Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/124650AA869959E50101F007463E8A04CD82187D3487D6E94536A4E8926B30BB/0/1D5CEF406A72433445147FEB34D82682345AF563.mft
File:                     1D5CEF406A72433445147FEB34D82682345AF563.mft (raw, json)
Hash identifier:          JVdlS9rH65MijlWHit4J6yRQ/wprw+Vs6khmw1AnDT8=
Subject key identifier:   59:9C:64:8F:A2:85:D9:39:3A:9D:F7:45:E9:A6:E6:4C:FF:E8:21:79
Authority key identifier: 1D:5C:EF:40:6A:72:43:34:45:14:7F:EB:34:D8:26:82:34:5A:F5:63
Certificate issuer:       /CN=1D5CEF406A72433445147FEB34D82682345AF563
Certificate serial:       7A73A460A41BE65FDDAA97AB6E0141139F4BB008
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D5CEF406A72433445147FEB34D82682345AF563.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/124650AA869959E50101F007463E8A04CD82187D3487D6E94536A4E8926B30BB/0/1D5CEF406A72433445147FEB34D82682345AF563.mft
Manifest number:          A4
Signing time:             Fri 31 Jan 2025 16:28:34 +0000
Manifest this update:     Fri 31 Jan 2025 16:23:34 +0000
Manifest next update:     Wed 05 Feb 2025 09:03:34 +0000
Files and hashes:         1: 1D5CEF406A72433445147FEB34D82682345AF563.crl (hash: f/B4qbfg0OQt6PdDXRjLWFTc42f78K51E/C4YN0VwBU=)
                          2: 34352e3138302e34362e302f32332d3234203d3e20323637393234.roa (hash: S5qTl+qgaq9EuwJyiOjpmAbvrvwEfdCbD5GuUVkV8Us=)
                          3: 34352e3138302e34352e302f32342d3234203d3e20323634363638.roa (hash: 3R42cWFrfE6YH+iu/YN+EPx2nykVkC65d38c2xrMkt0=)
                          4: 323830333a646536303a3a2f33322d3438203d3e20323637393234.roa (hash: VN2NfjEBuVmt+bAI6zQLq/K/DKpwnXFw2ELZlHyqTp0=)
                          5: 34352e3138302e34352e302f32342d3234203d3e20323637393234.roa (hash: KuLb4I4tbQjek9wb2pDz7/fmQzeL9Ind4UhSRO3Zq5Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:73:a4:60:a4:1b:e6:5f:dd:aa:97:ab:6e:01:41:13:9f:4b:b0:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D5CEF406A72433445147FEB34D82682345AF563
        Validity
            Not Before: Jan 31 16:23:34 2025 GMT
            Not After : Feb  5 09:03:34 2025 GMT
        Subject: CN=599C648FA285D9393A9DF745E9A6E64CFFE82179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:73:de:42:79:d4:ed:8b:9e:d2:ed:ad:bf:97:
                    06:06:3b:95:ac:39:f8:f7:06:1b:12:9f:11:7a:b7:
                    37:28:6c:2c:a8:25:13:4e:c4:68:31:1a:48:43:2b:
                    54:8f:d1:20:2e:c4:19:84:b8:33:bc:dd:1a:0c:9b:
                    e6:ce:08:e8:30:c3:a1:42:3b:3c:87:9d:db:d7:f8:
                    b2:0b:8e:f5:ec:17:c7:96:1c:35:ab:73:b9:33:51:
                    f2:6e:be:4a:ff:47:68:c3:5c:ec:5d:8b:a9:a8:a0:
                    0f:bf:9b:d2:7d:e2:54:81:4c:1f:0e:f8:15:b6:2f:
                    f6:ad:9e:2a:82:61:61:63:f6:93:8f:f4:1e:3f:ff:
                    21:5a:7c:00:c7:51:9e:f8:56:ae:d1:0e:8d:1c:5c:
                    8c:e4:d3:2d:57:dd:2e:06:5f:41:eb:50:5d:89:7f:
                    83:89:f6:9b:41:e0:f1:c8:42:2a:37:cc:78:79:a6:
                    dc:08:40:d0:24:20:01:e6:2f:06:86:f4:30:26:21:
                    93:40:3b:60:bb:39:c4:6a:b2:f1:48:46:5d:ac:b3:
                    60:8d:bb:43:a7:c8:16:0a:d1:f5:72:11:48:f7:c8:
                    90:22:85:b6:91:67:96:d2:5e:d2:bc:65:41:ef:bc:
                    4d:c4:19:3b:dd:60:b4:ae:ef:61:a1:b6:5b:14:13:
                    cc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9C:64:8F:A2:85:D9:39:3A:9D:F7:45:E9:A6:E6:4C:FF:E8:21:79
            X509v3 Authority Key Identifier:
                keyid:1D:5C:EF:40:6A:72:43:34:45:14:7F:EB:34:D8:26:82:34:5A:F5:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/124650AA869959E50101F007463E8A04CD82187D3487D6E94536A4E8926B30BB/0/1D5CEF406A72433445147FEB34D82682345AF563.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D5CEF406A72433445147FEB34D82682345AF563.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/124650AA869959E50101F007463E8A04CD82187D3487D6E94536A4E8926B30BB/0/1D5CEF406A72433445147FEB34D82682345AF563.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:3c:0b:a2:f9:6f:40:f3:71:8d:bc:8c:e3:d0:7d:ef:66:8c:
         e5:8b:35:02:4e:15:8f:56:e0:5a:33:62:60:18:63:55:03:ff:
         9c:44:48:a6:21:fb:d6:0c:d1:d9:7f:91:e0:b6:3d:ba:9f:ca:
         7f:b9:e2:92:e4:ea:bf:77:c1:67:f8:cb:ad:5a:78:aa:06:6b:
         5e:34:c8:4a:cb:14:5b:70:e1:f0:f5:b0:ca:de:69:a2:0c:78:
         85:f7:77:d1:29:16:01:9f:75:0e:51:b2:6c:c2:6a:b7:0b:43:
         4d:6d:30:34:1d:fc:6b:e4:86:e2:91:57:d4:8e:d6:39:e9:f8:
         f1:5f:eb:05:38:9e:c3:b3:da:92:cf:04:34:0c:b4:5e:01:d3:
         ef:7d:34:07:8f:90:92:b7:94:5d:df:8a:7f:51:4f:a1:bd:84:
         92:0b:a0:06:de:ea:7c:29:ee:a6:1a:5c:81:53:42:6f:94:46:
         ee:35:44:51:2a:10:20:77:22:cc:0e:4d:1a:7b:da:d4:69:1f:
         1f:3d:28:3e:12:12:2c:6b:2a:d3:98:f0:5f:93:28:05:13:95:
         52:dc:55:c1:56:e0:5d:3b:a7:5a:37:9b:73:8b:30:2b:28:7c:
         7b:bd:ae:d8:82:c8:79:25:d0:50:92:7d:03:96:fb:47:07:c0:
         ca:c3:16:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----