Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.mft
File:                     43D716CDB565EBE33B24F995BFB74FBBE1493099.mft (raw, json)
Hash identifier:          JOlpuuPdHkmAfm/f9ge6wrAhYq/uit59KxB3FWP9ui4=
Subject key identifier:   22:43:03:A3:5C:7A:DF:E6:45:0E:E9:43:9B:8A:1A:54:86:AC:46:BF
Authority key identifier: 43:D7:16:CD:B5:65:EB:E3:3B:24:F9:95:BF:B7:4F:BB:E1:49:30:99
Certificate issuer:       /CN=43D716CDB565EBE33B24F995BFB74FBBE1493099
Certificate serial:       5788E032285EA638AA590E9D93A8C7DBA15FFCC9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.mft
Manifest number:          A5
Signing time:             Wed 29 Jan 2025 21:06:54 +0000
Manifest this update:     Wed 29 Jan 2025 21:01:54 +0000
Manifest next update:     Mon 03 Feb 2025 20:08:54 +0000
Files and hashes:         1: 43D716CDB565EBE33B24F995BFB74FBBE1493099.crl (hash: nndywfLSWmeje65ilhMXm6cSG7imuousDHc/Q4Ck8rk=)
                          2: 3133382e302e382e302f32322d3234203d3e203532333439.roa (hash: u9VjYK9+WbjWgvYUXZm/gfl8Xg4lm1A75TfKg8rZjQw=)
                          3: 323830303a3963303a3a2f33322d3438203d3e203532333439.roa (hash: gPeV76NeEuOfWdM1e1ZkCi8l713Bu1jvrsR40xIBi2A=)
                          4: 3137302e3234362e3234342e302f32322d3234203d3e203532333439.roa (hash: +Pys211Myyynvd4FloeOPAHdrVxoDQD5KjMtET8Fs5k=)
                          5: 3138362e3134382e3234382e302f32312d3234203d3e203532333439.roa (hash: gaGKMvSfM1Ki0FKagX67hWbPs1ReGPlLbB7Pn6unLj4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:88:e0:32:28:5e:a6:38:aa:59:0e:9d:93:a8:c7:db:a1:5f:fc:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43D716CDB565EBE33B24F995BFB74FBBE1493099
        Validity
            Not Before: Jan 29 21:01:54 2025 GMT
            Not After : Feb  3 20:08:54 2025 GMT
        Subject: CN=224303A35C7ADFE6450EE9439B8A1A5486AC46BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:50:38:cb:c5:6f:4e:5c:f0:7a:c4:d4:62:ac:
                    ea:79:c6:f6:c6:61:83:c9:a6:2a:80:d4:7c:5e:b4:
                    d1:13:99:d5:27:96:d2:5d:7e:9d:41:14:ca:e9:69:
                    fd:88:c1:b6:7a:05:bc:67:dc:6e:84:2e:8f:83:25:
                    96:b7:55:7f:25:73:15:90:d4:e3:43:50:d7:17:c9:
                    44:30:73:d4:26:7c:bc:d1:28:a7:12:54:2d:71:53:
                    b5:fb:af:86:65:1a:50:4b:fc:4a:3b:59:bc:81:dc:
                    5a:26:de:fc:f4:7c:d3:e4:d8:de:e1:6f:14:50:3a:
                    c9:02:44:b0:81:d1:b4:5d:3e:61:c1:a6:14:9c:d0:
                    93:6c:3b:d6:35:a8:c1:7b:5e:83:b2:45:ec:f2:3b:
                    dc:5c:0c:ba:09:0e:4f:f7:54:2b:96:9b:a8:a0:4d:
                    18:6a:74:f4:86:15:91:6d:f6:a4:c9:c1:1b:c4:fb:
                    e7:53:74:53:c3:08:a9:42:7d:73:61:77:03:98:9b:
                    cb:05:7e:c2:a1:f1:1b:1d:9c:d0:1e:9f:c9:74:60:
                    25:35:a7:dd:bf:a2:95:98:cc:f8:d8:ea:34:44:1e:
                    66:9d:ca:3a:27:d7:a5:17:02:f7:c7:23:92:1e:55:
                    a9:5e:99:57:2d:ce:ee:1c:25:bd:74:44:06:78:75:
                    9f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:43:03:A3:5C:7A:DF:E6:45:0E:E9:43:9B:8A:1A:54:86:AC:46:BF
            X509v3 Authority Key Identifier:
                keyid:43:D7:16:CD:B5:65:EB:E3:3B:24:F9:95:BF:B7:4F:BB:E1:49:30:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:a6:a7:2f:6e:e3:79:87:bc:ed:0f:5b:a8:c3:a7:14:d6:41:
         2a:20:04:63:3a:0e:89:c9:3f:78:cb:dc:08:8a:3e:bd:0b:b2:
         a2:25:18:57:2a:99:65:a3:c0:75:09:01:fc:a3:1c:35:25:e4:
         cd:a2:52:6d:86:a6:29:1a:13:4e:e0:9a:1f:32:c5:35:40:56:
         63:db:e1:0f:11:2e:b2:f1:e2:46:68:83:56:fe:a7:eb:1f:e6:
         e3:66:b1:fd:64:9b:ff:e7:0e:94:1c:b3:b1:b5:7b:ca:3b:af:
         f9:65:cf:0e:7d:82:50:67:26:db:2e:02:3d:c3:39:44:8c:6c:
         a2:2b:51:14:60:cc:88:19:38:74:ce:60:61:ed:30:3f:96:2d:
         56:3a:87:d6:1d:9a:60:33:03:ee:df:9f:a6:1f:14:f0:cb:3f:
         58:2d:65:78:16:f9:1b:2f:83:9e:46:16:2a:03:70:58:ae:cf:
         bb:af:a3:c6:20:a7:95:a1:04:49:46:03:1d:5d:17:2f:96:b8:
         07:ba:a5:61:aa:2c:78:3d:8f:2b:59:e9:93:d5:11:ae:f6:a6:
         f5:85:f2:8e:42:92:05:06:6f:2c:bb:19:44:de:a5:28:8c:9a:
         48:f1:82:ae:89:e8:81:4a:1e:29:79:d4:f6:92:9f:f2:27:65:
         22:db:cd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----