Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F7AC10DF03D4997A115601963AA2A8D838C64B914027DAECEF7156C562CFD60/0/3637361DE43FA7164FAE0E4817E4450F8942C23D.mft
File:                     3637361DE43FA7164FAE0E4817E4450F8942C23D.mft (raw, json)
Hash identifier:          HSMVGH0tWsVEyr0/UNcafKg3dMhMxhr6sqj0pC6OduE=
Subject key identifier:   F4:C2:7A:8F:AB:19:7F:47:7F:99:A9:F0:A0:B1:F6:1B:5A:E9:52:64
Authority key identifier: 36:37:36:1D:E4:3F:A7:16:4F:AE:0E:48:17:E4:45:0F:89:42:C2:3D
Certificate issuer:       /CN=3637361DE43FA7164FAE0E4817E4450F8942C23D
Certificate serial:       5835AFEA30B65988BA3EC9E922021E483C425177
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3637361DE43FA7164FAE0E4817E4450F8942C23D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F7AC10DF03D4997A115601963AA2A8D838C64B914027DAECEF7156C562CFD60/0/3637361DE43FA7164FAE0E4817E4450F8942C23D.mft
Manifest number:          AD
Signing time:             Thu 30 Jan 2025 05:16:45 +0000
Manifest this update:     Thu 30 Jan 2025 05:11:45 +0000
Manifest next update:     Tue 04 Feb 2025 00:14:45 +0000
Files and hashes:         1: 323830333a353530303a3a2f33322d3430203d3e203532343331.roa (hash: 4VEuEoXJdAycoB3oOOXDmX4cOP8AbCUCh9hbpEa3hrs=)
                          2: 3138312e3131342e3232342e302f32312d3234203d3e203532343331.roa (hash: 80oHXzg4Pyj0O+p9hfHO3vYBnF1mqC7mbZLDV2/UIA8=)
                          3: 3637361DE43FA7164FAE0E4817E4450F8942C23D.crl (hash: V8Nz7QAgBoDTEzx343P8+ZyexktNQbeW1NY/L7hSgB4=)
                          4: 3133382e3131382e34382e302f32322d3234203d3e203532343331.roa (hash: ChJhaq0WwXgnzx3T23oFnhgkCuZuDc6/t/GlNnfRGGs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:35:af:ea:30:b6:59:88:ba:3e:c9:e9:22:02:1e:48:3c:42:51:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3637361DE43FA7164FAE0E4817E4450F8942C23D
        Validity
            Not Before: Jan 30 05:11:45 2025 GMT
            Not After : Feb  4 00:14:45 2025 GMT
        Subject: CN=F4C27A8FAB197F477F99A9F0A0B1F61B5AE95264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6b:c1:c1:6a:b6:65:98:3f:8c:3d:77:e3:cb:
                    e2:0f:04:f9:1c:51:b2:20:a8:8d:e4:df:66:b4:32:
                    9c:57:ff:38:aa:0f:61:45:15:4f:e6:4a:93:a9:0b:
                    d6:71:f9:63:67:8e:1c:f0:21:c1:0a:2f:09:e3:92:
                    1d:b6:bd:c3:f1:4f:b9:c3:48:ad:a7:2d:f2:dd:db:
                    76:91:42:3e:85:06:71:4b:1c:63:cd:b2:a0:63:97:
                    18:41:ef:31:fe:16:43:84:52:15:43:c6:d0:44:33:
                    ac:e1:88:be:b1:64:5a:87:56:8d:18:9b:d4:95:b3:
                    11:1c:2b:06:95:45:16:e0:ec:db:aa:26:fc:95:c1:
                    4d:7c:34:96:4b:9d:32:1f:34:cc:4f:fb:8f:0e:35:
                    59:e9:58:d7:be:0c:82:6f:27:8d:71:3f:da:bc:85:
                    8d:35:67:a9:ed:21:0c:6f:6b:14:94:65:59:53:84:
                    75:f7:23:33:0a:2d:64:8f:b1:e3:36:da:07:36:c1:
                    68:de:c7:68:14:b8:be:de:f1:cc:d4:26:53:b6:6d:
                    f5:af:11:8c:57:5b:cc:eb:35:2e:c3:3c:20:a1:dc:
                    00:3f:b7:d6:38:bc:23:5d:00:bd:f7:99:37:d4:7f:
                    1c:43:45:d8:82:84:02:cc:7c:d1:44:da:25:57:e4:
                    2d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C2:7A:8F:AB:19:7F:47:7F:99:A9:F0:A0:B1:F6:1B:5A:E9:52:64
            X509v3 Authority Key Identifier:
                keyid:36:37:36:1D:E4:3F:A7:16:4F:AE:0E:48:17:E4:45:0F:89:42:C2:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F7AC10DF03D4997A115601963AA2A8D838C64B914027DAECEF7156C562CFD60/0/3637361DE43FA7164FAE0E4817E4450F8942C23D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3637361DE43FA7164FAE0E4817E4450F8942C23D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F7AC10DF03D4997A115601963AA2A8D838C64B914027DAECEF7156C562CFD60/0/3637361DE43FA7164FAE0E4817E4450F8942C23D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:e2:60:72:60:07:f7:44:5c:1e:9d:fc:4e:91:e7:0d:96:cb:
         b2:4e:7e:d3:95:30:e1:e8:35:3c:6b:ab:01:e9:57:c9:9f:e8:
         3a:b2:dd:65:96:d5:5a:01:01:0c:81:ae:3f:53:9e:72:4e:08:
         c3:47:17:d9:a2:61:eb:b4:f1:a2:3a:45:99:97:3b:3f:00:d2:
         5f:b9:5d:b3:20:9e:2c:c5:9f:81:c8:08:15:72:e5:84:5f:0f:
         91:0a:fe:b3:91:a6:cf:0e:4c:45:4f:1d:ff:5e:6b:fa:83:8a:
         b9:81:a4:24:72:e9:62:18:2f:60:df:89:2f:78:ca:f0:51:56:
         ad:e6:07:36:6d:3c:d5:84:6a:7c:fa:27:af:d5:be:4f:b4:8d:
         3d:b4:d0:cb:0c:b2:8f:cc:58:30:eb:ea:cc:87:0e:49:d3:4e:
         d9:b5:d9:4e:7e:a4:1e:bb:c6:3b:ee:57:68:6b:45:7f:a0:cc:
         95:6c:de:8e:37:01:11:3a:08:32:4b:a8:98:55:04:a5:12:32:
         db:d3:5f:c7:55:d5:08:76:65:60:e5:b9:04:2e:97:26:a3:fc:
         a2:7d:8a:32:de:8f:b7:f2:f4:9f:2e:53:c5:be:4c:e5:ca:85:
         88:1e:ba:c7:6a:86:2f:66:17:6f:9c:a3:c7:1c:d3:9b:e4:6e:
         48:43:e4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----