Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft
File:                     688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft (raw, json)
Hash identifier:          eq3CU7ZvMT27xquh0rpq0pTQGHtM9dMaC9h2P+gCZbQ=
Subject key identifier:   70:B7:F2:E0:1C:EF:30:7B:B9:42:58:54:F2:5B:3E:F7:37:48:AC:F2
Authority key identifier: 68:8F:0B:B1:66:D1:4E:7D:D2:5F:A7:8C:78:6B:91:7D:26:42:A8:E6
Certificate issuer:       /CN=688F0BB166D14E7DD25FA78C786B917D2642A8E6
Certificate serial:       5DA21AC6985D6ABAD3B58DBC3AD8C1B13AB45F72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft
Manifest number:          A9
Signing time:             Fri 31 Jan 2025 03:50:42 +0000
Manifest this update:     Fri 31 Jan 2025 03:45:42 +0000
Manifest next update:     Tue 04 Feb 2025 13:55:42 +0000
Files and hashes:         1: 688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl (hash: DEiiFGqWGsFZPpTNbI3UBaXU7yjrUSrqAFfp5xXPA0Y=)
                          2: 3137392e34382e3235322e302f32322d3234203d3e20323634383536.roa (hash: ldQ7t4DAowGhhyNyD/ucQ7Zo4I4P79VRguXcj+Gp8gw=)
                          3: 3139302e31342e3134342e302f32312d3234203d3e20323634383536.roa (hash: wkF1N81BKAoiD0brvcOqPcpDpXjEU/oQIfYIYZrFguU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a2:1a:c6:98:5d:6a:ba:d3:b5:8d:bc:3a:d8:c1:b1:3a:b4:5f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=688F0BB166D14E7DD25FA78C786B917D2642A8E6
        Validity
            Not Before: Jan 31 03:45:42 2025 GMT
            Not After : Feb  4 13:55:42 2025 GMT
        Subject: CN=70B7F2E01CEF307BB9425854F25B3EF73748ACF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:92:54:b1:50:55:10:5d:9f:a4:8d:15:de:53:
                    d0:91:fe:ab:76:90:73:39:de:22:78:f4:13:a6:a9:
                    72:31:34:e4:e7:49:af:2a:d4:eb:95:02:d0:31:8a:
                    a8:4f:29:98:2a:85:2f:55:3c:9c:07:06:a7:91:cd:
                    7f:6a:25:13:b8:d1:3a:a0:16:11:ee:1d:1d:f5:21:
                    19:4c:3c:78:d8:a6:53:3d:a7:1b:0c:97:e2:00:54:
                    65:8c:db:1d:74:bd:4f:a7:69:eb:78:ec:bc:5e:68:
                    7e:bb:b4:d5:e6:83:06:75:b4:fc:61:3b:a1:47:83:
                    78:bc:08:0c:ab:80:a6:28:f5:44:25:ad:7d:d8:76:
                    56:2d:d5:1e:fd:ca:08:71:62:14:aa:55:70:00:7d:
                    1c:e1:c4:d0:fc:b3:d6:50:08:7d:e7:fc:90:f5:57:
                    c2:55:6d:57:de:11:b4:d2:ac:a9:11:7d:70:3d:be:
                    bd:09:64:9b:e3:d2:9a:b6:fb:1e:08:2c:85:6a:67:
                    c1:53:58:69:c1:e9:30:6e:09:54:43:25:65:3f:ba:
                    b7:64:78:ee:a0:9d:f7:f2:a5:8d:bc:04:47:13:f1:
                    ea:3e:62:09:5f:c7:75:04:26:69:39:1f:fe:fc:94:
                    68:4c:dc:43:ae:aa:9e:07:84:ca:e4:56:e2:0e:28:
                    1f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B7:F2:E0:1C:EF:30:7B:B9:42:58:54:F2:5B:3E:F7:37:48:AC:F2
            X509v3 Authority Key Identifier:
                keyid:68:8F:0B:B1:66:D1:4E:7D:D2:5F:A7:8C:78:6B:91:7D:26:42:A8:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:3e:cf:d5:8e:15:42:57:c7:8c:f0:cd:3f:22:77:0f:58:58:
         ef:c7:07:0d:80:54:7a:ce:de:96:1e:77:96:c9:79:5e:17:61:
         5e:dc:ff:64:f6:b4:84:ae:7a:f8:41:ea:9f:85:9a:cb:d3:85:
         76:66:c0:97:4e:9f:ee:75:ca:49:dc:86:b9:a7:9d:8a:5b:46:
         c7:64:f2:8c:21:f8:7f:4c:47:07:10:af:d8:f9:25:32:40:51:
         d7:3c:9a:a5:1b:5e:b8:40:2e:44:91:c3:82:74:7b:5d:20:be:
         2e:51:c7:4f:c4:32:2e:6c:3d:59:df:95:f2:c6:fe:e1:cc:f4:
         40:27:f5:20:7a:02:c5:19:c0:cc:39:f1:e6:91:c8:04:1e:65:
         50:87:9f:35:cb:ef:63:04:0a:55:1d:b5:48:7c:fc:43:82:08:
         60:80:8f:9c:42:21:c6:db:3b:5b:3d:d9:55:9a:80:ce:7b:9e:
         fc:64:de:43:81:78:3c:8c:4e:58:ee:41:c7:ff:5d:50:a9:38:
         b3:97:04:a7:39:3c:7e:92:4e:d5:66:db:32:d8:de:72:56:68:
         3c:8b:96:56:ed:d4:6a:8c:f2:eb:2f:12:9d:54:8b:3c:a3:ae:
         1f:a7:77:02:bb:64:95:38:23:5e:09:97:f5:97:14:ab:be:5e:
         06:e2:35:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----