Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.mft
File:                     3249F9F2D0369FF06E9B2651663EFA2423E42AFC.mft (raw, json)
Hash identifier:          axx1+Di1AiZELoR0HLi64pVtthJc1jbMS+PcT1Of/WU=
Subject key identifier:   41:59:43:A5:73:E4:58:65:97:F3:FD:F6:52:7C:89:31:66:AB:0B:D2
Authority key identifier: 32:49:F9:F2:D0:36:9F:F0:6E:9B:26:51:66:3E:FA:24:23:E4:2A:FC
Certificate issuer:       /CN=3249F9F2D0369FF06E9B2651663EFA2423E42AFC
Certificate serial:       23F59F356DEDED79F13FF0AC6D91F983D7CD6E9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.mft
Manifest number:          A4
Signing time:             Wed 29 Jan 2025 08:38:58 +0000
Manifest this update:     Wed 29 Jan 2025 08:33:58 +0000
Manifest next update:     Tue 04 Feb 2025 07:01:58 +0000
Files and hashes:         1: 3139302e3130332e3139312e302f32342d3234203d3e203631343638.roa (hash: v3uU03FdV6v1kakIA1Y41sbmdLJjaMsr5X1QO7nbQk4=)
                          2: 323830313a31383a353830303a3a2f34382d3438203d3e203631343638.roa (hash: STeyvU3YpyGhejDjEivgtjgjaoerZ0gBvHnk+9qbaqw=)
                          3: 323830313a31383a353830303a3a2f34382d3438203d3e20323732313430.roa (hash: aDws0YY2Cqk3/uTlZ49HFDKiqffLPEtUeoXkjNqXNGY=)
                          4: 3139302e3130332e3139312e302f32342d3234203d3e20323732313430.roa (hash: dttZlwK2sgbhMNdqLU1fdLWaSjfH79rhcnkoq6osOo0=)
                          5: 3249F9F2D0369FF06E9B2651663EFA2423E42AFC.crl (hash: EBGSbD+vHyMtfZpuzNE+U9mhQScdZ5foRmzojYMBfsQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f5:9f:35:6d:ed:ed:79:f1:3f:f0:ac:6d:91:f9:83:d7:cd:6e:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3249F9F2D0369FF06E9B2651663EFA2423E42AFC
        Validity
            Not Before: Jan 29 08:33:58 2025 GMT
            Not After : Feb  4 07:01:58 2025 GMT
        Subject: CN=415943A573E4586597F3FDF6527C893166AB0BD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ea:25:08:95:56:17:7b:9c:5b:3b:44:c2:9a:
                    f2:d1:18:e9:e7:c9:77:9a:70:a2:3d:2a:5b:27:a8:
                    34:f0:11:75:3b:c1:46:fa:52:06:4d:51:97:92:37:
                    3e:93:cc:43:62:c7:02:00:5d:5d:e6:9a:87:ca:17:
                    28:cd:5a:fd:22:38:98:b0:86:f1:f6:07:d1:b9:52:
                    da:64:c9:15:59:55:a2:c0:f0:6b:53:9f:41:6f:02:
                    79:bb:e0:6c:9f:81:19:c4:82:49:e0:31:16:3e:4d:
                    d7:08:e2:55:3c:83:ad:25:93:29:cf:5e:d2:d1:eb:
                    91:e7:ae:a0:67:e4:be:df:cd:2d:ff:f1:6d:08:fb:
                    2b:e8:73:00:db:02:99:22:9b:1f:59:da:76:fe:08:
                    a8:a0:47:fd:52:e7:66:8d:e4:ea:31:79:7b:b9:cd:
                    e0:c2:32:b0:3d:fe:8b:73:6f:5d:6f:b1:77:f8:ce:
                    87:0f:69:08:06:12:64:bd:9c:0d:f4:6c:5d:7b:17:
                    01:6f:f7:d8:bc:c1:49:e1:ca:2a:1d:0f:bf:8a:61:
                    78:b9:96:1d:20:0c:72:58:59:f1:f7:80:e2:14:b2:
                    ca:95:a9:a2:25:0f:10:df:54:aa:30:97:97:03:85:
                    87:03:61:58:37:65:a4:e4:92:e9:ba:7d:ff:51:3d:
                    1e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:59:43:A5:73:E4:58:65:97:F3:FD:F6:52:7C:89:31:66:AB:0B:D2
            X509v3 Authority Key Identifier:
                keyid:32:49:F9:F2:D0:36:9F:F0:6E:9B:26:51:66:3E:FA:24:23:E4:2A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:fc:df:27:da:cf:96:04:96:6d:be:d9:0c:d0:80:a7:ed:d2:
         a7:01:a8:61:38:93:0e:38:2a:e8:c2:7e:7c:bf:80:29:f4:3a:
         b5:0c:43:c7:92:44:52:5e:8f:ab:83:76:fc:88:e9:5d:9a:70:
         c3:10:67:ce:13:02:80:95:b2:84:ab:b4:e8:6a:7e:95:89:c0:
         a4:bd:d9:14:c8:d8:dc:81:9a:ad:ab:2d:20:e8:a6:0c:74:28:
         e0:26:0c:a1:24:36:ed:5b:46:ab:b7:71:dd:20:73:59:e7:53:
         52:4c:96:72:76:94:e1:19:23:1f:77:94:5f:c6:14:27:c7:05:
         63:97:b0:f2:97:b3:fa:cf:dc:3b:fc:0d:ab:48:e9:ee:59:4b:
         00:91:7c:b3:b9:a0:eb:4c:3e:de:d2:c9:36:2c:37:e6:3e:c9:
         f4:8c:56:fb:44:75:77:37:cb:cd:c2:99:14:d1:4e:50:40:93:
         1e:60:e9:d3:2a:91:ae:4e:8e:1c:1c:79:7c:04:4c:50:02:4f:
         78:5f:48:a0:de:ac:9a:ac:2b:c0:93:e8:a3:ed:d1:8c:7f:70:
         6c:1a:19:19:b0:cc:29:d8:30:21:69:fa:3f:d6:c0:3c:40:f4:
         59:15:0f:aa:4b:c1:00:ef:c5:d2:42:51:19:62:d6:d5:17:7d:
         1c:6a:7c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----