Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft
File:                     2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft (raw, json)
Hash identifier:          ZVED/Ox5+ExtbDM/akRc+CQP4/gkZwH/DM5wbt2wOKo=
Subject key identifier:   49:35:2E:87:ED:4B:95:61:F0:24:27:D5:F9:5F:F2:57:A2:E1:DF:A9
Authority key identifier: 2C:D0:A0:8E:07:C5:C1:ED:EA:6B:C3:DC:FD:0F:DF:2D:52:18:8A:BD
Certificate issuer:       /CN=2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD
Certificate serial:       68C7ACAFAA1226007471AAFD4389A0250BB26714
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft
Manifest number:          A5
Signing time:             Fri 31 Jan 2025 04:26:14 +0000
Manifest this update:     Fri 31 Jan 2025 04:21:14 +0000
Manifest next update:     Tue 04 Feb 2025 08:10:14 +0000
Files and hashes:         1: 2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.crl (hash: EmjHvzMfOnIktGQDVGxxj6ecVc/QkWDWgQ7zqFjsMqs=)
                          2: 34352e3136332e3234382e302f32322d3234203d3e20323637373037.roa (hash: UlUT/Tp/ecZ3fe/lRdUzd7bZ3OgGh7aQhe28HPoCsu8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c7:ac:af:aa:12:26:00:74:71:aa:fd:43:89:a0:25:0b:b2:67:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD
        Validity
            Not Before: Jan 31 04:21:14 2025 GMT
            Not After : Feb  4 08:10:14 2025 GMT
        Subject: CN=49352E87ED4B9561F02427D5F95FF257A2E1DFA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e0:5a:83:b7:64:80:b8:2e:66:f0:b9:ae:5f:
                    dd:7a:96:19:cd:14:4b:80:f8:63:bc:af:38:94:d8:
                    01:73:4c:36:e3:55:5e:fa:c4:c7:a8:ce:25:d3:2c:
                    cd:f4:7d:40:05:29:9b:ff:df:68:b2:0b:54:87:7b:
                    6d:97:ba:8f:56:b4:11:7e:f5:95:49:c5:7f:d1:e3:
                    c6:22:a2:05:03:7e:0a:ed:b7:8f:9d:a8:db:e4:d1:
                    b5:5c:44:16:27:ed:79:77:03:96:79:72:3c:44:a0:
                    3d:26:06:54:71:9b:20:13:86:92:c5:b9:3c:6f:aa:
                    c7:db:be:b7:08:33:43:e5:9c:97:1b:92:6f:55:90:
                    df:47:6e:0c:18:5e:c8:3a:b9:48:ae:c8:2d:77:75:
                    6d:cd:e3:a6:3c:24:7a:6b:df:cf:bb:bb:d4:fb:87:
                    0b:f8:10:ac:e0:e1:36:a1:42:2e:6a:a5:c0:54:56:
                    66:31:62:c0:7c:a3:d7:e5:ce:e4:44:b8:fb:ce:37:
                    77:02:74:87:73:93:33:ce:d2:00:ef:fd:75:2f:8e:
                    e1:59:a2:d8:26:67:72:9d:35:b5:90:fd:9c:f2:75:
                    09:4f:0c:ab:2f:27:76:62:3c:40:64:05:a5:f6:7f:
                    3b:b7:25:a3:04:c3:24:4a:12:c9:90:09:c7:b5:ba:
                    c0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:35:2E:87:ED:4B:95:61:F0:24:27:D5:F9:5F:F2:57:A2:E1:DF:A9
            X509v3 Authority Key Identifier:
                keyid:2C:D0:A0:8E:07:C5:C1:ED:EA:6B:C3:DC:FD:0F:DF:2D:52:18:8A:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:8b:e0:b9:fd:71:14:d1:3a:ad:87:27:1e:ce:7e:c6:dd:db:
         91:31:ae:30:f4:0b:4b:2a:15:ed:45:dc:a6:20:a0:ab:0c:ff:
         ea:a6:1d:64:af:39:7f:34:ce:15:78:e6:d5:b3:b4:be:c7:8a:
         61:3e:27:57:97:2e:84:3e:49:93:66:83:66:c2:84:20:89:69:
         86:e1:33:ac:19:70:b4:54:7b:fa:8b:57:fb:08:b2:43:15:7c:
         12:fb:8e:57:94:c9:82:af:77:a4:b6:08:bc:8f:00:15:6c:bb:
         14:18:48:8e:48:7b:a2:bc:9f:a1:19:e1:de:b3:d3:42:0c:b5:
         3d:08:42:8c:9a:d1:2c:d9:41:a9:02:78:f0:6a:7a:cd:42:d8:
         26:33:50:c2:3b:a0:6e:18:6b:44:61:1e:5a:e4:0b:b4:a9:ca:
         e4:ff:73:ee:36:3e:8a:8a:6c:30:cb:4f:a7:68:44:9e:21:45:
         9d:1b:78:e3:73:8f:0b:f8:88:03:80:7b:09:87:f0:53:83:b9:
         db:14:70:83:07:94:02:4a:2d:03:2f:64:f7:43:7e:5d:d2:86:
         6c:73:09:bd:aa:63:d5:4b:94:38:a5:72:37:55:40:9c:ba:aa:
         19:70:7d:29:53:28:27:16:46:cc:93:53:5d:8a:d9:29:e5:08:
         f9:e7:b3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----