Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFBE89E7128AFA3025F926472099CD117262B32AAC77A885FD97934982C68E55/0/BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6.mft
File:                     BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6.mft (raw, json)
Hash identifier:          CVmEE45IpMAjN4LSzJrr+zPHBpKPDohYQlNWsYmDZbM=
Subject key identifier:   47:14:A8:09:61:EA:1B:4E:24:7D:DF:CE:A5:9D:C7:AF:E9:49:18:A0
Authority key identifier: BA:6D:20:BA:A9:6B:C8:F1:7C:49:28:A4:ED:0F:18:86:73:9B:35:A6
Certificate issuer:       /CN=BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6
Certificate serial:       2079C127A98F60735CEE67123D116F69B526D93C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFBE89E7128AFA3025F926472099CD117262B32AAC77A885FD97934982C68E55/0/BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6.mft
Manifest number:          AA
Signing time:             Wed 29 Jan 2025 23:53:25 +0000
Manifest this update:     Wed 29 Jan 2025 23:48:25 +0000
Manifest next update:     Mon 03 Feb 2025 22:21:25 +0000
Files and hashes:         1: 34352e3136392e3136332e302f32342d3234203d3e20323635373033.roa (hash: vZ08gCK/wsLLMEEtibtd8eJttkq9mid8biEM3joDViY=)
                          2: 323830333a383361303a3a2f33322d3438203d3e20323637373435.roa (hash: mFCVnR7BeH6TMeD8Xzxb9bK/kJFE+9myqffAiYy5B+Q=)
                          3: 34352e3136392e3136332e302f32342d3234203d3e20323637373435.roa (hash: hWD+YSIOcszay/QVm9Rb/LqGCgC/7QxSlkHiNLbCkqQ=)
                          4: BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6.crl (hash: vcNrSJEEDNXW3URxBEUyqTtwyVwWP+FwYO2ql9pgpGE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:79:c1:27:a9:8f:60:73:5c:ee:67:12:3d:11:6f:69:b5:26:d9:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6
        Validity
            Not Before: Jan 29 23:48:25 2025 GMT
            Not After : Feb  3 22:21:25 2025 GMT
        Subject: CN=4714A80961EA1B4E247DDFCEA59DC7AFE94918A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:08:87:b2:83:3a:08:51:dc:4a:ce:09:9f:2a:
                    f5:fd:c8:d0:0c:8e:db:6b:aa:81:be:c0:c1:52:1c:
                    6c:cf:ec:c7:c9:89:ec:90:13:da:39:67:02:99:b3:
                    cc:84:b1:41:4d:4f:66:d2:55:ab:ce:d9:b2:15:4c:
                    25:a0:be:57:af:e2:8d:2d:2f:28:c9:c6:67:68:e2:
                    33:44:3c:6e:8a:9c:65:be:02:23:c1:ba:83:6a:b6:
                    73:5d:87:cc:89:70:f6:a6:a9:5a:d6:e2:29:f6:d3:
                    ed:19:dc:7b:ba:ea:a4:59:82:8e:78:14:91:f1:52:
                    bc:ce:c5:06:6f:20:da:36:b8:a1:fa:6b:2f:1a:d2:
                    47:24:43:94:28:f8:90:e2:77:3a:a8:ba:70:c2:b2:
                    ae:35:98:ad:07:0e:64:3c:12:c7:50:dc:e3:20:c5:
                    a9:56:22:07:cf:5d:3a:1f:c8:b8:94:e7:ed:5c:a4:
                    de:79:f2:7c:58:09:95:84:a6:53:a9:1d:d6:04:51:
                    7f:e3:ee:00:16:30:82:15:96:52:60:06:97:ae:aa:
                    a7:9e:73:c9:92:2c:9f:6c:8c:a6:c9:fe:6d:34:1f:
                    d7:0d:99:d9:c6:02:b5:58:a7:cd:d8:bb:c4:e8:86:
                    40:20:c3:26:1d:d6:df:02:8a:81:46:38:af:59:5a:
                    22:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:14:A8:09:61:EA:1B:4E:24:7D:DF:CE:A5:9D:C7:AF:E9:49:18:A0
            X509v3 Authority Key Identifier:
                keyid:BA:6D:20:BA:A9:6B:C8:F1:7C:49:28:A4:ED:0F:18:86:73:9B:35:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFBE89E7128AFA3025F926472099CD117262B32AAC77A885FD97934982C68E55/0/BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFBE89E7128AFA3025F926472099CD117262B32AAC77A885FD97934982C68E55/0/BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:9c:e8:f5:f9:e8:d4:8b:7c:82:30:ca:6d:74:ea:34:f9:0e:
         9e:8f:66:80:bd:9a:f3:f6:ed:32:d0:ee:57:77:b1:c7:f7:e6:
         16:69:d1:d0:bf:df:d8:d6:90:87:dc:cc:f4:55:5d:91:fc:d1:
         df:50:18:07:10:37:a1:7f:8f:ed:a7:fd:ea:86:04:7d:45:cb:
         3a:1f:2a:b1:0a:79:74:fe:fe:cf:5a:13:2b:c9:31:b0:ad:fc:
         0c:c8:36:16:e8:85:04:b2:23:92:bd:db:19:42:c6:0b:74:31:
         a2:d9:9b:d7:6d:de:a5:9b:b7:32:24:ec:2d:a7:32:fa:64:b7:
         c4:6e:c2:c5:a3:ed:30:49:aa:ee:dc:ca:6e:cb:b7:7b:96:93:
         7f:3c:ef:04:30:9e:2d:c1:c8:c8:a9:79:33:08:54:a7:49:4f:
         ff:69:25:04:e0:e0:48:ff:00:99:aa:b8:ad:68:89:de:49:33:
         e1:de:fd:66:28:7e:47:3e:fe:e9:15:bb:76:df:ec:f4:f3:1d:
         47:eb:84:15:2b:3b:4f:38:e0:d6:56:c1:91:fa:67:34:67:ea:
         b6:c0:c0:08:be:77:62:ca:b3:9f:c8:d1:17:1b:7d:9f:25:bf:
         33:55:51:4f:cd:5c:41:23:f2:cc:52:fa:7a:b3:85:5f:1b:26:
         bd:09:b9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----