Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3454D986A7159EBE4806F466D88ADE313D3969E1A56BFFC481AA91060CD262CE/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.mft
File:                     899F313321C13B5591ABC1D56B271A1F6BB60E12.mft (raw, json)
Hash identifier:          0GQRrVQx+gVnL+KoBKmd4AJL1iKSpkLMfg3Uv8fSmHQ=
Subject key identifier:   DB:E4:B6:F3:60:53:88:CF:17:33:77:62:9C:F1:0C:54:FA:61:AA:17
Authority key identifier: 89:9F:31:33:21:C1:3B:55:91:AB:C1:D5:6B:27:1A:1F:6B:B6:0E:12
Certificate issuer:       /CN=899F313321C13B5591ABC1D56B271A1F6BB60E12
Certificate serial:       35C46DE8F944C3813F3F7FA2629A0CC33ABD2956
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3454D986A7159EBE4806F466D88ADE313D3969E1A56BFFC481AA91060CD262CE/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.mft
Manifest number:          A8
Signing time:             Wed 29 Jan 2025 14:42:48 +0000
Manifest this update:     Wed 29 Jan 2025 14:37:48 +0000
Manifest next update:     Tue 04 Feb 2025 03:57:48 +0000
Files and hashes:         1: 3230312e3232302e32392e302f32342d3234203d3e203532343633.roa (hash: QKJmpD5l3BTuovJ4Dp9ToW+q1nS434eZkQvOc/FEjV0=)
                          2: 899F313321C13B5591ABC1D56B271A1F6BB60E12.crl (hash: cqKegsXtQS/u2cA11OR4VmbzHDrjU2fBBeDvzfWPVAg=)
                          3: 323830313a31653a383030303a3a2f34382d3438203d3e203532343633.roa (hash: IWSAeCiLPoIOclHZgeuTyTYXbWqsVEHIa1NTx5DUpDs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c4:6d:e8:f9:44:c3:81:3f:3f:7f:a2:62:9a:0c:c3:3a:bd:29:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=899F313321C13B5591ABC1D56B271A1F6BB60E12
        Validity
            Not Before: Jan 29 14:37:48 2025 GMT
            Not After : Feb  4 03:57:48 2025 GMT
        Subject: CN=DBE4B6F3605388CF173377629CF10C54FA61AA17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7a:a3:75:21:4d:82:3e:8d:23:11:74:38:2f:
                    79:7e:22:fa:72:12:1f:14:f1:c4:7a:57:5f:9a:6d:
                    b9:fb:82:24:db:89:48:ce:5e:0b:a5:a3:7b:7f:b1:
                    e9:6a:31:60:5b:da:1f:1e:a3:a2:93:08:0e:3e:e5:
                    a8:84:58:c7:9d:ff:33:b5:6c:01:2c:5e:7d:aa:e9:
                    b7:96:73:bf:5d:28:51:7a:2a:b9:f8:df:d3:06:ea:
                    81:a0:ec:2e:b3:8d:9e:a3:ac:b9:72:5a:a9:f0:be:
                    34:d0:74:c8:27:ad:8b:13:5f:e3:5e:1a:b0:47:3a:
                    52:8f:8d:6d:e5:8b:8d:99:74:17:8d:9e:c5:ef:82:
                    6c:a3:da:72:a2:4f:ae:ef:4b:7f:4c:66:1a:24:d9:
                    6b:e7:74:4a:2f:c6:8c:aa:0b:95:a0:dd:06:66:61:
                    60:5f:00:52:d3:22:87:e1:f4:bb:b8:8f:14:bb:30:
                    f9:bb:da:f4:19:6b:b8:c7:fe:e1:3c:c6:bd:99:1e:
                    5a:99:02:41:e4:80:f1:d0:88:2d:be:82:6b:cf:8f:
                    b3:fe:6d:f9:aa:2b:56:1a:08:64:4f:ae:c0:5a:12:
                    f4:10:ae:4b:54:77:96:94:dc:26:cd:80:6c:7c:3f:
                    38:0e:07:80:73:d3:77:7c:d2:df:e7:de:86:69:50:
                    e8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E4:B6:F3:60:53:88:CF:17:33:77:62:9C:F1:0C:54:FA:61:AA:17
            X509v3 Authority Key Identifier:
                keyid:89:9F:31:33:21:C1:3B:55:91:AB:C1:D5:6B:27:1A:1F:6B:B6:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3454D986A7159EBE4806F466D88ADE313D3969E1A56BFFC481AA91060CD262CE/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3454D986A7159EBE4806F466D88ADE313D3969E1A56BFFC481AA91060CD262CE/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:09:ad:e6:c5:4c:4f:a0:e3:53:18:f8:b8:ab:40:9e:d2:cc:
         28:e8:5d:d9:f0:9c:2f:51:28:e1:c4:9f:b0:72:f7:e6:e2:62:
         e8:ba:f4:08:30:9c:ef:0e:51:67:fc:b6:fb:4c:37:2a:8b:c8:
         e8:8a:09:24:7c:23:e6:72:41:bc:23:f9:e4:bf:5f:57:eb:9d:
         95:ae:55:5d:a9:2c:ae:eb:29:b4:24:92:39:a2:21:e5:41:11:
         f8:2b:39:a1:8d:db:d7:2a:78:c5:52:b8:6d:eb:f0:4e:7a:6f:
         db:64:a2:33:ad:79:95:a8:62:44:e0:ab:6e:29:f1:78:38:5a:
         3a:2c:63:c6:b1:42:26:d3:1b:82:34:6c:d6:6c:1b:04:d7:ca:
         41:80:7d:8e:8f:40:f7:a7:fe:df:3b:ff:c7:f4:09:d4:a7:bf:
         67:88:e1:90:6e:cb:54:79:89:1c:2e:79:15:40:e0:f1:3a:f1:
         d0:f0:45:c1:a0:e5:25:c4:23:04:76:cc:78:03:b7:f5:44:d4:
         b9:4f:91:23:55:3a:a0:29:57:0d:ef:16:be:cb:37:76:b4:03:
         5e:79:1a:d2:98:1a:d9:66:51:0e:62:3d:d7:3b:50:b0:a7:84:
         62:df:f5:b8:b9:55:c8:2e:6b:26:0a:f2:94:d3:88:e5:9c:32:
         72:9d:d2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----