Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C154DC6889E51919AF7524A66F2383AC7C10E6499A785A24B6654105CF04A223/0/1CF3A7C8B869FEDE23D6DD16E8DA1FB80C686C7D.mft
File:                     1CF3A7C8B869FEDE23D6DD16E8DA1FB80C686C7D.mft (raw, json)
Hash identifier:          iWakIbSa9Nu3Pl6UdYGo+ulx7NzWeOjVhuE3K6DTz0o=
Subject key identifier:   29:2D:5D:60:69:CC:48:45:81:8F:D0:05:97:90:31:95:BC:D8:E3:9F
Authority key identifier: 1C:F3:A7:C8:B8:69:FE:DE:23:D6:DD:16:E8:DA:1F:B8:0C:68:6C:7D
Certificate issuer:       /CN=1CF3A7C8B869FEDE23D6DD16E8DA1FB80C686C7D
Certificate serial:       0BBB5D77F65FC3873F8776C3BC8C94CE5D36F5E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CF3A7C8B869FEDE23D6DD16E8DA1FB80C686C7D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C154DC6889E51919AF7524A66F2383AC7C10E6499A785A24B6654105CF04A223/0/1CF3A7C8B869FEDE23D6DD16E8DA1FB80C686C7D.mft
Manifest number:          A6
Signing time:             Fri 31 Jan 2025 08:28:47 +0000
Manifest this update:     Fri 31 Jan 2025 08:23:47 +0000
Manifest next update:     Wed 05 Feb 2025 01:21:47 +0000
Files and hashes:         1: 3132382e3230312e3233362e302f32322d3234203d3e20323635373439.roa (hash: kE04Cp/RGBtKA71UM1GdTz0eA4TvNGcl2pGbXa0SZPE=)
                          2: 323830333a636263303a3a2f33322d3336203d3e20323635373439.roa (hash: t5AP0blrOWPO7n62BmOZLqFGVNTn4pH2cObOl9sQ9fw=)
                          3: 1CF3A7C8B869FEDE23D6DD16E8DA1FB80C686C7D.crl (hash: NDYJjqZpc9Z/cPTZjJZMG52mj9kf7EMZbrW/1shMuxI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:bb:5d:77:f6:5f:c3:87:3f:87:76:c3:bc:8c:94:ce:5d:36:f5:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CF3A7C8B869FEDE23D6DD16E8DA1FB80C686C7D
        Validity
            Not Before: Jan 31 08:23:47 2025 GMT
            Not After : Feb  5 01:21:47 2025 GMT
        Subject: CN=292D5D6069CC4845818FD00597903195BCD8E39F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e9:90:33:df:a5:3a:43:08:a9:18:16:51:86:
                    93:08:b7:49:cd:cf:b3:a5:ec:34:d1:7c:be:f8:34:
                    86:26:8d:d3:2f:97:59:4e:44:41:7f:2a:75:77:59:
                    8e:90:48:db:0a:59:6d:8a:aa:70:d6:bd:56:0d:4a:
                    be:5c:52:1e:cd:0b:1e:d9:b4:de:28:95:a7:31:e7:
                    ce:4b:54:af:a6:3a:cc:b0:67:42:dc:ac:e6:76:5e:
                    90:47:ee:ef:82:f8:c3:b5:7a:c4:50:ef:92:d7:c0:
                    e9:61:cf:14:8f:d4:4e:a4:58:5c:12:63:30:a5:47:
                    eb:ad:6e:2c:4c:9d:8a:cc:6b:a4:8a:42:f6:21:bc:
                    8b:0d:df:76:00:b8:b2:3c:5f:c0:43:9c:2c:8b:5b:
                    da:da:fd:0c:94:dc:88:fc:ba:7c:fb:58:bc:5c:9d:
                    b1:55:83:1e:54:b8:db:79:20:88:f8:d4:d2:a3:13:
                    b5:10:9a:bb:32:31:0b:1d:da:7e:68:1a:3e:37:34:
                    a1:97:d9:6b:a5:ac:98:69:e6:07:cc:ce:c0:8a:0a:
                    a5:14:77:f1:0b:75:c7:cf:1f:ed:90:24:87:2a:24:
                    8e:06:c1:cd:12:4b:b1:6d:4a:59:0d:81:a5:c1:11:
                    0d:55:80:6d:4b:77:38:1d:c3:70:b2:49:6a:3b:6b:
                    23:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:2D:5D:60:69:CC:48:45:81:8F:D0:05:97:90:31:95:BC:D8:E3:9F
            X509v3 Authority Key Identifier:
                keyid:1C:F3:A7:C8:B8:69:FE:DE:23:D6:DD:16:E8:DA:1F:B8:0C:68:6C:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C154DC6889E51919AF7524A66F2383AC7C10E6499A785A24B6654105CF04A223/0/1CF3A7C8B869FEDE23D6DD16E8DA1FB80C686C7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CF3A7C8B869FEDE23D6DD16E8DA1FB80C686C7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C154DC6889E51919AF7524A66F2383AC7C10E6499A785A24B6654105CF04A223/0/1CF3A7C8B869FEDE23D6DD16E8DA1FB80C686C7D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:57:59:fb:6e:c9:8b:57:f5:af:90:cd:8c:6c:a4:da:ad:d3:
         c0:a2:aa:29:6d:d7:b2:5a:6d:bc:58:0b:d0:db:1a:c1:98:65:
         e1:4b:4c:9b:85:57:da:24:11:be:c5:f6:61:f5:34:5c:6a:6f:
         3e:68:0f:fb:ae:84:13:ea:82:fa:15:e5:15:d6:4c:05:31:68:
         ae:71:b1:70:9b:1e:4b:9c:40:fe:d2:1a:ec:54:b7:5c:e1:38:
         fe:dd:c3:14:57:c3:b0:7e:df:f1:07:e5:26:3f:1a:bf:e2:3e:
         bb:26:d7:84:73:c3:2b:a9:56:6e:60:47:e7:03:84:91:78:86:
         e6:13:19:dc:c3:17:27:68:2a:63:db:e2:51:c7:0e:dc:ea:94:
         7f:9d:87:5a:b7:68:0f:d7:10:cf:f5:ca:80:32:34:13:8e:68:
         6a:81:4c:24:ed:b5:f5:b5:bf:bd:45:26:6a:cc:f4:a9:ca:7d:
         fb:75:9a:f7:97:e3:55:ea:cc:43:ee:59:e8:22:9a:e3:f7:d5:
         74:58:6d:74:6b:19:81:c9:24:2e:3a:3e:5c:68:1e:3e:59:cd:
         10:63:50:0a:b1:92:24:e8:8e:5e:83:07:6f:7b:5a:c3:fc:e1:
         ab:60:51:05:1f:f5:d4:a3:50:35:2f:2f:8f:7d:5c:73:f3:08:
         7c:92:a1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----