Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.mft
File:                     1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.mft (raw, json)
Hash identifier:          so08xlXIc6DmszO2C87CoRnowVp0QNddaaedC0vk/0Q=
Subject key identifier:   C4:7C:51:F4:5B:26:38:02:2E:63:D7:41:10:0C:C7:F2:6B:83:74:D0
Authority key identifier: 1C:EB:8F:E2:FD:B0:54:93:C8:86:0A:C2:CE:BC:2F:63:CF:00:CD:AA
Certificate issuer:       /CN=1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA
Certificate serial:       12925ADC4F9D9DBB137609C301911A9C1B13A097
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.mft
Manifest number:          AB
Signing time:             Thu 30 Jan 2025 18:19:49 +0000
Manifest this update:     Thu 30 Jan 2025 18:14:49 +0000
Manifest next update:     Tue 04 Feb 2025 04:16:49 +0000
Files and hashes:         1: 34352e3138352e3138372e302f32342d3234203d3e20323639383131.roa (hash: xrf8KzxfeKzNLkSW7VI4iqNCW3HCw6Ucoxs6gMvlses=)
                          2: 1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.crl (hash: 9FKsytvD0N26URINk+bDgEdAwqBanaJEA24Bd2yrmqM=)
                          3: 34352e3138352e3138362e302f32342d3234203d3e20323639383131.roa (hash: X6csYwohXl4Z/fF9RNwGBwirSDICkKHcgyw1oYA5mx0=)
                          4: 323830333a336236303a3a2f33322d3332203d3e20323639383131.roa (hash: GkCtKZ+uaIChc+kGzSCh8iyQ+CBc12+TF0tm018z03c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:92:5a:dc:4f:9d:9d:bb:13:76:09:c3:01:91:1a:9c:1b:13:a0:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA
        Validity
            Not Before: Jan 30 18:14:49 2025 GMT
            Not After : Feb  4 04:16:49 2025 GMT
        Subject: CN=C47C51F45B2638022E63D741100CC7F26B8374D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:57:07:1d:62:57:6a:4a:da:8a:fb:73:fa:ac:
                    84:9d:e7:bc:81:18:26:7a:a9:d5:3e:46:7d:8e:55:
                    3a:6c:16:17:b6:c5:fe:71:2a:56:3f:a4:c3:bc:1e:
                    24:d7:e3:a7:dd:4f:b0:f1:ac:f5:bf:b2:40:3a:9a:
                    b5:96:60:87:a9:f9:4d:7c:c5:22:ae:02:35:a5:e3:
                    82:d7:5b:38:d0:a4:83:37:64:27:19:77:15:54:62:
                    bb:75:5a:89:a4:c0:8b:a5:44:66:b1:df:1d:48:09:
                    b5:4c:15:7e:ce:6b:c8:12:ff:85:22:8c:53:79:2e:
                    3e:70:1c:4f:78:0e:7e:56:67:4c:13:36:9d:a9:f5:
                    df:48:e5:ca:2b:ea:a7:6f:d6:f9:00:a9:b7:27:a0:
                    24:4e:0a:20:8e:63:5a:da:a8:58:f6:83:dd:0a:5a:
                    42:7d:b3:55:ff:ff:d5:bf:38:51:0d:60:f2:a4:45:
                    93:87:45:d3:e7:6d:74:a8:83:18:7f:08:db:08:84:
                    ec:d7:df:61:98:d7:75:0e:e5:63:05:75:5a:8f:7c:
                    a4:49:fb:90:a9:7c:1f:f8:63:6d:f3:14:ef:ed:ab:
                    38:8b:c3:07:fe:9c:0c:c1:d3:23:ae:5c:d0:43:eb:
                    e3:43:f2:35:69:0a:b7:22:a3:67:ee:9e:b2:37:76:
                    47:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:7C:51:F4:5B:26:38:02:2E:63:D7:41:10:0C:C7:F2:6B:83:74:D0
            X509v3 Authority Key Identifier:
                keyid:1C:EB:8F:E2:FD:B0:54:93:C8:86:0A:C2:CE:BC:2F:63:CF:00:CD:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:b2:2b:1d:a5:a2:42:57:c8:d9:92:e9:20:d3:4c:ce:7b:0e:
         30:6a:73:f0:35:61:22:f4:ad:64:28:d6:dd:c7:b4:39:42:56:
         fb:4b:f3:c3:f8:b7:7f:67:fa:98:3b:25:4a:36:50:f8:1d:99:
         57:cf:b5:91:fe:9d:2b:e3:cc:bd:97:75:ca:56:12:e6:39:66:
         d8:1a:76:48:1c:bf:3b:4b:a7:da:b0:a4:80:fa:41:d9:d7:04:
         ab:21:77:33:4b:29:a6:da:f2:ee:4e:fb:a4:47:1c:0f:53:4e:
         fc:ce:02:10:31:94:87:8e:80:37:71:f6:22:4b:cb:09:7f:fc:
         cc:07:ba:fa:b1:c1:5b:47:ff:c6:5d:55:26:db:b1:a1:11:af:
         2b:26:54:7a:df:db:eb:58:7c:98:2e:68:19:f5:6e:35:e3:20:
         8c:ea:47:1e:a0:89:6f:6e:7f:e1:71:1e:c5:fc:05:c5:fc:49:
         a2:36:52:62:bf:ea:6d:55:97:e5:ca:b2:84:f4:8e:c1:f1:41:
         00:ed:96:17:fd:4e:26:c5:03:c0:ae:8e:b6:2c:f1:5e:d8:10:
         65:00:4d:86:50:1b:dd:6e:1f:4d:76:bc:c0:45:40:7c:29:2f:
         f4:17:f9:de:c8:8b:0f:f4:28:89:e3:44:5f:11:b1:b9:2b:92:
         39:a6:90:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----