Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.mft
File:                     3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.mft (raw, json)
Hash identifier:          70gSZ4E+rWdGWF4TOe5XSTGnBAWBdTDzW5Cy8G77MGc=
Subject key identifier:   D7:AB:49:F5:96:B1:78:68:E5:0B:98:78:43:89:D1:6A:26:00:37:0A
Authority key identifier: 3A:82:50:F8:B4:61:7B:7D:F9:7D:5F:42:0D:32:F9:DF:DD:EE:82:EB
Certificate issuer:       /CN=3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB
Certificate serial:       3706B12472E7839740D571D0B85C0CCBEA21ABD3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.mft
Manifest number:          AB
Signing time:             Fri 31 Jan 2025 06:52:48 +0000
Manifest this update:     Fri 31 Jan 2025 06:47:48 +0000
Manifest next update:     Thu 06 Feb 2025 02:52:48 +0000
Files and hashes:         1: 3133382e3235352e3135322e302f32322d3234203d3e203237393033.roa (hash: loaVCNcCVlTJNKeKt5L3Bd432J24+sOiybytD8O9MU4=)
                          2: 3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.crl (hash: omCChRdrhCMzKhD5VPPtIcVo9nbDzQvcHKIIfzPbf7w=)
                          3: 323830333a666134303a3a2f33322d3438203d3e203237393033.roa (hash: dZ+huNV4m+SXIb+Uuml9yvNV1BaJI3zouFedvWmiuKw=)
                          4: 3230302e38392e38302e302f32312d3234203d3e203237393033.roa (hash: KFkN2KSPubsxpVXLVrL+NGIo3Tz5HW+AhnTRpkGz2FM=)
                          5: 3137302e302e3137362e302f32322d3234203d3e203237393033.roa (hash: KVDQmtAGzXoH0M9cCeOMQK9yVAk/+10IkKG7soAb4rk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:06:b1:24:72:e7:83:97:40:d5:71:d0:b8:5c:0c:cb:ea:21:ab:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB
        Validity
            Not Before: Jan 31 06:47:48 2025 GMT
            Not After : Feb  6 02:52:48 2025 GMT
        Subject: CN=D7AB49F596B17868E50B98784389D16A2600370A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d1:b5:5e:e8:83:99:bf:63:18:e9:ab:60:ed:
                    33:da:8b:3a:28:47:d9:e8:b9:fe:15:d8:c5:fb:2f:
                    6f:f3:14:da:43:8b:7d:e6:61:b9:dc:47:ad:d9:e7:
                    ea:f6:53:83:d9:fd:cb:d1:8e:0c:9d:d0:34:a3:be:
                    e1:b8:83:68:61:87:06:b9:1e:30:49:8f:f6:ef:4b:
                    ba:72:d0:6d:a2:43:fe:2a:59:4e:9e:3a:a6:6c:58:
                    70:b7:05:b0:be:d9:75:a0:0d:d4:cd:a9:f4:5f:55:
                    5f:00:41:e1:a2:9c:14:0f:5a:02:f0:f5:59:82:09:
                    ac:92:07:1f:cf:db:f5:37:64:c4:b8:fd:30:ba:27:
                    10:96:bf:d4:75:f8:57:d7:8f:ff:9b:b1:33:bc:38:
                    08:34:59:90:9a:f5:83:ba:5c:a7:20:f7:29:b0:e7:
                    b4:58:b9:f3:40:1f:cd:2c:6d:0b:a1:96:57:8c:2d:
                    a8:23:3f:c9:13:b0:d6:39:8c:08:3d:c5:97:6b:19:
                    42:13:00:f4:44:15:e5:b4:02:8a:ee:85:1c:cb:4e:
                    eb:70:f3:89:0f:5a:9d:b1:9a:80:6d:05:ac:d3:12:
                    84:79:93:35:ea:6d:83:7b:3a:ae:fc:cb:71:d2:30:
                    fd:1b:ef:83:41:09:20:99:8a:6d:99:af:60:29:4b:
                    7e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:AB:49:F5:96:B1:78:68:E5:0B:98:78:43:89:D1:6A:26:00:37:0A
            X509v3 Authority Key Identifier:
                keyid:3A:82:50:F8:B4:61:7B:7D:F9:7D:5F:42:0D:32:F9:DF:DD:EE:82:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:db:f5:bb:7f:c5:d5:44:32:94:51:1c:2b:57:b1:8c:41:fd:
         43:0e:94:02:b4:1b:b7:8a:bf:79:94:b0:43:70:75:ec:16:b1:
         cc:f7:e9:54:88:2c:d6:f1:39:2d:8c:eb:5e:99:b5:5b:e9:e3:
         09:b9:92:ac:4c:34:6f:77:d9:b2:d0:6f:ba:02:93:71:1a:6d:
         95:41:44:3b:49:3b:4f:3f:8a:47:5c:18:4e:56:0f:af:7f:15:
         7e:90:1e:30:5e:68:d5:1a:9b:4b:a1:a1:26:ce:7a:96:18:85:
         93:7f:01:0b:35:9b:7d:29:fe:e5:55:03:a8:04:6b:80:c3:ba:
         48:f9:9e:64:c2:8d:45:56:9a:03:c9:dd:6d:8f:ff:71:85:0f:
         18:92:4e:d5:57:96:3e:ec:27:44:40:07:4f:56:9d:47:9e:32:
         76:b5:38:c3:cb:ee:27:44:d6:1d:c8:10:8c:21:85:01:57:e4:
         2b:f6:0f:39:f2:5b:83:ee:33:f4:5a:56:dd:26:f8:d4:17:b7:
         bf:d8:c7:3b:57:86:40:e9:5a:1b:8a:18:49:31:bb:4e:58:1a:
         9a:09:c4:f6:9c:54:a4:50:05:a7:dc:e6:1d:a9:d7:47:eb:f4:
         c4:b9:1a:c6:40:62:61:ac:80:57:31:d0:cd:d3:a8:6c:6a:03:
         22:ea:82:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----