Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.mft
File:                     35D619733A3D3A776B2D5FB84305186B942E249A.mft (raw, json)
Hash identifier:          HwzqVbW1OPr6SmJ1Ti2SGHVr750p38u5t2DFdxpxEwk=
Subject key identifier:   C9:94:09:E0:D5:64:BC:E0:4C:06:38:55:A0:2E:E5:30:FF:5D:31:C4
Authority key identifier: 35:D6:19:73:3A:3D:3A:77:6B:2D:5F:B8:43:05:18:6B:94:2E:24:9A
Certificate issuer:       /CN=35D619733A3D3A776B2D5FB84305186B942E249A
Certificate serial:       18024703227242995A4B64248F6E9839FF0FE722
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35D619733A3D3A776B2D5FB84305186B942E249A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.mft
Manifest number:          A9
Signing time:             Thu 30 Jan 2025 16:33:38 +0000
Manifest this update:     Thu 30 Jan 2025 16:28:38 +0000
Manifest next update:     Mon 03 Feb 2025 19:28:38 +0000
Files and hashes:         1: 3133382e3235352e3131362e302f32322d3234203d3e20323730313536.roa (hash: fYCfx5q6EzM0SUn0LEJET5VWJ4N9E0m0JImJiRoZ+jA=)
                          2: 323830363a3230393a3a2f33322d3634203d3e20323730313536.roa (hash: v9Kfr6H3KrXCg2pVYyLyW6ZrVM3+e+7uryuyTzHINpg=)
                          3: 35D619733A3D3A776B2D5FB84305186B942E249A.crl (hash: vYbbMwDW19FeHq1eBu0MZowvT8W1Gg/7TYHwEpksAGc=)
                          4: 3133382e3235352e3131362e302f32322d3234203d3e20323635353031.roa (hash: OMvaxPEVZ/bafyTSljWb4MzpIkYaQiRyzrfYh+U2lPY=)
                          5: 323830363a3230393a3a2f33322d3634203d3e20323635353031.roa (hash: Ke4LWvI6F6ERFbwYGs/qgDUbDQdY03bIviALA/jxDdA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:02:47:03:22:72:42:99:5a:4b:64:24:8f:6e:98:39:ff:0f:e7:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35D619733A3D3A776B2D5FB84305186B942E249A
        Validity
            Not Before: Jan 30 16:28:38 2025 GMT
            Not After : Feb  3 19:28:38 2025 GMT
        Subject: CN=C99409E0D564BCE04C063855A02EE530FF5D31C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:54:47:8d:fe:c2:32:c0:56:b9:8a:c8:f9:e3:
                    ef:a5:34:b1:5a:4f:b5:76:2d:f9:7a:33:62:a7:4b:
                    1e:23:52:b2:7c:3e:4b:21:34:41:c9:79:51:ac:8d:
                    8d:a4:9a:32:31:3e:3b:3a:3b:f7:d9:7d:0f:09:36:
                    93:d9:48:a7:05:d3:11:75:23:f8:d0:d7:35:74:a3:
                    83:a2:49:cb:12:4a:9d:d0:f0:4f:6b:98:f3:bc:7d:
                    a9:8a:8a:59:65:90:fd:6b:3d:d9:60:9c:ec:14:65:
                    cb:f6:a5:d7:c0:f8:62:e0:27:63:46:af:c2:61:ee:
                    b5:3a:c8:e8:55:7d:24:c4:17:ce:e2:46:98:55:e0:
                    a5:96:86:32:05:b9:fa:e8:94:5c:42:74:f7:5a:25:
                    26:90:71:a6:90:30:c6:39:cc:69:49:06:a0:70:16:
                    53:0e:be:5c:32:36:67:b3:1b:aa:35:ee:07:38:94:
                    9a:6a:d9:a8:0c:2f:b3:36:17:02:d8:22:82:68:79:
                    0f:c1:fa:56:e1:ca:b4:8f:94:6d:33:5d:38:1d:99:
                    77:a1:fe:fa:90:b5:8a:a1:00:0b:ca:2c:86:6e:14:
                    a6:e9:58:bc:6f:52:78:39:db:d6:03:32:42:5d:ed:
                    71:5c:0b:20:07:2a:ef:80:85:69:a4:63:2a:97:e8:
                    ef:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:94:09:E0:D5:64:BC:E0:4C:06:38:55:A0:2E:E5:30:FF:5D:31:C4
            X509v3 Authority Key Identifier:
                keyid:35:D6:19:73:3A:3D:3A:77:6B:2D:5F:B8:43:05:18:6B:94:2E:24:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35D619733A3D3A776B2D5FB84305186B942E249A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:76:72:79:0b:f0:dc:fc:88:44:5c:2e:7d:20:86:6b:7e:ab:
         87:96:81:4a:ed:ec:4e:0d:a5:e2:d7:a4:f9:b6:08:d8:f8:63:
         b2:4f:44:21:ea:1b:c3:06:a8:cc:8b:d5:8f:6e:76:76:7f:14:
         7e:82:b4:43:ff:be:ef:1d:7e:fe:42:4b:aa:dc:3b:d9:41:94:
         07:39:49:9b:20:9e:92:67:b0:97:bc:71:34:05:fe:80:fb:93:
         70:a4:7d:3b:e8:7a:b3:f4:2a:23:9f:a2:38:65:10:7d:c2:c7:
         16:a8:0a:c7:bf:df:b7:08:56:33:16:aa:62:83:d1:f8:a6:0c:
         36:dd:1d:84:b4:6f:31:94:c8:8b:eb:18:1d:f0:7e:94:0d:8c:
         74:13:a1:33:43:56:c3:2f:09:5d:5c:93:f6:44:39:6d:ff:92:
         e8:67:c0:1b:77:46:b2:16:3b:d3:bf:0b:6b:4f:f3:17:c4:bf:
         d3:19:0e:d5:e4:c4:38:c7:39:66:29:b3:9d:90:63:ef:14:4e:
         6c:4d:ec:63:71:47:7a:79:3b:83:4e:e4:20:62:98:50:15:ab:
         1f:85:1e:ca:ad:1f:ea:4b:1e:cf:d0:05:6a:12:1b:1d:c9:e4:
         61:01:6a:f2:6e:c5:b2:68:3d:ab:0d:fe:3a:dd:f1:44:c6:64:
         4e:9a:9b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----