Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.mft
File:                     991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.mft (raw, json)
Hash identifier:          168oaZNmDC6x2gVFO4ZiWiYBzA07rCJFZM6z1ACP/3s=
Subject key identifier:   AF:B9:E5:FF:B6:E3:90:A7:58:87:C2:93:CD:E1:11:5D:8C:20:02:1E
Authority key identifier: 99:1C:3E:DC:C0:3E:22:70:A8:EA:AF:82:2E:C1:7B:EC:74:1B:1A:A3
Certificate issuer:       /CN=991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3
Certificate serial:       7D9338BC350A533D960AAB011D8D2592E05979EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.mft
Manifest number:          AA
Signing time:             Thu 30 Jan 2025 17:44:25 +0000
Manifest this update:     Thu 30 Jan 2025 17:39:25 +0000
Manifest next update:     Wed 05 Feb 2025 10:08:25 +0000
Files and hashes:         1: 3230302e35392e36342e302f31382d3234203d3e203130363137.roa (hash: WGW6ax5YTXBwE43yRXbzdqgVkVMyBRGHJTXZ8BeSJuk=)
                          2: 991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.crl (hash: a/tLKPmHxS8ZObebw+zuiNvGKM8ML6mmICfoEObIGU0=)
                          3: 3230312e3232312e39362e302f32302d3234203d3e203130363137.roa (hash: yAwaM9vGEZOL5yhbATMBKIbHVRI94pMsjRnXGt30rKo=)
                          4: 323830333a393738303a3a2f33322d3438203d3e203130363137.roa (hash: CpdbZJ0yzW3tCsCLHAu0nU3K+O5dEQv495vD211SCVY=)
                          5: 3231362e3234342e3139322e302f31382d3234203d3e203130363137.roa (hash: +SMaX1Xj8v6GFN3TahzsfRVvrYuwQWzz1qzhS+pl7RU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:93:38:bc:35:0a:53:3d:96:0a:ab:01:1d:8d:25:92:e0:59:79:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3
        Validity
            Not Before: Jan 30 17:39:25 2025 GMT
            Not After : Feb  5 10:08:25 2025 GMT
        Subject: CN=AFB9E5FFB6E390A75887C293CDE1115D8C20021E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:8d:9f:4d:69:52:6a:d5:ee:a9:8b:a9:d7:d1:
                    cb:36:2f:94:98:4a:89:30:6a:34:0b:c4:73:7c:99:
                    41:63:d7:92:15:d3:bd:32:9c:d1:0b:ac:0e:b4:e9:
                    d2:ec:f2:3e:7f:9f:7e:3a:0a:56:68:42:b2:7a:63:
                    21:c3:9f:62:89:81:1b:13:ae:5b:43:7a:e7:99:ad:
                    e6:7e:35:79:f7:b8:44:bc:30:ac:5e:5b:89:e8:4e:
                    ad:4d:0c:a3:d3:fe:17:8d:2b:3a:43:2a:8d:3e:f4:
                    e0:55:1e:e4:6d:01:07:5f:2b:9d:72:74:6e:d8:fc:
                    32:ef:9e:13:f3:5a:53:30:26:76:ce:a6:59:22:74:
                    da:47:18:41:06:4b:7a:81:a7:b2:ef:79:82:a8:bf:
                    91:d0:b7:f6:c7:d8:ef:92:61:d0:27:e2:96:cc:b4:
                    a8:89:42:c1:85:c3:25:f6:e2:38:42:7c:7b:fc:02:
                    b2:65:0d:cc:c5:22:7a:d8:3d:39:2e:41:1a:a3:df:
                    29:e7:da:94:88:42:39:5a:01:3d:3e:d8:14:06:dc:
                    f3:43:38:d8:95:b9:d4:0b:34:b7:86:4e:57:30:28:
                    db:f3:df:30:19:85:6d:24:d2:69:a3:75:f1:62:df:
                    15:6d:3b:00:f5:50:08:de:a7:b7:9e:28:dd:80:fe:
                    d5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B9:E5:FF:B6:E3:90:A7:58:87:C2:93:CD:E1:11:5D:8C:20:02:1E
            X509v3 Authority Key Identifier:
                keyid:99:1C:3E:DC:C0:3E:22:70:A8:EA:AF:82:2E:C1:7B:EC:74:1B:1A:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/462FFF33C31C789B381060D18764EFC1B39F677FA89503C899A260903BF52AE5/0/991C3EDCC03E2270A8EAAF822EC17BEC741B1AA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:a7:02:b0:ff:42:11:c6:45:54:19:4c:f0:88:5f:fa:00:2e:
         af:71:49:88:86:23:35:51:22:3e:c4:83:b5:47:36:21:b5:2f:
         76:53:0c:b7:c7:b1:32:76:05:df:58:2e:07:83:82:85:54:5a:
         7f:9b:42:6a:45:13:31:0e:0a:13:de:0a:4c:bb:9e:a1:d2:74:
         34:ba:ec:23:d7:d2:6d:b5:50:67:69:8e:48:75:46:5e:61:5d:
         1a:5c:a5:2e:3f:d4:1d:8e:76:93:f5:c5:96:3b:07:df:40:6d:
         0b:35:56:6c:bd:44:68:d5:be:ed:35:cf:c2:23:be:cb:68:9e:
         9c:38:4b:1f:d6:5e:81:03:6a:e5:3e:e2:78:de:c5:7c:be:e8:
         58:8d:67:c8:62:27:8d:32:c8:2b:b0:d1:b4:16:22:f0:07:0e:
         5f:db:e1:b3:1f:0b:22:82:1d:70:6b:66:20:0b:d2:b4:ea:8b:
         e5:d2:c2:c0:db:55:8a:ae:a0:a2:94:9c:62:78:c8:ed:86:c0:
         36:43:54:35:00:f1:80:24:b7:37:d1:59:54:90:b7:40:07:e9:
         0a:d3:9e:5e:d6:4b:58:e9:74:2d:23:5f:2c:81:4d:bd:3b:92:
         24:53:77:c3:be:0d:50:13:a1:10:32:6f:f1:66:2a:83:4a:0c:
         39:ba:ba:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----