Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2705555D7E121A5D447A5B4F672E3C744074AB2306C4EF18D4D5145A64796BDE/0/389CCF923837EEAFA4DA96AE20241419C941F58A.mft
File:                     389CCF923837EEAFA4DA96AE20241419C941F58A.mft (raw, json)
Hash identifier:          NLq+mhW98lwDY2VfOgGjenqnbssFt9L9y2NqpTlVAaw=
Subject key identifier:   11:62:5C:D0:F5:FC:AE:96:B4:BE:D6:4D:7C:58:FB:37:6C:CF:78:B9
Authority key identifier: 38:9C:CF:92:38:37:EE:AF:A4:DA:96:AE:20:24:14:19:C9:41:F5:8A
Certificate issuer:       /CN=389CCF923837EEAFA4DA96AE20241419C941F58A
Certificate serial:       3B19BDCCDEF8A914B41056E37B4F8D732B11CA5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/389CCF923837EEAFA4DA96AE20241419C941F58A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2705555D7E121A5D447A5B4F672E3C744074AB2306C4EF18D4D5145A64796BDE/0/389CCF923837EEAFA4DA96AE20241419C941F58A.mft
Manifest number:          9F
Signing time:             Fri 31 Jan 2025 07:33:11 +0000
Manifest this update:     Fri 31 Jan 2025 07:28:11 +0000
Manifest next update:     Wed 05 Feb 2025 00:01:11 +0000
Files and hashes:         1: 34352e3232372e3231362e302f32322d3234203d3e20323637373131.roa (hash: D5LzuaG24SV4k01TH2HorOVc7ub6EwKn5CkK9sR578A=)
                          2: 323830333a393132303a3a2f33322d3438203d3e20323637373131.roa (hash: wOeuywoqhkJ1kpqed/Ak/pn6zpLPeKg5X/8ivTHgnPU=)
                          3: 389CCF923837EEAFA4DA96AE20241419C941F58A.crl (hash: T8SRq8Ea/LdMQqGYmyCmlHDYQDZuSdXl82z5pt7flAQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:19:bd:cc:de:f8:a9:14:b4:10:56:e3:7b:4f:8d:73:2b:11:ca:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=389CCF923837EEAFA4DA96AE20241419C941F58A
        Validity
            Not Before: Jan 31 07:28:11 2025 GMT
            Not After : Feb  5 00:01:11 2025 GMT
        Subject: CN=11625CD0F5FCAE96B4BED64D7C58FB376CCF78B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f9:f2:f7:b5:31:b1:ae:7d:c9:d5:b2:51:78:
                    11:9e:a8:da:a7:29:f1:76:b5:c5:64:61:ce:52:dd:
                    fb:55:3f:18:7b:37:55:ae:51:61:22:0c:4b:17:52:
                    7f:e4:eb:95:d8:b4:c0:a4:e0:79:78:b1:2f:87:21:
                    6b:58:db:de:b9:9a:36:49:90:93:ce:6f:7e:68:6a:
                    4c:b6:37:53:fb:13:4a:d8:ef:90:e6:a7:00:7e:c3:
                    d3:3c:ba:bd:fe:86:a4:0b:04:4d:53:57:77:ac:37:
                    da:91:33:1f:00:5d:0c:94:de:46:01:7e:b0:c0:fb:
                    58:d6:94:31:d8:cf:15:ca:db:e3:d8:c3:e9:4f:70:
                    e4:70:87:b4:25:c1:74:56:4e:a6:6e:04:f3:75:76:
                    d1:c5:64:be:b4:8d:0a:68:f7:b0:70:ae:72:b1:29:
                    f8:4e:06:99:99:e8:2d:27:39:0f:e7:be:af:38:b1:
                    f1:f3:ab:d5:1e:4b:58:c5:db:52:c2:39:d8:0d:e6:
                    35:c8:29:4c:f0:cc:be:ca:d3:2b:e1:d0:c8:cb:3d:
                    bc:0a:97:d9:6c:6c:09:67:d2:b4:32:70:d4:40:dd:
                    bf:e2:67:e9:2b:99:26:77:36:5d:a3:b6:9d:75:d6:
                    39:a2:fd:c7:26:a7:a7:40:46:3f:2b:db:98:5c:01:
                    a4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:62:5C:D0:F5:FC:AE:96:B4:BE:D6:4D:7C:58:FB:37:6C:CF:78:B9
            X509v3 Authority Key Identifier:
                keyid:38:9C:CF:92:38:37:EE:AF:A4:DA:96:AE:20:24:14:19:C9:41:F5:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2705555D7E121A5D447A5B4F672E3C744074AB2306C4EF18D4D5145A64796BDE/0/389CCF923837EEAFA4DA96AE20241419C941F58A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/389CCF923837EEAFA4DA96AE20241419C941F58A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2705555D7E121A5D447A5B4F672E3C744074AB2306C4EF18D4D5145A64796BDE/0/389CCF923837EEAFA4DA96AE20241419C941F58A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:eb:74:dc:dd:fd:cb:07:db:a1:46:11:1b:43:3c:c7:1f:0f:
         93:2c:4d:c3:cb:31:a8:71:db:c1:e1:86:3f:69:22:b2:26:c5:
         1b:f2:bf:05:f2:11:6f:71:e6:2f:e7:76:6c:5f:1d:4f:14:ff:
         ba:19:c2:b8:2a:19:1e:a6:f5:18:e5:cf:ce:dd:0f:24:33:3a:
         96:33:fd:45:e8:ac:b8:ab:a2:30:03:d2:8d:17:e6:2d:4f:9b:
         56:91:31:f2:66:58:e1:8d:73:68:96:e4:50:99:f5:69:fc:0d:
         2a:64:c6:03:2e:f2:01:18:6b:c1:85:b7:f4:4f:6a:23:ce:0c:
         92:6a:2e:c2:17:84:86:5c:79:32:66:47:4e:bf:13:5f:67:92:
         96:44:96:a8:c8:50:15:7b:74:c9:e4:0a:8e:e0:0d:7a:08:8b:
         0d:d7:12:10:76:03:86:82:62:d5:de:82:06:4f:df:07:fb:eb:
         9c:8e:ec:3a:ca:24:3c:04:c8:31:97:b5:02:0e:a9:51:40:f7:
         d7:0e:15:9f:76:d2:14:bf:eb:53:33:05:7b:33:f9:a4:d8:e0:
         eb:6c:49:ca:6e:aa:61:e0:8e:13:12:31:87:a0:94:fe:06:35:
         05:b9:69:22:30:e5:54:d7:28:51:aa:83:23:7c:b2:7d:82:39:
         bf:df:a3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----