Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.mft
File:                     64989D03F141E6B4840F299AD2E229F9A3F6DD77.mft (raw, json)
Hash identifier:          rXL5BOVdqQ3lGkSpRib5HfEdqGo8nZ74r+WbDlfhiAs=
Subject key identifier:   49:90:12:D7:AD:85:03:35:82:AE:BE:B9:27:FF:02:1A:40:45:0C:12
Authority key identifier: 64:98:9D:03:F1:41:E6:B4:84:0F:29:9A:D2:E2:29:F9:A3:F6:DD:77
Certificate issuer:       /CN=64989D03F141E6B4840F299AD2E229F9A3F6DD77
Certificate serial:       4EFECC64744689BA608ACFFFC022EC4E5A761B3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.mft
Manifest number:          A3
Signing time:             Thu 30 Jan 2025 10:55:10 +0000
Manifest this update:     Thu 30 Jan 2025 10:50:10 +0000
Manifest next update:     Tue 04 Feb 2025 12:40:10 +0000
Files and hashes:         1: 323830333a356665303a3a2f33322d3438203d3e20323731373835.roa (hash: awAFXQ6PauPetkPA3vlzaKzvEp8tmjA/VBg9RKVxWjY=)
                          2: 3137372e3138342e39322e302f32322d3234203d3e20323731373835.roa (hash: ACdlQLvlBs+SnKbP3XHKXOjUaOl+MN+v4K6jH93tfYM=)
                          3: 64989D03F141E6B4840F299AD2E229F9A3F6DD77.crl (hash: CsMCDz4yQqnYCOB4K/QG0UBJiuTmEUsEGdiEd0CZygU=)
                          4: 3137372e3138342e39322e302f32322d3234203d3e20323733383737.roa (hash: NXsPNdkcoqi1SGpwphF5H+/bJCHNC/3VBv1ROHlREyU=)
                          5: 323830333a356665303a3a2f33322d3438203d3e20323733383737.roa (hash: XsltQJybUqUs2MONdtEHkjgGgJVdXnhc7SWgjzBucHE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:fe:cc:64:74:46:89:ba:60:8a:cf:ff:c0:22:ec:4e:5a:76:1b:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64989D03F141E6B4840F299AD2E229F9A3F6DD77
        Validity
            Not Before: Jan 30 10:50:10 2025 GMT
            Not After : Feb  4 12:40:10 2025 GMT
        Subject: CN=499012D7AD85033582AEBEB927FF021A40450C12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8c:a6:f4:c0:06:02:c8:58:dc:91:51:7c:77:
                    f3:d6:ab:d5:36:9d:71:13:3a:74:9c:8c:6a:c0:0d:
                    19:d4:7f:6b:7e:50:06:e2:ca:ed:5d:bd:7d:b3:2e:
                    e2:56:d3:6d:4b:e6:d6:5c:ec:71:94:14:90:38:db:
                    f7:88:93:c2:85:95:bf:15:78:ef:c4:ac:2d:d1:b1:
                    f0:bd:6b:37:ca:52:b2:d8:30:90:5e:5b:1a:98:d4:
                    f9:31:5f:87:07:00:8d:87:83:fb:52:cb:ca:3d:7f:
                    63:d6:f6:f1:c7:61:f0:f1:62:b4:ab:b0:9c:1a:ec:
                    8f:0c:63:4e:2c:e0:b4:3c:b5:bc:c0:ba:06:eb:18:
                    59:30:f2:a9:2c:4b:c0:67:21:c9:55:f0:15:6f:6f:
                    9f:9f:6c:aa:d2:45:71:9b:da:18:93:f9:0a:6a:4e:
                    6d:d4:18:89:5a:bf:2a:15:0a:c4:1d:6c:45:fc:e5:
                    f6:ff:f7:dc:01:29:66:d4:a8:62:d7:19:27:50:58:
                    3b:fc:05:36:97:d1:1d:f4:d3:3d:c9:74:c4:f7:d0:
                    4d:9e:ea:2e:48:26:ef:3c:d7:21:3d:6b:c1:dc:ad:
                    0d:80:9c:5e:5d:21:e5:8c:65:19:fb:0a:6e:ee:d8:
                    04:e4:0c:28:37:54:c6:64:89:bb:91:1e:7f:61:1d:
                    ad:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:90:12:D7:AD:85:03:35:82:AE:BE:B9:27:FF:02:1A:40:45:0C:12
            X509v3 Authority Key Identifier:
                keyid:64:98:9D:03:F1:41:E6:B4:84:0F:29:9A:D2:E2:29:F9:A3:F6:DD:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:e6:25:f6:86:96:b3:30:e5:9d:fa:f3:d6:09:eb:c7:62:74:
         25:31:6f:62:ab:58:5f:5e:2c:70:99:91:2d:56:5e:be:d2:13:
         08:32:8d:ae:9e:6f:2d:96:de:b8:e2:9c:4d:b4:19:52:4b:ee:
         50:6b:7d:7b:54:41:5d:3b:ca:3d:2d:93:0d:32:3a:a4:58:3e:
         3a:35:fc:7f:b2:f9:f8:4d:07:31:a1:ec:9e:db:bc:db:3a:50:
         1e:ea:d6:95:7d:f6:3b:bb:e3:a6:2f:4e:b5:5f:3d:78:9c:ba:
         5b:b3:be:c0:a4:01:03:d1:02:d0:56:a5:1e:9f:f9:38:ae:d8:
         61:b9:e4:5e:47:b2:72:6c:03:25:07:e1:41:01:57:e9:45:a4:
         b3:0d:8f:f0:01:af:7a:af:a9:ad:2b:55:80:94:15:ab:d7:fa:
         49:bb:02:4e:60:66:33:f5:e6:0e:57:ae:e9:bd:86:ec:de:b9:
         16:1c:9d:13:21:81:95:b7:0a:c2:98:80:6c:8a:34:8a:f0:02:
         27:3e:94:75:b0:36:c5:b2:4b:d8:60:64:39:e3:23:e4:3f:48:
         31:26:c7:11:bc:e3:95:5f:de:7e:ca:7c:df:f8:30:f2:33:f5:
         24:0d:fb:4b:af:d4:0c:96:8d:54:0f:50:00:85:69:75:8e:62:
         49:91:f2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----