Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.mft
File:                     209A4B66D92052DAA8A5358DB465449F02D52BAB.mft (raw, json)
Hash identifier:          EYIb3AJXlv+EnVdFnJUT9/EK30r2H9b8thwFL/I2oeo=
Subject key identifier:   93:5B:8D:AD:4D:3B:82:B2:0A:AC:36:D4:FB:4B:15:7C:D3:AA:59:57
Authority key identifier: 20:9A:4B:66:D9:20:52:DA:A8:A5:35:8D:B4:65:44:9F:02:D5:2B:AB
Certificate issuer:       /CN=209A4B66D92052DAA8A5358DB465449F02D52BAB
Certificate serial:       52AB19D21CBDED871DB4CBD25386AFF1061E1BDE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.mft
Manifest number:          AC
Signing time:             Fri 31 Jan 2025 16:33:37 +0000
Manifest this update:     Fri 31 Jan 2025 16:28:37 +0000
Manifest next update:     Wed 05 Feb 2025 12:38:37 +0000
Files and hashes:         1: 3138362e3135392e3132362e302f32342d3234203d3e203532333731.roa (hash: xdxpL3EOwSe4LDhmJa+Jp/uvznCW7QGrjVFAi68heMg=)
                          2: 3138362e3135392e3132342e302f32332d3233203d3e2037333033.roa (hash: O9PoZdDdTeqEJASYZheRyukGJ2MPA9mSf0hc0ScvL9Q=)
                          3: 3138362e3135392e3132302e302f32322d3234203d3e203532333731.roa (hash: urzkXUXx6Lk1+xL6eFFDf+/6MvLrINKr5k3hv3iiJJM=)
                          4: 209A4B66D92052DAA8A5358DB465449F02D52BAB.crl (hash: jrjfhQgYke6Dilz6o3Pcz29s8Vwm7E/qQsgnGdaQqyk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ab:19:d2:1c:bd:ed:87:1d:b4:cb:d2:53:86:af:f1:06:1e:1b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209A4B66D92052DAA8A5358DB465449F02D52BAB
        Validity
            Not Before: Jan 31 16:28:37 2025 GMT
            Not After : Feb  5 12:38:37 2025 GMT
        Subject: CN=935B8DAD4D3B82B20AAC36D4FB4B157CD3AA5957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:21:a3:be:24:6f:9b:6b:18:99:4d:ed:67:51:
                    cf:71:10:7f:4d:d4:3d:a2:51:8c:dd:d7:e2:f8:f5:
                    5d:bc:01:cc:92:97:51:0f:24:af:0d:b9:bd:7d:47:
                    13:c4:45:9a:ba:41:90:45:f2:e1:7e:59:8e:ba:ab:
                    df:b0:fe:1a:21:4a:c3:d6:7c:15:4b:90:58:a8:f4:
                    d1:01:b7:ff:d1:41:19:d8:76:03:d9:c3:db:6a:f8:
                    5b:70:b6:b8:6e:9e:f6:cd:04:2d:7b:ad:7c:18:d4:
                    d7:1b:b4:13:a7:43:73:04:b2:aa:87:7d:4c:b6:62:
                    38:a1:d6:6e:32:a0:fa:e5:ed:8b:b2:86:ad:ac:87:
                    c0:f3:06:87:51:2b:38:35:43:2e:b0:b4:0d:60:81:
                    13:f2:de:3b:3a:61:55:df:15:eb:d0:09:37:c0:f0:
                    d3:80:ac:68:22:af:d7:8c:6d:fa:de:53:ed:ce:18:
                    b7:e3:63:d0:04:c6:15:3d:a8:b5:35:b2:fc:f4:fc:
                    d7:eb:ee:7d:43:16:3d:af:7a:a5:f7:35:e1:33:db:
                    d9:b5:54:6b:58:1b:42:96:96:46:8c:17:d6:57:93:
                    70:5a:29:44:67:51:bb:27:d6:d9:9c:21:c0:f0:36:
                    0b:b4:42:08:dd:5b:b0:ad:69:8e:be:5d:1c:5c:2c:
                    5a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5B:8D:AD:4D:3B:82:B2:0A:AC:36:D4:FB:4B:15:7C:D3:AA:59:57
            X509v3 Authority Key Identifier:
                keyid:20:9A:4B:66:D9:20:52:DA:A8:A5:35:8D:B4:65:44:9F:02:D5:2B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:87:07:41:bc:36:3a:a5:1b:22:08:8e:29:64:c9:c1:17:0b:
         b6:73:70:c5:21:ac:ba:27:03:19:af:11:85:a5:3a:33:1d:76:
         c2:ea:8e:2b:fa:ee:4b:df:ae:ff:fd:75:3a:34:55:a7:d5:e4:
         8e:e8:c7:c8:8b:45:7e:f5:52:bd:5f:88:e8:9b:e2:f2:a0:98:
         d2:2c:05:81:d1:4d:eb:5b:c0:c8:4d:d3:d5:d6:c4:75:80:16:
         b6:66:55:e7:9b:29:4e:44:56:26:f4:cc:82:5f:6f:37:83:1c:
         6e:c9:8a:62:ba:6b:a8:c2:24:99:4c:be:9e:cb:74:f1:f1:70:
         c2:d6:6a:1a:60:4f:08:c8:5e:da:7c:26:12:fa:77:3d:25:8e:
         e4:04:26:87:b3:c1:33:ec:94:ea:ec:72:02:bd:34:94:34:a5:
         ce:5e:7b:0b:c4:79:a1:e3:bc:66:bf:cf:96:06:6a:de:c3:e9:
         87:4b:18:86:bc:02:9a:61:5c:a1:e3:74:e7:75:d7:01:e3:18:
         f2:86:21:b7:69:58:ca:ce:39:05:2b:07:56:ba:2f:8a:ca:a8:
         e5:fd:e2:df:23:3f:0f:ee:a9:f5:b2:3d:bd:af:79:71:bc:3a:
         54:4d:46:c9:77:dc:11:9f:d4:42:0e:db:19:2a:f2:88:15:a4:
         df:24:eb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----