Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/187E1CE26803C01D7C4AB2168E2BCD72ACB58A685F3AFCB0FB75C19408B97DBA/0/F3D431735054D4CDE390B55F4A2B7D7C2CC39341.mft
File:                     F3D431735054D4CDE390B55F4A2B7D7C2CC39341.mft (raw, json)
Hash identifier:          wYaL495IRa2TpdNZ0Lv8ypBIKJ7jp99UH3yHOkTWOlg=
Subject key identifier:   40:06:43:DE:8F:15:06:EC:E5:7B:81:A3:48:07:F7:69:B4:44:6D:B3
Authority key identifier: F3:D4:31:73:50:54:D4:CD:E3:90:B5:5F:4A:2B:7D:7C:2C:C3:93:41
Certificate issuer:       /CN=F3D431735054D4CDE390B55F4A2B7D7C2CC39341
Certificate serial:       66426BAA0028E8951AD4FCBDC6F53C21CD6D6FE6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3D431735054D4CDE390B55F4A2B7D7C2CC39341.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/187E1CE26803C01D7C4AB2168E2BCD72ACB58A685F3AFCB0FB75C19408B97DBA/0/F3D431735054D4CDE390B55F4A2B7D7C2CC39341.mft
Manifest number:          1A
Signing time:             Thu 30 Jan 2025 20:00:55 +0000
Manifest this update:     Thu 30 Jan 2025 19:55:55 +0000
Manifest next update:     Tue 04 Feb 2025 14:32:55 +0000
Files and hashes:         1: 3230302e3131352e31382e302f32342d3234203d3e203532343239.roa (hash: 4fWs1kt/G3QxyRmeC7NgvB4biPd7Jxtpryf1AFHceUo=)
                          2: F3D431735054D4CDE390B55F4A2B7D7C2CC39341.crl (hash: qZSk7m8EvOgjbp0Yp6ZLYpWWiDIQEzcxsy+rdHNWjZM=)
                          3: 3230302e3131352e31382e302f32342d3234203d3e203131383330.roa (hash: UzDeY8RUh7Rq5fqaQ+ins62HmIE6DibpQjXyI30pSZ8=)
                          4: 3230302e3131352e31382e302f32342d3234203d3e203233353230.roa (hash: RyVWIF84mySU+jf2GtIA+1DlIdzMJJo2MXX8u904Rak=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:42:6b:aa:00:28:e8:95:1a:d4:fc:bd:c6:f5:3c:21:cd:6d:6f:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3D431735054D4CDE390B55F4A2B7D7C2CC39341
        Validity
            Not Before: Jan 30 19:55:55 2025 GMT
            Not After : Feb  4 14:32:55 2025 GMT
        Subject: CN=400643DE8F1506ECE57B81A34807F769B4446DB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:93:3c:f3:f3:6a:ca:f6:e3:75:51:a0:05:4e:
                    1b:65:5e:c5:7f:cf:47:3c:b7:8d:c5:60:2a:4b:8f:
                    ff:ac:9d:a5:ee:f1:f2:d9:fc:69:66:33:40:85:ab:
                    34:6e:70:c8:57:13:60:db:85:4b:de:63:df:46:aa:
                    f9:83:b7:53:98:a9:40:89:10:de:a0:10:52:8f:76:
                    dd:27:d0:d0:0c:a8:8a:a9:71:c9:0d:63:fd:21:73:
                    10:1d:f1:a1:d4:48:75:f9:61:93:f1:0a:9e:8d:3c:
                    60:16:e0:ac:b1:a1:55:9d:52:26:90:4c:ad:b2:6b:
                    93:a9:9e:9e:4b:f4:68:de:cc:db:bf:30:d0:48:ad:
                    18:1b:29:43:7d:58:f3:7b:b9:43:77:fa:aa:b5:c8:
                    04:f6:d8:d4:c4:96:e7:54:eb:15:92:db:e0:88:40:
                    f9:df:bf:64:95:50:ac:8e:53:f6:fc:74:33:f2:91:
                    00:c2:13:34:71:c3:0b:8d:92:3b:8a:44:bd:40:da:
                    7c:cc:f7:a8:22:a0:8b:32:65:0c:ab:76:6e:2d:9b:
                    72:ae:a7:86:32:ba:36:72:bf:39:74:6d:29:ad:d1:
                    b5:30:b8:6a:01:72:c9:4a:9e:34:56:bf:db:d4:31:
                    4b:92:f6:a6:a9:bc:bf:a5:33:cb:32:22:00:08:6e:
                    26:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:06:43:DE:8F:15:06:EC:E5:7B:81:A3:48:07:F7:69:B4:44:6D:B3
            X509v3 Authority Key Identifier:
                keyid:F3:D4:31:73:50:54:D4:CD:E3:90:B5:5F:4A:2B:7D:7C:2C:C3:93:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/187E1CE26803C01D7C4AB2168E2BCD72ACB58A685F3AFCB0FB75C19408B97DBA/0/F3D431735054D4CDE390B55F4A2B7D7C2CC39341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3D431735054D4CDE390B55F4A2B7D7C2CC39341.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/187E1CE26803C01D7C4AB2168E2BCD72ACB58A685F3AFCB0FB75C19408B97DBA/0/F3D431735054D4CDE390B55F4A2B7D7C2CC39341.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:5f:5b:90:0a:08:49:68:d8:b8:e0:1a:23:01:aa:69:77:0f:
         16:0d:a7:e7:a1:7c:0a:1e:c7:9f:39:f2:4a:c7:a0:3d:b0:22:
         fb:45:05:fe:7c:4f:2b:49:09:1a:c7:ce:25:df:ae:51:2a:2c:
         39:33:05:ab:55:b6:8c:7f:ee:67:b5:e1:28:21:f8:8b:1e:16:
         15:97:4b:ce:8a:01:d7:28:c8:bd:74:e5:58:84:8d:9d:95:40:
         d9:d2:fe:36:76:19:cf:45:76:cb:2f:a9:a5:67:ea:99:e7:67:
         18:c4:c7:dd:ef:7d:6d:49:10:ca:73:6f:d5:3e:e3:29:09:14:
         6d:74:34:53:99:00:18:29:a3:45:52:b7:d6:3b:0a:64:62:86:
         3c:8b:eb:a1:9c:5c:5a:7e:63:17:50:13:49:3d:a8:ae:08:fc:
         56:9c:e3:f9:9b:60:23:66:ca:8a:35:3f:ae:82:02:51:c8:20:
         28:df:e9:83:f3:2e:73:04:2d:62:0b:28:b0:a5:79:de:7f:ac:
         45:5a:d5:8c:c7:d7:6c:cd:51:e7:44:fc:c9:2e:eb:06:e3:98:
         9e:78:76:65:58:c7:74:11:d3:1a:4e:fb:3b:c1:b0:d1:9e:2c:
         56:4a:39:89:20:a1:4c:a4:c9:be:bb:7d:da:76:d9:13:da:bb:
         b0:0e:0b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----