Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.mft
File:                     C7109B5FA9AA24BBF70E62A4318E4348C69F700A.mft (raw, json)
Hash identifier:          Wz2ErD4ZEIL5zD5ZyXNP0tL3cu52l5g0WF+o3OdyVDM=
Subject key identifier:   47:5A:CA:97:0B:7F:22:48:AB:3E:AE:04:AB:70:BD:A6:83:9B:B4:5F
Authority key identifier: C7:10:9B:5F:A9:AA:24:BB:F7:0E:62:A4:31:8E:43:48:C6:9F:70:0A
Certificate issuer:       /CN=C7109B5FA9AA24BBF70E62A4318E4348C69F700A
Certificate serial:       66FCE6766FFE89123A356789204B32A4BAD98AD1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.mft
Manifest number:          AA
Signing time:             Thu 30 Jan 2025 09:29:16 +0000
Manifest this update:     Thu 30 Jan 2025 09:24:16 +0000
Manifest next update:     Mon 03 Feb 2025 23:12:16 +0000
Files and hashes:         1: C7109B5FA9AA24BBF70E62A4318E4348C69F700A.crl (hash: pcUv3tyxdIWsgqplKKaFoHCx6fNV3nfivAhq2yhsdrA=)
                          2: 323830313a31393a623030303a3a2f34382d3438203d3e20323636363636.roa (hash: ULoxAZ6Zyt/Dg/nYamefG8Kf0Qi1jcqKyPKZcx7eO9Y=)
                          3: 34352e3232382e3135322e302f32322d3234203d3e20323636363636.roa (hash: BViB6caC8b9XmoEmpcfCHZf5Fmg5sBrLOUkvCh0zPVI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:fc:e6:76:6f:fe:89:12:3a:35:67:89:20:4b:32:a4:ba:d9:8a:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7109B5FA9AA24BBF70E62A4318E4348C69F700A
        Validity
            Not Before: Jan 30 09:24:16 2025 GMT
            Not After : Feb  3 23:12:16 2025 GMT
        Subject: CN=475ACA970B7F2248AB3EAE04AB70BDA6839BB45F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7f:79:b3:ee:6a:7e:c8:1f:43:89:95:dc:83:
                    19:5a:99:fb:b6:0e:3a:f7:71:73:00:a7:f4:a4:af:
                    54:d2:c2:c7:df:2b:92:f5:a9:b4:bb:b0:65:8b:15:
                    3b:71:a9:7c:1e:4b:0b:99:78:9d:d1:9d:3a:cb:4d:
                    5a:90:8a:85:c4:16:1b:66:2f:c5:2c:35:6b:c4:67:
                    a2:f7:61:d9:8a:fb:2e:8a:33:43:51:15:66:82:7f:
                    68:7b:e1:9d:4a:c0:2f:05:6b:60:7a:b4:8a:93:d4:
                    6d:28:c1:13:6c:f8:55:32:d4:4b:20:5c:67:3a:7c:
                    61:7f:29:f0:a7:38:03:d7:bb:43:8b:b8:94:d5:d6:
                    50:b3:36:ec:68:01:ab:25:39:05:af:3b:db:42:4a:
                    89:53:dc:ab:a5:56:3c:f3:5d:16:cd:78:3d:f9:4b:
                    ca:41:7b:72:9f:9a:6f:87:56:e4:1d:cb:e1:07:94:
                    97:fc:ab:cf:d3:f7:f1:61:b0:3a:48:77:1b:61:1c:
                    50:ee:39:8d:06:8b:f0:28:69:da:d5:d1:ca:17:44:
                    54:ca:3b:9b:c9:2e:da:eb:e1:83:e0:97:f5:f2:5f:
                    0e:53:3c:07:4f:d3:07:ab:52:55:41:31:54:54:42:
                    0c:cf:fc:d5:74:59:e3:b4:a0:53:d0:b5:52:f3:5b:
                    0b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5A:CA:97:0B:7F:22:48:AB:3E:AE:04:AB:70:BD:A6:83:9B:B4:5F
            X509v3 Authority Key Identifier:
                keyid:C7:10:9B:5F:A9:AA:24:BB:F7:0E:62:A4:31:8E:43:48:C6:9F:70:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:a7:8e:b5:86:b3:24:9f:5e:1e:2d:e0:13:d0:f5:fe:45:9f:
         7c:d3:01:f4:e9:95:ab:4a:64:9b:00:60:b4:96:86:2d:25:c1:
         1a:41:8f:37:fe:ee:83:f7:e4:66:97:60:6f:0e:05:26:6d:d6:
         64:fd:ef:17:e8:3b:f2:fa:7a:f8:6e:ca:d7:ef:a3:c7:fe:0c:
         1a:9f:15:10:de:fb:28:e1:95:0d:c2:30:01:36:dd:65:c6:88:
         b3:8f:99:35:c3:e2:0f:1b:8b:47:b1:c0:f6:61:5f:7a:09:85:
         8a:3d:a3:6f:4f:e5:32:4c:0d:c4:c6:78:e5:48:db:8c:68:d8:
         5a:a7:d6:cb:9d:93:b0:d0:9a:22:66:70:e9:88:31:f1:e7:2f:
         3d:83:78:77:53:fc:b3:d0:48:f4:b3:26:f6:66:45:2c:1f:46:
         eb:f2:bd:5c:f9:1f:76:3d:a9:0c:c9:99:df:09:54:f6:f9:db:
         c0:85:53:c4:77:bf:70:ca:9e:88:2e:8e:3b:7b:d5:a0:7e:c4:
         24:be:b7:a9:af:6c:6d:0d:2c:08:79:8b:02:7e:69:19:90:71:
         0a:8b:a0:7a:88:73:e2:40:33:2b:3c:f6:ea:5b:a1:6b:df:08:
         11:5f:86:bb:bc:80:98:3e:fc:32:82:c3:aa:4a:3c:06:00:43:
         18:76:70:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----