Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.mft
File:                     53C52096D7FFB235A3DF184910FA4B7547FE2D56.mft (raw, json)
Hash identifier:          Keij0VKRe7Iu3yaStTQ0uuM0ZqcxZijGfnAcyc9Nhi0=
Subject key identifier:   23:18:57:C4:D0:21:D8:CA:A5:CC:03:3E:C4:74:B8:3D:61:26:03:6A
Authority key identifier: 53:C5:20:96:D7:FF:B2:35:A3:DF:18:49:10:FA:4B:75:47:FE:2D:56
Certificate issuer:       /CN=53C52096D7FFB235A3DF184910FA4B7547FE2D56
Certificate serial:       11D3F8D198709FE134F9D828EA146B8F82F37AD2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.mft
Manifest number:          AD
Signing time:             Fri 31 Jan 2025 07:58:32 +0000
Manifest this update:     Fri 31 Jan 2025 07:53:32 +0000
Manifest next update:     Wed 05 Feb 2025 20:39:32 +0000
Files and hashes:         1: 323830333a313439303a663130303a3a2f34302d3430203d3e20323732383232.roa (hash: GeFDgxeaPMsma6/84G2AIis/QTidIpv+tfCSIZFxjiA=)
                          2: 323830333a313439303a663330303a3a2f34302d3430203d3e20323732383232.roa (hash: QiRskZYKycyF+XRfCeJfgRLB7ouwb/Ul1Em1GFYwbxE=)
                          3: 323830333a313439303a663230303a3a2f34302d3430203d3e20323732383232.roa (hash: CVp4cjiNh5pWcqpMoo4YyBaHX8Zm5wyU9p7MzYVY1rY=)
                          4: 53C52096D7FFB235A3DF184910FA4B7547FE2D56.crl (hash: 8lIPmqQNEAew0doWR76Av3jGMNL4mAu3rLmw1JOlZqo=)
                          5: 323830333a313439303a3a2f33322d3332203d3e20323732383232.roa (hash: jzGa9F2iw/CNqPK3nm6AyQ5RopUAnU6CMH85xqdrBcU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d3:f8:d1:98:70:9f:e1:34:f9:d8:28:ea:14:6b:8f:82:f3:7a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53C52096D7FFB235A3DF184910FA4B7547FE2D56
        Validity
            Not Before: Jan 31 07:53:32 2025 GMT
            Not After : Feb  5 20:39:32 2025 GMT
        Subject: CN=231857C4D021D8CAA5CC033EC474B83D6126036A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9c:bf:56:a0:ea:62:6c:4e:f1:a8:4f:3f:e1:
                    54:c8:d7:6a:6e:b8:6f:ef:76:2f:f5:9b:8b:5d:62:
                    56:d0:f1:9f:90:a9:3f:bc:13:e7:9d:f7:bb:73:60:
                    42:32:ff:75:b3:e7:9b:f7:de:94:b5:6d:d4:a6:fd:
                    bb:e7:d4:c6:b6:92:bd:30:88:32:df:78:74:c6:0b:
                    f4:6f:0e:3c:eb:8d:8f:26:25:c9:a1:38:3c:0b:36:
                    9e:62:c4:cb:f1:fc:67:58:dd:19:f8:30:30:28:29:
                    35:d3:51:5f:59:4c:c4:b1:72:61:17:d4:01:8f:12:
                    bf:f2:10:52:1e:d6:4f:3c:d8:2c:d6:3d:78:b3:3b:
                    11:bf:b8:3e:5e:47:18:12:c6:9d:49:6b:b5:82:d1:
                    ee:41:1d:54:26:c4:9c:da:60:0f:60:1a:56:1d:32:
                    25:bf:5d:52:c5:6b:cf:e3:1e:e1:e8:f4:22:68:c3:
                    e4:d9:04:86:d5:68:bc:ad:36:23:52:65:4f:2e:c2:
                    52:ea:f1:e5:e6:35:15:59:26:1b:87:70:f1:e4:ff:
                    fd:4f:70:d6:17:39:c1:5a:5a:b4:e8:51:db:53:45:
                    d0:2f:9a:b4:a8:9d:28:c4:1a:92:aa:11:15:64:22:
                    04:be:18:10:d2:66:ce:54:04:e1:dc:e9:8b:84:d2:
                    c6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:18:57:C4:D0:21:D8:CA:A5:CC:03:3E:C4:74:B8:3D:61:26:03:6A
            X509v3 Authority Key Identifier:
                keyid:53:C5:20:96:D7:FF:B2:35:A3:DF:18:49:10:FA:4B:75:47:FE:2D:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:c1:e7:79:51:8c:b3:5b:1c:62:bd:51:ce:ab:16:9d:c4:8e:
         15:f6:0f:ba:db:2a:76:4d:b1:26:d6:f4:b8:cc:c6:c9:d5:58:
         f1:b8:9d:4c:02:05:d7:b2:92:dd:7f:48:2c:d9:85:09:f4:c1:
         0a:5a:51:6f:10:98:46:5c:17:8f:a2:a0:8f:bb:8c:0d:9f:ca:
         56:75:7f:93:4a:a6:b8:43:ad:ba:0b:44:12:aa:d6:3b:12:9a:
         76:12:d0:15:f3:3e:35:ec:db:dd:2b:52:4d:0a:b3:54:c0:32:
         5b:24:80:e9:f4:d7:00:9a:e3:e9:76:65:7d:3b:ea:16:49:fd:
         27:9b:a2:14:14:fb:20:46:ca:4f:a4:c0:d7:de:b1:da:55:71:
         00:5a:f7:48:44:9d:63:87:1d:58:ef:37:a7:61:e3:28:8e:af:
         3a:69:dc:56:33:2d:58:7c:2e:0f:5b:f3:ce:f9:6d:f5:79:14:
         16:68:6a:8f:d6:a4:9e:64:2f:4e:01:d1:fe:07:7c:89:36:55:
         bc:71:b6:6f:51:f7:a8:59:c6:5c:c2:10:bd:42:36:ef:a3:46:
         16:91:10:3c:b9:9b:75:8c:e1:be:57:00:18:08:d7:bd:44:c5:
         51:4a:f1:1f:d0:4d:aa:82:90:4e:37:c2:f4:16:eb:d5:ef:ab:
         a8:b3:e2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----