Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9CBEC127A80C3E1F1A34E553B878B5857AAC0FBCDB542E9D88F9FE2ECBA7369F/0/B1ED8C2B436F8456A9FFB7A803770E5760A2589B.mft
File:                     B1ED8C2B436F8456A9FFB7A803770E5760A2589B.mft (raw, json)
Hash identifier:          tuh406AmRx9NdLkdAMldLrf8/tJoepZev/fsZcggquQ=
Subject key identifier:   BB:C3:10:39:13:B0:4F:1B:79:16:00:34:DB:C2:53:B3:E9:D3:77:73
Authority key identifier: B1:ED:8C:2B:43:6F:84:56:A9:FF:B7:A8:03:77:0E:57:60:A2:58:9B
Certificate issuer:       /CN=B1ED8C2B436F8456A9FFB7A803770E5760A2589B
Certificate serial:       774FC2D52A78AEA9F7D8CAE3E411A9154843A628
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1ED8C2B436F8456A9FFB7A803770E5760A2589B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9CBEC127A80C3E1F1A34E553B878B5857AAC0FBCDB542E9D88F9FE2ECBA7369F/0/B1ED8C2B436F8456A9FFB7A803770E5760A2589B.mft
Manifest number:          A5
Signing time:             Fri 31 Jan 2025 06:32:36 +0000
Manifest this update:     Fri 31 Jan 2025 06:27:36 +0000
Manifest next update:     Tue 04 Feb 2025 07:54:36 +0000
Files and hashes:         1: 3133312e3235352e3130342e302f32322d3232203d3e20333934363834.roa (hash: gWaV1Am30iPqPgWJiWt+KgKeMpCZQrTF5mFfv8XVl6Q=)
                          2: B1ED8C2B436F8456A9FFB7A803770E5760A2589B.crl (hash: KuUdR0abz3GhmH+w1aatL3rPNYjYCyltXIL/pN/gtxM=)
                          3: 323830333a3738303a3a2f33322d3332203d3e203238303037.roa (hash: zUdKAdCutEeKS92u0rOxmJHzKbtkAJ0WLqVvH0ofIyE=)
                          4: 3133312e3235352e3130342e302f32322d3232203d3e203238303037.roa (hash: +44eP16YofM1PPmV0gfE6++3IftsYyXFNqDa9pQKWXM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:4f:c2:d5:2a:78:ae:a9:f7:d8:ca:e3:e4:11:a9:15:48:43:a6:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1ED8C2B436F8456A9FFB7A803770E5760A2589B
        Validity
            Not Before: Jan 31 06:27:36 2025 GMT
            Not After : Feb  4 07:54:36 2025 GMT
        Subject: CN=BBC3103913B04F1B79160034DBC253B3E9D37773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:82:94:16:e7:1f:98:87:50:d9:07:89:68:09:
                    16:7b:bd:95:d1:98:b0:90:8b:84:08:af:af:19:72:
                    63:c9:b2:e1:f3:68:bb:38:c6:6f:67:d2:a1:c8:b7:
                    40:6d:81:ae:41:7f:ac:1d:4f:bb:d3:35:d8:86:55:
                    c4:6f:f6:4c:d0:75:ae:3c:63:ab:ed:28:ba:61:69:
                    5b:d0:90:c5:59:cd:c1:03:a1:23:f5:fb:59:dd:55:
                    d2:cc:8f:a6:10:fd:3b:f4:22:a7:92:80:4b:78:dc:
                    5b:3e:58:c2:21:f8:5b:86:95:03:cf:a8:36:9e:0e:
                    aa:2f:41:e2:5f:06:2d:d0:f5:33:94:dd:d5:6f:bf:
                    49:f9:e2:0d:a1:ec:e3:73:7b:e1:22:4e:70:08:01:
                    bf:45:49:2c:f8:d9:e1:0a:cd:c7:7f:ce:2b:7b:c2:
                    f6:4b:ef:96:8b:a5:70:ce:2a:eb:7a:f7:2a:ca:38:
                    8f:aa:aa:7f:8f:a2:6b:47:fa:5b:61:e0:0c:4d:c2:
                    9c:d8:9a:d9:13:c6:c8:cd:34:df:bd:ba:c0:a3:85:
                    7e:da:98:0a:0b:f0:db:23:ce:27:6f:ed:4e:89:55:
                    cd:57:98:a3:bb:82:cf:96:f5:1c:3b:0e:94:c1:81:
                    05:58:72:df:4f:ae:fc:f6:84:e2:b5:9b:f7:1f:f8:
                    75:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C3:10:39:13:B0:4F:1B:79:16:00:34:DB:C2:53:B3:E9:D3:77:73
            X509v3 Authority Key Identifier:
                keyid:B1:ED:8C:2B:43:6F:84:56:A9:FF:B7:A8:03:77:0E:57:60:A2:58:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9CBEC127A80C3E1F1A34E553B878B5857AAC0FBCDB542E9D88F9FE2ECBA7369F/0/B1ED8C2B436F8456A9FFB7A803770E5760A2589B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1ED8C2B436F8456A9FFB7A803770E5760A2589B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9CBEC127A80C3E1F1A34E553B878B5857AAC0FBCDB542E9D88F9FE2ECBA7369F/0/B1ED8C2B436F8456A9FFB7A803770E5760A2589B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:66:37:5b:6f:ce:ba:c9:75:78:4e:44:bd:c4:36:8b:22:19:
         3c:fe:89:12:3d:79:3a:d9:f6:d6:92:ab:4c:53:71:3e:46:e1:
         9d:c9:2b:86:a2:b0:d5:32:e4:66:b3:53:84:56:f9:51:63:72:
         80:e2:49:ca:9e:77:93:b7:49:77:35:77:29:f9:fd:0e:97:f2:
         92:d2:a8:34:57:60:b7:db:50:d0:c6:a7:ba:e4:8e:6a:92:32:
         90:52:77:9f:27:db:2b:0e:ce:03:7f:a9:c9:8d:84:82:5f:b0:
         7a:36:5c:ce:99:0d:10:53:4b:6b:37:ac:3c:cd:6f:95:27:7e:
         2d:6a:77:15:1e:25:23:70:ba:e5:d5:f9:b3:a8:c5:b4:12:74:
         03:60:80:66:58:49:1c:7f:f9:65:91:d3:ae:24:22:80:52:6b:
         b8:ae:11:db:19:7e:d1:19:3a:47:9a:8c:c6:29:39:84:02:f8:
         fa:46:73:42:14:a5:6f:23:1a:4f:12:6e:35:d7:42:9e:f7:e5:
         67:54:a4:e3:8b:cc:cd:7d:b4:08:c5:d2:9a:cb:e5:2c:78:11:
         8e:86:bc:34:6b:77:78:d7:aa:3c:7c:12:4b:6e:69:ec:84:dc:
         5b:c0:de:ff:48:b3:d4:ea:2f:7d:e4:6f:5a:34:9e:b5:e0:ba:
         26:ae:cd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----