Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.mft
File:                     B642ACFCC1420CD34E9E29BFDF84F709470FE998.mft (raw, json)
Hash identifier:          yLbP68Va87XM+Pw8qILjNa6D39zbJKoU/Bdf9Y260wI=
Subject key identifier:   C1:C3:CE:53:43:6C:1B:14:A2:ED:0E:8C:EC:AC:A6:FA:A2:B7:F5:08
Authority key identifier: B6:42:AC:FC:C1:42:0C:D3:4E:9E:29:BF:DF:84:F7:09:47:0F:E9:98
Certificate issuer:       /CN=B642ACFCC1420CD34E9E29BFDF84F709470FE998
Certificate serial:       15E5F13E05031F612CDE78F008AA89183BCB621C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.mft
Manifest number:          AA
Signing time:             Fri 31 Jan 2025 03:45:39 +0000
Manifest this update:     Fri 31 Jan 2025 03:40:39 +0000
Manifest next update:     Tue 04 Feb 2025 17:01:39 +0000
Files and hashes:         1: 323830333a393131303a333030303a3a2f34382d3634203d3e20323731393932.roa (hash: 9cWSf/tvU/YdC/xXzaxkCXS9a9VvvqD43AWNMR+z55s=)
                          2: 323830333a393131303a3a2f33322d3634203d3e20323731393932.roa (hash: wJa0N61AMjYWQWcPp+euR530f6buo6CqEnVd3Nh4wbE=)
                          3: B642ACFCC1420CD34E9E29BFDF84F709470FE998.crl (hash: pOsqsCiq6O8mKIVDiXDxnxiRItmTj0OOuwjpwJcwKP4=)
                          4: 323830333a393131303a323030303a3a2f34382d3634203d3e20323731393932.roa (hash: ABb7gzI7c62v0gIkcfyvpOklH+OPwcrnz185PB+sjHI=)
                          5: 323830333a393131303a313030303a3a2f34382d3634203d3e20323731393932.roa (hash: kDP4A/gh6BDSvW274NW80ZVoJmJrdGVk4Sr4h6m1OVk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e5:f1:3e:05:03:1f:61:2c:de:78:f0:08:aa:89:18:3b:cb:62:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B642ACFCC1420CD34E9E29BFDF84F709470FE998
        Validity
            Not Before: Jan 31 03:40:39 2025 GMT
            Not After : Feb  4 17:01:39 2025 GMT
        Subject: CN=C1C3CE53436C1B14A2ED0E8CECACA6FAA2B7F508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bc:7e:56:d6:5e:d8:f8:23:5d:75:87:f0:04:
                    c7:a6:f7:9d:af:d1:2f:4b:42:07:10:6e:5d:e3:45:
                    a7:fc:a8:89:62:c8:44:4d:f5:99:5e:96:37:54:5a:
                    81:19:a2:6d:db:68:1f:af:fd:0a:bf:07:03:58:ef:
                    5e:f4:3e:52:98:ea:9c:bb:8d:8f:4d:d6:a3:36:44:
                    f0:d6:54:82:b6:99:b2:a3:44:e9:37:53:ae:1c:8a:
                    96:d3:c7:9b:9e:73:0a:a4:dd:4a:c8:23:e0:f7:6e:
                    96:b1:51:a4:0f:d5:c3:76:c5:d9:19:c6:6d:5e:2a:
                    30:cd:23:9b:88:8a:38:21:4a:35:d5:73:56:74:12:
                    5b:16:1a:07:e2:14:5a:6d:fa:14:22:43:04:c7:a3:
                    28:59:d0:2c:54:7e:88:e1:cc:35:e0:80:96:90:f3:
                    a9:e8:23:7f:ff:b7:14:8f:98:e6:6e:dd:c8:a2:9d:
                    6e:9c:fb:0a:10:68:ec:c3:ef:7c:56:98:c5:52:cd:
                    ca:c8:d3:c4:3c:2b:21:27:8f:94:0e:fd:08:23:a0:
                    01:54:7e:87:5e:af:dd:57:18:b1:b1:c6:b6:02:d3:
                    7e:20:0a:9f:1b:ee:de:92:7b:61:48:65:a2:d3:e3:
                    0f:2e:28:10:8a:30:0a:cc:ec:6b:eb:a0:f1:82:e6:
                    8d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C3:CE:53:43:6C:1B:14:A2:ED:0E:8C:EC:AC:A6:FA:A2:B7:F5:08
            X509v3 Authority Key Identifier:
                keyid:B6:42:AC:FC:C1:42:0C:D3:4E:9E:29:BF:DF:84:F7:09:47:0F:E9:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:90:05:44:b5:4b:b3:75:4e:29:f9:04:ed:26:84:b9:0f:b3:
         f6:3f:ab:56:62:50:6a:48:82:5e:6a:17:a0:81:21:a1:8d:aa:
         a6:e4:6c:7d:ce:17:e6:e4:34:48:01:a9:b7:01:04:25:f1:53:
         3b:e0:ee:ea:67:af:3a:b8:a9:d0:fd:69:2c:d9:c0:2b:b7:32:
         07:a2:dd:b6:4b:0f:54:01:af:6c:b9:60:27:f9:cd:e6:a8:32:
         54:1a:90:1d:28:67:cf:82:b7:91:b2:7a:5b:d0:19:d4:62:f7:
         0a:72:89:98:14:8c:0e:b4:e0:01:01:7c:a9:d6:59:c8:a6:96:
         bb:6f:e6:ca:06:ea:85:9e:de:2a:ec:60:30:d1:50:15:81:36:
         d2:b9:f2:0b:3d:8f:8e:28:14:5b:e6:e5:5f:fa:1c:91:67:e5:
         34:8a:af:f7:10:ea:20:39:39:e7:fc:b4:cc:68:7d:25:93:1d:
         2d:a5:48:d2:97:59:86:91:4b:85:dc:04:2c:5b:b3:eb:e3:a9:
         bb:54:53:dd:a9:04:c0:08:1f:99:cf:83:62:6f:c4:c7:b5:7a:
         1a:03:f7:7e:78:98:c2:84:5a:ab:af:a1:87:b0:6f:30:d4:c1:
         0c:dd:35:9f:a7:6c:ed:ef:1c:90:f3:05:ce:d9:be:2b:d3:4c:
         c6:1e:d4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----