Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/32172A23BE77A860A2249F55413A16450A59671EF9A2F812A942EC07D9D05C0F/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.mft
File:                     89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.mft (raw, json)
Hash identifier:          L/IPN/bNnNEE9C4RmBDhaq2LbwukKUMrLYJHziPpG0w=
Subject key identifier:   CC:15:80:23:6D:CD:0A:28:99:08:42:A7:18:C8:2D:3D:C5:2B:E8:46
Authority key identifier: 89:C8:23:AD:60:CB:A4:B0:7B:90:92:FB:3D:0B:F1:A0:B8:C1:5A:BE
Certificate issuer:       /CN=89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE
Certificate serial:       5EB47EC067F44765210FACCBDC7484DC0D74BE8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/32172A23BE77A860A2249F55413A16450A59671EF9A2F812A942EC07D9D05C0F/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.mft
Manifest number:          AA
Signing time:             Thu 30 Jan 2025 03:55:54 +0000
Manifest this update:     Thu 30 Jan 2025 03:50:54 +0000
Manifest next update:     Wed 05 Feb 2025 02:27:54 +0000
Files and hashes:         1: 323830333a383338303a3a2f33322d3332203d3e203631343536.roa (hash: hQrcygU0Fr4LxF8uJs5/w1Wzp9kqxgbyVVH7gibRfLM=)
                          2: 89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.crl (hash: A/1vmoLzhAHH+ZBNfrpKdQYpqS1N/omdDOuKTgbkT+Q=)
                          3: 3133312e3130382e38302e302f32322d3234203d3e203631343536.roa (hash: 71GBs2SLIeWWCDvcIkV3sdiH/08GnMovRGxE9HLKtQs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b4:7e:c0:67:f4:47:65:21:0f:ac:cb:dc:74:84:dc:0d:74:be:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE
        Validity
            Not Before: Jan 30 03:50:54 2025 GMT
            Not After : Feb  5 02:27:54 2025 GMT
        Subject: CN=CC1580236DCD0A28990842A718C82D3DC52BE846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6a:6a:4c:40:6f:82:bd:18:5a:bf:85:b6:67:
                    5f:63:81:11:96:fb:82:72:2f:9e:ef:c5:ff:25:5e:
                    38:14:d8:4e:5f:4e:14:4d:aa:4e:aa:fb:de:b0:f4:
                    01:ed:6e:21:9c:09:8e:3b:86:5c:6e:98:89:d5:25:
                    72:2d:b4:58:35:b1:b5:fe:db:15:86:e9:4f:46:6a:
                    08:8f:a4:da:88:ff:3f:98:35:5b:3a:ba:2d:f9:cc:
                    25:7d:57:ca:51:f6:50:7c:44:ea:98:c9:4a:0d:55:
                    26:57:c6:c4:05:01:88:56:f5:3c:f7:8a:2c:72:cf:
                    01:4a:39:6d:e0:d8:3f:a9:be:c9:92:9d:f0:92:5f:
                    f2:af:c5:be:65:36:46:11:2b:19:dd:e8:2f:a4:3d:
                    2a:a0:50:c6:e3:9e:ad:0f:37:1e:b8:09:dc:f7:09:
                    97:a3:19:4d:df:b5:72:f6:f7:6e:98:70:47:46:02:
                    d3:7d:f0:d0:05:bb:25:ca:b4:6a:a1:4a:e3:f4:2f:
                    fb:b7:89:73:14:48:fc:95:59:15:86:94:7b:e6:25:
                    92:7e:3a:e3:60:11:7d:d1:a6:f5:30:78:b6:e8:46:
                    a2:52:49:4b:6f:e4:31:05:c3:1d:ec:32:13:f3:ac:
                    94:93:5d:a4:b6:dd:e2:fb:a7:e3:ae:a8:86:42:61:
                    9e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:15:80:23:6D:CD:0A:28:99:08:42:A7:18:C8:2D:3D:C5:2B:E8:46
            X509v3 Authority Key Identifier:
                keyid:89:C8:23:AD:60:CB:A4:B0:7B:90:92:FB:3D:0B:F1:A0:B8:C1:5A:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/32172A23BE77A860A2249F55413A16450A59671EF9A2F812A942EC07D9D05C0F/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/32172A23BE77A860A2249F55413A16450A59671EF9A2F812A942EC07D9D05C0F/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:1b:99:40:bb:41:1f:43:2f:6b:ae:df:ea:98:80:a7:c6:6a:
         7d:f7:96:2c:5d:f7:d9:b2:ea:37:88:4e:d8:71:f8:b8:cc:d3:
         eb:b6:b5:7b:36:93:b4:75:92:59:a6:e2:62:25:64:a5:de:ab:
         c6:8a:c0:48:94:87:5d:cf:5c:88:f5:fe:fd:95:49:6f:14:31:
         27:fb:8c:44:19:c7:55:92:1d:17:fd:ca:82:3a:04:1f:e8:4b:
         32:5c:55:b8:a6:4c:78:b9:4e:86:f1:53:4f:b6:46:9a:6d:77:
         83:3b:32:fa:14:92:7e:dc:29:ab:32:24:6d:b0:ae:70:85:06:
         06:e2:bb:f7:34:f4:41:e8:00:67:cf:db:2e:77:e1:2b:95:42:
         48:39:71:29:2b:8b:96:5d:ec:94:45:bb:90:25:36:ba:88:39:
         5f:14:cc:09:6b:b9:3f:4f:83:b4:51:90:89:ef:2a:df:5d:23:
         b6:40:4a:63:64:97:93:74:9e:f1:99:1c:66:77:84:0d:f3:c7:
         3d:18:38:e1:e5:db:a3:b2:7f:73:83:df:c8:83:73:a3:04:c5:
         a6:f2:d0:cd:ed:5b:1e:b2:73:8f:0a:00:a2:77:ee:da:71:40:
         7b:9d:1c:e6:a7:95:6c:bb:9a:10:46:cd:54:7d:55:9f:71:1d:
         d6:0b:51:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----