Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.mft
File:                     097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.mft (raw, json)
Hash identifier:          KqY32SZxNyp1/2TBDkqCH6BO18yX/mWtTcpcgOoB5Z4=
Subject key identifier:   75:F0:CF:45:B3:34:67:90:3A:F5:86:FF:DD:1C:ED:D6:B3:B0:4D:3F
Authority key identifier: 09:7F:C8:1A:5E:A4:9A:88:FF:4B:BF:23:8B:0B:99:88:6A:82:A6:A4
Certificate issuer:       /CN=097FC81A5EA49A88FF4BBF238B0B99886A82A6A4
Certificate serial:       7F61AEB18F009C0689F2B2394414E5E9AC38AF0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.mft
Manifest number:          AA
Signing time:             Wed 29 Jan 2025 12:16:17 +0000
Manifest this update:     Wed 29 Jan 2025 12:11:17 +0000
Manifest next update:     Tue 04 Feb 2025 07:40:17 +0000
Files and hashes:         1: 34352e3136372e3135362e302f32342d3234203d3e20323633313537.roa (hash: wHOZ+MtELKt/cGo8RUu1nZGaZ2BNS4AM/B2jDWgNA9Y=)
                          2: 34352e3136372e3135382e302f32342d3234203d3e20323633313537.roa (hash: 3un30dI3HzTJMUgmIyGdI0pBaNPdVomHuMofsErhAyQ=)
                          3: 097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.crl (hash: PH3mElvaPTTh0ViCyjuTbtoONTbsuSGltEWS7Vs091U=)
                          4: 34352e3136372e3135392e302f32342d3234203d3e20323633313537.roa (hash: BDPRewBEC5xPaPqTfP9YHqmmvoWd3HW+Na/qF0IWssU=)
                          5: 34352e3136372e3135372e302f32342d3234203d3e20323633313537.roa (hash: MCtwtRcWGR4jYTuxTCpcg76WIgDqSRfubtq+PFAep8I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:61:ae:b1:8f:00:9c:06:89:f2:b2:39:44:14:e5:e9:ac:38:af:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097FC81A5EA49A88FF4BBF238B0B99886A82A6A4
        Validity
            Not Before: Jan 29 12:11:17 2025 GMT
            Not After : Feb  4 07:40:17 2025 GMT
        Subject: CN=75F0CF45B33467903AF586FFDD1CEDD6B3B04D3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:30:0a:e9:4f:18:eb:7e:b4:f0:70:7b:14:0a:
                    04:c5:f6:91:e9:e7:b0:70:b3:96:b9:c4:c6:1a:7c:
                    e9:7a:72:5a:b9:f6:7c:0b:77:84:75:84:f6:af:b5:
                    d1:31:ee:3b:f5:41:8c:72:0d:47:11:68:73:e6:d5:
                    b1:bf:35:09:65:53:8d:63:71:96:04:f5:2c:e9:64:
                    9c:27:88:0f:30:e2:be:25:2d:2b:f0:c5:ec:b5:5b:
                    42:27:75:77:46:49:16:0d:7d:80:23:fd:23:d7:0f:
                    7b:be:38:02:56:fe:db:d1:ce:a2:f9:7b:29:65:93:
                    e7:dc:2f:e5:b3:aa:c3:31:52:ce:3f:a7:c2:b1:6b:
                    e1:9b:f1:6d:4a:c2:fb:1f:f0:84:f8:ac:1e:18:49:
                    08:5f:e5:75:df:c8:3f:5f:e3:5c:c3:1a:32:61:12:
                    f1:e4:91:f0:b3:20:32:c3:80:01:48:86:72:63:61:
                    b9:c8:39:ac:e4:62:c0:e8:1d:99:b6:45:1a:e4:31:
                    27:8c:30:d3:f0:a2:99:23:0d:f1:72:61:8f:a2:e1:
                    07:16:ba:ac:34:65:4a:ec:42:0d:c0:d8:37:72:f5:
                    02:df:53:dd:58:4c:2c:0c:fb:93:a3:4e:ac:0c:da:
                    de:98:62:7e:2a:9d:1e:35:f9:1d:9c:81:6b:a6:eb:
                    2d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F0:CF:45:B3:34:67:90:3A:F5:86:FF:DD:1C:ED:D6:B3:B0:4D:3F
            X509v3 Authority Key Identifier:
                keyid:09:7F:C8:1A:5E:A4:9A:88:FF:4B:BF:23:8B:0B:99:88:6A:82:A6:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:50:23:f2:70:1e:10:7b:62:5e:17:6b:bd:8f:d8:4d:81:da:
         23:2d:6d:53:db:12:2c:40:aa:19:dd:26:b4:f3:f1:06:d4:c3:
         5d:fc:0f:18:a1:a7:92:de:93:90:8d:84:38:dd:42:40:46:f5:
         09:b7:31:e9:9f:88:99:af:fe:f6:0f:49:f2:c4:be:24:40:67:
         5a:0d:c0:e9:ff:df:e3:67:42:1c:37:1d:fd:57:39:9a:db:11:
         c9:6f:f2:1c:7a:32:d4:ee:b7:24:2a:28:28:0a:3d:07:91:e5:
         20:94:84:71:17:5c:20:01:a8:0a:2d:2a:80:f0:b1:9d:b4:0f:
         79:bc:c5:65:bb:23:41:91:90:41:d2:23:a7:98:dd:70:c8:c2:
         d5:13:12:3e:0b:ca:df:bc:ef:79:ba:e9:58:bb:01:75:dd:ef:
         0e:6b:3e:78:47:35:4d:14:3a:df:d0:a5:43:2b:a2:d1:0f:dd:
         bd:8d:0d:d5:07:0c:98:fa:ef:bd:48:78:91:61:a1:38:0d:7e:
         16:75:66:91:bd:6a:68:b9:e3:07:3d:9b:6c:6c:78:4c:8d:e3:
         2c:91:c1:ba:da:d7:52:09:16:e1:4a:57:29:0c:82:b8:9d:9e:
         5b:00:54:dd:34:af:05:51:92:b0:60:38:5f:b9:a7:4b:28:0c:
         87:79:b9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----