Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9250B3C6ED31A91345662AFAA11AF073BC73EC4F23BABFC41FBD427BE786E02E/0/16135304E89D556049BB2AABE50DB654179A8B5B.mft
File:                     16135304E89D556049BB2AABE50DB654179A8B5B.mft (raw, json)
Hash identifier:          K5z5+zorGgdJdG/YOQ1XEJ+AALvOCL1HZ+7q3sr4yDk=
Subject key identifier:   98:50:C4:A6:35:3A:6A:0A:EC:71:B6:B8:D7:E7:82:0F:25:94:C7:0B
Authority key identifier: 16:13:53:04:E8:9D:55:60:49:BB:2A:AB:E5:0D:B6:54:17:9A:8B:5B
Certificate issuer:       /CN=16135304E89D556049BB2AABE50DB654179A8B5B
Certificate serial:       6EDA4ACE441C028C7699E4B723BBE0AABAC61B02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16135304E89D556049BB2AABE50DB654179A8B5B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9250B3C6ED31A91345662AFAA11AF073BC73EC4F23BABFC41FBD427BE786E02E/0/16135304E89D556049BB2AABE50DB654179A8B5B.mft
Manifest number:          AD
Signing time:             Fri 31 Jan 2025 12:36:14 +0000
Manifest this update:     Fri 31 Jan 2025 12:31:14 +0000
Manifest next update:     Wed 05 Feb 2025 20:02:14 +0000
Files and hashes:         1: 16135304E89D556049BB2AABE50DB654179A8B5B.crl (hash: X+eui3O6yee2dLXMPVxFxJ+WXPp8WUHGxSS0TNp3XgI=)
                          2: 3133382e3138362e31322e302f32322d3234203d3e20323633373732.roa (hash: Cb7CKyIw8klhlMwlUjQJMofsAeXCHhgd0QEi0ulrgug=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:da:4a:ce:44:1c:02:8c:76:99:e4:b7:23:bb:e0:aa:ba:c6:1b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16135304E89D556049BB2AABE50DB654179A8B5B
        Validity
            Not Before: Jan 31 12:31:14 2025 GMT
            Not After : Feb  5 20:02:14 2025 GMT
        Subject: CN=9850C4A6353A6A0AEC71B6B8D7E7820F2594C70B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e3:f9:13:11:d3:ab:8d:93:78:00:56:f3:c6:
                    0c:e2:f7:9d:d4:8f:19:ff:5e:94:1b:90:f7:a7:13:
                    79:e1:6d:c3:14:22:95:e5:7d:03:d1:33:f9:cc:23:
                    a0:50:3e:6b:cf:b1:03:54:34:25:f9:df:51:d1:0b:
                    95:d5:07:97:82:d2:3a:5c:3b:df:f4:45:d9:14:31:
                    c4:a5:70:19:18:bb:91:85:6c:e2:70:11:7c:30:08:
                    30:3a:c9:f3:f1:a8:be:e1:71:92:0d:e4:10:7d:6a:
                    c9:a0:0a:69:a8:b8:8f:a4:d0:66:51:5b:f8:31:1e:
                    37:3e:bd:5a:91:19:0e:8d:8c:2a:df:aa:b3:6a:69:
                    e9:84:a9:78:9f:77:04:2f:c8:e2:54:c3:ef:45:e5:
                    0d:ee:e5:ab:48:fe:eb:4d:2a:4d:79:56:10:b3:da:
                    38:c7:3c:16:72:35:89:21:92:32:d5:76:1e:d6:14:
                    2a:2a:cd:8a:56:fa:5c:ca:a2:cc:0d:ff:b1:7b:37:
                    94:c2:be:76:12:58:9e:63:ef:0f:68:ca:47:fa:0a:
                    5e:08:be:a2:7d:2d:71:0e:e9:1a:16:ce:d2:8a:61:
                    85:b2:2d:cf:ee:88:a6:25:a4:fd:f7:61:35:07:9a:
                    e5:ef:a4:68:a0:36:de:00:fc:03:f4:75:34:64:c1:
                    7d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:50:C4:A6:35:3A:6A:0A:EC:71:B6:B8:D7:E7:82:0F:25:94:C7:0B
            X509v3 Authority Key Identifier:
                keyid:16:13:53:04:E8:9D:55:60:49:BB:2A:AB:E5:0D:B6:54:17:9A:8B:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9250B3C6ED31A91345662AFAA11AF073BC73EC4F23BABFC41FBD427BE786E02E/0/16135304E89D556049BB2AABE50DB654179A8B5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16135304E89D556049BB2AABE50DB654179A8B5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9250B3C6ED31A91345662AFAA11AF073BC73EC4F23BABFC41FBD427BE786E02E/0/16135304E89D556049BB2AABE50DB654179A8B5B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:09:90:c0:2e:86:ce:3c:5d:66:df:bc:61:0d:c0:69:11:ff:
         07:55:50:13:b7:41:3e:4f:3b:72:26:e2:f1:f1:0e:43:08:5f:
         3f:f4:a6:a6:18:7c:1d:4f:de:43:55:ff:ef:7e:67:fd:a2:5d:
         d7:81:02:dc:47:04:c9:e6:25:1b:33:85:bf:e4:5f:db:76:9a:
         48:5d:f7:0c:f8:5f:dd:dc:87:6b:44:de:17:da:37:a3:e4:75:
         7e:ac:2a:e9:ba:59:ba:22:1e:05:1b:29:62:6a:d6:fe:df:29:
         6c:1c:93:27:93:08:9d:76:41:66:2c:a9:60:97:04:36:67:cc:
         e1:8f:8b:68:67:b1:02:3a:41:a3:6d:14:fb:2c:db:e7:6d:d4:
         8a:9e:ad:66:ce:84:ab:ce:01:e5:bf:16:d6:9b:73:14:b1:a3:
         e5:77:fa:12:08:5e:57:4b:4d:5e:79:bd:13:30:02:56:73:6b:
         04:ce:e3:6d:60:13:e7:64:ae:04:58:9e:c3:06:6c:e1:e7:e6:
         87:33:0c:91:6f:ab:ed:01:61:c3:ee:6e:8d:58:66:8e:1a:7b:
         29:b7:70:df:8e:8c:c0:21:2d:88:0f:c2:90:c4:3d:cf:20:a8:
         d2:c6:9e:c3:87:fe:5d:60:95:d5:27:f1:ee:b3:55:72:ec:30:
         3a:a3:d1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----