Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/3FA213F071F512993E71744BA485B170F0449C83.mft
File:                     3FA213F071F512993E71744BA485B170F0449C83.mft (raw, json)
Hash identifier:          fHwfNGNjmMeAbrN9ASxFk6csmdM5jiKCyWjQHMOVkZ8=
Subject key identifier:   9F:B7:55:BE:9D:2D:AB:F7:5B:FE:0D:6E:3A:2B:B0:44:A6:88:88:01
Authority key identifier: 3F:A2:13:F0:71:F5:12:99:3E:71:74:4B:A4:85:B1:70:F0:44:9C:83
Certificate issuer:       /CN=3FA213F071F512993E71744BA485B170F0449C83
Certificate serial:       2698803238D91240A05D3549323B5AC7B5198EEC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FA213F071F512993E71744BA485B170F0449C83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/3FA213F071F512993E71744BA485B170F0449C83.mft
Manifest number:          AD
Signing time:             Fri 31 Jan 2025 08:28:48 +0000
Manifest this update:     Fri 31 Jan 2025 08:23:48 +0000
Manifest next update:     Tue 04 Feb 2025 08:43:48 +0000
Files and hashes:         1: 3FA213F071F512993E71744BA485B170F0449C83.crl (hash: 1nwkx03lIfV0pqJ3N0MkxGa1dUo2dd6ult8VUn78oi8=)
                          2: 323830313a31653a333030303a3a2f34382d3438203d3e20323637383933.roa (hash: Pz9dsNHjZlKSNtvIdMp8eaOrTRiy8H5Pt4aOF07j/Rg=)
                          3: 34352e36352e3230302e302f32342d3234203d3e20323637383933.roa (hash: g4cox8aUWsOXytqpXK92lZdjOrIfetlcLjjI+WviRQI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:98:80:32:38:d9:12:40:a0:5d:35:49:32:3b:5a:c7:b5:19:8e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FA213F071F512993E71744BA485B170F0449C83
        Validity
            Not Before: Jan 31 08:23:48 2025 GMT
            Not After : Feb  4 08:43:48 2025 GMT
        Subject: CN=9FB755BE9D2DABF75BFE0D6E3A2BB044A6888801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3c:98:c4:fb:cf:ca:e8:cb:26:6f:1c:03:d0:
                    af:bc:28:c0:f5:51:fa:29:7c:94:2a:47:d1:82:1a:
                    72:4e:f3:df:35:1f:c0:73:db:60:2e:c7:1f:68:4e:
                    76:e8:e1:44:07:61:68:c1:d3:e4:38:7a:46:90:af:
                    7d:e2:cd:96:86:dd:dc:33:64:a6:a2:a3:85:28:91:
                    79:30:ea:d4:a3:32:48:77:df:3e:68:7c:ca:c5:6d:
                    a7:2b:78:81:bb:20:1d:32:68:0b:55:f8:ca:76:e0:
                    bf:b4:33:a6:b9:ad:cc:f5:53:01:2d:98:cf:2c:f0:
                    99:82:9e:65:33:4a:79:ad:2d:46:77:56:84:00:6e:
                    d2:ec:26:fa:a3:00:b6:73:cc:a6:92:8b:03:9a:ad:
                    fe:a9:27:c7:2d:c1:1b:38:3e:9b:09:f7:6f:3e:d4:
                    2d:27:6a:b4:0e:6d:00:91:7a:aa:ba:4b:be:6a:0a:
                    4d:d2:2c:74:7c:2b:44:5c:f8:86:05:82:5d:38:b6:
                    21:8f:9d:ac:09:9e:b9:59:d5:f5:13:49:48:2e:f2:
                    86:da:1a:83:19:0a:22:f8:ee:c3:47:fe:c6:1d:a8:
                    6d:2e:b2:92:c0:57:66:82:6f:57:45:3f:1a:a8:e8:
                    3b:78:65:9e:08:e6:a2:6f:3d:d8:be:20:e6:b3:f9:
                    02:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B7:55:BE:9D:2D:AB:F7:5B:FE:0D:6E:3A:2B:B0:44:A6:88:88:01
            X509v3 Authority Key Identifier:
                keyid:3F:A2:13:F0:71:F5:12:99:3E:71:74:4B:A4:85:B1:70:F0:44:9C:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/3FA213F071F512993E71744BA485B170F0449C83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FA213F071F512993E71744BA485B170F0449C83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/3FA213F071F512993E71744BA485B170F0449C83.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:19:6b:73:d4:ec:66:7c:99:2a:57:03:59:b9:3e:6d:3a:7a:
         48:d3:30:65:f0:be:6b:f7:44:54:6c:b8:2f:84:8b:c6:3c:b5:
         f8:ab:23:1b:ca:5a:96:a4:66:c7:7e:11:cb:d4:ef:42:1e:44:
         2f:90:95:bf:43:1b:f1:22:df:86:f4:93:3f:20:ba:7c:ea:e3:
         66:80:a3:a9:10:e9:6e:53:88:60:e8:82:42:aa:9f:4f:cf:81:
         86:51:28:b3:e7:47:1d:7a:58:aa:42:58:f7:76:4e:b9:8b:f9:
         10:71:e4:80:8d:01:e2:7a:1b:a5:04:6c:a5:03:f0:bf:1c:94:
         3c:4a:0a:70:42:ce:37:a2:91:be:08:bf:89:33:28:f4:ec:99:
         be:a2:26:ff:be:da:cf:24:50:b4:06:17:5e:2c:9f:e8:97:48:
         16:7f:21:c7:1c:81:a6:54:e8:6c:67:58:56:fe:20:66:28:7d:
         81:17:b0:dd:dd:2e:4c:95:0a:4c:31:4f:72:6f:b9:1b:d4:39:
         1f:7d:5a:e3:7b:82:57:b9:3c:db:7e:d2:7a:62:1b:a3:b7:a8:
         fa:91:26:bb:3c:89:18:19:38:7b:3d:f4:7f:0e:e0:73:cf:e9:
         f7:e7:46:44:bb:1a:06:c4:1a:46:e4:e5:83:c0:c8:1c:6e:e2:
         7e:85:71:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----