Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.mft
File:                     871A5F48AD8A83C183DB3624AEA05825D749DDF7.mft (raw, json)
Hash identifier:          cJ0GmJ4P6Ven63tZSUAARV5fyOywQB+sTkELaqjMK50=
Subject key identifier:   D8:B8:7F:0B:D2:4B:09:BC:37:D2:24:7E:EE:99:2A:F2:3C:A8:B9:B8
Authority key identifier: 87:1A:5F:48:AD:8A:83:C1:83:DB:36:24:AE:A0:58:25:D7:49:DD:F7
Certificate issuer:       /CN=871A5F48AD8A83C183DB3624AEA05825D749DDF7
Certificate serial:       28540E89CCF69B532D036FF98175AA5521D615FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.mft
Manifest number:          AD
Signing time:             Fri 31 Jan 2025 16:53:52 +0000
Manifest this update:     Fri 31 Jan 2025 16:48:52 +0000
Manifest next update:     Thu 06 Feb 2025 08:54:52 +0000
Files and hashes:         1: 323830333a393838303a3a2f33322d3438203d3e20323634363430.roa (hash: Pcto1Z6aYF1yhRlvW0MkJOGdGX6d0cxohZejm00i2GM=)
                          2: 871A5F48AD8A83C183DB3624AEA05825D749DDF7.crl (hash: 8KsJX+cZZU4uwTBnt5+iTWIL0eN0eDqTNlHTrq8Ow7k=)
                          3: 3137392e36332e3231362e302f32312d3234203d3e203532343638.roa (hash: 9Fa25FA+fARWR8asXZs7vmnyfBdxr4QGRPlmP20jatk=)
                          4: 3137392e36332e3231362e302f32312d3234203d3e20323634363430.roa (hash: 1qdMgsEI+BcetEkRh7dcB/Qmi5FPM9ifnQvrzbOtxgY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:54:0e:89:cc:f6:9b:53:2d:03:6f:f9:81:75:aa:55:21:d6:15:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871A5F48AD8A83C183DB3624AEA05825D749DDF7
        Validity
            Not Before: Jan 31 16:48:52 2025 GMT
            Not After : Feb  6 08:54:52 2025 GMT
        Subject: CN=D8B87F0BD24B09BC37D2247EEE992AF23CA8B9B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5e:4c:95:2a:1d:7a:76:a6:8d:99:05:3b:17:
                    9d:8a:28:46:d7:46:26:db:ba:6e:71:44:ea:0c:f8:
                    53:68:c6:94:f5:d0:c0:0c:81:27:7f:6b:64:70:fe:
                    15:0c:7f:2a:96:d9:5b:41:7d:86:f5:c4:f7:b8:7a:
                    b0:df:59:f6:6a:99:ed:a6:df:fc:31:30:9b:92:4d:
                    06:c2:40:db:9e:07:ef:52:f8:6d:a0:b5:de:00:82:
                    c7:7f:a6:f0:6a:20:7d:f1:ee:24:4c:53:ce:45:ec:
                    e9:05:ba:2e:a4:e2:e0:4b:0a:5b:bc:f4:49:ff:55:
                    08:c6:01:be:4f:e1:71:c4:8d:62:05:5b:7f:8e:41:
                    05:aa:8a:af:9d:fe:68:f8:cb:73:65:18:0b:94:e8:
                    c9:f3:29:69:e4:0b:22:a4:27:a5:65:a5:8d:a0:83:
                    82:6c:7d:65:b1:9d:09:9a:22:82:e4:e6:03:e5:3c:
                    24:36:f6:e6:15:a4:50:e1:03:aa:a2:03:05:00:8d:
                    66:93:11:08:88:91:bc:50:9a:c6:49:dd:9e:2f:c4:
                    f2:5a:f7:86:b7:36:a1:ac:94:84:00:56:d5:0f:7b:
                    91:0d:e5:b4:7f:01:f7:af:84:ef:c9:d0:ac:d2:0f:
                    50:9a:3d:94:25:ac:3f:68:87:c5:d7:61:0b:cf:88:
                    0e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B8:7F:0B:D2:4B:09:BC:37:D2:24:7E:EE:99:2A:F2:3C:A8:B9:B8
            X509v3 Authority Key Identifier:
                keyid:87:1A:5F:48:AD:8A:83:C1:83:DB:36:24:AE:A0:58:25:D7:49:DD:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:f9:8d:75:9d:18:c5:03:de:53:d4:57:e4:40:fb:e2:5a:ae:
         69:92:e4:9d:ec:e1:34:73:51:2f:04:ca:fa:e6:fe:3e:1c:f8:
         a6:13:f0:6b:31:88:18:35:6d:17:c6:5c:66:ba:96:e1:14:b1:
         94:2c:b4:fe:43:b5:d9:ad:e6:b3:18:56:c7:0f:ab:43:0d:af:
         0e:d9:2f:61:cf:65:99:b1:7c:df:f6:83:63:29:86:98:17:e9:
         5b:69:cf:02:e7:b5:df:da:e9:a7:0f:2d:b9:a0:33:66:40:b3:
         86:d9:8a:d7:e9:08:f0:05:dc:05:26:be:db:70:40:2b:2f:27:
         79:38:c4:66:1d:ab:93:c2:da:f7:4e:3a:ee:64:55:de:0f:94:
         99:fa:7e:2d:f0:92:53:d9:31:26:7f:7b:99:14:4f:a2:16:66:
         b4:55:34:39:f3:c0:e2:00:c2:a5:6d:11:98:18:16:03:f0:b2:
         27:99:01:27:29:df:37:b1:df:53:6b:b9:0c:32:82:ba:ce:5a:
         31:e3:49:c0:5b:c3:23:0c:59:cc:88:20:ef:f4:11:e6:09:44:
         aa:72:d5:87:a7:93:2c:c9:dd:7e:e1:1d:cd:90:02:ba:7f:f6:
         eb:25:3d:2f:49:f7:c5:3a:f7:53:3f:89:6e:e2:2d:02:36:e2:
         e7:4a:63:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----