Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.mft
File:                     C111E22B88AB3DF713ECEF3B43D97197F14347D7.mft (raw, json)
Hash identifier:          nvNd4cW661llqqZqqqZTGS0a7tVp3KE5YGmC9+ReKCk=
Subject key identifier:   1F:C9:B6:C1:EE:BC:D5:36:9E:47:11:40:9A:82:62:6A:25:24:DD:67
Authority key identifier: C1:11:E2:2B:88:AB:3D:F7:13:EC:EF:3B:43:D9:71:97:F1:43:47:D7
Certificate issuer:       /CN=C111E22B88AB3DF713ECEF3B43D97197F14347D7
Certificate serial:       1D0DB53BCF8EF527C909C24685ACD5C3DB88A9AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.mft
Manifest number:          A9
Signing time:             Fri 31 Jan 2025 04:36:21 +0000
Manifest this update:     Fri 31 Jan 2025 04:31:21 +0000
Manifest next update:     Tue 04 Feb 2025 06:51:21 +0000
Files and hashes:         1: 34352e3137342e32342e302f32322d3234203d3e20323637383137.roa (hash: 0aJXsQfR43QFGVg2748xGWxGNM6kPB2M6wtCmCkp2H4=)
                          2: 323830333a373036303a3a2f33322d3332203d3e20323637383137.roa (hash: 88tyMlC5G2wN1fM6bxCWOxtVyo+8gTnFKOX2AWVewCE=)
                          3: 323830333a373036303a3a2f33322d3332203d3e20323633373534.roa (hash: z1vIBnJJVBC9Hc63VdhasD4lGzeki3D8C6tKPH0ImXA=)
                          4: 34352e3137342e32342e302f32322d3234203d3e20323633373534.roa (hash: IVEf85qYKcqoQ+AyaLJGt7uxW0Rkj6n13Wnc5tyZC/A=)
                          5: C111E22B88AB3DF713ECEF3B43D97197F14347D7.crl (hash: cAdT6pPrCA/orp0D2vb1ntlqSOnnn/f8YMnPCw9GO28=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:0d:b5:3b:cf:8e:f5:27:c9:09:c2:46:85:ac:d5:c3:db:88:a9:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C111E22B88AB3DF713ECEF3B43D97197F14347D7
        Validity
            Not Before: Jan 31 04:31:21 2025 GMT
            Not After : Feb  4 06:51:21 2025 GMT
        Subject: CN=1FC9B6C1EEBCD5369E4711409A82626A2524DD67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3a:b7:7b:5c:15:81:79:e1:da:1a:0c:24:55:
                    8c:ea:9a:79:d5:30:f5:06:70:35:6b:7c:de:d0:6b:
                    0e:90:b3:b7:4f:79:53:d6:8c:cf:7d:c9:b0:64:47:
                    23:cd:53:20:cf:07:34:9a:50:0d:d1:6e:23:f5:b0:
                    0e:b4:10:51:85:2e:b2:7b:6f:9c:46:3c:c9:9e:c8:
                    b9:3f:5b:78:fe:a4:54:b3:03:88:0c:b9:c0:ca:78:
                    77:f7:6a:59:14:4c:73:5f:c6:56:50:4d:93:4b:5a:
                    3b:1b:cf:4e:8c:ba:18:a3:d7:98:df:94:f8:3a:ee:
                    12:0f:9f:bc:46:f6:46:83:cd:54:46:c2:d9:5e:b6:
                    eb:f3:2e:45:fe:24:41:dc:21:a7:d4:c1:82:49:cc:
                    73:20:ff:02:9f:b2:35:85:4c:0a:22:00:ed:b3:04:
                    bb:4b:14:90:d5:74:90:a5:dc:85:63:11:6c:dc:34:
                    5b:b5:e0:c9:bf:31:c2:9a:3a:b3:44:31:92:a9:21:
                    45:39:73:9d:01:c7:6a:e0:ac:22:3c:35:78:e8:a5:
                    9b:c8:87:be:7e:e4:64:d5:bd:01:ac:a0:2a:3b:74:
                    41:55:c6:e7:72:19:63:b0:54:02:16:30:8e:bb:66:
                    66:c5:46:26:28:96:4f:0e:8e:fa:8a:b9:53:1d:21:
                    60:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C9:B6:C1:EE:BC:D5:36:9E:47:11:40:9A:82:62:6A:25:24:DD:67
            X509v3 Authority Key Identifier:
                keyid:C1:11:E2:2B:88:AB:3D:F7:13:EC:EF:3B:43:D9:71:97:F1:43:47:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:36:f6:b9:d9:c5:e9:7f:cb:76:65:e6:61:09:4f:90:94:b5:
         06:e4:08:6d:22:87:9d:65:e4:53:59:7a:1a:a6:e4:34:d9:5a:
         f9:b7:33:da:f1:25:f7:ed:ec:83:86:51:4e:23:38:11:34:66:
         71:af:07:a6:e4:eb:0e:09:ed:a6:8e:0e:b6:96:7e:fd:bf:42:
         92:23:e9:d6:12:c4:f8:85:f0:33:b6:42:d2:2c:6c:56:bb:ac:
         7a:b4:db:1c:ac:39:ca:96:b1:60:85:a8:8c:04:46:63:b2:3c:
         1d:51:b8:d8:2e:4b:f8:4f:e0:d3:57:dd:9e:6e:56:09:6f:f0:
         e6:eb:32:dc:20:c9:70:76:b4:06:42:7f:88:f1:c9:c0:dc:47:
         ee:99:48:4a:81:d3:10:44:e0:37:33:f0:b4:ba:de:1c:b5:1c:
         38:9e:11:25:73:9e:6c:a6:30:19:78:66:27:3e:e1:e0:18:4c:
         b9:03:0f:26:4a:2e:e6:19:90:3a:c0:03:a2:f3:89:07:9c:33:
         35:f1:0f:cd:b9:60:8b:8f:12:30:f1:0c:6b:51:ba:d2:07:fc:
         6e:61:5b:0f:46:02:18:65:f8:df:f7:ac:d7:8b:16:fe:34:2e:
         7d:62:be:ac:d1:12:d4:11:53:ae:e0:18:a6:0b:1c:05:62:e1:
         2b:aa:60:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----