Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3C3F79F48292FED8066255DCDF35ADE753C735A5565AF1D4DF2D81DAD96C1618/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.mft
File:                     65886C5BD66D87F36CE0A14E138941C8AC70F2C9.mft (raw, json)
Hash identifier:          ue/OaZH1/O3ye9Fi7YWhXPvSjuZC4UqZS9UzwyrgvP0=
Subject key identifier:   24:16:46:D8:DA:D9:66:CF:DB:35:21:2A:E5:18:49:73:00:90:A2:EA
Authority key identifier: 65:88:6C:5B:D6:6D:87:F3:6C:E0:A1:4E:13:89:41:C8:AC:70:F2:C9
Certificate issuer:       /CN=65886C5BD66D87F36CE0A14E138941C8AC70F2C9
Certificate serial:       3FD7D6E1B730B1334CF8C94B0CE9A56797824527
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3C3F79F48292FED8066255DCDF35ADE753C735A5565AF1D4DF2D81DAD96C1618/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.mft
Manifest number:          AF
Signing time:             Fri 31 Jan 2025 11:40:39 +0000
Manifest this update:     Fri 31 Jan 2025 11:35:39 +0000
Manifest next update:     Thu 06 Feb 2025 00:36:39 +0000
Files and hashes:         1: 3133382e3230342e3136302e302f32322d3234203d3e20323633383131.roa (hash: qquEmQKwI7tcj+OnGk2O72i4CogngmCS0aI4i8jHB2k=)
                          2: 323830333a643234303a3a2f33322d3438203d3e20323633383131.roa (hash: M+u2ZwuN+4Tzz9Y9aPoXqwxwK2Qa6Ci9XquOhFSYFDY=)
                          3: 65886C5BD66D87F36CE0A14E138941C8AC70F2C9.crl (hash: UHbpdRv6iXZGVYdddoMScBAGYMwNIO/ebnb8YGzp9/g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:d7:d6:e1:b7:30:b1:33:4c:f8:c9:4b:0c:e9:a5:67:97:82:45:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65886C5BD66D87F36CE0A14E138941C8AC70F2C9
        Validity
            Not Before: Jan 31 11:35:39 2025 GMT
            Not After : Feb  6 00:36:39 2025 GMT
        Subject: CN=241646D8DAD966CFDB35212AE51849730090A2EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f6:0c:83:6a:86:d8:58:7b:91:50:47:cc:70:
                    2e:7d:00:a9:d4:a4:17:19:fd:5b:a5:8d:c5:17:07:
                    7f:d3:f9:9b:eb:b3:9c:37:c0:e2:8e:5c:4b:ab:76:
                    0d:ca:c9:46:13:46:47:ca:07:aa:13:c5:c8:b3:b8:
                    62:09:dc:ba:cf:2a:65:ab:f2:28:6b:91:b2:57:cb:
                    d5:6f:44:3c:e3:5b:a5:f7:90:ab:9d:90:41:a6:c3:
                    76:4b:52:bb:40:96:fd:21:c1:51:e5:30:f2:26:58:
                    14:68:0d:48:dd:9a:dc:00:8e:28:c0:80:04:e3:bb:
                    61:49:4f:db:d2:58:51:ef:87:92:cb:19:2d:71:e3:
                    7d:19:fb:d0:ce:e4:c0:ca:86:e8:6f:ad:77:9c:94:
                    d2:54:b7:00:9d:28:d7:56:94:f9:81:dc:28:7d:2a:
                    68:b9:84:8c:7d:cc:75:d4:ee:20:e9:69:e8:e5:37:
                    98:0e:fd:fd:09:b4:29:10:a4:88:4b:86:25:28:eb:
                    7c:0c:d9:bd:cb:fb:7f:5e:1a:0b:7c:8e:0e:e8:a8:
                    51:c8:a7:5d:87:76:33:d7:19:29:14:b3:b2:44:48:
                    c6:b9:f0:ad:72:f3:20:a6:f1:3a:6c:1d:c5:36:77:
                    3d:77:25:ec:82:07:66:40:78:67:30:95:d1:c6:6e:
                    4a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:16:46:D8:DA:D9:66:CF:DB:35:21:2A:E5:18:49:73:00:90:A2:EA
            X509v3 Authority Key Identifier:
                keyid:65:88:6C:5B:D6:6D:87:F3:6C:E0:A1:4E:13:89:41:C8:AC:70:F2:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3C3F79F48292FED8066255DCDF35ADE753C735A5565AF1D4DF2D81DAD96C1618/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3C3F79F48292FED8066255DCDF35ADE753C735A5565AF1D4DF2D81DAD96C1618/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:d9:e2:32:b9:c9:6e:37:6f:a0:7c:ee:56:81:0d:38:b2:a0:
         b7:70:49:91:f3:18:47:79:d8:f6:d2:89:78:4a:4a:b1:72:49:
         11:96:fa:92:89:19:3e:8c:a5:55:fb:96:b3:91:31:6a:76:f0:
         e9:ba:d1:98:93:26:27:bb:97:ac:66:0c:2a:6a:1a:42:b8:a1:
         01:56:73:b5:a3:0d:90:53:4e:86:a6:4b:dd:90:6e:3a:30:cc:
         43:75:f4:a3:c7:b0:78:18:5f:71:08:7a:18:4d:f5:02:bb:67:
         40:2b:00:44:78:fa:7d:71:23:0a:b3:eb:ff:fd:43:83:19:85:
         c2:be:4d:a0:a9:76:78:79:8a:cb:7b:e3:13:ca:1a:40:c6:d3:
         85:ff:77:c4:20:3f:11:d9:1d:39:75:86:35:8e:5d:b6:97:a1:
         a0:1d:f3:e7:90:9c:30:b5:1a:24:3b:6e:df:ba:ee:ec:11:79:
         54:15:ca:34:3a:48:64:bd:c4:bd:12:57:d4:c4:f7:7b:1c:cf:
         49:6d:db:2e:4e:f8:aa:4d:c4:c3:6b:f4:26:35:41:d7:03:7c:
         dc:a3:57:09:0d:ca:bb:0e:37:26:c2:26:83:b2:b7:e9:31:99:
         7a:10:90:60:c1:8a:7a:bb:fe:23:4b:8d:04:27:21:5a:e1:4d:
         62:5c:6d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----