Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.mft
File:                     921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.mft (raw, json)
Hash identifier:          EwmssiiO8Yrj+Jhls8hBwi5w4b2xsJeJ8Te008wGO9s=
Subject key identifier:   CC:19:41:F3:BD:4C:7A:98:A4:D8:D3:63:36:8C:4B:72:1F:58:13:21
Authority key identifier: 92:1E:E1:2B:A5:D8:53:FB:5C:AD:76:7E:F4:7D:2E:0E:62:A2:D4:37
Certificate issuer:       /CN=921EE12BA5D853FB5CAD767EF47D2E0E62A2D437
Certificate serial:       0F43BCF5F6CC935D8687F89431B377339DF8F8C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.mft
Manifest number:          42
Signing time:             Wed 29 Jan 2025 10:25:11 +0000
Manifest this update:     Wed 29 Jan 2025 10:20:11 +0000
Manifest next update:     Tue 04 Feb 2025 07:05:11 +0000
Files and hashes:         1: 921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.crl (hash: TC8X0AHjT3Z66ssmXpIXBtbO2o/h7bCYffNKHpyK90o=)
                          2: 3230302e33362e3135392e302f32342d3234203d3e20323731383739.roa (hash: GGOfiJEo1GY1MBAMepehuSb3HpsvDxfsEKeJCdqUvjY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:43:bc:f5:f6:cc:93:5d:86:87:f8:94:31:b3:77:33:9d:f8:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=921EE12BA5D853FB5CAD767EF47D2E0E62A2D437
        Validity
            Not Before: Jan 29 10:20:11 2025 GMT
            Not After : Feb  4 07:05:11 2025 GMT
        Subject: CN=CC1941F3BD4C7A98A4D8D363368C4B721F581321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0b:9b:a4:f7:9c:5e:ef:a6:f0:e3:0c:ad:b8:
                    75:4e:51:16:31:14:21:65:85:68:51:1d:6d:28:cd:
                    9f:f7:06:77:07:dc:65:29:65:6e:bc:db:ac:d4:a8:
                    19:9f:54:63:8a:2a:d1:10:4c:25:ff:16:53:96:75:
                    be:1e:19:7d:89:1c:f9:fe:ed:91:38:c3:0c:07:cd:
                    a6:b6:70:db:1f:65:84:be:81:1d:47:9d:8c:c9:13:
                    75:57:f0:5e:5d:1e:b4:93:76:86:03:31:c1:bb:3e:
                    d8:11:0e:0c:d7:d7:8c:b4:df:08:60:61:cc:79:b6:
                    82:ad:93:c5:01:82:43:5c:c0:c4:38:2f:69:68:63:
                    b2:08:d5:fe:17:1c:c9:aa:97:6b:aa:b3:02:d3:d4:
                    97:47:97:13:bd:b2:29:ad:94:25:a9:70:50:0d:ac:
                    16:f1:65:3e:e2:58:5c:30:72:8c:1c:63:1f:12:f3:
                    2b:b6:71:1e:fa:6a:d5:e7:41:c9:36:5d:17:ca:29:
                    32:d3:b0:3f:5f:12:53:16:e2:3e:8c:0b:57:c4:ac:
                    36:8d:8b:f2:92:6f:0b:d5:40:8c:b0:40:55:6f:6b:
                    39:92:f9:ae:e4:09:85:6c:e8:76:29:24:59:d9:e6:
                    49:05:98:f7:12:08:0d:25:47:b5:7c:bc:77:69:17:
                    85:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:19:41:F3:BD:4C:7A:98:A4:D8:D3:63:36:8C:4B:72:1F:58:13:21
            X509v3 Authority Key Identifier:
                keyid:92:1E:E1:2B:A5:D8:53:FB:5C:AD:76:7E:F4:7D:2E:0E:62:A2:D4:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c0:17:8a:81:1e:06:de:5d:9e:79:bd:80:ef:41:35:91:4a:
         a3:6a:a6:87:a4:91:90:5a:52:a1:05:1e:1c:c9:3b:a7:43:68:
         8a:fb:20:ab:12:a1:cc:44:cb:a3:ea:6b:1f:59:1f:60:67:d3:
         cc:5c:b0:65:b4:05:9b:8e:f3:10:c9:42:14:55:5d:1f:ff:65:
         6d:07:f4:ca:4d:67:2f:e3:7e:a3:bd:2e:4a:34:33:b1:e4:7a:
         11:14:0e:b0:b4:7e:67:75:cd:a2:4e:a8:0d:e3:e0:c4:7a:45:
         e3:44:40:49:7f:71:62:f2:66:24:0e:db:d2:be:75:8a:67:37:
         86:b2:40:15:81:06:65:34:49:67:22:b2:f6:77:13:c0:95:3e:
         9b:4a:53:30:ad:d2:53:9f:15:c8:0a:8b:34:2a:cc:01:70:96:
         ac:42:83:44:70:09:c5:ee:bb:60:05:cb:bc:8b:63:d4:2a:0a:
         45:7a:41:2f:9c:6f:db:bd:7b:ac:f1:fe:00:3a:23:40:19:4d:
         b5:49:c5:fa:f9:a6:87:59:fe:43:67:7b:c7:61:06:22:7c:6b:
         45:83:0d:0d:b3:0e:0b:fc:9d:0b:24:36:00:6e:30:c9:14:58:
         ab:bc:be:2f:cf:3e:36:3b:63:52:ef:00:f6:53:e2:7e:4c:9f:
         a2:1e:c3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----