Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.mft
File:                     9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.mft (raw, json)
Hash identifier:          0h9oUwWd8ED6uHmih2Ni04uPIzHKny3g0IVx3Upqtiw=
Subject key identifier:   66:54:4E:C0:E0:08:69:F8:E9:A3:C0:08:D7:C6:51:E7:B8:C6:15:E0
Authority key identifier: 9C:DC:70:D9:BF:52:DC:35:F1:B9:88:BC:8F:7F:6D:B6:2A:20:8E:5F
Certificate issuer:       /CN=9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F
Certificate serial:       6501DBB74FA0BF46A4048619C8E32F4EBE8751DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.mft
Manifest number:          AD
Signing time:             Thu 30 Jan 2025 23:38:12 +0000
Manifest this update:     Thu 30 Jan 2025 23:33:12 +0000
Manifest next update:     Wed 05 Feb 2025 22:13:12 +0000
Files and hashes:         1: 3139302e3135312e3134302e302f32332d3234203d3e203532333236.roa (hash: 4Nx/Kwyd+dWd6RR/SVClXPudhyl7WHmQIDUx1jmkrVc=)
                          2: 9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.crl (hash: Rp2wzppNQTPC3rR8WK1TGd1gsYmjsGZdqcki8VULo6w=)
                          3: 3139302e3135312e3133382e302f32332d3234203d3e203532333236.roa (hash: cuNwmeG2+57x0mNdQal6CqF5BBF1aXJRbnYM0fD6srs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:01:db:b7:4f:a0:bf:46:a4:04:86:19:c8:e3:2f:4e:be:87:51:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F
        Validity
            Not Before: Jan 30 23:33:12 2025 GMT
            Not After : Feb  5 22:13:12 2025 GMT
        Subject: CN=66544EC0E00869F8E9A3C008D7C651E7B8C615E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6d:41:0a:1e:80:ee:2d:91:78:50:fb:f1:ab:
                    a0:38:4b:41:24:f0:b4:96:b9:62:d7:bc:22:1e:c8:
                    c3:e9:49:50:c7:b5:b5:b0:74:16:49:be:e3:fc:1e:
                    1d:75:c1:72:47:86:5f:13:28:5a:4a:cc:a1:48:43:
                    5e:9a:c3:f9:02:a5:08:e5:bf:29:eb:73:13:e7:60:
                    fc:57:a3:af:86:42:ca:21:6a:f3:67:4f:5a:55:33:
                    6f:0c:0d:b6:99:66:38:02:dc:dc:a7:76:52:94:3c:
                    e1:fc:9f:8a:4b:19:ee:25:e9:0a:52:ef:0a:8e:5a:
                    bd:fd:1e:e3:80:6c:3e:31:de:65:a5:f2:9d:e3:da:
                    ba:c6:4b:5a:8a:bc:36:65:55:5e:1b:d6:29:4a:a4:
                    b9:de:4d:dd:5b:04:82:19:93:ab:05:4b:8b:4c:0b:
                    60:e9:0c:38:00:fb:9a:13:49:9b:76:54:d7:46:ef:
                    8c:23:55:f3:09:b2:1c:4b:c6:99:df:cc:61:27:a6:
                    8d:43:ef:c2:92:6f:00:2f:82:98:04:88:4d:79:97:
                    e8:ad:55:2f:9a:22:94:f4:9c:d8:89:04:7c:91:25:
                    fa:11:24:29:46:a7:ee:e9:85:20:4b:83:dc:89:02:
                    33:95:10:f7:2b:e3:74:21:56:04:c8:e4:c3:35:f9:
                    ca:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:54:4E:C0:E0:08:69:F8:E9:A3:C0:08:D7:C6:51:E7:B8:C6:15:E0
            X509v3 Authority Key Identifier:
                keyid:9C:DC:70:D9:BF:52:DC:35:F1:B9:88:BC:8F:7F:6D:B6:2A:20:8E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:52:fd:25:85:77:a9:81:91:b4:af:fd:51:2a:19:26:ba:24:
         dc:8b:2e:8b:6a:0b:fd:e9:9d:b6:b5:f8:ae:72:c0:7c:b5:55:
         65:a5:39:c8:c8:10:15:cf:ac:cc:00:61:04:5e:95:cc:77:05:
         d0:85:86:05:8b:56:ea:42:3d:c7:09:0f:35:cb:7f:d0:49:45:
         23:8f:ac:23:ee:16:66:c4:e1:a5:dc:90:c7:a9:27:76:7e:6c:
         c4:e4:0e:4f:32:3c:30:d9:60:07:25:21:c4:60:72:6f:1e:1d:
         58:db:3a:9c:19:72:af:07:03:fe:52:64:5a:4d:49:9d:43:84:
         a2:9f:0b:0c:f3:64:0c:ea:d4:95:06:94:4d:28:97:cf:2d:e4:
         8c:d5:2c:96:61:fa:90:dd:c0:35:2e:0f:21:51:5c:51:55:62:
         e2:89:03:3d:85:34:2b:cf:86:53:07:d0:e1:b5:4e:c0:b7:fb:
         2d:51:4e:c8:fb:03:32:87:69:ad:ea:f5:a0:0e:22:08:a8:87:
         38:5c:76:07:44:28:92:0d:1b:41:f5:ae:76:17:4e:a3:c3:66:
         15:ff:d6:ee:e6:c5:41:37:34:c8:72:ec:55:3f:17:1f:0e:1d:
         ea:c6:03:e4:96:e6:5a:f5:4a:6d:5d:64:d9:59:dc:7f:3d:11:
         8f:90:66:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----