Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.mft
File:                     BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.mft (raw, json)
Hash identifier:          xfXjjJQbXmQFPpm11K5W/grPgIxKmbc1ejHo+MzVlrQ=
Subject key identifier:   12:EB:C6:41:3C:B7:5D:36:77:C4:3B:65:E0:C7:B6:60:7E:D1:51:BA
Authority key identifier: BA:DB:47:5A:9B:AB:10:7E:D0:FE:EB:BC:1D:3B:CC:03:F0:F1:1C:4D
Certificate issuer:       /CN=BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D
Certificate serial:       3900F25D064C77B8861789F884CCF48B5FFE518E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.mft
Manifest number:          A4
Signing time:             Thu 30 Jan 2025 05:46:58 +0000
Manifest this update:     Thu 30 Jan 2025 05:41:58 +0000
Manifest next update:     Mon 03 Feb 2025 20:18:58 +0000
Files and hashes:         1: 323830333a346365303a3a2f33322d3332203d3e20323639393035.roa (hash: B2WodQgUpa0yidsrFqcxAUd4TIbRdbb9VSo319XQADk=)
                          2: BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.crl (hash: DftAdVPExa8ksLhXC6lBAHaSeVJ9KedXpx0s3Ro87Yw=)
                          3: 3139302e3131322e3136382e302f32322d3234203d3e20323639393035.roa (hash: lY/0FEZJ4GwSkTssn/tWnNtUxQbskYN1l5/hpktxnpE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:00:f2:5d:06:4c:77:b8:86:17:89:f8:84:cc:f4:8b:5f:fe:51:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D
        Validity
            Not Before: Jan 30 05:41:58 2025 GMT
            Not After : Feb  3 20:18:58 2025 GMT
        Subject: CN=12EBC6413CB75D3677C43B65E0C7B6607ED151BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:59:79:b0:53:4c:46:d9:68:f7:8e:7c:11:7f:
                    e2:d5:8d:fb:04:ce:d5:06:a4:6d:ff:f4:0a:b5:6d:
                    b0:8b:38:eb:31:a5:9f:98:94:7e:5b:43:e6:52:09:
                    12:ea:1f:70:3e:55:77:7c:3f:4d:b5:7f:3b:60:ce:
                    19:10:34:e1:f9:05:2b:b0:a8:7c:f8:4d:94:42:2d:
                    73:7d:03:6e:f0:2c:3a:ab:fb:50:ab:93:cf:1c:38:
                    2c:f7:5c:1e:43:4b:65:32:82:33:45:bf:7e:33:b5:
                    3d:13:c7:82:d3:95:b2:97:66:af:43:1e:58:39:76:
                    5a:ce:3b:0b:64:ef:36:7e:f1:35:ea:15:d3:43:e3:
                    dd:87:cc:94:23:c3:73:52:8a:69:63:d1:5f:11:df:
                    fe:f6:3b:d6:c6:40:e8:d0:21:7c:f4:39:42:ab:4a:
                    d1:46:5c:81:4d:6f:a4:8b:00:0d:e7:10:00:8f:c9:
                    b9:93:4c:9b:73:01:a1:d6:44:f1:20:76:99:f0:fc:
                    01:58:3b:7b:cb:3d:19:0e:f8:2c:6a:57:6d:c2:22:
                    ef:ae:be:cd:b6:d0:e0:ce:0c:03:7d:1e:ff:96:88:
                    47:b8:b2:e9:35:44:39:b3:70:1a:e3:7f:be:eb:96:
                    3e:3e:32:7c:41:d1:4f:95:36:46:3f:24:1b:97:28:
                    7e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EB:C6:41:3C:B7:5D:36:77:C4:3B:65:E0:C7:B6:60:7E:D1:51:BA
