Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.mft
File:                     B4E0934934FFEC12162EAFD5716D0AF920DC63AD.mft (raw, json)
Hash identifier:          Czis9JiAJ3pD1fTQEdngEKnlplq8x0bmK7x8F8g6Ya4=
Subject key identifier:   43:0D:A6:C6:22:4E:DD:16:3A:07:80:E0:7B:A9:51:9C:53:F0:3D:06
Authority key identifier: B4:E0:93:49:34:FF:EC:12:16:2E:AF:D5:71:6D:0A:F9:20:DC:63:AD
Certificate issuer:       /CN=B4E0934934FFEC12162EAFD5716D0AF920DC63AD
Certificate serial:       1DB8697990C881B774C0F91754C0F5C6D6283047
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.mft
Manifest number:          AD
Signing time:             Thu 30 Jan 2025 18:50:07 +0000
Manifest this update:     Thu 30 Jan 2025 18:45:07 +0000
Manifest next update:     Tue 04 Feb 2025 10:23:07 +0000
Files and hashes:         1: 323830363a3365373a313030303a3a2f33362d3336203d3e20323730313630.roa (hash: 1jL+pXfbVaPdv01VJre+Qjnf6OuPOIG5gOKHGFrr4pw=)
                          2: B4E0934934FFEC12162EAFD5716D0AF920DC63AD.crl (hash: InoGkAzI+ByrZVE8kc0tsQbTa8RS7FL1Ls3dhe82INc=)
                          3: 323830363a3365373a333030303a3a2f33362d3336203d3e20323730313630.roa (hash: kEc0GIzevaXGRpXuGbO6BYwihcpFI6zrjIQ1nEWc+h4=)
                          4: 3137372e39332e3134322e302f32342d3234203d3e20323730313630.roa (hash: pxAQvi8n3UUCFeFI4glbVuQX0ihkp2ty34TAQgk9yTo=)
                          5: 323830363a3365373a323030303a3a2f33362d3336203d3e20323730313630.roa (hash: PDrxvQtyJkyGdi37iFJoa9uJCfV52rQveFoFD7t2ajs=)
                          6: 323830363a3365373a343030303a3a2f33362d3336203d3e20323730313630.roa (hash: FFiOhkg5GtC04F1mbpRc2dlMLOMmEDYTIaEvRxACyVE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b8:69:79:90:c8:81:b7:74:c0:f9:17:54:c0:f5:c6:d6:28:30:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4E0934934FFEC12162EAFD5716D0AF920DC63AD
        Validity
            Not Before: Jan 30 18:45:07 2025 GMT
            Not After : Feb  4 10:23:07 2025 GMT
        Subject: CN=430DA6C6224EDD163A0780E07BA9519C53F03D06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:24:47:2d:5f:bd:91:51:cb:95:d1:f6:5f:66:
                    2b:3a:f1:bc:0f:88:4c:af:82:f7:7c:ff:ad:d1:e3:
                    53:4c:c4:94:05:b6:45:56:ae:df:1a:e6:57:a8:2d:
                    78:7d:fe:fa:06:9e:21:0b:3b:8e:e6:1a:f4:d0:d8:
                    4c:ff:bd:88:42:6e:fd:62:10:dc:1f:e9:02:23:79:
                    ad:15:27:c6:71:3e:c9:1e:b6:68:be:df:01:f6:96:
                    de:d5:2a:3e:59:2d:74:28:e9:cf:1a:74:5b:39:50:
                    1a:1e:ff:dc:be:1b:bd:79:ca:31:d9:d0:d8:0b:89:
                    78:77:c6:6d:f8:d2:24:43:fc:fb:81:26:34:e7:88:
                    b0:c4:51:dd:f3:e1:bc:9b:5d:ca:d1:37:bf:77:0a:
                    c7:13:bb:5e:78:3a:c9:a6:1a:36:38:f1:f0:2d:16:
                    cb:82:b1:ac:88:65:45:64:1a:69:ee:7f:26:80:5f:
                    2c:28:46:0e:cb:6b:d7:37:30:9a:15:1a:fa:3e:d8:
                    4f:90:b3:f7:36:e6:d5:47:04:2d:ca:a6:a0:06:84:
                    c4:b8:16:71:b8:49:01:63:d7:be:94:dd:b2:2b:23:
                    6f:33:df:0a:73:76:8d:61:33:da:34:4d:90:e8:c2:
                    bd:f0:04:70:0e:46:e7:61:98:74:c5:27:ec:63:dd:
                    1d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:0D:A6:C6:22:4E:DD:16:3A:07:80:E0:7B:A9:51:9C:53:F0:3D:06
            X509v3 Authority Key Identifier:
                keyid:B4:E0:93:49:34:FF:EC:12:16:2E:AF:D5:71:6D:0A:F9:20:DC:63:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:02:25:28:c0:9a:ab:e0:36:86:de:f1:f1:5d:3a:73:25:c8:
         21:7e:63:4e:d9:4b:80:c1:11:84:b9:68:c2:d2:21:24:9c:ce:
         a0:19:62:60:2e:4e:72:16:c8:56:05:6b:67:ce:65:6c:c6:b6:
         63:d8:9d:f1:59:07:63:d9:23:51:b1:1a:f7:06:5a:63:7b:ce:
         f0:cf:5e:c7:ee:de:19:13:cf:c4:d2:04:df:d1:25:2a:b4:4e:
         0d:4d:f6:e6:8b:28:29:10:83:6d:15:f8:be:3a:7d:85:9e:d8:
         22:3b:1f:e9:db:8a:77:32:76:6b:ab:bd:b5:87:d8:70:64:1b:
         ca:80:4a:4b:46:08:9d:77:2f:d5:af:8e:34:78:d1:b6:3f:5e:
         40:bd:15:5d:1f:5c:c0:9d:7d:38:c8:e9:db:1a:e8:be:59:ff:
         33:b8:91:45:29:7d:9d:fa:28:c0:9d:a5:8b:4f:af:37:81:29:
         15:08:f4:76:66:24:c5:59:b2:66:79:4b:d8:e6:41:c1:1b:73:
         a4:32:16:99:aa:11:c9:67:f8:2d:f4:a5:55:eb:d2:4c:7b:85:
         81:5c:d2:b6:66:5d:1a:62:0b:6a:c2:55:c1:10:74:6e:bb:2b:
         23:38:11:b5:36:ba:e5:cf:38:8d:35:da:56:4e:04:dc:4e:5d:
         3a:44:f5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:59:56 2025 by rpki-client