Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.mft
File:                     88F33C2FEA58249E83B8947F7C6DED538B91B18B.mft (raw, json)
Hash identifier:          VVb+VfAWTvQEWp+yfiME9BgSg2CVuM+P8d06szytGow=
Subject key identifier:   CB:D3:98:AF:43:B1:7B:F5:39:3A:92:5B:1A:6D:A1:FA:27:B2:D9:7C
Authority key identifier: 88:F3:3C:2F:EA:58:24:9E:83:B8:94:7F:7C:6D:ED:53:8B:91:B1:8B
Certificate issuer:       /CN=88F33C2FEA58249E83B8947F7C6DED538B91B18B
Certificate serial:       6B0DD669399608134DB902F87DA68FB7A2930AF8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.mft
Manifest number:          70
Signing time:             Fri 31 Jan 2025 10:19:50 +0000
Manifest this update:     Fri 31 Jan 2025 10:14:50 +0000
Manifest next update:     Tue 04 Feb 2025 22:48:50 +0000
Files and hashes:         1: 323030313a313230373a663030303a3a2f33362d3336203d3e203238343539.roa (hash: pTNGbvG9dgqnBl9QM0lbNI4uZp33HQ4fCicHEcZnMpw=)
                          2: 323030313a313230373a666663303a3a2f34322d3432203d3e203238343539.roa (hash: bWpzCzGFG3MCjHoaZPCHKSsMAk5/RiTA5NFFbVzJA5c=)
                          3: 88F33C2FEA58249E83B8947F7C6DED538B91B18B.crl (hash: J8h+U8QVlMEOhCIVriV4ZEICk/m32nfIRPpk2D2ZsRc=)
                          4: 323030313a313230373a653030303a3a2f33362d3336203d3e203238343539.roa (hash: utD0u/0DoPeYeQcuTsR28L1M0fibajbuda2a8o99gjI=)
                          5: 323030313a313230373a666638303a3a2f34322d3432203d3e203238343539.roa (hash: UyyUtd1aMh7qyyk2B9p59R2l5G1j0Afi56dWEzTfJqY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:0d:d6:69:39:96:08:13:4d:b9:02:f8:7d:a6:8f:b7:a2:93:0a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88F33C2FEA58249E83B8947F7C6DED538B91B18B
        Validity
            Not Before: Jan 31 10:14:50 2025 GMT
            Not After : Feb  4 22:48:50 2025 GMT
        Subject: CN=CBD398AF43B17BF5393A925B1A6DA1FA27B2D97C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fd:8f:a6:e7:b6:ff:ea:c0:7f:05:45:a3:91:
                    01:1a:79:13:e5:9c:47:15:44:57:80:f4:0b:14:04:
                    fb:99:e7:96:af:80:4f:c9:47:5d:0f:c1:1d:8f:3c:
                    71:40:c5:6b:24:5b:2c:4d:a8:11:c2:54:b5:6c:4f:
                    02:0d:b4:c9:7c:20:b0:66:0d:8d:b2:0f:ef:ff:d7:
                    87:ec:c8:09:ee:32:76:74:56:7e:5b:84:fe:c3:b0:
                    e8:18:f0:d5:53:cb:cd:b2:b8:e1:08:d7:01:2e:38:
                    db:93:1e:f3:21:75:0f:c3:24:6e:38:d9:ae:dc:40:
                    ca:c9:ba:8f:40:f8:b4:00:52:07:f6:e4:93:c6:5d:
                    d3:76:d8:55:03:7d:40:87:ca:eb:90:04:09:03:7c:
                    c0:3a:6b:6d:8e:f1:db:17:30:16:a2:67:d7:f4:30:
                    7b:af:f2:71:b2:f8:fa:0e:64:aa:b9:8a:4f:a5:f1:
                    cc:10:fc:f4:35:d0:6d:54:34:c2:33:b7:e4:c6:26:
                    7f:0f:5b:c8:ad:8c:8b:02:74:fa:e8:ac:29:6e:65:
                    c7:e5:0c:7b:39:04:96:2c:77:92:0e:50:1a:9e:dc:
                    ce:83:39:41:93:d1:66:bf:03:4a:49:3b:9b:af:25:
                    e2:aa:5c:8f:f8:c6:76:64:2e:04:d9:41:8f:9e:92:
                    98:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D3:98:AF:43:B1:7B:F5:39:3A:92:5B:1A:6D:A1:FA:27:B2:D9:7C
            X509v3 Authority Key Identifier:
                keyid:88:F3:3C:2F:EA:58:24:9E:83:B8:94:7F:7C:6D:ED:53:8B:91:B1:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3355ECD6AC1B0A9AAC52A56AD0AF34B4536C2AC7FAD525C02EF230341BC06AE/0/88F33C2FEA58249E83B8947F7C6DED538B91B18B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:43:73:a5:0d:1c:e4:92:c3:fd:ca:f4:20:3f:04:c4:c6:65:
         e0:dd:5a:69:e7:e2:73:7d:6c:da:b3:53:d5:90:19:60:f8:31:
         06:73:ad:55:d0:14:b6:34:b7:ff:e3:28:25:cb:b1:60:86:62:
         cd:4a:b0:7d:6a:d6:ca:3a:63:61:45:c0:ef:99:92:c1:0f:7a:
         86:53:c4:c7:4f:ff:54:ad:72:58:d2:d7:a1:f5:8e:b0:67:8c:
         ce:b8:b6:12:8b:45:7e:af:bd:16:c8:7c:f6:77:f4:fe:c6:4c:
         4c:1f:a6:6b:fc:d9:ad:70:1a:c2:62:51:04:5d:0e:41:58:86:
         a8:68:18:54:cf:1e:c2:94:be:4c:af:93:79:bc:17:3a:58:a8:
         15:ae:56:4a:66:c6:cc:2a:a7:e0:d6:9e:cc:94:55:d2:17:a0:
         27:0e:8d:bb:de:c0:af:ca:46:90:ac:38:81:61:9e:68:54:80:
         15:bd:ac:56:0d:51:b6:f8:2e:cd:c3:79:39:19:57:02:ae:23:
         18:3b:92:ee:f0:4d:24:c0:e2:85:d6:c5:48:03:0f:21:30:59:
         fa:d5:f1:f8:d9:8f:a7:f3:41:64:45:e8:4c:9d:68:ae:c3:fe:
         55:2f:9b:38:6e:23:c8:6c:c8:56:90:76:ba:ac:e5:8a:8c:0e:
         8c:15:a7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----