Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.mft
File:                     A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.mft (raw, json)
Hash identifier:          PpLkaEsvrhmaIt7DmSHNWnVr5hx6ehT68QyPdu3LtYc=
Subject key identifier:   BE:1D:9E:96:C0:0E:1D:2A:A2:3A:99:9E:EF:27:FA:91:F5:50:CD:B4
Authority key identifier: A1:2F:D7:F3:F9:F4:70:03:0B:9F:CC:2C:F4:E7:EE:20:F8:2F:89:4A
Certificate issuer:       /CN=A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A
Certificate serial:       236642E1B9F233196B5CADC03112D5716D7EB83D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.mft
Manifest number:          AA
Signing time:             Thu 30 Jan 2025 16:58:52 +0000
Manifest this update:     Thu 30 Jan 2025 16:53:52 +0000
Manifest next update:     Wed 05 Feb 2025 03:47:52 +0000
Files and hashes:         1: 3133382e3132312e3130382e302f32322d3234203d3e20323639393933.roa (hash: 9LcHN89jsUlXk+0SD4XrnEzyD9Ugz8emv6iKk3ANSTk=)
                          2: 3138312e3137372e3232302e302f32322d3234203d3e20323639393933.roa (hash: Wexgq0Pn9NJxqSHnqarBLxpA1H/Up3NA3h4quWtvjUk=)
                          3: 3136382e39302e3232302e302f32322d3234203d3e20323639393933.roa (hash: ZLwXOOe1SEXnEU1DWRFghHhzDO6s6TOTi++e1MCxAss=)
                          4: 323830333a346430303a3a2f33322d3438203d3e20323639393933.roa (hash: fQ/+waAImBuQsqUmUU3ifSeRradyT8z/Iq4MK1wBzKA=)
                          5: A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.crl (hash: CwwjT/DHQGrvBUBU8BCo8Ikr8YRDXXBrGE/4a0AulRs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:66:42:e1:b9:f2:33:19:6b:5c:ad:c0:31:12:d5:71:6d:7e:b8:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A
        Validity
            Not Before: Jan 30 16:53:52 2025 GMT
            Not After : Feb  5 03:47:52 2025 GMT
        Subject: CN=BE1D9E96C00E1D2AA23A999EEF27FA91F550CDB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e8:3e:0d:47:7f:fd:81:90:f0:df:fb:b2:10:
                    a8:42:0f:b3:96:51:9a:32:62:54:60:75:74:c7:6c:
                    48:b0:ff:8c:4b:bb:f5:20:cf:52:79:20:1f:55:12:
                    34:57:87:70:a0:ff:53:d5:2e:b9:ce:43:4c:bd:84:
                    e9:c0:9c:ee:d2:db:aa:92:0b:d8:28:97:e0:57:8d:
                    2f:c1:f0:a3:a4:c2:f8:20:04:10:58:89:96:bc:e1:
                    41:35:87:2a:77:d0:24:4e:2c:89:c2:af:f8:34:87:
                    15:97:87:c0:4d:8e:7c:90:4c:26:1b:7a:be:e1:3e:
                    44:a8:1e:4c:61:90:2a:68:60:7c:99:02:a1:c4:77:
                    1a:e8:c4:1a:12:8b:d5:c2:34:bc:42:f6:5b:e1:a0:
                    ab:18:1b:a8:b4:e1:f9:38:00:03:8f:5f:d6:f1:aa:
                    62:e7:3d:68:dd:1a:15:5b:47:60:8f:e6:cc:68:87:
                    1a:8c:21:3b:f4:37:86:90:88:b5:47:9a:39:86:a2:
                    a1:e2:b8:13:66:1a:bc:97:c0:ff:c0:4a:69:37:b6:
                    a1:ea:72:0d:49:7c:48:cc:f2:c1:f2:fe:b8:ec:6e:
                    fe:cd:c5:60:9a:bd:c0:d2:f7:e1:62:da:00:38:bb:
                    9d:40:54:6b:f3:3d:c6:fc:f5:59:dc:2a:99:ab:a1:
                    9b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1D:9E:96:C0:0E:1D:2A:A2:3A:99:9E:EF:27:FA:91:F5:50:CD:B4
            X509v3 Authority Key Identifier:
                keyid:A1:2F:D7:F3:F9:F4:70:03:0B:9F:CC:2C:F4:E7:EE:20:F8:2F:89:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:17:af:d4:22:6d:c3:7a:23:93:37:29:5a:39:0c:64:f2:47:
         dc:aa:fe:46:f6:dc:b2:96:92:5b:a5:3a:76:a4:f1:7f:b0:eb:
         51:ae:3e:e0:a8:49:d8:56:9d:6b:29:70:91:3a:43:63:14:71:
         7a:34:66:21:09:82:1c:f4:44:ab:cb:87:1c:2b:df:14:44:c2:
         36:f5:50:53:8c:14:81:55:92:03:29:07:d5:b0:60:b4:16:58:
         db:a8:c6:a6:97:45:38:67:97:b4:0d:d3:65:e6:d7:43:d3:e9:
         ec:77:2c:0f:01:95:36:29:cb:4a:db:ec:5b:ea:2e:2b:5c:34:
         2a:e8:b7:5c:11:79:3e:6f:57:ec:5d:d0:70:d5:41:b5:a2:ce:
         ab:ed:0f:76:eb:3c:d0:0d:80:16:c5:97:01:2d:36:9c:8e:da:
         74:14:65:46:a2:36:08:10:44:ed:2a:61:1e:08:c1:f3:e0:e9:
         81:c6:cf:80:f2:2a:d4:30:4e:53:96:41:d1:17:2a:2e:11:48:
         49:96:5d:1f:82:26:b8:48:cd:60:ac:a6:2b:75:e3:7c:d2:54:
         98:fd:37:11:9a:8b:11:3a:24:89:82:20:6b:00:6a:5e:28:f3:
         b1:4a:e6:74:7f:e4:a1:cc:9d:00:3b:fa:74:34:be:42:80:af:
         6e:fb:d1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:18:32 2025 by rpki-client