Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D597C5D3A278EA56F9B0B669807AF2EA429D758CF27567E05936C3E80DC3CFE/0/6C43D070D53868DD0F1A352EAB84A7642B5CEF73.mft
File:                     6C43D070D53868DD0F1A352EAB84A7642B5CEF73.mft (raw, json)
Hash identifier:          2ISXbOuEv6Mb/5S6k0rOSYApkQ1nUtyV/T21GALhkmA=
Subject key identifier:   59:B2:D9:94:1E:DF:25:BD:69:E0:67:64:E2:C1:FC:48:7A:A1:AC:40
Authority key identifier: 6C:43:D0:70:D5:38:68:DD:0F:1A:35:2E:AB:84:A7:64:2B:5C:EF:73
Certificate issuer:       /CN=6C43D070D53868DD0F1A352EAB84A7642B5CEF73
Certificate serial:       3787A7B818D4F2020B82A0157A89C16F29559BC5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C43D070D53868DD0F1A352EAB84A7642B5CEF73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D597C5D3A278EA56F9B0B669807AF2EA429D758CF27567E05936C3E80DC3CFE/0/6C43D070D53868DD0F1A352EAB84A7642B5CEF73.mft
Manifest number:          A4
Signing time:             Thu 30 Jan 2025 16:48:46 +0000
Manifest this update:     Thu 30 Jan 2025 16:43:46 +0000
Manifest next update:     Tue 04 Feb 2025 07:04:46 +0000
Files and hashes:         1: 34352e3232342e3132342e302f32322d3234203d3e203532333237.roa (hash: 7wQiP/M8694BlNpRFjqaUBKPf8M4LJZjGOr4B5SF+Dk=)
                          2: 6C43D070D53868DD0F1A352EAB84A7642B5CEF73.crl (hash: p/zZcnoNxm6OJRKqCndEgM+EXSo6RB3Lrex7uRt28rY=)
                          3: 323830333a336132303a3a2f33322d3438203d3e203532333237.roa (hash: u/n3ozSJU0jxUeaexK4F5qZzOLPFSN9DlmxjoPxgrtg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:87:a7:b8:18:d4:f2:02:0b:82:a0:15:7a:89:c1:6f:29:55:9b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C43D070D53868DD0F1A352EAB84A7642B5CEF73
        Validity
            Not Before: Jan 30 16:43:46 2025 GMT
            Not After : Feb  4 07:04:46 2025 GMT
        Subject: CN=59B2D9941EDF25BD69E06764E2C1FC487AA1AC40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:19:3d:36:b1:f3:84:61:45:da:14:85:70:40:
                    be:1a:b6:de:0c:1c:c3:11:b9:54:99:95:40:0a:38:
                    af:c0:44:5e:63:bf:87:e3:2b:13:48:aa:dc:8b:18:
                    1c:ef:7d:68:f1:35:3d:3b:f1:99:7d:6b:a1:7e:f0:
                    f9:46:a6:16:32:d0:3e:2c:73:66:96:b1:fe:62:6e:
                    ee:94:21:9f:c1:f9:c7:df:d3:22:2b:24:d2:1d:e5:
                    7b:f2:f5:f1:49:d9:00:9a:23:4c:4a:36:9f:fa:95:
                    bb:59:96:a4:54:e5:bb:18:83:5e:66:8c:30:89:8e:
                    56:5c:0e:86:a2:8c:26:d8:28:29:88:78:32:9a:45:
                    cd:ab:0d:4b:0d:b4:fb:90:98:92:b4:44:f4:81:0b:
                    7a:03:08:ed:cf:15:8e:c0:da:6b:fd:81:a5:2d:a4:
                    ca:a6:4a:5b:51:f6:91:0d:24:b2:06:72:35:08:a7:
                    b3:08:c2:ad:2a:f3:98:b4:a7:1f:b3:a2:b1:8d:f9:
                    51:f2:9e:7c:83:9d:c8:b3:3c:72:1c:21:52:02:b1:
                    b3:3f:09:64:86:36:f5:f1:43:22:b5:c5:8d:ad:31:
                    44:f0:28:5e:da:e1:ff:97:37:37:ea:30:f1:0b:16:
                    d8:39:dc:b7:75:6b:60:0f:0a:da:ec:f4:f8:4e:70:
                    ff:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B2:D9:94:1E:DF:25:BD:69:E0:67:64:E2:C1:FC:48:7A:A1:AC:40
            X509v3 Authority Key Identifier:
                keyid:6C:43:D0:70:D5:38:68:DD:0F:1A:35:2E:AB:84:A7:64:2B:5C:EF:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D597C5D3A278EA56F9B0B669807AF2EA429D758CF27567E05936C3E80DC3CFE/0/6C43D070D53868DD0F1A352EAB84A7642B5CEF73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C43D070D53868DD0F1A352EAB84A7642B5CEF73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D597C5D3A278EA56F9B0B669807AF2EA429D758CF27567E05936C3E80DC3CFE/0/6C43D070D53868DD0F1A352EAB84A7642B5CEF73.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:a7:5b:07:ac:67:05:e6:72:e1:91:14:73:88:15:63:89:f5:
         b9:68:05:d0:27:df:c1:13:10:40:c0:38:e4:52:aa:4f:77:a6:
         a7:27:9f:7d:06:75:dc:56:43:a3:ec:50:db:8b:0d:e0:5c:13:
         a2:af:0a:c4:23:d1:17:a9:8d:92:d6:48:47:e7:ef:bd:44:bd:
         ca:a0:f5:b1:d1:b2:43:7c:09:9a:92:c9:9f:b3:26:20:52:25:
         e2:62:50:b8:7e:9f:23:62:fb:06:26:b3:32:1d:5c:11:c6:39:
         e2:e1:16:dc:73:f2:36:8f:5c:97:6e:7b:92:de:9c:ed:fd:9e:
         71:b6:ca:8e:a6:a1:05:b4:f6:53:58:f9:23:c0:66:85:08:65:
         19:a0:b8:04:bd:1d:9a:f9:e2:c7:dd:87:11:8f:43:c2:24:e4:
         24:60:4b:9a:2e:95:15:52:0f:da:36:11:f0:49:ea:f2:3e:5d:
         f1:23:b7:1d:36:f7:e2:45:be:16:9d:fa:94:c2:1b:4c:9f:6c:
         29:32:7e:3e:ef:d1:26:5c:a0:b0:da:2d:5a:19:a6:98:b5:89:
         03:b0:85:53:1e:e7:c5:b4:02:16:dd:24:75:71:b7:f2:fc:89:
         5a:17:8e:74:82:9f:f0:24:1a:10:31:1c:e6:57:3b:2b:56:a3:
         8d:ae:07:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----