Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/B06551473984A7D021CE4C930068D4DD4CBA142A.mft
File:                     B06551473984A7D021CE4C930068D4DD4CBA142A.mft (raw, json)
Hash identifier:          2WpgncgN6UCelMARnm0cEII8lL6SSiW6ecv4SLf5xBw=
Subject key identifier:   92:E1:0A:C1:7F:01:31:0A:61:FE:0E:74:3F:F0:06:AD:F4:49:84:3F
Authority key identifier: B0:65:51:47:39:84:A7:D0:21:CE:4C:93:00:68:D4:DD:4C:BA:14:2A
Certificate issuer:       /CN=B06551473984A7D021CE4C930068D4DD4CBA142A
Certificate serial:       35FD3A4A11536FAA1D3FAB5EF26F8AA8D3DC5AEC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B06551473984A7D021CE4C930068D4DD4CBA142A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/B06551473984A7D021CE4C930068D4DD4CBA142A.mft
Manifest number:          A5
Signing time:             Thu 30 Jan 2025 13:01:28 +0000
Manifest this update:     Thu 30 Jan 2025 12:56:28 +0000
Manifest next update:     Tue 04 Feb 2025 11:35:28 +0000
Files and hashes:         1: 3139302e3131302e3132302e302f32312d3234203d3e203430363736.roa (hash: 3Vhloazgk/Ih6ByeY01malVE8ODvyr+qd51N/JXyyRA=)
                          2: B06551473984A7D021CE4C930068D4DD4CBA142A.crl (hash: i0S4ILiu+xjfKsWC84qqj207+3hcZZkSS8P3pMdHz20=)
                          3: 3230312e3135392e3136382e302f32312d3234203d3e203430363736.roa (hash: NopSYDJ4ALFrBihTmIU4z5cPKiQdMeCpdG1pimozRis=)
                          4: 3230312e3135392e3136382e302f32312d3234203d3e20323632323536.roa (hash: K7Yt8WUbfFR22Ki1d0U16O+OVXG1ZqMRIGIc/fhjb6Q=)
                          5: 3139302e3131302e3132302e302f32312d3234203d3e20323632323536.roa (hash: 4D+Yjn0oW6pdkKSX5vYc1A8LMv8wHdzQisFK7OGyYQo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:fd:3a:4a:11:53:6f:aa:1d:3f:ab:5e:f2:6f:8a:a8:d3:dc:5a:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B06551473984A7D021CE4C930068D4DD4CBA142A
        Validity
            Not Before: Jan 30 12:56:28 2025 GMT
            Not After : Feb  4 11:35:28 2025 GMT
        Subject: CN=92E10AC17F01310A61FE0E743FF006ADF449843F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:eb:0b:b5:2a:00:c0:fe:ae:86:d3:a1:aa:ce:
                    fd:6b:98:aa:a5:e6:52:66:19:c4:b4:47:13:8a:e3:
                    31:7c:33:65:1f:ca:f6:2f:89:bb:b0:35:5e:2f:4d:
                    34:86:aa:05:bb:ae:54:6c:af:cf:e3:8b:41:a4:a7:
                    b9:14:1a:a7:40:64:73:a2:ee:43:0b:dc:51:eb:d3:
                    13:5c:73:45:42:35:d9:76:96:8e:42:ae:d8:42:04:
                    46:20:c6:57:e6:ef:e1:3c:74:bb:52:30:1a:b5:4d:
                    7f:73:f5:9d:c3:38:66:89:b3:52:d2:8b:93:63:ee:
                    e0:c4:bc:94:3a:6f:80:b7:d9:3a:33:24:eb:4e:95:
                    9a:d0:21:3e:98:97:44:f0:87:95:fe:aa:e1:7d:ad:
                    f5:9c:0c:4b:52:f0:87:1a:04:a2:07:fc:ac:4d:ff:
                    49:52:dc:56:5c:5d:89:78:8f:a4:8a:d6:a9:3c:92:
                    25:46:ac:46:2b:3d:bd:7f:d3:f4:7a:27:d2:8e:d9:
                    3a:10:bc:33:1c:d3:13:56:84:a5:0c:0c:65:df:f5:
                    00:2a:8d:43:f7:da:18:3f:1f:28:bf:03:12:07:31:
                    74:a5:a5:75:79:74:33:1a:65:4f:01:3e:0a:c1:56:
                    ea:fc:7d:d1:b2:79:d4:c2:40:59:12:0b:0b:5a:13:
                    14:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E1:0A:C1:7F:01:31:0A:61:FE:0E:74:3F:F0:06:AD:F4:49:84:3F
            X509v3 Authority Key Identifier:
                keyid:B0:65:51:47:39:84:A7:D0:21:CE:4C:93:00:68:D4:DD:4C:BA:14:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/B06551473984A7D021CE4C930068D4DD4CBA142A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B06551473984A7D021CE4C930068D4DD4CBA142A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/B06551473984A7D021CE4C930068D4DD4CBA142A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:bd:69:92:23:b0:4d:27:e9:76:cc:2b:9d:e3:49:59:bc:63:
         f2:01:6a:62:0a:fb:10:95:61:d6:04:f5:40:08:15:58:e6:bd:
         8a:45:ff:3a:84:a3:e3:4d:63:ba:f8:56:cc:76:14:64:d7:d1:
         41:2a:bc:d4:d7:46:1f:94:c2:ef:1a:12:94:30:77:b3:27:56:
         45:c4:b0:f7:0f:fa:9f:0a:1a:70:87:07:a3:b2:c4:f7:b6:37:
         88:86:79:20:cc:a1:80:b0:2b:4c:64:ba:11:1c:12:3e:51:cb:
         aa:d6:62:21:1a:26:7c:55:54:66:a0:50:c8:90:c9:ee:a3:2f:
         c8:e5:cc:07:dd:54:ef:fe:c5:a7:56:e9:8b:8a:2d:49:5d:5a:
         89:9e:f1:8e:3d:96:e7:d9:2b:e7:c5:33:ee:ff:16:65:6a:7d:
         1d:89:dc:3a:8b:d5:5a:51:6d:e5:0f:93:0b:fb:d7:d6:d6:a1:
         99:95:be:5e:2f:09:7d:36:24:6a:1e:1c:87:c9:12:06:8e:68:
         19:aa:5c:f5:f6:07:60:c4:60:40:69:56:ae:0d:dc:6a:48:a9:
         c0:7b:88:92:ad:a5:75:04:d9:47:54:96:e8:cb:5c:12:93:43:
         99:83:13:50:d2:25:8e:ae:0c:1f:81:69:75:51:b9:b3:28:d6:
         2d:34:c4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----