e4:4c:62:a7:6d:73:3a:
                    b0:ad:ef:05:16:48:bc:54:c2:2f:56:06:81:62:c7:
                    e1:bc:d2:8d:da:e2:7b:05:30:6a:69:02:3a:5b:37:
                    ca:43:da:aa:81:66:7d:13:c0:46:c8:f3:ba:8c:31:
                    22:e7:73:7a:d0:16:8f:53:ad:ad:d0:85:d2:85:42:
                    3d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:3C:FE:22:90:4C:33:FA:9B:4C:93:07:73:BC:95:72:B2:B7:06:03
            X509v3 Authority Key Identifier:
                keyid:74:CB:08:D6:E0:68:8F:8E:49:9D:D9:11:90:E4:90:00:CC:83:77:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/74CB08D6E0688F8E499DD91190E49000CC837759.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74CB08D6E0688F8E499DD91190E49000CC837759.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/74CB08D6E0688F8E499DD91190E49000CC837759.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:78:a9:6b:ee:1f:30:3e:73:61:92:73:46:da:ba:38:d7:63:
         36:a1:e2:11:e6:6a:78:da:73:dd:e2:2a:13:9a:1a:6d:75:6a:
         85:d2:fd:a6:61:12:9b:d5:9d:29:ef:98:07:e0:cf:1c:93:57:
         70:05:0f:d6:d8:de:b2:c9:9e:f3:1a:d0:13:dc:0a:ff:36:3c:
         db:0f:40:58:fd:45:07:7c:bd:4b:5b:61:d8:aa:74:33:a5:bd:
         82:c5:d8:a6:f1:af:2c:b4:62:df:95:6a:5a:94:be:ac:b2:2e:
         6c:03:88:14:00:8b:21:77:03:fb:f4:8d:cf:7b:eb:5c:fd:2f:
         51:2a:f9:a0:c9:8b:89:07:3b:f5:ee:7f:d1:5d:18:a0:bc:fd:
         5d:55:7d:75:dc:5e:dc:2b:16:b8:e9:0d:2b:07:f6:40:ac:7b:
         32:53:d5:9d:ff:37:e9:f5:52:ab:96:d6:ab:ea:44:35:7d:35:
         76:9a:54:cf:16:2f:c4:42:20:54:c3:33:9e:fa:12:70:44:37:
         e8:7b:ea:c3:fe:13:34:d6:b6:c6:1e:c0:9e:f4:3d:01:18:ea:
         61:4a:a9:21:e2:ed:06:5f:01:df:bf:08:5c:6f:8c:d0:90:4d:
         ac:99:02:18:7f:dc:3f:af:dc:36:6c:c4:9e:6f:8f:f4:52:69:
         fb:55:dd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----