Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.mft
File:                     A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.mft (raw, json)
Hash identifier:          l8e0xWpDoxK6jWHYncG0qgo8+xhoJqP/8dMiII9xbUc=
Subject key identifier:   A2:9D:FD:1C:F0:93:98:02:C0:13:C1:62:F0:65:4F:87:75:F0:5B:A3
Authority key identifier: A4:EA:E6:1F:1B:89:52:AF:AD:56:93:A1:FC:16:8A:75:2D:34:6D:F1
Certificate issuer:       /CN=A4EAE61F1B8952AFAD5693A1FC168A752D346DF1
Certificate serial:       45BC600F9C896322C773DD5BD0AE2A9BD15A6A31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.mft
Manifest number:          C7
Signing time:             Thu 27 Mar 2025 11:42:13 +0000
Manifest this update:     Thu 27 Mar 2025 11:37:13 +0000
Manifest next update:     Tue 01 Apr 2025 19:45:13 +0000
Files and hashes:         1: 3230302e33332e32382e302f32342d3234203d3e20323733303734.roa (hash: herBW7PqFrlBdhFrvBsjzzuAGiKbqAdLJ2/+kZykaNg=)
                          2: 34352e3233392e3130372e302f32342d3234203d3e20323733303734.roa (hash: DvP46AxDwcxo2Qi0v6dCXo3f0TNmpHB9fffLAOb9CpI=)
                          3: A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.crl (hash: P9jeVCxiQZx7Orn3/BgE6tlqP98AvzNWB0LfSReqNi4=)
                          4: 323830333a326639303a3a2f33322d3438203d3e20323733303734.roa (hash: /40UVgM9Y/5npPH65jXZcOfilsfJnJr6fR8b0RNmQsY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:bc:60:0f:9c:89:63:22:c7:73:dd:5b:d0:ae:2a:9b:d1:5a:6a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4EAE61F1B8952AFAD5693A1FC168A752D346DF1
        Validity
            Not Before: Mar 27 11:37:13 2025 GMT
            Not After : Apr  1 19:45:13 2025 GMT
        Subject: CN=A29DFD1CF0939802C013C162F0654F8775F05BA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:48:71:a1:1b:1d:71:75:30:a9:b1:cb:73:07:
                    d5:b8:68:17:4f:93:3a:ee:55:80:fd:9d:a2:a1:ec:
                    ce:66:12:52:3c:ed:f9:2b:a5:6c:22:a5:8f:12:99:
                    6c:e0:ce:94:16:2d:eb:42:24:fe:ef:11:0b:08:42:
                    62:71:d4:86:11:c9:bd:1b:95:75:fc:44:af:ac:07:
                    4f:22:ad:92:7f:d5:02:bb:e2:c1:56:03:c2:42:e1:
                    dd:fc:c7:ef:ba:7f:0b:e3:80:1a:3d:33:27:40:f8:
                    a3:b4:b4:bd:eb:ea:61:64:ca:85:49:1b:f4:98:3f:
                    a8:61:28:ca:23:98:13:48:87:0b:95:3a:d1:c7:8d:
                    8b:a1:71:2a:5a:0a:2a:e5:a9:10:9e:ba:bb:f3:89:
                    1f:ce:03:0c:b9:63:e8:70:95:97:37:12:d7:4d:0d:
                    a9:40:5a:5c:77:d8:5c:40:8f:08:cd:2b:b6:3b:15:
                    9e:25:5f:cf:0d:a5:5f:44:44:17:4b:ae:bb:e1:49:
                    e8:8b:30:cd:f5:e0:7b:c7:b0:1a:1f:00:30:72:28:
                    33:db:4f:14:ba:fd:0a:3f:44:21:66:80:d0:29:94:
                    7e:46:e3:ae:c1:c7:0f:30:f4:13:5c:cf:97:17:55:
                    15:23:a1:5c:16:65:47:ca:df:24:7d:bf:69:06:1a:
                    d1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:9D:FD:1C:F0:93:98:02:C0:13:C1:62:F0:65:4F:87:75:F0:5B:A3
            X509v3 Authority Key Identifier:
                keyid:A4:EA:E6:1F:1B:89:52:AF:AD:56:93:A1:FC:16:8A:75:2D:34:6D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:5b:dc:b2:81:65:5a:a9:6d:e9:62:d0:bf:63:de:fa:b8:c8:
         5e:71:b7:dd:a4:da:ac:0a:6e:35:76:f6:04:7a:e7:c8:cf:20:
         f8:92:0c:13:00:e9:f7:c7:2c:8d:0b:a2:67:db:33:a6:7e:c3:
         67:44:40:a8:ae:ac:64:f3:54:d0:a9:87:82:7c:9f:6f:5e:60:
         98:c9:7d:b8:76:91:f7:86:ca:44:a1:0b:2d:d5:a8:4f:4f:30:
         4f:a7:01:cf:0e:53:7f:4d:c8:28:92:6e:09:dc:0a:48:a9:6d:
         11:d0:68:57:9a:fe:50:c0:f0:92:b8:85:08:30:e4:96:f6:f2:
         4a:d7:2c:e5:5f:be:4d:e8:8c:a7:ca:20:e4:db:bc:cf:f8:0c:
         38:e8:99:c8:99:31:b7:c2:26:c1:91:ac:69:26:a8:9c:49:a1:
         6e:10:24:d8:97:46:46:cd:53:60:10:83:bf:ca:37:76:14:83:
         69:61:e7:ca:70:74:b2:d6:b1:63:d3:b4:4f:91:2e:d5:b8:8a:
         58:19:ea:e5:cb:4a:81:90:24:43:b1:77:6c:eb:d7:5c:40:dd:
         a2:3b:1d:a5:81:80:bc:62:3b:22:bf:17:b0:d4:25:94:e9:11:
         a6:51:bb:e5:dd:9f:0c:cb:46:ca:6a:61:0b:89:15:c8:30:f2:
         35:ab:3a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----