Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.mft
File:                     2972ACC0C3AE4707691E50A6D4988851DC5598D4.mft (raw, json)
Hash identifier:          +jChfSK/UoTfh/+nvw8vk0pigBE490b1L2cE+vSgBe0=
Subject key identifier:   62:A0:58:4B:53:CE:59:C5:F1:2F:11:81:50:3A:F5:B2:7D:24:41:D2
Authority key identifier: 29:72:AC:C0:C3:AE:47:07:69:1E:50:A6:D4:98:88:51:DC:55:98:D4
Certificate issuer:       /CN=2972ACC0C3AE4707691E50A6D4988851DC5598D4
Certificate serial:       1B341E00BCE78313389E581E49C431FB84939E61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.mft
Manifest number:          A7
Signing time:             Wed 29 Jan 2025 06:47:57 +0000
Manifest this update:     Wed 29 Jan 2025 06:42:57 +0000
Manifest next update:     Tue 04 Feb 2025 00:01:57 +0000
Files and hashes:         1: 323830333a653761303a3a2f33322d3438203d3e20323637373736.roa (hash: CZTQ2YlNKHDc6STb+81u8OITSbHq92KfY9nD+XdZU3s=)
                          2: 34352e3137312e3232302e302f32322d3234203d3e20323637373736.roa (hash: r3J4iZtEsdssOJ21EAuM8EQB2MWGd45z46MuhqNcHac=)
                          3: 2972ACC0C3AE4707691E50A6D4988851DC5598D4.crl (hash: Pd+naEpuvnu/S1E/TY9dfDXWGxFJq/n6CRQgcn8uR0k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:34:1e:00:bc:e7:83:13:38:9e:58:1e:49:c4:31:fb:84:93:9e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2972ACC0C3AE4707691E50A6D4988851DC5598D4
        Validity
            Not Before: Jan 29 06:42:57 2025 GMT
            Not After : Feb  4 00:01:57 2025 GMT
        Subject: CN=62A0584B53CE59C5F12F1181503AF5B27D2441D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:23:b1:6e:43:14:70:3c:58:a1:dc:8d:7e:4e:
                    bd:c0:47:5e:21:5b:f5:56:2e:af:b1:f0:e7:59:2e:
                    21:aa:87:a8:7e:17:54:ed:c4:c4:59:11:f5:19:1f:
                    d2:7d:7e:3e:e8:63:dc:a9:27:b6:75:7d:65:49:99:
                    09:ff:8a:1b:2e:a8:c5:90:67:4d:f1:dc:e1:57:86:
                    69:e9:7b:a7:e3:39:59:c0:60:4a:6a:31:2d:16:35:
                    c7:b6:d3:e2:39:b4:b3:0d:cc:77:0d:98:29:13:6e:
                    ed:84:82:8a:d4:3e:fd:14:51:eb:9f:9a:f6:c1:b0:
                    c5:64:37:7d:89:ad:44:0b:09:05:27:9b:ee:2d:64:
                    b5:21:4d:85:92:96:cc:d3:f2:8c:50:cd:0a:30:83:
                    5e:16:ba:32:6d:a4:b4:6f:bb:dd:0d:db:a0:b8:85:
                    e1:db:35:a6:c9:d7:88:69:e1:b4:e1:c9:93:79:ed:
                    26:0e:a7:4c:c8:c0:fc:8c:c9:ff:34:82:80:8d:38:
                    02:c6:ac:e4:90:8e:0b:7e:09:46:6e:14:64:2c:84:
                    4e:4a:1b:6f:08:ba:b0:2b:1c:85:45:e8:c4:41:21:
                    20:26:06:1c:dd:47:6e:f8:54:fd:69:00:f5:0f:8b:
                    46:ef:68:7c:3d:2d:07:0d:c0:5f:11:0e:35:1e:e8:
                    36:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A0:58:4B:53:CE:59:C5:F1:2F:11:81:50:3A:F5:B2:7D:24:41:D2
            X509v3 Authority Key Identifier:
                keyid:29:72:AC:C0:C3:AE:47:07:69:1E:50:A6:D4:98:88:51:DC:55:98:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:c4:45:84:38:45:a8:e8:51:5f:16:81:d6:1d:c5:34:ab:57:
         0a:f7:ca:fb:fe:26:40:86:b8:99:d6:d4:dc:23:3b:5c:98:cd:
         e6:bb:c8:b7:2f:00:a7:62:9b:48:27:e9:86:38:dc:87:f5:a2:
         b9:a6:e2:1d:ba:2b:9b:10:a1:cf:12:1f:57:23:32:e0:a7:53:
         2e:93:81:42:06:02:58:b5:48:e2:43:ce:22:5a:08:f4:18:d6:
         c8:60:8b:20:1b:99:be:a7:08:fd:7c:80:12:ca:87:ae:49:47:
         49:24:cd:8f:a2:4f:49:aa:0c:73:40:c7:b2:51:8f:bf:0d:6d:
         dd:51:8b:41:44:f4:3a:2a:01:d7:9b:95:58:db:a2:fa:01:b5:
         97:31:c1:35:1f:a3:02:81:9e:10:da:a6:91:4a:a6:d2:3e:6b:
         1d:76:42:26:d8:47:28:99:c2:be:24:4a:c5:46:e5:be:3a:53:
         0b:d1:56:fe:a8:86:52:da:04:60:75:23:1e:b5:1c:21:bc:a7:
         1c:01:37:e9:d0:1e:e8:0b:a0:6d:f7:26:8e:e3:fc:33:9c:ba:
         8d:aa:d5:b9:33:29:e5:d6:09:b9:af:53:45:2f:7f:5d:75:51:
         e9:40:20:ee:ec:80:0e:32:a2:1e:76:62:0e:0b:88:b3:de:7d:
         4d:66:26:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----