Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.mft
File:                     A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.mft (raw, json)
Hash identifier:          NzLgfgRiy6zh7yLud+nk4f6nsnZUtWpIE5o3jE/XVmw=
Subject key identifier:   A6:73:B1:2C:A0:96:2A:B6:F4:8B:34:93:D9:D5:E5:3B:6E:DB:53:73
Authority key identifier: A4:EA:E6:1F:1B:89:52:AF:AD:56:93:A1:FC:16:8A:75:2D:34:6D:F1
Certificate issuer:       /CN=A4EAE61F1B8952AFAD5693A1FC168A752D346DF1
Certificate serial:       79840ACE34DCEA26A09433C2D32BC1158B88E9D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.mft
Manifest number:          AB
Signing time:             Wed 29 Jan 2025 19:51:07 +0000
Manifest this update:     Wed 29 Jan 2025 19:46:07 +0000
Manifest next update:     Tue 04 Feb 2025 17:38:07 +0000
Files and hashes:         1: A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.crl (hash: t7Ei7hYCwuwr0B3n3hhktGDBsT45NWMGUtGfZV2/YLw=)
                          2: 323830333a326639303a3a2f33322d3438203d3e20323733303734.roa (hash: aTiecC998Ix058wAj+bCyjCghtfqeC/OxmhrYqhWDYM=)
                          3: 34352e3233392e3130372e302f32342d3234203d3e20323733303734.roa (hash: jzxSA00CPj3j/VK+gLEt+nZBoMOE1wYo5kBTApy29Oo=)
                          4: 3230302e33332e32382e302f32342d3234203d3e20323733303734.roa (hash: hgVReSdqoeVDDFqOj4FHyLlKt/57shRCqxCkNO8WFSQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:84:0a:ce:34:dc:ea:26:a0:94:33:c2:d3:2b:c1:15:8b:88:e9:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4EAE61F1B8952AFAD5693A1FC168A752D346DF1
        Validity
            Not Before: Jan 29 19:46:07 2025 GMT
            Not After : Feb  4 17:38:07 2025 GMT
        Subject: CN=A673B12CA0962AB6F48B3493D9D5E53B6EDB5373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:17:ea:9d:83:d0:66:2b:20:00:17:9a:00:3d:
                    1a:06:12:93:d4:c7:69:4f:3b:1b:4e:60:8c:78:fb:
                    e8:ce:1a:52:24:12:8a:a2:87:85:3a:13:11:f9:b6:
                    5a:35:0b:46:77:ec:e2:d7:ce:e0:75:8d:66:4d:94:
                    5f:1a:fd:34:81:89:be:ae:71:18:15:cf:04:37:19:
                    db:ec:1f:d3:d3:2f:d9:0f:47:ed:56:b1:3e:be:a3:
                    8f:40:68:02:58:15:b6:9a:bd:41:6a:ba:60:2c:a9:
                    64:8b:8e:55:d3:5d:c4:c5:b4:31:38:24:b7:0d:5f:
                    de:4b:79:5e:a8:f9:07:40:e4:05:9e:8e:a6:67:e0:
                    ff:5a:5c:97:b3:a8:7d:7b:d9:4f:f8:0e:b3:3e:ce:
                    25:d3:14:40:de:6b:4e:26:87:0b:cc:a6:20:4d:0b:
                    5b:18:5c:91:19:ee:31:82:c0:6a:3d:4d:92:6b:7d:
                    6e:20:c5:89:80:ac:df:99:f6:0d:8e:e1:b4:bc:be:
                    59:17:d5:da:02:96:1a:cc:db:c1:e7:65:2e:15:40:
                    9f:e7:40:a6:f1:21:3c:41:db:d3:be:ed:84:5c:58:
                    c4:cc:32:8c:7f:3c:de:f6:99:a5:a6:7d:e2:7f:a1:
                    45:e2:73:21:f0:18:5e:1a:0d:8a:c1:f6:e4:10:78:
                    f5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:73:B1:2C:A0:96:2A:B6:F4:8B:34:93:D9:D5:E5:3B:6E:DB:53:73
            X509v3 Authority Key Identifier:
                keyid:A4:EA:E6:1F:1B:89:52:AF:AD:56:93:A1:FC:16:8A:75:2D:34:6D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:e1:60:26:4d:c4:9d:eb:93:a9:6b:57:3f:86:5f:95:84:52:
         ef:1c:d8:4b:26:fa:2c:c0:eb:65:7d:ef:b3:44:37:51:2b:f9:
         dc:fe:cc:e2:35:cc:59:d8:d4:96:5b:e5:17:29:9c:5f:e9:7a:
         5a:b7:92:cd:f8:17:d2:3d:60:bf:54:d5:56:6a:52:4b:70:5e:
         44:ee:36:c9:93:cb:8b:71:eb:ba:dc:85:eb:0f:68:98:72:f3:
         d6:df:20:34:34:55:f8:3d:03:27:42:a2:ed:09:36:3d:58:9d:
         bd:11:eb:ea:f1:48:5a:e3:81:73:7c:5f:6c:89:eb:b5:ab:a8:
         82:2a:02:9c:0b:be:ef:ef:8c:fb:64:79:02:1b:f7:e0:87:c9:
         3f:2b:19:0d:f4:15:7c:88:5a:68:c2:5e:11:cd:8e:b0:9f:68:
         9a:70:b2:97:ae:38:51:f2:9e:74:af:50:3d:68:ac:60:01:1b:
         25:f0:8d:23:b6:bb:5c:2b:14:1c:b9:09:85:a7:6d:8b:3a:d7:
         d7:f1:e8:6c:2d:06:19:14:3c:e6:44:ae:6a:79:11:fb:bd:8b:
         64:0f:c1:a9:ad:48:94:83:96:26:05:7c:d6:a7:46:35:97:4e:
         84:9c:67:b1:4d:a8:6b:b4:9b:1a:82:32:0b:5f:43:b2:14:0c:
         86:b4:75:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----