Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F498D3DA387AF0C825713233F22DB55B427C41EBF8D1606BB353E8979DF1A22/0/4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7.mft
File:                     4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7.mft (raw, json)
Hash identifier:          9HY+JdLrhf/MbuEGzO8V144IEKTaOob6gfhU1RlQCGU=
Subject key identifier:   2F:8B:8A:66:8C:45:08:0B:20:93:C3:D5:F1:D9:71:C7:75:F5:C6:36
Authority key identifier: 4F:88:BE:7B:B9:DB:30:D9:5E:B5:4E:82:F8:D0:09:59:15:C2:3F:B7
Certificate issuer:       /CN=4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7
Certificate serial:       5C7DCD8E1B08AEE1D6539EA5C397983B5AE48329
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F498D3DA387AF0C825713233F22DB55B427C41EBF8D1606BB353E8979DF1A22/0/4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7.mft
Manifest number:          AB
Signing time:             Thu 30 Jan 2025 23:43:15 +0000
Manifest this update:     Thu 30 Jan 2025 23:38:14 +0000
Manifest next update:     Wed 05 Feb 2025 22:53:14 +0000
Files and hashes:         1: 323830333a616432303a3a2f33322d3332203d3e20323636373033.roa (hash: XcQPfGuLm95PhzMDdUM9e//BDD3UmoXst+iS9hrj4io=)
                          2: 34352e3233302e38302e302f32322d3234203d3e20323636373033.roa (hash: aIuUJAVbOkwMDqLbUqbd+E+5eGCOoTolxkcoPfhRW/A=)
                          3: 4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7.crl (hash: z8ct+4/HxUS92akoeuEhZoh/rwy4Pv0GElD9I7Tqnis=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:7d:cd:8e:1b:08:ae:e1:d6:53:9e:a5:c3:97:98:3b:5a:e4:83:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7
        Validity
            Not Before: Jan 30 23:38:14 2025 GMT
            Not After : Feb  5 22:53:14 2025 GMT
        Subject: CN=2F8B8A668C45080B2093C3D5F1D971C775F5C636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f0:66:7a:d8:10:86:5b:50:cc:c2:a0:9e:8d:
                    d1:27:3e:e6:6c:8b:80:13:35:b9:68:a9:95:fc:da:
                    5b:a7:0e:ca:c5:d7:cd:6e:39:a2:1a:f4:f7:28:10:
                    aa:8e:0d:e8:8a:0a:fa:b4:05:3f:28:48:85:e5:48:
                    87:9a:a0:eb:7c:6e:95:85:10:c2:05:87:30:48:b5:
                    5d:e7:14:3c:65:62:5a:9b:39:61:6b:6f:f4:6e:28:
                    c1:d9:57:e4:b3:76:0e:2c:27:0c:13:a9:62:29:d7:
                    46:ca:cf:05:3c:3d:26:5c:be:59:eb:6e:19:02:cb:
                    9b:86:0a:5c:82:13:11:9c:9c:9d:0d:59:07:9a:ec:
                    20:b2:91:fc:91:80:f3:fb:1d:2b:7c:a9:74:dd:c8:
                    7b:0c:1f:8a:88:ff:53:f1:eb:5b:f6:5d:5e:a2:b6:
                    f7:62:87:45:61:b4:6f:6e:68:e0:58:94:d7:a7:8d:
                    3b:f7:a4:23:a0:72:0d:17:bd:ec:31:8f:26:1f:82:
                    bf:93:c7:00:66:71:22:d9:82:3e:fe:76:a1:4d:1e:
                    33:5e:dc:e4:34:fb:7c:b6:1c:5a:eb:8c:75:bd:f4:
                    75:fb:2f:65:87:a5:25:1e:3e:a5:b0:f2:1b:82:f6:
                    48:7c:6e:bf:a6:03:15:84:fa:c7:aa:c7:7c:7e:f5:
                    2e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8B:8A:66:8C:45:08:0B:20:93:C3:D5:F1:D9:71:C7:75:F5:C6:36
            X509v3 Authority Key Identifier:
                keyid:4F:88:BE:7B:B9:DB:30:D9:5E:B5:4E:82:F8:D0:09:59:15:C2:3F:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F498D3DA387AF0C825713233F22DB55B427C41EBF8D1606BB353E8979DF1A22/0/4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F498D3DA387AF0C825713233F22DB55B427C41EBF8D1606BB353E8979DF1A22/0/4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:d5:b8:22:5f:bf:b1:67:f4:ff:6a:a6:d0:5a:90:3d:a2:9d:
         e2:20:19:a1:6b:9e:6b:1c:53:c7:93:9a:66:86:23:9c:61:20:
         17:07:f9:20:74:98:3f:0d:9d:07:b0:0b:6d:c3:bb:5c:a7:99:
         53:f7:9d:98:2a:b9:83:80:0e:8c:8c:a6:ae:47:48:47:9a:90:
         f3:41:ff:10:85:3f:06:38:a0:f9:88:4a:56:af:51:6d:02:a9:
         f1:1d:c5:2a:f1:54:29:8a:75:fd:90:c4:c7:b4:71:db:45:d3:
         3a:7f:59:11:8c:61:3b:c6:f0:41:c4:d2:b0:ad:56:88:4d:8c:
         6a:61:b0:e3:ca:bf:dc:ac:d9:70:54:57:88:35:aa:bc:80:db:
         f2:ed:37:51:06:93:4c:34:0d:f4:09:df:a0:be:2e:f1:db:79:
         c7:4e:51:ed:ac:44:fb:48:d2:fb:fa:91:22:10:6f:7f:bb:7f:
         94:79:2d:f9:db:d8:66:ee:39:e1:75:5c:6c:4d:a7:29:b8:3c:
         39:b5:1e:00:c0:70:98:7e:0f:32:2b:df:c1:df:05:fd:aa:f1:
         3a:23:29:63:f4:7d:84:f8:05:ac:7b:36:25:ef:13:8c:c9:a4:
         22:a1:2e:65:01:d6:c6:49:4f:d7:c9:69:4a:b8:cc:76:a4:f5:
         e8:46:42:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----