Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.mft
File:                     D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.mft (raw, json)
Hash identifier:          pHmUMU5FHofTp6WCK8FS02GxrrDG5nQOsRZ4wnyPSIo=
Subject key identifier:   25:FF:ED:95:D6:3E:8C:DE:54:2B:8A:3F:E2:0A:6E:89:DE:34:2B:2A
Authority key identifier: D4:A2:D9:88:15:91:DD:14:F5:9A:E3:D3:5A:B8:82:7C:ED:BE:78:8A
Certificate issuer:       /CN=D4A2D9881591DD14F59AE3D35AB8827CEDBE788A
Certificate serial:       3415CE03A5F6565C393CA4A20CB39810FF2A621C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.mft
Manifest number:          A2
Signing time:             Thu 30 Jan 2025 11:35:34 +0000
Manifest this update:     Thu 30 Jan 2025 11:30:34 +0000
Manifest next update:     Tue 04 Feb 2025 11:29:34 +0000
Files and hashes:         1: 3137302e38332e3234302e302f32322d3234203d3e203532343638.roa (hash: P0z36facHlrn0vqDRC4LkRmlCDMqtkpXuxRu2Pk3jRw=)
                          2: D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.crl (hash: UKzd7km8YMEIcQrhqz2aewdiVXGTrwfMlub/C93F3Og=)
                          3: 323830333a663263303a3a2f33322d3332203d3e203532343638.roa (hash: pTuGn/XFSzOyT3gc4j4pc3+R+PhOZyTOjIO+036RTec=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:15:ce:03:a5:f6:56:5c:39:3c:a4:a2:0c:b3:98:10:ff:2a:62:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4A2D9881591DD14F59AE3D35AB8827CEDBE788A
        Validity
            Not Before: Jan 30 11:30:34 2025 GMT
            Not After : Feb  4 11:29:34 2025 GMT
        Subject: CN=25FFED95D63E8CDE542B8A3FE20A6E89DE342B2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:43:52:e7:ee:8b:ba:ad:47:7e:97:7c:61:f1:
                    52:36:41:d9:3e:23:24:34:22:85:bd:9d:29:1f:db:
                    3a:f2:05:98:f5:bb:fe:14:f1:8a:19:ee:13:85:20:
                    8f:79:74:d9:c6:f0:be:63:b7:07:45:c6:fe:7a:cc:
                    d7:29:7a:ea:2b:9f:b0:18:37:6f:35:80:a9:bb:91:
                    40:b3:86:c9:6e:fa:23:1a:7d:e6:de:d7:b5:67:13:
                    69:be:f0:a1:01:8b:6e:0f:9c:68:29:ce:1e:b7:c9:
                    62:d8:3d:82:7c:f4:76:2b:93:8a:ad:1f:82:a3:d1:
                    d1:85:91:cb:5c:1b:f9:6a:da:f2:9a:64:60:2b:2b:
                    54:1b:a7:9f:91:70:d8:a4:df:dd:16:96:3f:81:1f:
                    e8:82:7f:72:a0:31:9c:67:ef:2f:40:0c:e9:6c:a3:
                    0a:30:44:f4:c4:28:79:d2:34:84:51:23:e8:ee:94:
                    36:76:1e:1c:be:62:f6:70:96:d4:f3:0b:c5:9b:09:
                    6f:74:98:8f:80:4d:25:c0:b3:1a:3f:12:d4:24:4a:
                    7f:79:1d:70:df:b3:04:06:68:62:d8:a2:54:5e:c9:
                    7a:cf:6e:34:36:64:fb:8f:bd:bf:e0:5e:88:7d:51:
                    af:b7:d6:55:62:b8:17:73:e9:40:c8:3f:ae:1e:86:
                    12:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FF:ED:95:D6:3E:8C:DE:54:2B:8A:3F:E2:0A:6E:89:DE:34:2B:2A
            X509v3 Authority Key Identifier:
                keyid:D4:A2:D9:88:15:91:DD:14:F5:9A:E3:D3:5A:B8:82:7C:ED:BE:78:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:66:70:4c:d4:98:88:1f:51:18:1c:36:27:0a:55:cf:f7:6c:
         be:53:7d:3c:e0:d5:da:ad:78:7a:14:74:d5:6a:91:d5:5a:c4:
         93:a1:ab:7a:51:22:db:32:32:e7:5b:c0:02:df:0e:28:42:00:
         71:5e:db:84:df:bb:c8:ed:ec:34:3e:4b:00:98:7d:97:14:d5:
         ce:21:3a:33:b5:98:ff:d7:3d:54:11:71:54:df:25:e0:e7:7d:
         9e:3f:fd:b0:76:a7:40:ed:d9:53:a9:48:de:07:22:80:1f:1f:
         fe:2b:75:20:64:90:fd:c4:44:3d:8c:34:84:a6:b8:83:1f:c7:
         af:ec:58:ef:8c:dc:0f:ec:d7:7f:44:f1:09:f7:85:1f:13:3a:
         3a:41:d0:80:04:28:52:b3:d6:a2:7d:67:36:3f:8b:9e:83:47:
         09:aa:23:3f:93:42:84:43:f5:d7:32:b3:ee:86:05:6b:da:0a:
         28:1d:50:31:e9:d8:7e:03:d4:94:c4:82:cf:30:0a:86:4f:42:
         63:ce:40:0f:c8:2d:65:9e:4c:fb:12:95:12:5b:e1:3f:2c:3b:
         a8:9f:4e:a6:99:fe:a7:41:fe:46:b7:4c:1f:39:ca:a3:ad:61:
         df:51:33:9f:ab:6a:6c:63:14:1f:e2:3c:e9:12:aa:df:3d:46:
         90:31:57:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----