Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.mft
File:                     604B953E7CDFD156CD44C7E9BEDC37AE69B43881.mft (raw, json)
Hash identifier:          X+dRQtpqsk6eFmRc2ELlsww9jFvx4/u3yJxcTLslalg=
Subject key identifier:   9A:36:65:57:0F:DE:CD:1D:5E:3F:25:8A:45:4D:45:8B:FB:2A:34:6D
Authority key identifier: 60:4B:95:3E:7C:DF:D1:56:CD:44:C7:E9:BE:DC:37:AE:69:B4:38:81
Certificate issuer:       /CN=604B953E7CDFD156CD44C7E9BEDC37AE69B43881
Certificate serial:       07A58B2C5146CE53FB1CE602CEE776FE33BEEEF2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.mft
Manifest number:          AC
Signing time:             Thu 30 Jan 2025 22:32:31 +0000
Manifest this update:     Thu 30 Jan 2025 22:27:31 +0000
Manifest next update:     Wed 05 Feb 2025 14:18:31 +0000
Files and hashes:         1: 34352e342e3231362e302f32322d3234203d3e203532333631.roa (hash: QcnQLYE7edBLIHINgm2KaUYyV0HjjKw5+xXSggwN6zw=)
                          2: 604B953E7CDFD156CD44C7E9BEDC37AE69B43881.crl (hash: BUI28rEUicVNIlVURS+apd8CTo5xUkRJt09gRuVgEno=)
                          3: 34352e342e3231362e302f32322d3234203d3e20323635363739.roa (hash: F8Ur4GASdD/N7MtrjUakfnKsMRLm4nY2dtr6SgSJlPA=)
                          4: 323830333a633163303a3a2f33322d3332203d3e203532333631.roa (hash: qw/6xX1uXLRxoFdnBPcc2WcWTpNKGXIPnp+FrlxRAsw=)
                          5: 323830333a633163303a3a2f33322d3332203d3e20323635363739.roa (hash: E5dUmlV4O/Opgi49a7gDTHnxfh+aTWw3YIWTm+X1Pt8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a5:8b:2c:51:46:ce:53:fb:1c:e6:02:ce:e7:76:fe:33:be:ee:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=604B953E7CDFD156CD44C7E9BEDC37AE69B43881
        Validity
            Not Before: Jan 30 22:27:31 2025 GMT
            Not After : Feb  5 14:18:31 2025 GMT
        Subject: CN=9A3665570FDECD1D5E3F258A454D458BFB2A346D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4a:a8:c5:47:65:f2:49:47:bb:f5:27:a1:be:
                    b7:b2:13:66:64:17:07:34:35:3c:08:88:f2:14:4f:
                    8f:d4:4b:d3:8e:8d:d4:01:95:e9:a2:83:30:33:d6:
                    94:5d:0a:b4:17:bb:cf:0f:72:9b:a4:b4:cc:be:43:
                    00:4f:46:06:32:00:cd:8b:3e:75:3f:d3:b6:f0:71:
                    0d:e6:47:a8:bd:9e:c3:d5:41:41:24:31:6f:c0:39:
                    b0:63:5b:43:22:01:78:d1:44:6d:5f:38:62:df:61:
                    19:1d:98:e0:b0:fc:0b:1f:34:ef:38:66:1e:45:bc:
                    e1:b7:a2:7e:fa:e7:3a:b7:e1:5e:c1:fd:16:ee:d7:
                    0e:74:78:d3:bd:6f:d5:b1:12:89:50:e9:c8:8e:f4:
                    41:99:2f:91:49:81:c5:17:36:cd:a0:30:cb:ef:3f:
                    59:34:dd:7c:07:8d:b8:15:64:67:96:da:63:57:89:
                    8f:01:ef:3e:3d:0b:10:d9:1e:7c:7d:17:e3:dc:0d:
                    f9:16:7c:c9:cb:5b:b6:77:e9:30:f3:5c:58:95:1b:
                    14:df:80:a3:5b:ec:70:24:e0:a0:99:98:77:75:b5:
                    55:f0:fd:52:30:2c:ba:64:f3:a6:b9:b5:07:ed:d0:
                    7d:88:50:75:d2:5b:76:ea:f9:85:79:c5:db:a3:1d:
                    e2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:36:65:57:0F:DE:CD:1D:5E:3F:25:8A:45:4D:45:8B:FB:2A:34:6D
            X509v3 Authority Key Identifier:
                keyid:60:4B:95:3E:7C:DF:D1:56:CD:44:C7:E9:BE:DC:37:AE:69:B4:38:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:2b:7c:a7:41:01:ce:9f:31:34:0f:72:d0:50:f7:1a:18:69:
         81:c1:69:a4:fe:34:b6:44:bd:db:1a:56:13:57:43:ef:55:45:
         cc:4b:da:96:7f:21:ba:37:ff:37:5a:8e:25:ad:7e:c8:b6:95:
         ce:c8:6a:3a:a0:9b:b3:75:ed:06:14:6d:76:f4:98:99:80:7e:
         d2:cf:0b:67:c4:be:28:82:65:55:dc:97:d8:e5:71:d7:4c:a9:
         f6:b0:f7:db:30:cc:3d:13:f5:b7:52:97:87:6b:88:ff:5b:fe:
         8f:c2:87:8a:10:27:68:9e:cd:56:9f:b3:68:96:2d:e8:90:62:
         ce:ae:1e:f0:c4:34:a3:e7:cd:15:4c:53:c0:94:f5:b3:4e:18:
         4e:ca:9f:7b:c5:6a:81:4d:f4:64:d1:e7:a1:43:c3:69:c5:61:
         72:c2:86:e1:fc:4a:8a:10:2d:e9:cc:b8:39:bd:77:08:62:8c:
         1c:a4:ee:9a:0b:6e:bc:08:7f:a2:15:a6:9a:8c:d5:44:4a:dd:
         78:74:b9:30:ed:d3:85:db:d7:3f:fd:ba:9e:e7:cf:9e:cc:a0:
         19:1b:61:21:12:7c:c9:d4:a7:97:09:8c:72:b5:bf:b8:a1:d9:
         5c:dd:15:fb:1b:2f:ec:28:e4:18:84:9d:ae:1a:39:82:d2:a8:
         bb:ce:8a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----