Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.mft
File:                     D8F89B0675EFF23A256029EC78234AE7B97F6B52.mft (raw, json)
Hash identifier:          ZN/VZO6FPK93BFg1s0KkUlCu9o2+i6P6f1n6u+FMCK8=
Subject key identifier:   60:16:72:35:43:B9:71:CA:86:2A:7B:03:EC:28:CA:10:79:9F:C9:79
Authority key identifier: D8:F8:9B:06:75:EF:F2:3A:25:60:29:EC:78:23:4A:E7:B9:7F:6B:52
Certificate issuer:       /CN=D8F89B0675EFF23A256029EC78234AE7B97F6B52
Certificate serial:       213EC977B6008C2A76180B3FF8AE881C6268A0AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.mft
Manifest number:          A0
Signing time:             Wed 29 Jan 2025 19:20:51 +0000
Manifest this update:     Wed 29 Jan 2025 19:15:51 +0000
Manifest next update:     Tue 04 Feb 2025 05:57:51 +0000
Files and hashes:         1: D8F89B0675EFF23A256029EC78234AE7B97F6B52.crl (hash: 3dYEAbsFiE1+YR0CzHqwEcMnvkMbYL6amyWOdt8qcEc=)
                          2: 34352e3137332e3138322e302f32332d3234203d3e20323637383237.roa (hash: zSQwfZiHJjoOmMLIcvOP6pVhp4/fOsddcUupsAefuv4=)
                          3: 34352e3137332e3138312e302f32342d3234203d3e20323637383237.roa (hash: 7QfMuYufeQ34IKoziK3QLDfrrj9Mcwhkw1/rSHbmHSk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:3e:c9:77:b6:00:8c:2a:76:18:0b:3f:f8:ae:88:1c:62:68:a0:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8F89B0675EFF23A256029EC78234AE7B97F6B52
        Validity
            Not Before: Jan 29 19:15:51 2025 GMT
            Not After : Feb  4 05:57:51 2025 GMT
        Subject: CN=6016723543B971CA862A7B03EC28CA10799FC979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f9:c0:8c:db:f2:36:f9:eb:54:1f:90:1d:85:
                    b0:13:66:8e:ce:30:8b:3b:ee:59:6a:ab:9b:14:a0:
                    21:fa:33:d3:b5:0c:6d:94:88:19:1d:5a:b5:4f:5c:
                    4b:67:2e:51:49:d8:ce:10:7e:eb:75:78:53:b3:72:
                    f1:79:29:c3:38:12:2a:58:35:f7:7d:7d:bf:34:76:
                    ca:8d:6f:39:61:ac:75:4f:9c:3b:be:b5:b4:c5:cc:
                    b8:c1:c9:f1:ed:4d:cc:65:97:4a:e5:5c:df:b9:8a:
                    a2:54:e4:58:a6:eb:1d:2b:69:34:22:e8:b5:59:27:
                    89:28:70:fa:74:e5:07:70:e2:e5:1b:22:9a:83:b3:
                    4b:f4:12:82:2c:f4:ce:50:97:df:de:bf:68:82:ae:
                    cd:16:fb:e1:98:ca:3b:af:d5:df:b5:6a:f9:2c:ff:
                    3d:66:49:2d:5e:96:94:15:07:34:f2:ae:00:a4:17:
                    93:15:f2:74:ca:01:f4:1a:30:88:cf:c5:60:6d:ec:
                    1c:ae:65:8c:fe:e3:84:ee:7b:01:6a:6b:f3:c7:19:
                    e9:b7:1b:2d:1a:00:66:90:11:b1:be:aa:58:e3:2d:
                    73:6f:f2:55:10:cf:f3:39:9a:ea:ec:a7:e5:0e:ce:
                    02:da:6e:20:95:3e:b2:6b:06:96:27:23:17:40:7f:
                    28:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:16:72:35:43:B9:71:CA:86:2A:7B:03:EC:28:CA:10:79:9F:C9:79
            X509v3 Authority Key Identifier:
                keyid:D8:F8:9B:06:75:EF:F2:3A:25:60:29:EC:78:23:4A:E7:B9:7F:6B:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:5f:98:eb:d8:ac:6c:17:0d:7a:42:a2:31:a2:c3:95:78:1d:
         f9:bd:34:a5:bc:07:0d:93:ab:6d:32:86:8d:29:a6:a4:cf:c8:
         1b:a6:88:46:6d:ce:d4:14:e1:7f:f1:db:47:d8:ef:a3:6d:4d:
         f9:34:9f:24:8f:61:f9:02:69:88:3e:dc:56:95:11:a4:f3:23:
         72:bf:59:c1:43:fa:92:87:56:1f:b8:85:69:fa:1d:8e:53:94:
         76:2b:cb:d4:1a:f7:d3:85:c2:99:1f:6a:b8:ba:a4:04:93:6c:
         84:aa:de:68:57:f8:70:e2:17:a9:5f:ca:f5:2d:65:d0:fe:f1:
         bf:43:e3:05:b1:a6:a0:03:3e:f0:d8:9f:f9:48:25:d4:73:2d:
         27:de:35:80:38:c9:8a:88:aa:d2:fc:f8:35:ac:70:50:9c:e1:
         1e:cb:a5:3c:17:3c:5e:e1:65:12:aa:6e:35:0e:8e:36:7e:3d:
         77:0b:5c:93:b1:08:58:8e:07:d9:9c:0d:67:bb:89:54:d9:b9:
         d0:c9:51:17:66:db:9c:f0:eb:48:d2:18:0b:0f:65:89:a2:23:
         b1:72:59:17:e9:ee:ea:98:a1:d6:e7:e4:ee:a3:3d:6f:b1:44:
         98:04:62:8e:e2:cd:a1:6d:b0:04:67:14:5e:e4:ee:a6:35:93:
         e7:87:7b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----