Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.mft
File:                     0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.mft (raw, json)
Hash identifier:          433K9TUPPq+dImNkkzY/GgzRKAScEjML4Bakrqw7sfg=
Subject key identifier:   76:42:8C:DF:60:D0:6E:66:5C:8F:CD:0B:2E:40:DB:D2:82:7B:F2:B1
Authority key identifier: 0C:C5:AA:4B:ED:EA:9A:83:BD:E8:82:2A:77:47:21:10:B7:A5:7C:76
Certificate issuer:       /CN=0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76
Certificate serial:       16155B3871AB80249DEB8FD71843BBDCA2DB65DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.mft
Manifest number:          A6
Signing time:             Wed 29 Jan 2025 14:37:44 +0000
Manifest this update:     Wed 29 Jan 2025 14:32:44 +0000
Manifest next update:     Mon 03 Feb 2025 20:09:44 +0000
Files and hashes:         1: 323830333a383463303a3a2f33322d3332203d3e20323632313931.roa (hash: VqEh+03VH4RorD2YsXNIIRuwPd6/wb74u9io70jAv5Y=)
                          2: 3137302e37392e38382e302f32322d3232203d3e20323637383537.roa (hash: IgvT+xOQTMnmrWelE+aRk3dwG8czefB3C2XLMiGzhBQ=)
                          3: 0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.crl (hash: DDtWQEvNaUupOrUb73Vd1d8+gZA3q9BTS0QxlxeX94I=)
                          4: 3137302e37392e39302e302f32332d3233203d3e20323637383537.roa (hash: BcAHr6bY+26okzPRkefda2fa9I4bE3A6LznX57JwCjA=)
                          5: 3137302e37392e38392e302f32342d3234203d3e20323637383537.roa (hash: sQwjNkUItymXl9tS6PNzo5f79YnrjSSwTVtSSZlFCgU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:15:5b:38:71:ab:80:24:9d:eb:8f:d7:18:43:bb:dc:a2:db:65:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76
        Validity
            Not Before: Jan 29 14:32:44 2025 GMT
            Not After : Feb  3 20:09:44 2025 GMT
        Subject: CN=76428CDF60D06E665C8FCD0B2E40DBD2827BF2B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:be:b6:f9:8b:2e:2d:25:0a:9b:2a:d4:93:2d:
                    4a:df:46:01:77:8b:f1:47:d7:f4:87:a7:72:4b:f9:
                    73:64:e7:07:60:78:fc:b5:24:34:0d:10:05:61:d9:
                    aa:0b:e1:a3:bf:72:1d:c0:66:77:d5:60:d3:0a:5b:
                    fe:f7:61:cd:d1:fe:95:4c:62:77:38:07:ef:ef:13:
                    3c:94:6c:d1:7f:a7:ef:eb:a3:76:17:44:ab:1c:c3:
                    02:3b:95:5c:05:1f:10:e5:16:6b:c5:ae:f0:1b:7f:
                    99:7b:d5:26:56:5a:cd:ed:3a:18:4c:8a:5f:e9:02:
                    d2:fd:2b:49:11:6e:7d:7f:68:24:a7:b3:c7:cb:54:
                    57:04:c8:65:70:86:a2:88:9b:17:49:22:3a:da:7f:
                    52:27:dd:5f:1a:69:c2:df:08:37:af:d6:79:8d:cc:
                    94:58:b6:2c:f9:0e:e2:f9:a1:f8:67:0a:e2:68:4a:
                    3f:ae:7c:c1:da:ce:b5:bf:88:b9:21:78:87:d4:0c:
                    14:7b:3c:29:91:a3:01:3b:e1:55:bf:bf:57:a3:d9:
                    2b:d3:f9:8a:ec:c4:c8:5f:79:22:9c:74:02:ea:a0:
                    f1:40:a2:52:81:be:ef:59:29:16:db:04:c1:91:98:
                    76:79:ff:c5:99:f4:b1:3d:e2:dc:0c:db:6e:22:e8:
                    a6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:42:8C:DF:60:D0:6E:66:5C:8F:CD:0B:2E:40:DB:D2:82:7B:F2:B1
            X509v3 Authority Key Identifier:
                keyid:0C:C5:AA:4B:ED:EA:9A:83:BD:E8:82:2A:77:47:21:10:B7:A5:7C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:b2:7c:89:d4:c2:76:0e:b6:af:c1:e9:54:9b:c7:8e:9c:3e:
         95:38:a0:3b:e8:61:7d:8e:72:7b:c2:eb:03:58:7b:9e:9d:7b:
         31:12:a8:31:61:b9:c4:5f:c6:13:cb:cf:ad:4d:43:6f:8e:5f:
         02:6a:58:43:8b:c1:2c:04:8a:56:94:5d:cf:23:5d:63:cf:85:
         c8:cf:91:5b:77:d5:d1:33:e8:da:53:bb:9f:b6:e0:b5:92:e7:
         b5:4b:b3:95:50:52:5f:09:65:36:65:b6:a8:1a:a1:24:3b:55:
         9f:49:4a:24:20:c8:4c:a5:eb:a1:59:a6:89:19:ff:03:f6:5c:
         fa:d3:2f:9c:bf:85:d2:5d:43:d5:73:e3:f1:8c:4b:d7:bc:60:
         09:61:b8:64:78:e8:7b:53:c6:85:af:b2:67:ca:1f:8c:58:e3:
         36:81:42:f7:c9:40:cd:17:34:ee:ad:ff:0f:3c:92:04:71:36:
         71:15:cc:76:51:5e:84:9a:05:16:88:86:f7:a4:1c:31:a1:81:
         96:72:6a:ba:d9:6a:f4:15:d9:fc:62:3f:2a:66:35:41:0c:30:
         e7:10:b2:14:b7:ac:69:98:4c:d8:33:89:1d:a2:8f:1c:fa:35:
         66:47:8f:28:c5:06:f1:c2:b4:84:6a:84:ed:8c:9d:23:91:9a:
         f4:44:fd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----