Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.mft
File:                     49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.mft (raw, json)
Hash identifier:          RZFlj1DL4xGIwYC9xgNQ7K0qeTlbHF09LWXPGoo3Q7Y=
Subject key identifier:   39:0D:8B:9D:18:3F:93:17:A8:B1:AC:F5:60:33:7B:DD:96:A8:87:ED
Authority key identifier: 49:98:6A:F9:BE:70:C9:F7:A7:BB:DE:B5:E3:E8:72:03:8F:59:7D:4E
Certificate issuer:       /CN=49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E
Certificate serial:       7286FF7B52D063B7F5F2CAFA44DCE69A7103D7B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.mft
Manifest number:          AD
Signing time:             Wed 29 Jan 2025 16:03:43 +0000
Manifest this update:     Wed 29 Jan 2025 15:58:43 +0000
Manifest next update:     Mon 03 Feb 2025 22:12:43 +0000
Files and hashes:         1: 3139302e3132312e3137362e302f32302d3234203d3e203237373531.roa (hash: TTm3sS4BxeQVxCqRFhInIss5fuqtmwQxNmf93FSxapc=)
                          2: 49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.crl (hash: fn3DNP8uvnzM+zLU1jvXfSJN7U2tWwXbNTN8PwLdKXU=)
                          3: 323830333a623630303a3a2f33322d313234203d3e203237373531.roa (hash: FZLudizS3/cZJHQYYspGw9xQ7wW5hlC6fCOgjJDxlCk=)
                          4: 3139302e3130382e3232342e302f31392d3234203d3e203237373531.roa (hash: x5NBAOBJsU3dGW+Xv3hYo2MUSn2uINM4DMXHS1GvyXE=)
                          5: 3230302e35392e3232342e302f31392d3234203d3e203237373531.roa (hash: +vEonuaHAup1fpXz3rSWoyFCL4j43S95Zd6s6OGG9zQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:86:ff:7b:52:d0:63:b7:f5:f2:ca:fa:44:dc:e6:9a:71:03:d7:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E
        Validity
            Not Before: Jan 29 15:58:43 2025 GMT
            Not After : Feb  3 22:12:43 2025 GMT
        Subject: CN=390D8B9D183F9317A8B1ACF560337BDD96A887ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9e:1c:f0:bf:49:94:b6:82:65:18:bf:88:af:
                    57:bc:f9:4e:73:ec:4a:68:40:32:09:36:b5:92:ec:
                    be:31:65:42:18:37:7d:42:eb:ac:33:2e:c7:54:0a:
                    93:75:48:f2:f1:a9:ef:f6:2f:4e:c1:29:e2:3b:fd:
                    dd:d0:9e:6d:5d:ab:ce:7f:da:b1:cd:23:de:2d:85:
                    da:6c:fc:fe:74:c0:4b:fe:23:25:bc:f6:82:12:17:
                    82:6c:b5:8c:15:b8:37:4f:38:7c:8d:ab:c7:7a:80:
                    9e:fc:09:2a:1e:04:7e:26:31:ea:45:0f:15:0e:fe:
                    ce:de:0b:6b:6b:84:66:eb:9b:21:9c:08:00:1d:96:
                    0f:8d:57:19:23:0b:11:dc:00:b0:9b:af:65:46:9d:
                    ca:45:c9:37:22:11:dd:0d:c6:45:75:4c:bf:81:39:
                    83:f0:12:af:34:9c:d1:cf:f0:e3:01:8e:be:d1:a6:
                    51:c8:c7:9e:9f:52:7e:48:a6:07:5b:07:dc:b4:53:
                    19:da:cb:7e:41:24:4f:bf:e0:0a:ad:5a:a8:da:1d:
                    4e:a8:d1:8b:ea:70:96:fc:ce:ad:60:5d:06:b3:ef:
                    29:f2:ec:5c:8e:64:4b:4a:58:10:b5:4d:54:72:02:
                    9b:e8:ef:e9:0d:f9:82:78:d6:f3:81:1a:bf:9d:2c:
                    b3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0D:8B:9D:18:3F:93:17:A8:B1:AC:F5:60:33:7B:DD:96:A8:87:ED
            X509v3 Authority Key Identifier:
                keyid:49:98:6A:F9:BE:70:C9:F7:A7:BB:DE:B5:E3:E8:72:03:8F:59:7D:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:65:87:55:44:8d:9d:e3:88:41:59:6f:9d:96:a9:e9:62:63:
         82:eb:c7:9a:e7:bc:a0:08:6e:50:33:29:07:04:b8:bc:b7:17:
         ba:e1:67:83:63:c9:35:69:2a:4c:b6:a2:26:d7:fe:d5:cf:e4:
         78:11:0b:4e:f9:6b:6e:68:ff:fc:c7:3a:05:2a:9a:64:45:e0:
         e6:d6:08:d2:d3:f2:76:68:83:a2:82:54:b1:c7:44:1d:0e:bb:
         8c:7c:01:08:3d:b7:90:ee:36:70:b3:87:48:64:c0:ee:f3:3a:
         06:e0:b3:09:a5:b2:87:0a:1c:94:0b:d5:1d:b9:3a:f4:38:b8:
         93:fe:57:8a:e4:17:4b:88:54:86:2e:c3:20:09:c8:08:8c:92:
         54:15:f7:a9:c3:24:5d:e1:e2:60:e9:01:25:3d:ca:4d:00:39:
         0b:eb:0d:c9:32:08:c0:e9:4a:f8:08:a6:59:ba:5a:23:42:f8:
         b0:a5:7f:ea:5c:53:23:a0:74:2e:06:45:03:0d:09:08:82:81:
         12:f2:a1:79:df:c4:a5:40:c9:14:c4:80:65:a9:09:ad:ac:ec:
         8c:f1:23:5f:29:38:d9:af:9e:01:d0:17:bd:b2:7d:3c:ee:e3:
         e0:bc:cf:7e:fd:76:67:54:59:c1:91:6c:63:00:e7:5f:58:20:
         5b:c7:00:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----