Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/4A21846C50E619589B04A94E63EC535C6F77C010.mft
File:                     4A21846C50E619589B04A94E63EC535C6F77C010.mft (raw, json)
Hash identifier:          pnLxbIEPjD1YRWE+aglc/czhItUW9CcIJjt8Gq2VSfA=
Subject key identifier:   B1:21:B4:5E:A3:FB:25:02:ED:6D:96:6C:1A:4C:C9:09:93:6B:FB:0D
Authority key identifier: 4A:21:84:6C:50:E6:19:58:9B:04:A9:4E:63:EC:53:5C:6F:77:C0:10
Certificate issuer:       /CN=4A21846C50E619589B04A94E63EC535C6F77C010
Certificate serial:       54D51FCCFE8604AC52B2F0AE0F821A00FE362E90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A21846C50E619589B04A94E63EC535C6F77C010.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/4A21846C50E619589B04A94E63EC535C6F77C010.mft
Manifest number:          A1
Signing time:             Wed 29 Jan 2025 13:06:49 +0000
Manifest this update:     Wed 29 Jan 2025 13:01:49 +0000
Manifest next update:     Mon 03 Feb 2025 20:31:49 +0000
Files and hashes:         1: 4A21846C50E619589B04A94E63EC535C6F77C010.crl (hash: S2qHxya8FOpKhR86Vb3o6nOUlUJ/qDJ40bPEPwS7UjQ=)
                          2: 323830303a3366303a343030343a3a2f34372d3438203d3e203135313639.roa (hash: xvW02xaVpRP095zxBBvh/Tk3yv4NrH5ZA/HNQ7mJzFQ=)
                          3: 323830303a3366303a343030313a3a2f34382d3438203d3e203135313639.roa (hash: ik+tLpYR1pVYIY3WynEQzDU4xg3yxabs+ydUX6BQtDw=)
                          4: 323830303a3366303a343030323a3a2f34372d3438203d3e203135313639.roa (hash: WmVCHpXw3vW2PuAyf4nulTmjmbCx9Lnva6+uMOg+w1w=)
                          5: 323830303a3366303a3a2f33322d3438203d3e203135313639.roa (hash: uWKOPhReHnXVjAlJh1lek2CklTPhzrsDHcA2NnaUmS8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d5:1f:cc:fe:86:04:ac:52:b2:f0:ae:0f:82:1a:00:fe:36:2e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A21846C50E619589B04A94E63EC535C6F77C010
        Validity
            Not Before: Jan 29 13:01:49 2025 GMT
            Not After : Feb  3 20:31:49 2025 GMT
        Subject: CN=B121B45EA3FB2502ED6D966C1A4CC909936BFB0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d6:84:3d:97:30:69:35:b3:a9:cb:33:19:02:
                    82:81:b8:c4:1c:3d:12:ed:db:74:ce:82:e2:4b:3a:
                    22:b5:61:38:85:50:33:76:cc:fd:32:69:37:0d:54:
                    d0:f4:b8:91:58:04:23:31:45:a9:11:89:c6:d5:05:
                    22:5e:09:68:eb:ba:e5:34:28:57:20:64:01:20:09:
                    28:cc:82:9a:23:95:94:4f:f0:4f:da:1d:25:2d:fb:
                    3b:ca:63:12:e7:f5:d6:1e:1f:ec:ef:e9:d6:ec:d3:
                    21:ff:5e:6d:81:d3:60:31:15:f4:b8:a2:2c:1b:30:
                    79:94:4d:cc:78:03:d3:02:ab:3d:2a:92:7b:da:40:
                    c4:3e:73:0a:f1:ae:6d:55:4c:db:02:5c:0f:5c:66:
                    60:75:a5:a0:93:7e:49:52:bc:aa:aa:64:f4:04:9e:
                    28:b3:26:c9:d4:b1:4a:a1:28:28:94:78:0d:08:97:
                    98:56:44:3a:1e:eb:d9:74:65:6a:31:7a:42:ba:26:
                    67:27:3c:70:cc:55:fe:2b:d7:9b:e2:a8:92:e9:c6:
                    0a:62:f5:b6:52:03:77:a9:98:60:89:9d:ee:71:11:
                    e0:ac:e7:9d:5a:55:80:e9:e8:49:63:4e:c5:dd:b6:
                    f3:4d:5e:b0:6c:ec:5d:ca:a8:50:34:28:90:db:a2:
                    d0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:21:B4:5E:A3:FB:25:02:ED:6D:96:6C:1A:4C:C9:09:93:6B:FB:0D
            X509v3 Authority Key Identifier:
                keyid:4A:21:84:6C:50:E6:19:58:9B:04:A9:4E:63:EC:53:5C:6F:77:C0:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/4A21846C50E619589B04A94E63EC535C6F77C010.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A21846C50E619589B04A94E63EC535C6F77C010.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/4A21846C50E619589B04A94E63EC535C6F77C010.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:76:7f:02:8c:e7:c8:99:88:1c:aa:7e:31:42:1a:38:f0:a9:
         2c:6a:0f:7a:7f:66:58:fa:85:14:28:ee:57:8d:86:f7:a8:92:
         c0:b8:9d:16:5c:ce:6f:d9:00:16:ce:31:fa:05:dc:2a:e4:5e:
         a8:43:44:01:99:5d:77:1b:38:ce:7f:82:e1:66:ce:dc:b6:1e:
         2d:be:f9:4e:ad:b6:c0:de:d8:e5:66:5a:8f:b0:8f:37:2b:94:
         f3:d7:80:37:76:62:0d:42:65:08:c6:16:9a:af:2f:46:0b:15:
         03:bb:83:a2:b4:0f:59:86:52:15:23:33:60:28:74:bd:58:63:
         c1:5f:4c:0c:93:6e:c7:8f:cd:f5:28:f3:3d:90:42:7c:5c:c3:
         a8:fe:d8:b7:f7:82:9f:9c:83:e5:01:80:41:15:fd:fe:96:1b:
         be:b4:13:64:73:92:0f:30:3a:9c:e5:af:a7:fe:04:e2:6b:12:
         c7:45:72:26:7b:70:9f:3e:82:e3:ed:53:50:8a:70:96:75:36:
         52:8f:b3:62:8d:71:17:f1:f3:e6:5e:5e:f2:ef:5f:62:de:93:
         a2:4a:3d:65:da:05:e0:77:74:38:87:43:4c:57:cc:a4:c0:d8:
         a7:8d:0d:49:bf:6f:2a:33:48:ce:43:6e:a8:53:7e:2e:2c:50:
         4d:6c:52:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----