Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.mft
File:                     CBB7CEC6B251591295CC04EA4274140F6FB652E0.mft (raw, json)
Hash identifier:          dEPoILyd1JMdino6hphxmgwSpWK7Qnyc+NFZXRujW2I=
Subject key identifier:   33:A5:40:0E:03:6E:4F:B0:7F:87:94:54:4B:A1:2E:9D:33:AC:62:58
Authority key identifier: CB:B7:CE:C6:B2:51:59:12:95:CC:04:EA:42:74:14:0F:6F:B6:52:E0
Certificate issuer:       /CN=CBB7CEC6B251591295CC04EA4274140F6FB652E0
Certificate serial:       7339357A92D6C6007ACA9C35CFD5264C0C53A90F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.mft
Manifest number:          A9
Signing time:             Thu 30 Jan 2025 21:11:37 +0000
Manifest this update:     Thu 30 Jan 2025 21:06:37 +0000
Manifest next update:     Tue 04 Feb 2025 04:54:37 +0000
Files and hashes:         1: 3133382e39372e3233362e302f32322d3234203d3e203238313030.roa (hash: 2UR1LzlE9l2m1VST3g4vR6m3pjX9+fD4Ek2fG5BkLdg=)
                          2: CBB7CEC6B251591295CC04EA4274140F6FB652E0.crl (hash: 3TZl9rOP/m7dA0vrVDb+NTzZDelvIM9SD/mFV8d4qrM=)
                          3: 323830333a653034303a3a2f33322d3332203d3e203238313030.roa (hash: WXOr//DXTK7VZQ/6b0JvpWA7rlrFspd/uwE4E9ljJMg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:39:35:7a:92:d6:c6:00:7a:ca:9c:35:cf:d5:26:4c:0c:53:a9:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBB7CEC6B251591295CC04EA4274140F6FB652E0
        Validity
            Not Before: Jan 30 21:06:37 2025 GMT
            Not After : Feb  4 04:54:37 2025 GMT
        Subject: CN=33A5400E036E4FB07F8794544BA12E9D33AC6258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:68:5e:86:48:d7:d8:cc:0f:b4:16:7b:e6:1a:
                    b7:6c:46:83:d2:b6:f4:d1:9b:a1:13:39:07:bb:d4:
                    1c:a0:97:34:60:ab:a5:91:4f:1e:f5:da:cb:36:30:
                    49:fc:52:e0:5a:0f:bb:c1:1b:dc:3b:22:4c:3e:30:
                    a6:e6:96:e8:66:0c:38:85:ea:2b:3a:98:88:04:45:
                    43:8d:81:93:28:15:b0:06:36:e6:77:32:17:28:5f:
                    19:e6:1d:04:8f:07:06:ef:a8:99:78:47:7c:ea:e5:
                    c2:fc:8c:ef:e0:a1:12:97:35:46:88:01:75:f8:0b:
                    57:ed:1e:00:e3:cc:d0:02:7e:e4:f1:55:18:3f:e0:
                    5d:aa:3a:8a:d6:43:fb:5f:a8:f5:15:de:65:e3:e4:
                    fb:79:90:24:66:a9:0b:05:06:64:56:7e:df:d1:b7:
                    42:1d:80:d3:e6:f0:83:cb:f4:8d:51:d8:d2:1c:43:
                    41:8b:37:7d:49:6d:f6:a8:00:d6:d6:a8:c3:02:8d:
                    15:dd:43:7b:42:34:e0:17:66:2b:96:f9:fe:97:a6:
                    ea:2b:c8:4c:80:27:67:6b:43:d8:96:39:d1:c4:5d:
                    e4:5d:1e:68:06:e9:c2:ce:34:95:37:7a:81:f4:60:
                    b9:d4:ee:13:2e:23:b8:8d:51:85:6c:ab:f7:2c:73:
                    55:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A5:40:0E:03:6E:4F:B0:7F:87:94:54:4B:A1:2E:9D:33:AC:62:58
            X509v3 Authority Key Identifier:
                keyid:CB:B7:CE:C6:B2:51:59:12:95:CC:04:EA:42:74:14:0F:6F:B6:52:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:87:ee:59:84:fc:b0:68:1b:a1:ee:f5:8d:e8:03:26:44:ef:
         0b:ff:4d:a2:9b:e5:ca:bd:36:1a:00:38:fa:44:aa:aa:91:df:
         a7:30:15:ad:07:ea:24:0e:62:16:13:85:67:58:7d:99:85:fe:
         85:fb:0b:1f:77:e2:a9:36:f7:97:f3:64:ed:00:f1:4c:c7:65:
         f2:46:d6:b2:99:bb:14:09:90:3d:e8:22:fc:fc:5d:6c:ce:c4:
         53:d6:62:62:01:f0:15:c8:d3:1b:ad:0c:2c:c1:b2:f4:33:b0:
         68:18:3f:ca:26:ef:a0:5d:db:2b:1b:bf:b0:a6:22:b0:1c:45:
         f6:72:3d:88:86:2f:d1:39:11:9a:9e:9e:48:79:ab:8e:6f:ab:
         7b:ce:0e:22:ad:53:9d:5f:ca:33:3b:26:48:f5:1a:9b:9d:0e:
         1a:77:04:c9:19:5f:ac:14:02:20:41:8f:00:be:55:16:ba:57:
         04:48:85:bd:b9:f5:6f:d4:ce:c3:81:e8:d2:7b:e2:43:d9:07:
         72:9c:c9:bf:14:91:7b:07:d2:82:55:aa:53:bd:6a:b0:50:3b:
         bc:54:a6:95:a5:62:01:f6:97:de:b3:b1:56:f6:05:d3:d0:f7:
         e9:85:b8:cd:7f:c6:46:a9:4b:df:66:71:20:a2:a2:a1:be:36:
         c8:d4:17:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----