Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/BA56744DBF20010C478D63405BC3FD8408043C5B.mft
File:                     BA56744DBF20010C478D63405BC3FD8408043C5B.mft (raw, json)
Hash identifier:          TaOOcfmGefv0QmrSdNMjTnNpkQbIRKKZajGyRKKGyeM=
Subject key identifier:   2A:C8:E0:25:57:E9:AA:52:85:3E:DD:5A:14:74:2F:FB:47:54:00:DD
Authority key identifier: BA:56:74:4D:BF:20:01:0C:47:8D:63:40:5B:C3:FD:84:08:04:3C:5B
Certificate issuer:       /CN=BA56744DBF20010C478D63405BC3FD8408043C5B
Certificate serial:       1F633982A5AB062569D69F8FC82232427C3CAAFC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA56744DBF20010C478D63405BC3FD8408043C5B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/BA56744DBF20010C478D63405BC3FD8408043C5B.mft
Manifest number:          AF
Signing time:             Fri 31 Jan 2025 18:29:54 +0000
Manifest this update:     Fri 31 Jan 2025 18:24:54 +0000
Manifest next update:     Wed 05 Feb 2025 18:13:54 +0000
Files and hashes:         1: 3230312e3231392e3132382e302f31392d3234203d3e203230303135.roa (hash: Ku86DV/q8lOv05GTcbgWkX20nHoEpZRYgTsE8ShUS3I=)
                          2: 3230312e3231392e3132392e302f32342d3234203d3e20323635353534.roa (hash: Tek2xCi2XzLbFcDR48b3eAvLNwHdJYwK7DPQ4Xt8qpE=)
                          3: 323830303a3239303a3a2f33322d3332203d3e203230303135.roa (hash: JoOkTOoL9+jxir4DE7/nyCeGWkgTVr8By00TyCWGFJ0=)
                          4: BA56744DBF20010C478D63405BC3FD8408043C5B.crl (hash: Skg1iJUX9GXhgBzpoJzIrq6+JK6/VoffFxzSGv9HKa0=)
                          5: 3230312e3231392e3133302e302f32342d3234203d3e20323635373035.roa (hash: hJU/HbsRuYa5KIWhCRV5O3x0tYUCgHNhwISH6xpCPwI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:63:39:82:a5:ab:06:25:69:d6:9f:8f:c8:22:32:42:7c:3c:aa:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA56744DBF20010C478D63405BC3FD8408043C5B
        Validity
            Not Before: Jan 31 18:24:54 2025 GMT
            Not After : Feb  5 18:13:54 2025 GMT
        Subject: CN=2AC8E02557E9AA52853EDD5A14742FFB475400DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c1:fc:e6:06:22:b1:01:4d:b1:49:cf:85:11:
                    5f:9a:aa:88:ff:9b:d6:18:03:88:0e:c8:b1:b0:be:
                    5b:6a:bb:b7:96:e2:e9:5e:47:be:25:fd:9f:af:87:
                    7a:dd:a4:1c:ee:f3:d4:29:25:2f:62:3f:c1:f0:f5:
                    62:e1:37:88:da:82:5b:9d:5d:33:ff:e8:7c:83:e2:
                    09:97:b5:96:e7:c3:db:ba:f3:56:b0:b3:2a:76:43:
                    f3:ca:10:24:56:4d:63:3c:9a:23:cf:6c:1e:48:6e:
                    fa:76:eb:fa:77:32:51:86:0a:56:6e:a0:7b:45:88:
                    72:81:9d:5a:6c:89:06:dc:b5:44:f9:0e:79:31:a5:
                    7c:4a:a6:54:a0:8d:c9:4c:71:87:0e:39:58:49:1a:
                    4a:1c:75:75:2a:f4:59:7e:f5:cd:aa:4a:f2:42:37:
                    50:6d:6c:06:04:1d:89:79:7b:1e:d7:42:b7:4e:02:
                    b3:67:2b:32:22:df:a8:6d:e9:fe:2c:2a:3c:0f:d9:
                    73:78:72:39:22:fb:b0:b5:55:4e:b5:a5:c5:7e:b8:
                    a8:8c:f6:8e:46:8f:21:31:fa:66:0b:09:2f:cb:62:
                    44:c0:22:8a:c6:19:09:0b:c6:ab:10:80:14:b4:15:
                    3a:b0:f1:68:77:6f:3b:73:f8:fe:c7:cc:4a:d0:b7:
                    78:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C8:E0:25:57:E9:AA:52:85:3E:DD:5A:14:74:2F:FB:47:54:00:DD
            X509v3 Authority Key Identifier:
                keyid:BA:56:74:4D:BF:20:01:0C:47:8D:63:40:5B:C3:FD:84:08:04:3C:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/BA56744DBF20010C478D63405BC3FD8408043C5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA56744DBF20010C478D63405BC3FD8408043C5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/BA56744DBF20010C478D63405BC3FD8408043C5B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:91:b8:65:07:1c:65:01:94:77:0f:8b:87:f7:d4:b5:a3:e7:
         1d:fb:72:97:06:e2:8c:eb:fe:10:1d:af:cf:84:2d:ea:fb:93:
         a3:58:e8:fe:7a:1c:cb:7b:01:a9:f2:24:56:31:e5:93:6b:cf:
         12:86:06:22:b1:06:fd:87:52:ef:23:e0:ff:0b:ad:ee:fc:53:
         fe:3f:30:b4:1b:e3:ad:4e:52:2c:6b:ce:bc:25:a0:a1:09:c0:
         f5:b3:5b:43:24:ab:c2:bf:ce:87:4f:87:cb:4d:db:31:e7:e4:
         f3:76:e6:ce:52:21:5c:04:bf:0e:98:22:07:e6:44:12:21:e1:
         8a:98:ed:e1:80:ce:36:90:87:0f:5f:98:f6:e1:59:0b:43:b4:
         b1:78:92:7a:6b:d5:e9:a2:e7:e7:b8:4c:51:74:fe:7d:53:5a:
         62:50:8b:5c:5c:1e:86:8b:90:48:94:ed:1c:85:c5:40:c8:f3:
         95:2c:14:6e:32:34:14:5c:e6:c6:fa:5e:d2:33:a8:a0:42:78:
         51:65:c9:0c:44:27:63:47:66:1c:5e:fe:f7:8d:2c:5f:9e:c7:
         52:a7:10:4f:e3:45:85:11:49:a4:f3:49:a0:02:b3:56:cb:b9:
         92:c5:4f:a3:62:1b:6f:3d:4c:d0:c3:ad:ae:ec:9b:63:ba:71:
         1c:3e:a1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----