Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/351A1035B533B76BBE410590DD28DCEC12720DF7348D8874E24504D596D8B8C4/0/DEB0660E0FB445D40E3783241A89F0309182FEF5.mft
File:                     DEB0660E0FB445D40E3783241A89F0309182FEF5.mft (raw, json)
Hash identifier:          kyyMRoNHkyRWLho2f7tmHKayeNQgGot2800kPwJHLbw=
Subject key identifier:   F2:C6:89:A1:6C:DA:57:E0:B5:A1:AE:3E:E2:5A:86:89:BB:07:5F:1D
Authority key identifier: DE:B0:66:0E:0F:B4:45:D4:0E:37:83:24:1A:89:F0:30:91:82:FE:F5
Certificate issuer:       /CN=DEB0660E0FB445D40E3783241A89F0309182FEF5
Certificate serial:       272904C9B9D92D6251B7E216D0002C3CA7A0AB1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEB0660E0FB445D40E3783241A89F0309182FEF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/351A1035B533B76BBE410590DD28DCEC12720DF7348D8874E24504D596D8B8C4/0/DEB0660E0FB445D40E3783241A89F0309182FEF5.mft
Manifest number:          A3
Signing time:             Thu 30 Jan 2025 07:17:58 +0000
Manifest this update:     Thu 30 Jan 2025 07:12:58 +0000
Manifest next update:     Tue 04 Feb 2025 12:33:58 +0000
Files and hashes:         1: 3137392e302e3230382e302f32302d3234203d3e20323633323332.roa (hash: QOC5f8KoywTpFWrn5YhQW33k0bzjFqtcETyMPW8gN94=)
                          2: DEB0660E0FB445D40E3783241A89F0309182FEF5.crl (hash: DA4SRtwTjHxK4H+88/NFK6vZ8dBOFx2McG5fJIY18SA=)
                          3: 323830333a346538303a3a2f33322d3438203d3e20323633323332.roa (hash: kW9GV2KM5M/PWIPSPK34K4P6f9sR3tlV/ikdlAd7VpY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:29:04:c9:b9:d9:2d:62:51:b7:e2:16:d0:00:2c:3c:a7:a0:ab:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEB0660E0FB445D40E3783241A89F0309182FEF5
        Validity
            Not Before: Jan 30 07:12:58 2025 GMT
            Not After : Feb  4 12:33:58 2025 GMT
        Subject: CN=F2C689A16CDA57E0B5A1AE3EE25A8689BB075F1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ad:8b:fe:38:2a:e2:78:33:62:25:8e:8e:45:
                    ef:84:8b:bc:0f:fa:d0:a7:a6:3d:2e:9c:28:de:73:
                    c1:f5:04:6a:53:05:c9:92:02:ef:26:87:14:3a:aa:
                    7c:f5:bd:df:65:de:2e:de:6d:58:87:3a:f7:f3:f1:
                    3a:64:4f:b7:89:ea:fe:3f:d7:b9:3a:ea:4d:f7:4d:
                    87:05:7c:77:92:8f:6d:52:76:96:ca:68:34:64:1b:
                    0a:b7:4b:35:3a:1c:14:93:13:35:af:c6:20:c5:6f:
                    37:19:b3:8a:4e:23:6f:0d:a8:95:15:67:e6:51:26:
                    28:d7:47:e3:63:ed:f7:8d:a7:fe:14:b6:f2:f6:e1:
                    55:52:7e:53:e0:51:2e:e1:3a:26:78:98:c8:e3:31:
                    fd:89:01:77:e9:20:b1:86:22:5f:52:f8:8e:d1:2a:
                    ef:0a:6a:68:5a:91:de:c9:89:0b:c2:43:8c:d0:32:
                    b2:94:04:c8:22:b3:8e:d2:2d:ad:08:a3:d6:0c:4f:
                    c5:5e:b5:3f:17:f3:7c:f6:64:78:0a:9f:85:4b:bb:
                    78:11:b5:1e:78:68:95:a6:04:70:d4:53:e8:81:68:
                    f3:26:cf:53:d7:d6:c2:0e:8c:a5:04:16:4a:9b:81:
                    c3:0f:e3:84:ac:c1:32:58:36:12:12:ac:eb:6e:9b:
                    5b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C6:89:A1:6C:DA:57:E0:B5:A1:AE:3E:E2:5A:86:89:BB:07:5F:1D
            X509v3 Authority Key Identifier:
                keyid:DE:B0:66:0E:0F:B4:45:D4:0E:37:83:24:1A:89:F0:30:91:82:FE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/351A1035B533B76BBE410590DD28DCEC12720DF7348D8874E24504D596D8B8C4/0/DEB0660E0FB445D40E3783241A89F0309182FEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEB0660E0FB445D40E3783241A89F0309182FEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/351A1035B533B76BBE410590DD28DCEC12720DF7348D8874E24504D596D8B8C4/0/DEB0660E0FB445D40E3783241A89F0309182FEF5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:41:a3:4d:cf:6e:56:f5:1c:50:10:15:3e:39:3c:a4:1b:4f:
         66:5e:26:a2:b5:f4:12:3b:98:76:36:40:f4:56:aa:36:17:ce:
         76:d8:60:b6:00:4c:61:43:70:fc:4a:36:7b:cf:f7:9a:03:36:
         f5:db:88:88:4f:e7:97:19:23:cd:96:c3:34:81:8d:72:69:ca:
         1d:fd:9e:db:6e:cb:0f:1f:4d:d4:0c:6b:be:18:5d:85:20:10:
         f2:b0:27:67:9d:26:bb:82:c0:11:95:95:15:9d:e5:45:d1:67:
         35:3c:b2:f0:a5:64:7d:92:ca:67:51:2e:02:62:4d:35:bb:10:
         fd:6c:22:52:b4:e3:8c:dc:ed:66:08:7b:7c:24:eb:3e:58:ff:
         1e:53:26:8b:b8:df:dd:22:d0:03:62:77:c7:c1:5d:67:78:b3:
         2a:95:83:8a:50:70:a8:09:62:99:6f:37:4d:0f:1e:3a:fd:0c:
         ab:a0:b3:ec:38:fe:53:77:5b:fb:e3:96:6b:de:97:06:66:f6:
         bc:f9:ca:94:df:9b:db:bf:8e:e9:ef:71:cb:72:a2:d3:5b:d2:
         9f:28:82:75:d1:ba:8e:a8:7b:c0:b7:fb:80:5c:8e:f5:fe:b0:
         3a:10:70:df:0e:83:a0:47:ad:d0:0b:f1:50:5f:61:53:4f:f0:
         8e:ff:97:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----