Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/845FC621EC41AE7512D63082015413006FEF3E35.mft
File:                     845FC621EC41AE7512D63082015413006FEF3E35.mft (raw, json)
Hash identifier:          aYDWgXQt7FbJZXp5ZeFvzHmWPKXvQ+vx2OsFSgUFYSQ=
Subject key identifier:   19:B4:16:53:63:13:B4:6B:B5:E4:B3:17:DF:3C:E7:6F:17:DD:59:A0
Authority key identifier: 84:5F:C6:21:EC:41:AE:75:12:D6:30:82:01:54:13:00:6F:EF:3E:35
Certificate issuer:       /CN=845FC621EC41AE7512D63082015413006FEF3E35
Certificate serial:       1D468C0481AC5604C86D1AAD2A3EC300720E2E95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/845FC621EC41AE7512D63082015413006FEF3E35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/845FC621EC41AE7512D63082015413006FEF3E35.mft
Manifest number:          AA
Signing time:             Wed 29 Jan 2025 22:22:32 +0000
Manifest this update:     Wed 29 Jan 2025 22:17:32 +0000
Manifest next update:     Tue 04 Feb 2025 02:08:32 +0000
Files and hashes:         1: 323830333a636338303a3a2f33322d3536203d3e203230323037.roa (hash: Zd4qvANFr6p+ps3hkCetiFucDpFwWJhIDa6rJPZP2oo=)
                          2: 3138312e3137342e3137322e302f32322d3234203d3e203230323037.roa (hash: AoMGlj4twA8zKli8QQdzchvnluFmd6B2K/Ftd9LS7U0=)
                          3: 845FC621EC41AE7512D63082015413006FEF3E35.crl (hash: 0PYDZVPPVps17BqXbXV9ksvP8jF8vABBhcobRvdlzmc=)
                          4: 3138312e3137342e3137362e302f32312d3234203d3e203230323037.roa (hash: plOInh6bNEofH6PWOqCa/fFnMFzHHvmVLTKiQJtpqII=)
                          5: 3133382e3132322e3132382e302f32322d3234203d3e203230323037.roa (hash: amZkU0K3W6uqe+XpeuZAQgZ33xf4mgaSAjSLRwbAzBc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:46:8c:04:81:ac:56:04:c8:6d:1a:ad:2a:3e:c3:00:72:0e:2e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845FC621EC41AE7512D63082015413006FEF3E35
        Validity
            Not Before: Jan 29 22:17:32 2025 GMT
            Not After : Feb  4 02:08:32 2025 GMT
        Subject: CN=19B416536313B46BB5E4B317DF3CE76F17DD59A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:58:ee:6f:e0:0f:de:7d:99:cf:bb:45:6e:41:
                    9e:b7:53:18:69:44:a4:54:e0:cc:bc:b5:a4:46:00:
                    d7:4d:3d:d4:92:af:14:9b:6e:9d:fa:fc:e6:22:59:
                    fe:b5:c0:7c:4b:eb:e7:68:ee:53:7a:62:15:dd:64:
                    33:a9:69:23:b0:f8:ef:cb:61:6b:12:67:a9:4e:70:
                    7e:42:eb:f4:fc:c8:6d:a5:ef:3c:33:11:b9:44:8b:
                    7d:60:da:41:58:e7:68:f4:b2:e8:e5:03:2b:44:43:
                    81:37:00:be:61:af:00:9c:75:d0:f1:41:c5:06:ba:
                    40:95:d4:ee:42:65:0e:46:64:d3:9e:ec:9a:b5:64:
                    59:4f:5b:5d:98:12:47:b6:b4:3f:b2:d0:75:44:25:
                    cc:15:70:87:8a:85:8b:fa:c1:c4:42:42:79:4a:33:
                    a8:f6:3d:ac:0f:38:50:71:f4:e2:7f:17:f5:da:a8:
                    65:c5:aa:c8:91:e4:b0:af:ac:dd:34:e0:3f:9d:d2:
                    ef:27:88:60:89:40:97:ee:ce:c3:ef:8f:78:21:7a:
                    24:ed:7d:b6:d9:62:d5:bc:af:3e:21:fb:25:57:61:
                    f0:d4:14:7c:39:92:f3:5c:02:34:e6:4c:f1:a8:be:
                    5d:da:df:9a:c9:71:c7:61:47:cf:56:31:f9:e7:60:
                    6b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B4:16:53:63:13:B4:6B:B5:E4:B3:17:DF:3C:E7:6F:17:DD:59:A0
            X509v3 Authority Key Identifier:
                keyid:84:5F:C6:21:EC:41:AE:75:12:D6:30:82:01:54:13:00:6F:EF:3E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/845FC621EC41AE7512D63082015413006FEF3E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/845FC621EC41AE7512D63082015413006FEF3E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/845FC621EC41AE7512D63082015413006FEF3E35.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:12:80:0e:5f:99:fd:23:31:c1:0c:ef:fd:29:b3:9f:f2:cd:
         4f:e7:fe:7f:2b:d5:ec:e0:5c:e5:da:9a:0d:52:a8:d7:43:04:
         7f:39:02:9b:87:c1:84:a5:ee:17:b0:8f:01:e5:cc:27:64:53:
         96:41:22:98:49:54:82:eb:97:54:86:24:7c:f4:72:80:35:8f:
         0e:bb:fa:83:77:1b:7b:94:dd:da:00:93:bf:2c:82:53:13:85:
         ab:70:42:68:d0:7f:26:4b:f3:9b:89:df:19:38:cf:86:f4:d0:
         71:d9:c0:a9:fb:47:ce:f4:34:df:9f:93:d9:f9:ca:1f:2d:98:
         30:2f:1f:f0:51:9c:91:0d:7f:fe:f8:97:ee:40:e4:37:ae:49:
         e7:14:84:5b:a6:d4:9e:ec:cf:39:29:0c:bb:95:43:70:0d:68:
         e6:4e:73:46:79:7b:a3:5f:e4:e3:fb:0c:e5:fa:e0:53:45:3b:
         cb:7f:05:b6:42:6a:59:dc:05:7c:6f:a3:6e:0c:fa:91:d3:4a:
         5b:96:bf:51:ea:21:2c:3e:a3:e0:25:9c:2f:80:ac:cb:87:3b:
         79:39:5b:09:3a:d5:76:87:5c:f4:9f:bc:22:66:e4:7a:bd:0e:
         38:c0:af:9b:b7:fb:33:4a:10:de:06:62:45:e5:20:80:9f:d4:
         c9:61:03:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----