            X509v3 Authority Key Identifier:
                keyid:BA:DB:47:5A:9B:AB:10:7E:D0:FE:EB:BC:1D:3B:CC:03:F0:F1:1C:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:a0:a6:c2:12:38:b7:9e:fd:85:85:28:2a:87:80:97:16:bd:
         72:13:91:3e:e3:07:f3:9a:f2:16:df:d2:64:33:98:b6:f5:ab:
         20:86:49:45:0f:d3:e1:c3:a0:f4:2b:6a:e9:42:98:18:92:4b:
         b4:20:e0:80:ed:2f:8c:cc:01:42:5d:ad:e5:ae:28:5a:48:06:
         c3:65:83:84:b2:96:0a:f3:54:3b:50:b2:bf:6f:3c:d6:97:e6:
         69:fa:98:2f:3c:bd:b0:19:c0:98:34:b9:44:50:36:c7:e8:44:
         f3:70:2e:23:5b:60:38:cd:26:d0:04:12:11:3b:0d:fd:d4:c6:
         5d:64:2a:50:ef:23:a2:80:4f:40:7f:c5:67:0f:2f:e7:2c:c6:
         21:15:ca:49:6b:ec:78:de:57:1a:35:a8:f1:d7:2d:6a:50:b6:
         41:56:8e:88:39:3b:ef:86:fa:0d:c9:f4:17:bb:8c:de:18:0f:
         33:2b:b6:53:11:c9:b1:7a:69:06:c6:90:aa:fe:fd:7f:0b:83:
         ff:2a:87:b5:f1:d5:6e:fe:eb:91:84:a0:8e:70:b2:87:51:4f:
         3a:c2:54:88:8e:44:3f:d7:d5:b0:9a:fd:3a:22:92:38:80:fe:
         8a:44:2a:72:72:c5:11:15:86:04:2b:b1:78:11:88:2f:ba:78:
         b8:6e:38:01
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUOQDyXQZMd7iGF4n4hMz0i1/+UY4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFEQjQ3NUE5QkFCMTA3RUQwRkVFQkJDMUQzQkNDMDNG
MEYxMUM0RDAeFw0yNTAxMzAwNTQxNThaFw0yNTAyMDMyMDE4NThaMDMxMTAvBgNV
BAMTKDEyRUJDNjQxM0NCNzVEMzY3N0M0M0I2NUUwQzdCNjYwN0VEMTUxQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcWXmwU0xG2Wj3jnwRf+LVjfsE
ztUGpG3/9Aq1bbCLOOsxpZ+YlH5bQ+ZSCRLqH3A+VXd8P021fztgzhkQNOH5BSuw
qHz4TZRCLXN9A27wLDqr+1Crk88cOCz3XB5DS2UygjNFv34ztT0Tx4LTlbKXZq9D
Hlg5dlrOOwtk7zZ+8TXqFdND492HzJQjw3NSimlj0V8R3/72O9bGQOjQIXz0OUKr
StFGXIFNb6SLAA3nEACPybmTTJtzAaHWRPEgdpnw/AFYO3vLPRkO+CxqV23CIu+u
vs220ODODAN9Hv+WiEe4suk1RDmzcBrjf77rlj4+MnxB0U+VNkY/JBuXKH55AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUEuvGQTy3XTZ3xDtl4Me2YH7RUbowHwYDVR0j
BBgwFoAUuttHWpurEH7Q/uu8HTvMA/DxHE0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMjEwQkY0NEY0QTNDQTU0Qjg4RDRDMTU3NEI2MkMyNjM5
MjM1MDNCQkFCNDJBMDAzMEEyMDRBNjlGMjUzNjA1LzAvQkFEQjQ3NUE5QkFCMTA3
RUQwRkVFQkJDMUQzQkNDMDNGMEYxMUM0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQURCNDc1QTlCQUIxMDdFRDBG
RUVCQkMxRDNCQ0MwM0YwRjExQzRELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDIxMEJGNDRGNEEzQ0E1NEI4OEQ0QzE1NzRCNjJDMjYzOTIzNTAzQkJB
QjQyQTAwMzBBMjA0QTY5RjI1MzYwNS8wL0JBREI0NzVBOUJBQjEwN0VEMEZFRUJC
QzFEM0JDQzAzRjBGMTFDNEQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBsoKbCEji3nv2FhSgqh4CXFr1y
E5E+4wfzmvIW39JkM5i29asghklFD9Phw6D0K2rpQpgYkku0IOCA7S+MzAFCXa3l
rihaSAbDZYOEspYK81Q7ULK/bzzWl+Zp+pgvPL2wGcCYNLlEUDbH6ETzcC4jW2A4
zSbQBBIROw391MZdZCpQ7yOigE9Af8VnDy/nLMYhFcpJa+x43lcaNajx1y1qULZB
Vo6IOTvvhvoNyfQXu4zeGA8zK7ZTEcmxemkGxpCq/v1/C4P/Koe18dVu/uuRhKCO
cLKHUU86wlSIjkQ/19Wwmv06IpI4gP6KRCpycsURFYYEK7F4EYgvuni4bjgB
-----END CERTIFICATE-----