Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.mft
File:                     C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.mft (raw, json)
Hash identifier:          AJkviKfkdmBQUwezdb2eG3nADLjoHVZaqt5+50ROJ2c=
Subject key identifier:   7B:8C:BF:FF:62:91:81:7A:0B:B2:01:50:9E:9D:10:02:EC:C6:9E:07
Authority key identifier: C2:0B:1C:E4:6D:24:F9:B4:B4:1A:A6:CD:DD:9E:B9:6E:8B:23:C2:B1
Certificate issuer:       /CN=C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1
Certificate serial:       4268B4EFA06864A6F72F78920FE679B8D4099578
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.mft
Manifest number:          A9
Signing time:             Wed 29 Jan 2025 17:54:53 +0000
Manifest this update:     Wed 29 Jan 2025 17:49:53 +0000
Manifest next update:     Tue 04 Feb 2025 09:33:53 +0000
Files and hashes:         1: 323830303a6233303a3a2f33312d3334203d3e203237373430.roa (hash: yqO83Sa4a/wmU4+J+5e7f5WWCyvRbGgeCxG2KKJ7tOk=)
                          2: C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.crl (hash: LQGW/67ZSDGSvq4YxIyofjgXwSBKHL6h6bIN77ZQH1E=)
                          3: 3139302e3130382e36342e302f32312d3234203d3e203237373430.roa (hash: un0ziKUu/mO5lvV4qwpGmTyA4sKih8DLnIgZetY6u8M=)
                          4: 3139302e31312e3234302e302f32302d3234203d3e203237373430.roa (hash: CM2nmNvUN7yhzvfP+ozZYVlJ6u73oIrChkRGnWu0GA8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:68:b4:ef:a0:68:64:a6:f7:2f:78:92:0f:e6:79:b8:d4:09:95:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1
        Validity
            Not Before: Jan 29 17:49:53 2025 GMT
            Not After : Feb  4 09:33:53 2025 GMT
        Subject: CN=7B8CBFFF6291817A0BB201509E9D1002ECC69E07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:18:91:8f:c9:36:26:f2:31:bd:19:23:a3:58:
                    7b:c2:45:57:d1:48:13:93:3a:a3:d0:93:44:41:9a:
                    5b:9f:c3:dc:a5:07:0a:dd:c9:d7:cd:6e:e2:a3:84:
                    47:1b:e3:b2:8b:88:9f:ce:95:8a:57:34:0e:8f:cd:
                    ea:a9:5f:55:18:67:fe:06:23:df:18:49:99:cb:89:
                    a6:8f:08:31:60:2f:5b:12:74:3b:6a:ad:96:50:67:
                    cc:69:0a:48:30:2f:13:2a:f5:1a:d7:42:37:d8:2c:
                    75:bd:62:b3:30:d8:24:03:b5:6f:49:df:2a:13:c1:
                    8b:3c:b0:37:33:d3:0d:37:94:a3:f8:37:b8:2f:41:
                    e4:6b:84:7c:58:c4:26:37:7d:02:37:d0:ab:a5:b0:
                    48:48:10:84:1e:8e:99:a0:57:f9:bd:23:d2:d0:b4:
                    3e:c7:72:5c:d2:62:2f:a2:a8:b7:b4:12:64:0f:d9:
                    d6:cc:9a:30:84:b2:c4:cf:b6:3a:38:83:70:fa:a1:
                    34:92:a5:f3:1e:47:40:a2:8b:5a:e2:0c:fc:64:eb:
                    17:3e:cd:e8:84:57:6e:f4:36:67:f5:a6:29:44:61:
                    0c:59:65:8d:8e:0b:95:4b:30:10:fb:ff:46:5a:3c:
                    1b:59:af:27:e9:72:c1:93:f4:bd:dc:1c:42:8a:26:
                    f4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8C:BF:FF:62:91:81:7A:0B:B2:01:50:9E:9D:10:02:EC:C6:9E:07
            X509v3 Authority Key Identifier:
                keyid:C2:0B:1C:E4:6D:24:F9:B4:B4:1A:A6:CD:DD:9E:B9:6E:8B:23:C2:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:c2:c7:19:16:5a:4d:a2:fd:19:55:bf:7a:8d:22:88:c6:ea:
         93:eb:7a:a4:90:a0:13:0c:d0:03:ae:16:ca:33:86:eb:e3:e2:
         92:30:57:6a:01:32:79:50:55:87:83:dd:7c:d2:da:35:ac:96:
         a6:53:dd:7d:f1:b3:09:cf:00:77:fd:db:33:ea:31:a8:e8:be:
         cf:aa:05:c1:59:d5:d3:0f:7d:e7:41:34:71:20:e6:c7:b4:d0:
         23:4e:ad:1f:52:5a:db:9f:ce:c9:02:69:ae:58:0f:e8:fa:c5:
         8a:72:41:40:6a:6e:ee:bf:cf:09:28:fc:2f:08:2f:b0:a1:4d:
         80:f6:3e:44:74:ce:bb:a5:e7:60:97:86:8b:6c:22:c4:0d:9f:
         dc:ab:e0:7b:9c:87:e0:48:ba:80:67:f0:91:d1:a3:c8:ba:17:
         64:0f:f9:25:00:74:33:7c:bd:5b:6b:d4:21:91:96:8e:5d:88:
         a4:6a:21:a0:81:6b:c5:63:f7:f5:40:af:ef:dd:0c:ab:4e:af:
         4f:10:51:44:88:8a:c4:3c:46:ca:b1:3b:54:00:1c:11:1f:0d:
         2f:29:74:18:84:34:3f:e6:ef:b6:36:78:e2:b5:c1:2d:81:7f:
         34:3a:f7:e8:8b:90:74:36:fc:a9:d9:01:f6:5c:d4:24:75:44:
         4e:2c:38:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----