Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.mft
File:                     FF458BCF6CF40DFE3E43BC054BF5206905966427.mft (raw, json)
Hash identifier:          UmRrEgbZhVtn8EM6JQlvrihLx+ffuxEyseU8Sp3j8qU=
Subject key identifier:   C9:D4:8D:54:E3:5D:CD:06:E4:2D:18:13:84:75:C0:7F:BD:3A:55:BA
Authority key identifier: FF:45:8B:CF:6C:F4:0D:FE:3E:43:BC:05:4B:F5:20:69:05:96:64:27
Certificate issuer:       /CN=FF458BCF6CF40DFE3E43BC054BF5206905966427
Certificate serial:       2C8C30EC0EC569190A181E49F60F2F1588FAAFB7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.mft
Manifest number:          A4
Signing time:             Fri 31 Jan 2025 05:31:58 +0000
Manifest this update:     Fri 31 Jan 2025 05:26:58 +0000
Manifest next update:     Wed 05 Feb 2025 02:08:58 +0000
Files and hashes:         1: FF458BCF6CF40DFE3E43BC054BF5206905966427.crl (hash: vaAmFfTYTcCWEcpV+fxIEevMgA9hAxkF6Pc7bpGBxps=)
                          2: 34352e3137362e3131362e302f32322d3234203d3e20323637383539.roa (hash: owzPXaZmcvzx9v2fJZj7R6TvsxiJqSVIEzVixDNaxCk=)
                          3: 34352e3137362e3131362e302f32322d3234203d3e20323635373033.roa (hash: hxQ1qoRWYwJ5pEfcOF0No3dZkwl65mLnAWbbu9vCaow=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:8c:30:ec:0e:c5:69:19:0a:18:1e:49:f6:0f:2f:15:88:fa:af:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF458BCF6CF40DFE3E43BC054BF5206905966427
        Validity
            Not Before: Jan 31 05:26:58 2025 GMT
            Not After : Feb  5 02:08:58 2025 GMT
        Subject: CN=C9D48D54E35DCD06E42D18138475C07FBD3A55BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6f:62:43:3f:a1:92:a8:d7:dc:eb:69:ad:79:
                    01:c6:97:68:a2:1e:4d:68:73:e8:f9:81:55:10:e6:
                    d2:92:27:cb:5a:a8:3b:0e:78:e2:58:03:23:18:29:
                    72:d6:cd:f9:c7:bc:fe:a7:91:4d:f4:0e:2c:77:c5:
                    8c:b0:15:a0:f1:8b:a2:d8:43:d5:38:d6:a6:f8:88:
                    b7:bd:2b:4c:93:ff:86:a6:f1:c3:3e:06:86:aa:50:
                    f0:ba:00:9c:4a:fe:0e:ce:7c:3b:d0:33:7a:b1:70:
                    2b:ee:52:ef:e5:01:11:16:d6:b5:b5:36:c6:81:ca:
                    a9:bf:c2:88:5a:d1:71:5a:3d:8d:2b:dd:22:29:ea:
                    ad:68:da:9a:ce:00:02:7d:fd:36:e3:6d:a7:5e:a9:
                    11:03:36:6e:76:dc:8a:1a:74:22:62:20:62:1c:f6:
                    3c:d5:c3:bf:58:8a:95:12:b1:c9:82:ef:67:e1:28:
                    3d:bb:24:8d:e2:43:93:1f:9b:4a:44:de:59:e6:de:
                    b5:d5:22:32:16:6f:a5:7f:98:84:f9:93:59:5e:83:
                    7b:57:ef:cf:69:c4:bf:2d:64:2d:82:df:06:85:4a:
                    3a:39:fd:b1:9d:22:36:89:78:24:4c:8a:61:ef:ba:
                    3e:9f:e0:ed:0b:35:60:05:e2:93:0c:f2:b1:cc:e3:
                    8a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D4:8D:54:E3:5D:CD:06:E4:2D:18:13:84:75:C0:7F:BD:3A:55:BA
            X509v3 Authority Key Identifier:
                keyid:FF:45:8B:CF:6C:F4:0D:FE:3E:43:BC:05:4B:F5:20:69:05:96:64:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:6d:de:e5:46:66:dd:a4:cd:e4:0c:2f:6d:6a:e9:ac:90:a0:
         52:e1:c8:93:07:87:86:e8:86:8f:71:76:54:df:8e:70:69:8b:
         8b:21:44:16:cd:3f:81:58:7d:97:b8:00:61:28:74:3e:fd:1f:
         a7:13:bf:0a:aa:c7:eb:f5:ca:3f:c7:ee:93:b8:80:22:95:a6:
         48:9a:6b:83:b4:5a:f7:44:be:0c:23:92:c6:91:b7:60:46:d3:
         74:c4:0c:76:51:c7:31:df:ec:02:63:9e:94:11:55:0e:5d:72:
         43:07:0c:2d:05:12:dc:3e:f6:62:40:9d:ff:32:55:67:58:be:
         ce:ad:c3:0e:4f:43:7e:a2:3e:0a:93:50:f7:af:e5:f5:2c:68:
         78:b3:bf:98:93:67:66:84:33:cb:fc:4d:0f:95:f2:0f:b8:0c:
         60:68:c1:dc:50:62:48:2d:95:b6:d9:ef:83:a4:2f:9c:a7:5c:
         61:43:01:b4:67:1e:61:74:dc:2e:42:bb:36:d8:3f:53:48:91:
         00:e1:42:2e:ad:5b:13:32:4d:33:4e:e9:f6:e5:c3:aa:34:59:
         f5:52:3e:61:4c:36:68:b9:04:9e:cb:55:f9:d0:85:2d:76:29:
         dc:ed:8e:52:66:a4:fe:6e:c8:3c:c0:72:4c:b8:69:1f:1e:28:
         87:3c:59:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----