Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57337BE77AA02D1F8B9BF5720D5000E8EDB5AFEFB51516EE0680C7E9003B5501/0/15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F.mft
File:                     15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F.mft (raw, json)
Hash identifier:          mlT8aNQ7ign8aPOgBeyK0gSisA4NrrqzXMzkL6iXTJE=
Subject key identifier:   35:08:88:A1:99:D7:17:1A:2D:89:E7:F2:5D:C1:91:56:5A:33:53:87
Authority key identifier: 15:A5:88:BF:1D:67:E5:DC:B3:1F:24:4E:E2:52:F2:EC:9B:9A:E7:5F
Certificate issuer:       /CN=15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F
Certificate serial:       6186CA213CCCE8EFDC97D06913CC0BABDCB98E42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57337BE77AA02D1F8B9BF5720D5000E8EDB5AFEFB51516EE0680C7E9003B5501/0/15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F.mft
Manifest number:          A6
Signing time:             Thu 30 Jan 2025 13:52:00 +0000
Manifest this update:     Thu 30 Jan 2025 13:47:00 +0000
Manifest next update:     Mon 03 Feb 2025 20:24:00 +0000
Files and hashes:         1: 3136382e39302e3235342e302f32342d3234203d3e20323634363639.roa (hash: +4N4NOQld64DHenCVWuWr+AJuv13SIjdtu4Pk0w4O3U=)
                          2: 15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F.crl (hash: /9z28+MIQnOicIOu2HHzR5PsBnQk3/EhRQ+VZAMi3Ko=)
                          3: 3136382e39302e3235352e302f32342d3234203d3e20323634363639.roa (hash: uLJfdoekBVNg5V21lZujy5CiTWX/hxFypC+t/QilR3w=)
                          4: 3136382e39302e3235322e302f32332d3234203d3e20323634363639.roa (hash: xazapyenWW6eB0mMTnkNzAXRH3EX2ICBdN+dRSWh6TY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:86:ca:21:3c:cc:e8:ef:dc:97:d0:69:13:cc:0b:ab:dc:b9:8e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F
        Validity
            Not Before: Jan 30 13:47:00 2025 GMT
            Not After : Feb  3 20:24:00 2025 GMT
        Subject: CN=350888A199D7171A2D89E7F25DC191565A335387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:85:97:78:71:d6:46:90:d7:3e:c4:79:e7:41:
                    7e:db:2f:d9:47:cf:17:17:dd:9e:23:c7:99:d1:4a:
                    71:50:6a:96:9e:8e:39:48:b1:62:e4:ff:ec:9a:98:
                    e7:4b:19:a3:78:d7:a6:0d:35:41:4b:70:d7:66:98:
                    6b:95:82:5b:64:cb:b9:41:61:d8:4f:4a:94:5a:7d:
                    22:d4:55:bc:62:9f:84:dc:5d:fc:66:0b:b6:05:39:
                    b9:b4:ca:c8:d1:75:d7:b6:a5:96:20:94:16:70:ac:
                    39:83:87:6a:24:3e:48:05:71:c0:af:41:21:7a:bf:
                    58:41:42:50:30:9a:53:8c:4b:63:d3:77:22:30:fa:
                    05:1b:99:1d:30:c0:58:39:c8:c9:6f:6b:03:bb:d2:
                    90:d4:c0:54:e8:6d:cb:31:1b:80:64:38:ee:cb:83:
                    23:81:26:18:8b:b0:a1:b3:e5:f6:2d:7b:5f:0f:4a:
                    22:da:8e:4b:b7:31:ce:f7:95:4f:c1:15:a2:56:b2:
                    fe:18:5e:1e:ae:53:be:d8:3b:9e:fc:be:fb:a9:6d:
                    a1:b8:97:05:e5:8f:bf:31:98:09:4a:b4:fb:3c:7b:
                    2c:a2:26:cd:7f:34:a6:02:9a:a3:eb:30:61:a9:88:
                    c9:a7:32:0d:af:c4:4b:ec:97:5f:1a:95:b0:aa:10:
                    ab:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:08:88:A1:99:D7:17:1A:2D:89:E7:F2:5D:C1:91:56:5A:33:53:87
            X509v3 Authority Key Identifier:
                keyid:15:A5:88:BF:1D:67:E5:DC:B3:1F:24:4E:E2:52:F2:EC:9B:9A:E7:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57337BE77AA02D1F8B9BF5720D5000E8EDB5AFEFB51516EE0680C7E9003B5501/0/15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57337BE77AA02D1F8B9BF5720D5000E8EDB5AFEFB51516EE0680C7E9003B5501/0/15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:8f:e4:55:27:11:6b:4a:ad:76:fe:72:24:7a:d4:92:e9:6f:
         e6:db:89:89:64:c1:88:74:ba:20:be:d0:75:b3:13:b7:58:75:
         95:c3:26:7c:8d:41:a8:64:39:63:fb:3b:0d:58:e7:60:de:34:
         6c:d0:93:b7:74:0e:12:fb:a3:dd:57:5f:89:5f:e1:a2:18:55:
         14:3f:37:bd:9e:8d:1c:13:24:ab:07:41:0c:8b:72:02:b2:13:
         df:67:82:f0:b2:85:a2:37:e4:35:5d:56:3d:a3:fa:1f:7a:df:
         fb:32:7b:47:8b:a4:ab:4a:9d:73:90:26:86:dd:5b:b6:af:aa:
         11:61:98:50:20:76:f4:14:85:05:6e:73:c2:26:5c:f9:99:85:
         2e:f0:07:52:ac:16:70:00:e0:cc:66:35:5d:0f:9b:94:e8:0e:
         20:1c:e7:22:62:6a:45:11:d7:3f:a5:31:54:5c:67:6b:d8:5f:
         37:be:e5:c8:8e:87:e6:43:87:b6:2f:07:91:95:f2:a7:aa:e5:
         75:31:cb:f0:5d:fb:33:ca:0d:fe:a9:f7:76:22:b0:4b:05:2e:
         b6:82:84:8e:f4:72:30:52:e4:5a:ec:2f:7f:d1:5f:bf:e6:18:
         d2:e4:cb:a8:f5:21:ea:83:d0:4f:24:0d:35:f3:76:93:c6:e9:
         00:58:72:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----