Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
File:                     946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft (raw, json)
Hash identifier:          6G7pBiWx7ezelFMtpb4+P4v0UTg76bFSQRZ/zoXobf0=
Subject key identifier:   8F:DE:3E:83:8C:58:C6:EA:AC:F6:16:1B:3D:4F:34:1D:62:5B:B1:D0
Authority key identifier: 94:6D:AE:84:64:E7:C5:81:E9:BA:57:87:F7:4C:BD:A9:DC:F6:F8:CD
Certificate issuer:       /CN=946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD
Certificate serial:       756A4D8F4ADF7A5A5425152B1046A5B1F03B1E40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
Manifest number:          CC
Signing time:             Wed 29 Jan 2025 17:54:52 +0000
Manifest this update:     Wed 29 Jan 2025 17:49:52 +0000
Manifest next update:     Tue 04 Feb 2025 12:48:52 +0000
Files and hashes:         1: BCC0665ECF8A97B83E398268D92A255BAE661816.cer (hash: HxCHx1ouTkEkVbSj+EvrxifOuyYfDSfjx2YPTWbXw1M=)
                          2: 946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl (hash: fGUoZvcHZwsReUkM4r3YInXybLzPsRY+uijQlw0pQYk=)
                          3: 05BAF2939E37DDDE1793A803162A35594ACBB405.cer (hash: Fh31P8rg5xsfihCLHgWZxJGaIx2RL9NSv3M/fomuOVI=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:6a:4d:8f:4a:df:7a:5a:54:25:15:2b:10:46:a5:b1:f0:3b:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD
        Validity
            Not Before: Jan 29 17:49:52 2025 GMT
            Not After : Feb  4 12:48:52 2025 GMT
        Subject: CN=8FDE3E838C58C6EAACF6161B3D4F341D625BB1D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a0:25:9a:40:eb:44:8f:1b:cd:75:e2:11:c7:
                    b3:88:22:8a:7c:be:53:20:b3:0c:22:54:db:70:6a:
                    cf:d1:36:f9:f4:6f:01:6a:8d:39:a4:59:fe:35:84:
                    99:47:93:b1:27:65:f5:41:7b:ed:a3:ce:6e:21:ef:
                    84:cf:a9:34:27:06:7d:73:27:82:9c:4e:43:33:06:
                    1a:ed:e8:fc:f8:cf:fe:da:b1:27:c1:e1:47:71:02:
                    8f:c4:7e:0c:1b:e8:df:44:46:5a:87:c8:80:dc:6a:
                    09:58:9f:31:2f:0c:1c:dc:6d:9e:04:05:15:9a:a1:
                    66:6a:96:fe:04:3a:fe:1e:b6:45:ed:18:19:4c:e0:
                    d7:8a:cf:b2:ca:59:52:7e:49:be:ee:d3:16:30:82:
                    e5:ec:80:f6:a7:9d:3c:f9:88:48:a8:6d:24:77:1c:
                    4f:e8:08:12:94:03:f9:a3:87:ed:67:1a:0d:32:85:
                    52:ac:05:7c:6d:84:c5:b3:88:bb:43:b4:52:39:64:
                    78:af:2f:2c:11:78:2e:b9:99:d9:79:64:42:46:5b:
                    0e:db:08:38:e9:65:8e:63:1a:61:78:11:67:65:d6:
                    77:d0:6f:89:1f:89:39:7a:e0:df:be:da:1c:62:f4:
                    df:72:6f:d7:24:48:82:07:f9:ed:af:17:bc:30:69:
                    4e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DE:3E:83:8C:58:C6:EA:AC:F6:16:1B:3D:4F:34:1D:62:5B:B1:D0
            X509v3 Authority Key Identifier:
                keyid:94:6D:AE:84:64:E7:C5:81:E9:BA:57:87:F7:4C:BD:A9:DC:F6:F8:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:17:ba:e0:03:29:5d:42:37:19:dd:12:06:ab:4d:be:5d:23:
         a5:07:ad:34:9b:99:07:5e:cd:dc:6a:94:13:bc:b4:c3:2e:f9:
         1d:6a:c0:76:b7:7a:73:34:0c:2d:a2:46:f1:eb:6b:cd:20:f0:
         b0:79:10:f2:f7:4a:42:0e:0b:ca:52:71:cb:22:c1:3e:bd:eb:
         f5:57:6a:a2:a9:ee:f1:10:ab:01:1f:e2:e9:8c:07:f2:07:e7:
         f9:93:17:1e:f0:4c:98:7e:4d:34:d2:0d:64:ce:85:2e:7b:32:
         26:ea:a4:f3:1b:7b:4e:da:80:ea:5b:07:62:75:28:7c:e8:2e:
         49:30:07:44:0c:58:2e:f3:ce:af:e6:5c:da:24:ef:62:ef:4a:
         80:74:03:1c:9a:6a:8c:a3:95:f6:46:2b:2b:8a:4d:2b:f1:0e:
         49:0b:41:0c:6c:63:b1:fc:94:d0:f4:35:a9:8b:83:b5:86:a1:
         9f:55:7d:8c:14:f7:81:a4:7e:6b:09:dd:08:19:20:45:b0:6c:
         b7:4d:18:2c:5b:0a:f8:72:26:db:ee:77:3b:ed:f5:31:ad:53:
         80:f9:a4:9e:f1:02:70:b4:5e:d8:41:1d:43:f4:b8:e4:91:06:
         59:ac:fc:c4:04:f1:e7:cd:76:6e:c7:30:20:b9:ae:c6:35:53:
         a7:2c:70:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----