Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.mft
File:                     B3602955B698225B69B7EAD22B122D3DA9AC7F8F.mft (raw, json)
Hash identifier:          p9OA5f9YqgcAtcG9Yd95LvHEHm6km2tvzVDUwhPTNv8=
Subject key identifier:   53:BE:97:ED:70:EE:F3:A2:17:1E:78:05:35:B9:03:29:F2:80:0F:5D
Authority key identifier: B3:60:29:55:B6:98:22:5B:69:B7:EA:D2:2B:12:2D:3D:A9:AC:7F:8F
Certificate issuer:       /CN=B3602955B698225B69B7EAD22B122D3DA9AC7F8F
Certificate serial:       1FD953A971201E1A6FD97537040D450D1F96EC07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.mft
Manifest number:          A7
Signing time:             Wed 29 Jan 2025 15:18:13 +0000
Manifest this update:     Wed 29 Jan 2025 15:13:13 +0000
Manifest next update:     Tue 04 Feb 2025 13:24:13 +0000
Files and hashes:         1: 323830333a656334303a3a2f33322d3438203d3e20323633373932.roa (hash: 2KGxqxVMzWmVvm5lrusmCKcE4EuSbGZRHJTBC4F2T9c=)
                          2: B3602955B698225B69B7EAD22B122D3DA9AC7F8F.crl (hash: RchalI16d6Dqkafqsj7PPnga7iVLID3YhHm5uyIVG2M=)
                          3: 3133382e3132322e3130382e302f32322d3234203d3e20323633373932.roa (hash: e3OjWduU36QBqwek/IfB51C+hXnMo8iCKLlW7mCsVo4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d9:53:a9:71:20:1e:1a:6f:d9:75:37:04:0d:45:0d:1f:96:ec:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3602955B698225B69B7EAD22B122D3DA9AC7F8F
        Validity
            Not Before: Jan 29 15:13:13 2025 GMT
            Not After : Feb  4 13:24:13 2025 GMT
        Subject: CN=53BE97ED70EEF3A2171E780535B90329F2800F5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c3:3e:e0:5b:a6:25:19:ae:74:38:fb:fb:70:
                    4c:20:4d:5f:2f:32:be:53:fd:40:f7:f3:06:82:03:
                    75:f5:07:06:67:8e:c8:44:48:73:1e:b2:16:34:d7:
                    35:f2:ff:b1:6e:fc:7f:ab:53:bc:b9:6c:17:f1:00:
                    2d:a0:31:45:be:1a:87:b1:e8:51:35:dd:5c:de:a9:
                    24:80:b6:55:39:70:f2:f5:8f:82:1f:dd:ca:a5:e6:
                    c3:fe:a1:f3:b2:88:72:68:8a:cf:8a:e7:ed:18:55:
                    9e:5e:c9:70:81:f6:3b:2f:fe:f2:66:f5:c6:c6:8b:
                    e5:11:d3:86:e1:e3:ce:87:d3:0b:56:ab:98:bd:a1:
                    87:86:63:55:11:46:74:3d:60:64:37:cf:8d:70:7a:
                    80:bf:4e:5e:5a:9f:0a:ad:d6:2f:ef:94:9d:36:98:
                    35:2b:54:f5:29:31:56:98:af:df:85:9c:d1:1c:0b:
                    f7:9b:0a:1b:fb:d7:82:92:0f:bd:d0:ee:8c:19:5f:
                    05:b8:23:b2:86:98:50:9e:47:70:44:62:30:36:21:
                    b5:09:4a:1e:77:a8:11:35:87:4c:71:18:1e:d9:f2:
                    09:f0:c9:b9:13:09:1b:03:c4:bc:ef:67:80:34:bd:
                    ce:34:ab:a0:ec:4d:0a:1c:e1:00:dc:bd:38:13:b3:
                    91:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BE:97:ED:70:EE:F3:A2:17:1E:78:05:35:B9:03:29:F2:80:0F:5D
            X509v3 Authority Key Identifier:
                keyid:B3:60:29:55:B6:98:22:5B:69:B7:EA:D2:2B:12:2D:3D:A9:AC:7F:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:78:f0:93:4c:a8:1a:67:a0:5c:7c:b5:98:c9:11:aa:e9:6d:
         9b:d2:4d:7b:61:ad:37:09:d3:40:0c:8d:d0:f5:d9:b5:dc:e2:
         a5:8e:5e:34:9e:a5:95:54:58:cb:26:dc:0d:b1:f1:f4:e3:04:
         50:a4:db:03:df:2d:d9:26:f0:60:95:46:28:c9:3a:87:12:ac:
         4f:da:7d:48:30:9b:a8:04:93:88:9e:e5:68:02:d7:5f:0f:7f:
         4f:38:ab:91:e3:cf:fc:08:06:83:32:15:88:05:af:57:c8:81:
         9a:0b:74:2c:8c:55:a8:0d:51:26:51:8f:50:36:d4:2f:6f:eb:
         26:ed:ad:e4:16:4f:28:dc:ea:5f:b8:11:1b:0e:75:d4:d8:63:
         32:77:9d:14:f7:4e:77:75:0c:3f:46:98:63:94:c6:23:3a:5e:
         ac:ca:ee:49:c6:a9:cb:ec:58:f3:c4:c8:81:65:cb:fe:cb:2e:
         13:00:8a:37:51:52:81:c0:bb:f8:65:33:c8:d7:88:5c:cd:33:
         2e:66:50:22:11:69:c4:83:c5:22:7a:71:bc:f8:61:b8:eb:de:
         ee:c2:d4:f8:36:4c:22:3c:61:99:9f:d5:a9:3e:98:46:c4:d8:
         82:df:bb:b6:a4:39:92:3e:bf:8f:31:8a:9e:d7:1a:64:ff:9f:
         bb:97:3b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----