Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/973570FB2000D07347E4A87C50AF4025EA830BB6C6E953213D7D98FEC41BC4AD/0/512B1C382AD9F8BA54EA80FE7BD3354DD2BCA80B.mft
File:                     512B1C382AD9F8BA54EA80FE7BD3354DD2BCA80B.mft (raw, json)
Hash identifier:          vuRIGRGFQysy8U2eD1h4+rs3j9fHNnZBLvagskfsHeo=
Subject key identifier:   B2:0A:5B:F8:F5:3D:6D:BC:61:C2:45:CE:3B:46:85:60:67:4A:85:C1
Authority key identifier: 51:2B:1C:38:2A:D9:F8:BA:54:EA:80:FE:7B:D3:35:4D:D2:BC:A8:0B
Certificate issuer:       /CN=512B1C382AD9F8BA54EA80FE7BD3354DD2BCA80B
Certificate serial:       49967F38389BE41A95EFD0ED5B10663F6CAF826A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512B1C382AD9F8BA54EA80FE7BD3354DD2BCA80B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/973570FB2000D07347E4A87C50AF4025EA830BB6C6E953213D7D98FEC41BC4AD/0/512B1C382AD9F8BA54EA80FE7BD3354DD2BCA80B.mft
Manifest number:          BF
Signing time:             Fri 28 Mar 2025 03:51:35 +0000
Manifest this update:     Fri 28 Mar 2025 03:46:35 +0000
Manifest next update:     Wed 02 Apr 2025 12:43:35 +0000
Files and hashes:         1: 3139322e3130302e3137382e302f32342d3234203d3e203137303930.roa (hash: RrsJOPfNO/48L7rPFcY0VChMz6Qxb99caxpWFsw3b34=)
                          2: 512B1C382AD9F8BA54EA80FE7BD3354DD2BCA80B.crl (hash: Zyltu0XosvoV+eXiQ/SBmHYH5+4vE/Yf0qVIoWkrzRw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:96:7f:38:38:9b:e4:1a:95:ef:d0:ed:5b:10:66:3f:6c:af:82:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512B1C382AD9F8BA54EA80FE7BD3354DD2BCA80B
        Validity
            Not Before: Mar 28 03:46:35 2025 GMT
            Not After : Apr  2 12:43:35 2025 GMT
        Subject: CN=B20A5BF8F53D6DBC61C245CE3B468560674A85C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a3:ad:3a:50:0a:e7:c6:9d:57:8e:ca:78:c5:
                    18:0c:5c:55:97:03:15:9b:30:ea:37:34:93:48:a6:
                    eb:74:56:25:f9:97:a2:8d:f2:1d:83:e6:df:8c:da:
                    da:a4:98:de:fa:b1:0e:84:ad:ac:3f:5c:b1:b6:72:
                    b9:0d:c3:d3:80:99:0b:0f:f0:c0:54:84:13:3a:db:
                    c6:2f:e8:76:17:ac:a6:3f:d9:20:03:8f:41:b0:42:
                    f4:a2:bc:54:e5:56:69:bd:c7:42:7f:f5:2e:89:35:
                    70:2a:d4:9d:f4:52:76:11:a6:b9:71:ab:ce:5a:4c:
                    5d:fc:5f:3d:f4:37:07:8d:ec:fc:ec:0c:c8:7f:5b:
                    b6:32:66:0b:31:85:92:e4:1c:bb:b6:56:b7:53:d3:
                    dc:2a:3d:23:65:94:6d:da:96:d7:61:b3:4c:bb:73:
                    d1:d9:ce:d8:b9:68:9e:c4:10:4c:90:b3:9b:0d:80:
                    19:a9:21:27:7c:61:c2:3f:99:2d:19:fc:54:78:9c:
                    1f:cd:e1:8c:21:09:c9:77:0d:0c:88:33:23:de:cd:
                    13:b7:de:04:d6:58:43:1a:ba:6b:c2:0b:b9:ec:ff:
                    bc:c4:1b:a9:bb:2c:e6:ef:a6:8c:59:fc:e7:5a:b0:
                    df:0e:88:d4:9d:90:50:ae:16:bd:3d:27:7d:d2:41:
                    ad:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0A:5B:F8:F5:3D:6D:BC:61:C2:45:CE:3B:46:85:60:67:4A:85:C1
            X509v3 Authority Key Identifier:
                keyid:51:2B:1C:38:2A:D9:F8:BA:54:EA:80:FE:7B:D3:35:4D:D2:BC:A8:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/973570FB2000D07347E4A87C50AF4025EA830BB6C6E953213D7D98FEC41BC4AD/0/512B1C382AD9F8BA54EA80FE7BD3354DD2BCA80B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512B1C382AD9F8BA54EA80FE7BD3354DD2BCA80B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/973570FB2000D07347E4A87C50AF4025EA830BB6C6E953213D7D98FEC41BC4AD/0/512B1C382AD9F8BA54EA80FE7BD3354DD2BCA80B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:37:58:a3:cb:34:36:e7:0b:a3:3e:bc:b8:68:f2:40:0b:ef:
         24:f3:a6:4a:4d:82:c8:b9:41:d8:55:97:58:b3:b1:1f:cb:4d:
         af:7b:4a:a0:fe:29:f4:12:5f:08:38:74:f7:61:a1:68:cd:c3:
         55:d7:d1:09:ee:fa:a4:65:2e:42:8f:99:c5:44:c6:f2:d1:3e:
         25:63:02:b1:7e:a4:f8:06:71:a5:9f:a1:e0:f4:6a:20:86:d7:
         c1:7e:fd:36:ac:5f:b4:46:52:14:54:b4:0f:cc:68:b6:92:ee:
         cf:ee:cb:4f:e9:79:96:c5:de:f9:0f:ed:8f:4e:ca:c3:2e:3b:
         cb:72:75:61:e9:4a:e7:4b:fb:b1:2d:1b:09:1c:b1:43:02:57:
         9c:5c:db:5e:9b:1f:c2:d6:3c:8d:ea:37:d6:5b:7d:f2:34:56:
         fb:48:dc:5a:4c:fc:e7:dd:39:6f:bb:44:ea:12:b0:b4:54:de:
         d5:e7:e8:0f:6f:85:28:b0:63:f0:8a:90:d8:67:47:1a:8e:51:
         7d:4a:50:a0:b2:bf:39:1f:f1:f5:54:72:27:d0:f2:15:a6:b3:
         c2:75:ef:84:12:a7:f7:ab:b4:5f:8d:53:db:62:ae:f9:02:f9:
         3a:b3:2b:b3:33:cf:8e:4f:d1:96:4e:9b:e8:6d:b0:d1:8d:99:
         5f:e3:a1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----