Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft
File:                     4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft (raw, json)
Hash identifier:          +LoR595/mTG4McG+6hzw2Uhe4Y8Veg0fqFzRQtP22Tw=
Subject key identifier:   16:64:0F:5F:69:4F:AA:DA:7E:EB:A6:F3:DE:3B:45:77:97:50:10:76
Authority key identifier: 42:33:B5:C9:FB:05:03:2E:E4:D3:23:F5:89:84:C9:BB:23:53:F9:AE
Certificate issuer:       /CN=4233B5C9FB05032EE4D323F58984C9BB2353F9AE
Certificate serial:       64B706AF52B201B0DF251708776C8EC36E9C30FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft
Manifest number:          AC
Signing time:             Thu 30 Jan 2025 16:58:51 +0000
Manifest this update:     Thu 30 Jan 2025 16:53:51 +0000
Manifest next update:     Tue 04 Feb 2025 23:17:51 +0000
Files and hashes:         1: 323830333a326330303a3a2f33322d3332203d3e20323632323331.roa (hash: MG67Kk7kPOR3JTUwBIkdLYGxSLROZWR5xeHTZWl422I=)
                          2: 3134332e302e38302e302f32322d3234203d3e20323632323331.roa (hash: DcdSPkJZhrNU/biheJ+Cgby1A7L7gzjGQCn7t4vDiEg=)
                          3: 4233B5C9FB05032EE4D323F58984C9BB2353F9AE.crl (hash: +j3YcXoVrLY1PaEq29+SMnJhD6d6dTIecPpxmKVFT6E=)
                          4: 3139302e35322e38302e302f32302d3234203d3e20323632323331.roa (hash: 5GHIMrLWNcH6xO/ZUKed2HxCSkkH8lPdma+i/lTBI9E=)
                          5: 3137302e3234352e3136382e302f32322d3234203d3e20323632323331.roa (hash: yvhkLTXyRUJO3VSExkq2voEIncIu+Qc8D7obqAWkzaw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b7:06:af:52:b2:01:b0:df:25:17:08:77:6c:8e:c3:6e:9c:30:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4233B5C9FB05032EE4D323F58984C9BB2353F9AE
        Validity
            Not Before: Jan 30 16:53:51 2025 GMT
            Not After : Feb  4 23:17:51 2025 GMT
        Subject: CN=16640F5F694FAADA7EEBA6F3DE3B457797501076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ba:9a:5e:1a:ee:6f:74:74:38:01:1a:86:69:
                    44:de:fb:4f:31:86:ee:b8:a4:4d:16:15:7d:6c:ff:
                    a0:23:b1:9f:5e:46:2c:87:38:47:de:6e:1c:bf:81:
                    84:03:b7:ca:c2:af:69:45:eb:d1:e0:bf:f7:1e:02:
                    3e:70:fb:4c:8a:32:3a:8a:75:f6:70:7b:62:6d:7d:
                    d1:0f:5d:5f:f8:5b:db:5d:6c:6b:ac:4f:8b:23:57:
                    35:c4:30:2c:9c:54:54:c3:97:22:a7:ad:a3:18:6a:
                    13:95:19:d8:98:ee:46:75:1e:b1:15:36:aa:80:db:
                    3d:3f:db:41:2a:6e:6a:a4:0d:08:14:25:c2:4e:81:
                    24:87:7e:1a:5c:76:bb:27:6b:e0:56:a5:1d:79:67:
                    70:32:c1:e8:8c:4c:f6:17:0c:81:96:73:3e:ee:24:
                    6d:2f:30:b0:77:4f:c3:d3:29:b9:1a:a7:0a:03:9b:
                    df:78:d9:55:c4:78:23:e5:51:f0:00:c7:4f:57:a8:
                    1e:7c:1c:e9:43:0b:b8:92:c6:9b:3a:22:07:f1:28:
                    ff:5d:23:12:a8:f0:de:7a:16:b7:08:8f:58:f5:bd:
                    87:4c:e8:ce:41:cc:1f:21:9a:f0:a1:c3:ee:fa:24:
                    f8:e0:52:3e:67:ae:73:b2:c2:56:ea:37:5d:fe:8a:
                    0a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:64:0F:5F:69:4F:AA:DA:7E:EB:A6:F3:DE:3B:45:77:97:50:10:76
            X509v3 Authority Key Identifier:
                keyid:42:33:B5:C9:FB:05:03:2E:E4:D3:23:F5:89:84:C9:BB:23:53:F9:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:84:6e:90:b8:db:1c:f2:7c:d8:58:8f:13:c1:35:c4:0e:c2:
         3d:ff:7d:b3:ac:77:b1:fe:bf:0c:da:aa:b2:b7:4f:e9:4a:c2:
         e3:33:95:45:b4:da:07:30:a4:25:2c:4f:47:88:5b:a3:65:0a:
         69:dd:f4:a9:c6:d5:c5:d8:88:4b:71:3e:51:4f:4c:e5:f8:a8:
         88:74:7e:91:a3:fe:14:d4:37:cb:6b:be:0d:82:84:40:f0:cd:
         a0:f1:80:b5:5c:7e:41:de:c7:e1:d6:e6:5f:6f:f9:ba:3e:11:
         d6:9a:9d:cb:27:35:ea:6a:6f:58:9c:9d:3e:fb:e5:5d:92:55:
         2e:be:02:7d:da:7d:5b:8c:ff:23:5b:76:76:c8:31:a9:04:63:
         4c:01:55:83:88:0f:8d:f3:ce:c7:59:7c:93:e3:4d:83:af:3c:
         d2:ff:1e:43:2b:55:c8:b9:d2:02:8c:3d:0a:7d:19:fb:83:1d:
         53:24:4a:fc:93:e6:00:78:54:df:c1:9f:36:a5:95:93:a6:47:
         bf:63:25:ab:c9:24:86:2a:23:40:93:4f:14:41:c2:ad:1f:d2:
         5b:8e:ed:6d:56:db:67:a5:9d:83:ba:2c:ef:35:4c:e9:d7:15:
         6c:76:78:84:bc:d2:8a:71:c2:99:97:61:f1:9e:0f:4a:5c:0c:
         83:c9:6e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----