Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00006E0DD4A4BCABFB42915D286D16FA3FE7192F62E58D1B2AF6D2B04751E8D3/0/3BFDA956D2EBAAD5BE52A01761CB47696CBDD731.mft
File:                     3BFDA956D2EBAAD5BE52A01761CB47696CBDD731.mft (raw, json)
Hash identifier:          ULTtguU9HnqDoktUQgtC5PwqC5rWGVdWzvIYahBoSzk=
Subject key identifier:   8E:3B:E5:33:79:60:E5:77:61:DC:01:83:C8:6D:8B:61:5A:A6:BE:06
Authority key identifier: 3B:FD:A9:56:D2:EB:AA:D5:BE:52:A0:17:61:CB:47:69:6C:BD:D7:31
Certificate issuer:       /CN=3BFDA956D2EBAAD5BE52A01761CB47696CBDD731
Certificate serial:       3FB87C86EBAD29078AA4A3B25385F2976F26F8FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3BFDA956D2EBAAD5BE52A01761CB47696CBDD731.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00006E0DD4A4BCABFB42915D286D16FA3FE7192F62E58D1B2AF6D2B04751E8D3/0/3BFDA956D2EBAAD5BE52A01761CB47696CBDD731.mft
Manifest number:          A5
Signing time:             Fri 31 Jan 2025 14:42:32 +0000
Manifest this update:     Fri 31 Jan 2025 14:37:32 +0000
Manifest next update:     Wed 05 Feb 2025 03:51:32 +0000
Files and hashes:         1: 323830333a313763303a3a2f33322d3332203d3e203631343636.roa (hash: Exxv/VEr8eYYNjnrJ3n2s0xk/H170w1fo5gSxxZB9ko=)
                          2: 3BFDA956D2EBAAD5BE52A01761CB47696CBDD731.crl (hash: 2J/itTMgx3EbJNY1v9pBG4P+Gfw6DRk+c0ntCF93QVI=)
                          3: 3136342e3136332e38382e302f32322d3234203d3e203631343636.roa (hash: muAd9U4rrZ0GfanieaopgQjR6hRub4Y4Ry9P0SQLziQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:b8:7c:86:eb:ad:29:07:8a:a4:a3:b2:53:85:f2:97:6f:26:f8:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BFDA956D2EBAAD5BE52A01761CB47696CBDD731
        Validity
            Not Before: Jan 31 14:37:32 2025 GMT
            Not After : Feb  5 03:51:32 2025 GMT
        Subject: CN=8E3BE5337960E57761DC0183C86D8B615AA6BE06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:06:e3:c1:df:4f:2f:3c:81:f4:d3:b2:4d:e3:
                    7d:da:d7:02:6b:33:e5:ad:33:ea:ac:c8:57:07:a8:
                    77:ed:ec:4c:2e:57:c6:e9:9c:6f:dc:61:62:0d:dc:
                    30:f7:7f:ee:db:53:94:bf:20:a4:cc:e6:e3:0a:69:
                    07:f0:02:f4:5b:c6:8d:38:59:96:16:28:d9:7d:0c:
                    f5:20:1e:8c:f0:83:25:83:d1:ba:a8:69:52:4a:3a:
                    d7:ea:db:21:89:c8:09:91:af:9b:3c:d9:f9:fd:6c:
                    fb:32:2c:ad:cf:f0:28:49:8e:d4:75:a9:9c:b6:40:
                    3c:6a:32:8f:0b:6b:88:cb:69:72:01:d5:4a:33:73:
                    df:c8:f5:20:ea:7e:31:52:20:57:0a:d1:c6:dd:b3:
                    a4:20:48:dd:39:d7:b5:c2:c6:bb:42:2e:02:2b:9d:
                    73:1d:64:a9:30:ba:c8:d0:f5:78:bd:db:3e:f7:07:
                    7d:8d:95:e4:25:76:2f:2e:71:8b:ef:d7:b3:96:38:
                    a2:09:5d:41:40:47:e3:0e:b5:67:70:d7:af:b4:e6:
                    88:75:e3:63:2b:58:69:23:e8:d6:4a:b5:7d:ad:b3:
                    36:c1:e2:62:47:7f:26:ea:63:bd:54:5e:02:76:7f:
                    aa:f1:d5:92:47:4e:cd:f6:22:f8:18:94:be:90:21:
                    47:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:3B:E5:33:79:60:E5:77:61:DC:01:83:C8:6D:8B:61:5A:A6:BE:06
            X509v3 Authority Key Identifier:
                keyid:3B:FD:A9:56:D2:EB:AA:D5:BE:52:A0:17:61:CB:47:69:6C:BD:D7:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00006E0DD4A4BCABFB42915D286D16FA3FE7192F62E58D1B2AF6D2B04751E8D3/0/3BFDA956D2EBAAD5BE52A01761CB47696CBDD731.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3BFDA956D2EBAAD5BE52A01761CB47696CBDD731.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00006E0DD4A4BCABFB42915D286D16FA3FE7192F62E58D1B2AF6D2B04751E8D3/0/3BFDA956D2EBAAD5BE52A01761CB47696CBDD731.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:08:fe:ad:83:7c:4b:f5:e1:e2:23:13:b2:d2:0d:5b:c5:b6:
         d7:a4:d8:63:4a:b2:2f:4c:e7:04:5d:4b:44:58:ca:aa:87:5e:
         b8:9d:59:db:d0:dc:ed:05:c7:67:17:91:6a:b5:45:b5:62:cc:
         a6:12:ec:e5:51:9d:d4:39:7f:c9:3c:f1:f1:5e:dd:ae:d4:d8:
         e2:0d:a8:7a:cf:6e:3c:7c:e7:df:3e:b3:ff:51:0b:19:f3:38:
         44:6d:7e:e9:22:53:23:bf:a2:79:98:a8:29:53:dc:e7:e1:4d:
         0d:42:53:3e:3f:a1:9c:a4:f9:db:5e:be:ce:36:30:33:1b:6b:
         fd:5f:e3:48:c3:b7:e2:5e:bd:c6:7b:08:f9:e7:67:a2:99:bf:
         ba:d0:4f:6d:b2:07:26:54:26:20:78:c6:52:59:20:2b:b7:f7:
         65:69:16:f9:5b:81:19:56:78:72:13:6b:f1:14:a0:2d:11:7a:
         60:85:ef:6b:2f:72:69:1a:14:ef:05:ae:7f:fb:f9:16:4f:06:
         cd:a0:ae:d5:07:b0:ea:1f:fe:13:a7:36:3a:ff:fa:12:a3:e3:
         2b:8a:4f:b6:97:1c:61:df:30:81:0f:aa:10:fb:6a:92:f0:39:
         08:ab:ef:fe:10:0b:88:14:37:65:fe:3e:f0:0e:56:d7:41:c4:
         64:4b:e2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----