Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C0AEE2C7AC9A39DD8D8F7179EE944251370AC413D1E17137327071564714E20/0/53B789249C8E4F6C0983C68CAB7B40E7DF627C35.mft
File:                     53B789249C8E4F6C0983C68CAB7B40E7DF627C35.mft (raw, json)
Hash identifier:          QHYKTsDOQFuyJzROS2BC1InCajyhEEviQ0W5pyhtz3E=
Subject key identifier:   96:19:FA:91:A7:0C:65:B0:7F:3B:48:89:2B:4F:92:58:F8:C7:16:87
Authority key identifier: 53:B7:89:24:9C:8E:4F:6C:09:83:C6:8C:AB:7B:40:E7:DF:62:7C:35
Certificate issuer:       /CN=53B789249C8E4F6C0983C68CAB7B40E7DF627C35
Certificate serial:       5ED080F1C72A26DA034B68509F6F66E79F4D9B07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53B789249C8E4F6C0983C68CAB7B40E7DF627C35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C0AEE2C7AC9A39DD8D8F7179EE944251370AC413D1E17137327071564714E20/0/53B789249C8E4F6C0983C68CAB7B40E7DF627C35.mft
Manifest number:          A1
Signing time:             Wed 29 Jan 2025 18:45:23 +0000
Manifest this update:     Wed 29 Jan 2025 18:40:23 +0000
Manifest next update:     Tue 04 Feb 2025 02:39:23 +0000
Files and hashes:         1: 34352e37312e3138322e302f32342d3234203d3e20323632313836.roa (hash: VWM6fs7571eQ6ea8GOz+qzNbXHXu2WySUAW7NFF7frw=)
                          2: 34352e37312e3138312e302f32342d3234203d3e20323632313836.roa (hash: EEIUEdXLpv5q1rnYEOdIcZUuBb9UbipyxWxzIS03AWI=)
                          3: 34352e37312e3138302e302f32342d3234203d3e2033383136.roa (hash: BiVAwn1iz0dtGhFF5lAGg9GbN8TcJQCMGMM8akWigCY=)
                          4: 53B789249C8E4F6C0983C68CAB7B40E7DF627C35.crl (hash: y8zHtDccco1kkNAEqIFLMXXPHQAbHYvdNTTrvHWdoxE=)
                          5: 34352e37312e3138332e302f32342d3234203d3e20323632313836.roa (hash: gziAeL8jKgGBfvoguGVq+pC2zZRmqutZmGF2WEKwLPg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d0:80:f1:c7:2a:26:da:03:4b:68:50:9f:6f:66:e7:9f:4d:9b:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53B789249C8E4F6C0983C68CAB7B40E7DF627C35
        Validity
            Not Before: Jan 29 18:40:23 2025 GMT
            Not After : Feb  4 02:39:23 2025 GMT
        Subject: CN=9619FA91A70C65B07F3B48892B4F9258F8C71687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3b:2a:b4:cb:be:27:9d:d1:9c:88:15:25:f1:
                    d5:ee:a6:e0:8a:08:83:34:cf:aa:70:04:3a:24:21:
                    66:0a:d0:94:a4:f9:52:06:9d:09:dd:46:a6:09:87:
                    a2:4a:9f:4e:25:6d:80:c8:aa:00:99:ad:1c:e1:56:
                    87:fe:a0:71:52:b0:ab:dc:b9:e1:a9:a1:88:8a:ac:
                    ba:08:1b:bc:eb:4a:74:cb:7f:79:b4:41:cb:d5:7e:
                    72:55:9b:e1:b7:84:bc:28:86:72:87:44:c4:6e:50:
                    9f:ad:77:6f:66:2d:57:bb:9c:92:6b:0a:3e:0a:65:
                    3e:59:2f:7b:51:5f:6d:d8:f6:96:99:54:88:31:b3:
                    a8:89:43:94:7a:31:26:d2:a0:3d:ee:00:8e:30:29:
                    db:56:fd:4e:c1:aa:a8:ea:0f:ad:5c:12:60:73:23:
                    09:1a:4f:0e:b6:50:94:22:47:f0:00:61:83:bf:f6:
                    bc:bc:e3:b6:05:ab:5b:80:c2:84:f5:fd:01:10:a4:
                    e3:96:73:6a:cb:e1:80:3c:dd:a8:f7:a6:9a:da:54:
                    38:bf:99:e2:38:14:39:c0:81:59:c5:ae:20:3e:5e:
                    a9:e3:c8:6a:bc:d4:e3:ed:48:64:17:6d:8b:5c:00:
                    30:a1:fe:0e:1a:a9:f9:83:60:f5:3c:17:9e:39:5e:
                    48:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:19:FA:91:A7:0C:65:B0:7F:3B:48:89:2B:4F:92:58:F8:C7:16:87
            X509v3 Authority Key Identifier:
                keyid:53:B7:89:24:9C:8E:4F:6C:09:83:C6:8C:AB:7B:40:E7:DF:62:7C:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C0AEE2C7AC9A39DD8D8F7179EE944251370AC413D1E17137327071564714E20/0/53B789249C8E4F6C0983C68CAB7B40E7DF627C35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53B789249C8E4F6C0983C68CAB7B40E7DF627C35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C0AEE2C7AC9A39DD8D8F7179EE944251370AC413D1E17137327071564714E20/0/53B789249C8E4F6C0983C68CAB7B40E7DF627C35.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:a3:79:fd:35:29:4a:80:64:58:e6:8e:fb:db:50:9a:01:e4:
         ad:9a:cb:2a:c0:78:d7:c8:72:9d:da:89:62:d4:5b:26:93:3a:
         e9:86:e3:12:ac:87:13:e2:00:fc:0f:e3:a4:5b:6f:23:a6:fa:
         42:c4:1f:b0:e2:4b:99:39:4f:f7:c0:a0:95:7f:85:61:c0:6c:
         fe:40:19:27:9b:2a:e1:0b:32:e4:73:45:b5:e3:77:ef:10:72:
         e9:d6:10:d5:a8:1c:cf:e6:c7:3b:2f:3a:68:5e:10:e3:59:3f:
         74:fd:73:0b:cd:86:30:d7:dd:4b:e3:5d:6c:ec:db:38:ba:7d:
         0b:f1:85:42:b9:bf:17:9c:2f:b5:1d:68:8e:d9:71:6c:3c:75:
         69:37:5b:c4:14:f3:d6:f6:67:08:d8:59:a9:7a:83:8c:7d:3c:
         96:12:fb:96:9e:d9:9d:c8:e7:e8:45:ca:83:73:6c:98:e6:e1:
         2c:fa:40:d9:16:1d:54:02:cc:a3:51:7f:4a:b5:3c:f8:34:75:
         56:0d:5e:b4:ac:7b:24:7c:e8:04:ff:7b:4a:82:2d:8b:ca:2f:
         1e:e5:1c:3a:1b:52:1c:65:7c:e0:cd:94:2f:bd:ef:a9:1f:03:
         00:3e:ad:da:59:48:87:e3:36:9a:fa:bf:9c:39:44:4a:fb:85:
         c5:93:9b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----