Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/03BDF702614678E9C2C05FF5C9BAC60024A40FC97898AAC06449F68E3F4C7260/0/3E4116CCBE654DC11AAAE503A49C372DC9517AF2.mft
File:                     3E4116CCBE654DC11AAAE503A49C372DC9517AF2.mft (raw, json)
Hash identifier:          C8QFePB6/bhkt3N3TSf5xwVVtKngI6wCQi5tQsfgFgU=
Subject key identifier:   E4:04:C2:7D:C6:2E:35:94:CB:FB:20:24:8F:46:5C:11:FC:ED:CA:B0
Authority key identifier: 3E:41:16:CC:BE:65:4D:C1:1A:AA:E5:03:A4:9C:37:2D:C9:51:7A:F2
Certificate issuer:       /CN=3E4116CCBE654DC11AAAE503A49C372DC9517AF2
Certificate serial:       1068DC763C4FDC587FE9BF37276C98CB1BAF872B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3E4116CCBE654DC11AAAE503A49C372DC9517AF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/03BDF702614678E9C2C05FF5C9BAC60024A40FC97898AAC06449F68E3F4C7260/0/3E4116CCBE654DC11AAAE503A49C372DC9517AF2.mft
Manifest number:          A8
Signing time:             Fri 31 Jan 2025 12:21:06 +0000
Manifest this update:     Fri 31 Jan 2025 12:16:06 +0000
Manifest next update:     Tue 04 Feb 2025 13:42:06 +0000
Files and hashes:         1: 323830333a666130303a3a2f33322d3336203d3e203532343935.roa (hash: cuMJ4whvrnXhz/Mxjp7sw5t99z5WpzdRMtM0MvaMwQU=)
                          2: 3139302e3130392e3232342e302f31392d3231203d3e203532343935.roa (hash: l7KtsAxVRKAZROAVnNJ/ZaSuU7pNFxDKGk8n/rs/Vsc=)
                          3: 3139302e3130332e36342e302f32302d3232203d3e203532343935.roa (hash: N4rndsddYrv7kSgUjt+WxGpKAQzwQeg4H6Y2dT4S2mo=)
                          4: 3E4116CCBE654DC11AAAE503A49C372DC9517AF2.crl (hash: kbxdTy3NnmfUe7HSz8DDsYo+fQdQX72HqFOXRGxp7Vo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:68:dc:76:3c:4f:dc:58:7f:e9:bf:37:27:6c:98:cb:1b:af:87:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E4116CCBE654DC11AAAE503A49C372DC9517AF2
        Validity
            Not Before: Jan 31 12:16:06 2025 GMT
            Not After : Feb  4 13:42:06 2025 GMT
        Subject: CN=E404C27DC62E3594CBFB20248F465C11FCEDCAB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e4:7e:51:f4:31:fa:9a:f9:8a:04:46:bf:93:
                    ec:e8:dd:ee:2c:2b:6f:6c:fe:33:dc:66:17:95:50:
                    7f:f5:e8:25:47:b2:32:f8:63:db:b9:a9:2f:88:c0:
                    81:2e:b7:3a:85:71:47:5a:67:1e:22:cf:0b:be:95:
                    fe:44:6d:ef:30:e1:ae:0d:54:82:d7:ba:ec:eb:85:
                    98:88:c0:34:4f:1b:6e:4f:1a:78:b9:3d:ec:9f:61:
                    68:6d:77:19:99:61:66:e8:8e:ce:19:06:17:25:89:
                    42:6f:17:95:79:37:1d:10:9e:fb:9a:2e:96:2c:be:
                    bf:a2:b4:c8:1d:49:e4:8d:21:7f:79:2d:b3:89:b0:
                    e2:9f:2f:d7:10:80:d6:34:2f:36:ed:da:15:93:2e:
                    d4:cf:7d:10:dc:ff:42:e7:d7:e3:51:26:ab:ee:5a:
                    ff:81:b0:be:69:5b:93:4a:07:3e:58:c1:ae:77:66:
                    4f:01:12:d7:e6:c4:65:a5:2f:ce:de:12:2c:57:49:
                    a2:51:9f:35:1b:25:8e:83:75:15:bc:cc:6d:a1:58:
                    65:b0:24:a2:de:de:a6:62:57:74:d4:a7:84:d5:de:
                    ab:29:86:22:0e:69:55:71:b1:02:bf:a9:36:37:05:
                    73:8e:29:78:ac:75:bd:e1:67:67:b9:c6:88:ed:d4:
                    a3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:04:C2:7D:C6:2E:35:94:CB:FB:20:24:8F:46:5C:11:FC:ED:CA:B0
            X509v3 Authority Key Identifier:
                keyid:3E:41:16:CC:BE:65:4D:C1:1A:AA:E5:03:A4:9C:37:2D:C9:51:7A:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/03BDF702614678E9C2C05FF5C9BAC60024A40FC97898AAC06449F68E3F4C7260/0/3E4116CCBE654DC11AAAE503A49C372DC9517AF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3E4116CCBE654DC11AAAE503A49C372DC9517AF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03BDF702614678E9C2C05FF5C9BAC60024A40FC97898AAC06449F68E3F4C7260/0/3E4116CCBE654DC11AAAE503A49C372DC9517AF2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:b6:a6:fa:06:cf:18:93:00:55:49:da:35:60:5c:50:8c:36:
         18:68:31:8f:b9:fd:5f:58:1b:fe:cf:f6:aa:78:2d:fe:2f:7f:
         ac:87:2b:61:31:2d:ad:d0:c4:81:b0:77:20:17:fc:22:77:8d:
         60:03:69:aa:80:16:73:5a:54:d0:e2:b7:d1:98:21:1e:2b:1e:
         8b:11:20:87:d2:f9:31:2d:c9:46:4e:b7:2e:67:ff:85:d9:ab:
         03:fd:37:b0:7f:a0:0a:4d:bf:fb:98:5c:5c:55:ce:40:4c:5b:
         7f:46:bf:9f:7b:c2:e0:c3:61:8e:50:f3:ec:56:e2:28:3a:8c:
         0a:10:9f:ad:e2:cd:e1:a9:b4:e5:a5:21:8b:ff:db:64:56:b2:
         80:7a:93:d2:7e:43:3b:0f:fd:f5:d6:af:fb:53:be:5d:eb:ba:
         94:ff:2f:e1:ce:78:18:c5:e7:a8:0d:51:e6:73:bb:de:3c:4e:
         db:af:92:b9:f0:41:01:ac:ed:58:6f:fd:29:d2:ce:db:7f:c3:
         4b:bb:96:67:ec:2f:69:d9:72:ca:36:95:9a:96:18:68:83:00:
         a9:0a:3f:86:01:7e:ce:ed:ec:bd:a3:8d:79:93:61:c9:34:ee:
         11:16:6a:af:d7:5f:91:c7:a1:e1:0c:43:f9:1b:f0:96:aa:77:
         b9:5a:bf:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----