Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81C3D74B749F49CCA32A8C641A236EA9D2307146DCB98DE72A8DA340F22E5495/0/0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB.mft
File:                     0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB.mft (raw, json)
Hash identifier:          Q6NrojPH7/JywWC/A3ZUXTjQdiCBGAYejUbNwY60Jq4=
Subject key identifier:   8D:AA:E5:4C:EB:28:D7:53:9B:A5:09:25:A5:8D:54:86:A3:DD:F8:0A
Authority key identifier: 0C:3F:5B:DC:0C:ED:77:CC:FF:2B:A4:40:19:D1:D9:EE:70:39:B9:AB
Certificate issuer:       /CN=0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB
Certificate serial:       58CC962D0D7EF261DD3885BCFC1B8D4D43BA80DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/81C3D74B749F49CCA32A8C641A236EA9D2307146DCB98DE72A8DA340F22E5495/0/0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB.mft
Manifest number:          A5
Signing time:             Thu 30 Jan 2025 19:05:15 +0000
Manifest this update:     Thu 30 Jan 2025 19:00:15 +0000
Manifest next update:     Tue 04 Feb 2025 06:23:15 +0000
Files and hashes:         1: 3136382e3139372e34342e302f32322d3234203d3e20323634373831.roa (hash: cjF85mH1TsZiIrjxrh17zQIfrNZCbo21Q/iaA5+Gr6Q=)
                          2: 3136382e3139372e34372e3234302f32392d3239203d3e203631353231.roa (hash: BKxd/pinRculKW41GSsDSLp2L+DL9uRe8+JeBG0Bt0E=)
                          3: 0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB.crl (hash: aIHma7s2ibtaY82YjlJpBdnhjTodsyhTw3DYFjYdJDE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:cc:96:2d:0d:7e:f2:61:dd:38:85:bc:fc:1b:8d:4d:43:ba:80:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB
        Validity
            Not Before: Jan 30 19:00:15 2025 GMT
            Not After : Feb  4 06:23:15 2025 GMT
        Subject: CN=8DAAE54CEB28D7539BA50925A58D5486A3DDF80A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:62:59:fd:b6:71:9a:5f:40:71:d1:0c:4e:2b:
                    f7:67:a4:53:cf:76:f3:5e:f1:ae:fc:8d:ef:5a:21:
                    03:80:c2:2c:a8:af:3e:ee:05:ed:9d:92:4a:68:fc:
                    87:fd:bb:2e:ea:c6:5d:b6:c0:b0:86:f7:87:22:93:
                    f8:00:60:20:bd:a4:19:6c:a0:ed:4c:a3:29:7e:0b:
                    e6:c6:3f:3a:68:39:26:48:54:9e:8f:b4:e6:ae:06:
                    9d:c2:a3:86:46:ef:ec:dd:a7:a3:db:d8:7b:e0:28:
                    58:5f:64:ac:b2:26:6f:a5:d1:03:f2:ed:ad:7c:e8:
                    64:57:d6:09:ad:55:fd:7c:14:17:0c:a4:fb:8a:3b:
                    75:36:2b:c7:ac:2c:b8:97:b3:57:d0:e4:b2:1a:52:
                    45:fb:51:4e:00:26:9e:a2:1e:21:f7:dd:c3:2c:97:
                    5c:85:30:dc:61:3d:e0:2a:a3:dd:b1:f2:5f:8d:ab:
                    21:e6:b4:35:db:fd:23:f3:e8:cd:a5:72:e9:ad:17:
                    20:e5:63:a2:b6:0c:9a:eb:0b:1e:b2:59:a8:3d:39:
                    bd:dc:62:8d:2a:41:1e:d4:36:ef:c3:4b:40:92:14:
                    38:66:90:9a:6b:c1:76:6b:6f:c5:b0:af:c0:8f:c5:
                    1b:7c:23:ae:56:61:63:a5:26:e6:25:b1:9f:3f:0a:
                    2d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AA:E5:4C:EB:28:D7:53:9B:A5:09:25:A5:8D:54:86:A3:DD:F8:0A
            X509v3 Authority Key Identifier:
                keyid:0C:3F:5B:DC:0C:ED:77:CC:FF:2B:A4:40:19:D1:D9:EE:70:39:B9:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/81C3D74B749F49CCA32A8C641A236EA9D2307146DCB98DE72A8DA340F22E5495/0/0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81C3D74B749F49CCA32A8C641A236EA9D2307146DCB98DE72A8DA340F22E5495/0/0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:17:32:49:ea:ff:68:b8:c0:cb:2c:0b:fd:9b:ba:5a:76:00:
         fb:5b:58:13:7c:39:56:3b:c2:fa:48:9c:53:68:32:38:b3:bb:
         90:ae:98:3d:4a:49:c6:00:85:9f:05:10:8f:d6:c1:e4:8d:34:
         9f:af:81:50:3f:35:39:60:bc:e2:6f:a8:48:a3:46:eb:c2:80:
         d7:8a:1c:b4:79:ee:7e:8a:c4:73:59:db:86:eb:b4:6d:52:33:
         34:b0:a4:c5:75:58:55:eb:94:3f:70:55:b7:83:3e:a7:f5:e8:
         c0:cb:75:d0:92:fd:3a:97:47:7e:42:2c:38:99:29:66:d9:37:
         44:9b:d1:b7:b1:08:44:df:a8:29:2d:e0:3e:e7:e9:8d:bf:1e:
         ab:b6:47:e3:a2:e4:50:1f:08:08:a6:60:36:f8:3d:fa:61:56:
         ea:0b:cb:01:f7:96:ae:54:bb:b3:65:57:a3:5a:fb:a6:e2:a5:
         73:b9:e8:2b:d6:91:15:c9:d6:25:df:11:fa:60:ab:24:07:c0:
         a9:7a:6c:65:6c:bb:5c:05:36:b6:c4:e1:fd:fb:47:a6:2e:28:
         eb:b0:6d:fc:5a:16:ee:e2:3b:f0:c0:f0:ce:06:89:32:d0:a8:
         ea:7f:fb:8f:ee:40:4c:29:52:14:b4:18:78:93:66:86:9c:20:
         b7:77:84:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----