Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/80E070B8BB52E4E9798E81C2D826AF3F0D607547DE9117D95E41110FAE79A1CC/0/BC068F475265AE58CC288A4ED10CEBA18C51FD83.mft
File:                     BC068F475265AE58CC288A4ED10CEBA18C51FD83.mft (raw, json)
Hash identifier:          dWXACDpNJa36r7BTLij3DSS2tJjJlEw1FkgIvsgS+wg=
Subject key identifier:   05:DC:E0:2B:02:97:2A:24:98:E0:FB:BD:17:D3:A0:FB:40:29:10:54
Authority key identifier: BC:06:8F:47:52:65:AE:58:CC:28:8A:4E:D1:0C:EB:A1:8C:51:FD:83
Certificate issuer:       /CN=BC068F475265AE58CC288A4ED10CEBA18C51FD83
Certificate serial:       5BD92B5F7345ECD6DFE73CA5BB9D6717EDAFD27D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC068F475265AE58CC288A4ED10CEBA18C51FD83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/80E070B8BB52E4E9798E81C2D826AF3F0D607547DE9117D95E41110FAE79A1CC/0/BC068F475265AE58CC288A4ED10CEBA18C51FD83.mft
Manifest number:          AA
Signing time:             Thu 30 Jan 2025 22:47:38 +0000
Manifest this update:     Thu 30 Jan 2025 22:42:38 +0000
Manifest next update:     Wed 05 Feb 2025 15:09:38 +0000
Files and hashes:         1: 3230302e322e382e302f32312d3231203d3e2037393635.roa (hash: c4R5sNwbl2FvCAcUPtAgAfaUhI4XirB9aLnx9CqH/tU=)
                          2: BC068F475265AE58CC288A4ED10CEBA18C51FD83.crl (hash: /6LayWkzsgF86nnvTgerAsDXhVOb/eed9acmRa9AEzQ=)
                          3: 3230302e322e382e302f32312d3234203d3e2037393635.roa (hash: EBn4T3ulMD/tgKFbSBJAQPUjJQS1FG2wQanlJyQIkxc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d9:2b:5f:73:45:ec:d6:df:e7:3c:a5:bb:9d:67:17:ed:af:d2:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC068F475265AE58CC288A4ED10CEBA18C51FD83
        Validity
            Not Before: Jan 30 22:42:38 2025 GMT
            Not After : Feb  5 15:09:38 2025 GMT
        Subject: CN=05DCE02B02972A2498E0FBBD17D3A0FB40291054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ae:af:40:61:80:5b:20:26:63:5c:0c:ea:6c:
                    d3:ea:8e:f2:62:0e:06:3f:23:08:d6:a3:fd:a9:a1:
                    fd:38:56:3f:5f:2d:09:3d:39:26:b7:ac:b8:f9:cf:
                    0c:0e:13:3e:e4:33:b5:78:b4:53:44:dd:19:98:05:
                    e6:f2:e3:62:1b:7a:1c:03:0c:72:97:76:77:9d:72:
                    67:60:05:3f:85:4f:86:84:5c:5e:2c:1d:d7:dd:eb:
                    88:2b:32:17:d4:f7:6a:96:5a:28:9f:76:83:30:c9:
                    3d:b6:17:ce:5c:65:78:a8:a2:b2:fb:f5:b9:37:59:
                    ba:fc:5e:68:7b:70:ca:d4:1f:74:48:92:d7:82:c8:
                    a0:1c:d4:de:a0:9b:4b:3e:8a:ed:89:79:13:57:44:
                    e0:dc:6f:8f:fb:15:04:58:45:a4:2d:65:19:ef:93:
                    95:61:45:0b:e1:38:17:34:3e:9d:35:eb:37:1f:d7:
                    0c:57:8d:b0:cd:b7:bc:a7:75:a0:22:5c:c9:bb:5a:
                    ab:b3:a2:d2:15:ff:34:7c:08:d7:c0:32:17:7f:7e:
                    ae:5f:84:ff:7c:e8:54:39:8a:65:86:63:5c:9b:10:
                    d8:5d:df:ed:d5:d4:56:20:fa:0f:d2:e4:c1:8d:80:
                    b6:f7:e4:8b:fe:a0:be:53:e0:4e:4f:5e:98:84:b8:
                    e1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DC:E0:2B:02:97:2A:24:98:E0:FB:BD:17:D3:A0:FB:40:29:10:54
            X509v3 Authority Key Identifier:
                keyid:BC:06:8F:47:52:65:AE:58:CC:28:8A:4E:D1:0C:EB:A1:8C:51:FD:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/80E070B8BB52E4E9798E81C2D826AF3F0D607547DE9117D95E41110FAE79A1CC/0/BC068F475265AE58CC288A4ED10CEBA18C51FD83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC068F475265AE58CC288A4ED10CEBA18C51FD83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/80E070B8BB52E4E9798E81C2D826AF3F0D607547DE9117D95E41110FAE79A1CC/0/BC068F475265AE58CC288A4ED10CEBA18C51FD83.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:71:68:7a:cf:4d:d4:c6:2e:9f:4d:1d:a8:01:e0:80:68:b2:
         21:4c:87:f6:83:26:05:db:84:f7:35:2e:4d:38:31:6d:ff:62:
         ea:64:45:e2:6b:44:70:fb:68:5d:b5:d3:09:d4:95:90:17:4d:
         69:0f:67:73:02:a6:af:a8:65:cd:79:34:02:1c:7d:c4:99:1f:
         c0:a9:a1:37:98:ae:3c:7f:d5:31:37:f3:cd:09:2f:a9:c4:a8:
         e6:f1:33:28:58:92:0e:e2:d7:05:2b:d0:fc:9d:38:1a:94:2e:
         a0:f8:65:b6:2e:30:c0:c1:cd:3a:39:aa:4e:f9:0b:37:47:be:
         b5:48:f4:67:87:a2:41:33:0b:e5:8c:f4:53:60:d5:70:73:d9:
         c4:2c:94:84:e5:fb:a6:f2:a4:c3:94:b3:2b:84:6e:d9:1d:22:
         ef:7d:0b:a0:e5:da:64:21:e7:4c:c5:9f:33:da:3c:0d:47:f1:
         fe:6d:69:78:08:c8:2f:6f:e0:4e:0e:eb:0d:a7:42:16:83:3b:
         6e:fb:92:94:95:72:14:78:43:1a:39:05:94:a3:52:b9:d3:b1:
         92:4c:a4:df:2d:f8:07:6c:8e:74:90:85:d3:ab:32:99:99:29:
         28:cd:4a:ca:63:b9:a7:21:d7:93:08:25:a8:13:e9:8d:8d:63:
         31:6f:20:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----