Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.mft
File:                     08C48F0EB922B5862C93AA1420F66615674E8BA1.mft (raw, json)
Hash identifier:          XcKzHpBfA0Uw0mTyJDdlavRufrtUFikVsNQtHeib16I=
Subject key identifier:   AF:0C:83:3E:06:30:54:4B:0D:C2:D4:FA:B8:D4:5E:7E:35:BD:54:38
Authority key identifier: 08:C4:8F:0E:B9:22:B5:86:2C:93:AA:14:20:F6:66:15:67:4E:8B:A1
Certificate issuer:       /CN=08C48F0EB922B5862C93AA1420F66615674E8BA1
Certificate serial:       42C98437C64938AFEC2885D76B183CF224005F0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.mft
Manifest number:          A5
Signing time:             Fri 31 Jan 2025 16:08:22 +0000
Manifest this update:     Fri 31 Jan 2025 16:03:22 +0000
Manifest next update:     Tue 04 Feb 2025 16:20:22 +0000
Files and hashes:         1: 323830333a393931303a633030303a3a2f33342d3438203d3e203634313336.roa (hash: sO9ihK7+MswbfFJPWdqslAxuVS2X/4FYHdOD6Y1EiFE=)
                          2: 323830333a393931303a3a2f33322d3333203d3e203634313335.roa (hash: hpP7V+UEytPsmo4u2rvhfeLV0V2whZLyggnC3TgRLuU=)
                          3: 323830333a393931303a383030303a3a2f33342d3438203d3e203634313335.roa (hash: QAZ2xDIQch4Rbj2VQK2qCqvX/dxRenseK7ryjRRXYJs=)
                          4: 08C48F0EB922B5862C93AA1420F66615674E8BA1.crl (hash: xv3FF3t/pBH32Qc62RB5rEmLwFiOtm4Kvmoh+PoQh4k=)
                          5: 323830333a393931303a3a2f33332d3438203d3e203634313335.roa (hash: 0iXb3Z1ebw9fO5uV34jEpJBUogu5K+cTAq+yLy/TzIg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c9:84:37:c6:49:38:af:ec:28:85:d7:6b:18:3c:f2:24:00:5f:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08C48F0EB922B5862C93AA1420F66615674E8BA1
        Validity
            Not Before: Jan 31 16:03:22 2025 GMT
            Not After : Feb  4 16:20:22 2025 GMT
        Subject: CN=AF0C833E0630544B0DC2D4FAB8D45E7E35BD5438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1d:bd:8a:50:b3:c4:63:5d:a6:3b:26:42:d5:
                    73:07:45:08:4a:c1:87:06:89:a1:ae:cb:ed:40:9a:
                    8a:1f:c3:12:84:96:2e:bf:90:01:a4:7e:33:f1:3f:
                    dc:e0:7c:41:81:e3:e4:9e:fd:ea:7e:29:f5:03:28:
                    77:94:13:ca:6c:c3:c4:85:4e:c5:56:78:56:2f:6d:
                    e6:9b:e0:04:c3:e5:e9:2d:34:0b:ce:e8:65:fb:c9:
                    5f:39:cc:82:33:1e:c3:48:76:0a:c0:e3:ea:d6:7d:
                    c4:3c:24:0b:d4:2c:48:bc:63:86:cb:e2:e6:4e:ae:
                    11:bf:b3:e4:7b:4a:9d:4c:7c:75:50:b0:94:de:e0:
                    0b:9a:23:93:66:aa:4e:f2:eb:c6:b6:29:ac:75:b2:
                    f8:e4:42:f4:ee:ab:8a:e2:a7:42:ac:82:5d:59:5e:
                    6c:ec:6f:f5:f6:2f:8e:e4:0c:71:9e:04:64:45:18:
                    1e:a8:20:30:5a:ff:2d:ed:cb:41:13:88:4e:d3:d4:
                    30:1a:95:5f:52:2a:b0:5e:29:4a:88:5a:2d:0e:ac:
                    a7:37:56:e9:2a:64:ae:de:d9:77:48:de:da:5e:80:
                    e8:ad:a2:31:4d:52:2f:37:76:bc:5e:ff:25:2c:48:
                    5d:db:56:28:6d:90:74:78:87:12:a7:76:45:05:13:
                    c0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:0C:83:3E:06:30:54:4B:0D:C2:D4:FA:B8:D4:5E:7E:35:BD:54:38
            X509v3 Authority Key Identifier:
                keyid:08:C4:8F:0E:B9:22:B5:86:2C:93:AA:14:20:F6:66:15:67:4E:8B:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/542E757E31F446C1586E3282CD56FD78A4E72ADDDC1B7F948ACB12604420A539/0/08C48F0EB922B5862C93AA1420F66615674E8BA1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:cb:c0:84:d4:47:42:db:a0:3c:13:9a:9c:51:6f:f7:11:58:
         a6:90:c7:bf:7a:d8:4f:90:b1:31:13:79:46:56:c3:62:df:69:
         63:7a:3c:3d:9f:da:e6:d5:28:66:c9:2b:40:bd:94:22:19:5b:
         d2:a6:d5:4e:7c:42:e7:ca:23:11:9c:68:1b:fa:99:59:67:14:
         69:20:cb:94:6a:f2:87:85:6c:8f:00:8d:aa:dd:6c:89:b5:58:
         5c:ee:53:ce:01:bc:0f:73:0c:9e:07:23:88:24:47:6a:6f:b9:
         76:9b:05:de:f4:08:49:86:57:44:41:86:0b:ec:8a:45:a9:72:
         34:f0:35:d9:c9:9b:f4:cf:db:c2:02:c4:e6:7e:ef:37:12:40:
         2b:f9:1f:3e:06:62:2e:48:10:b8:f8:78:eb:a6:e3:35:45:4c:
         07:60:36:cb:20:f5:d4:d8:6c:71:af:27:09:4a:10:87:5e:13:
         a5:f7:dc:2c:54:8b:92:0c:ee:f0:21:c5:62:89:1f:94:2d:da:
         00:e5:69:59:d1:c2:b9:73:fb:a5:70:41:28:47:f2:cd:a4:10:
         c9:bf:b7:3d:5a:a6:e2:69:e8:c5:79:75:4b:85:f9:9c:f6:99:
         40:29:e5:19:50:40:a3:a4:5a:1a:95:fe:6b:f4:d4:14:75:c2:
         65:ec:df:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----