Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.mft
File:                     37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.mft (raw, json)
Hash identifier:          zfVkYraLj1sfLVIo0hpfHHZMjb5yCP/qsiEwy5K6DNE=
Subject key identifier:   DE:1C:03:95:61:CD:F4:9F:A5:EE:C0:B1:AA:13:3B:E4:13:C1:10:0D
Authority key identifier: 37:D2:C6:C6:B6:FD:FA:40:03:FD:3E:FD:D2:AE:F4:0B:FA:93:CB:9E
Certificate issuer:       /CN=37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E
Certificate serial:       4487A996DD08E01F52FE4D19CBC87615ED67D991
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.mft
Manifest number:          A2
Signing time:             Thu 30 Jan 2025 06:32:28 +0000
Manifest this update:     Thu 30 Jan 2025 06:27:28 +0000
Manifest next update:     Tue 04 Feb 2025 05:00:28 +0000
Files and hashes:         1: 37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.crl (hash: tetIZ4fyAv/DILBWiP2Na8mVaL22RrZFfA2ME7Ev39E=)
                          2: 3230302e3131352e34322e302f32332d3234203d3e203237373834.roa (hash: oUSXTX4MLw78RH13hAN7Jre7mZzseIUbE/ntwHgKg0g=)
                          3: 323830333a383330303a3a2f33322d3438203d3e203139353832.roa (hash: 9y1VQCaWgrr4MFn+QxPqSzcpuokN7W2+r1SbzERTvVM=)
                          4: 3230302e3131352e33322e302f32302d3234203d3e203139353832.roa (hash: 4Cm4TyS06ve0XTo9cgTnB5SjQwcnkHTBCflodQDBb3A=)
                          5: 3230302e3131352e34312e302f32342d3234203d3e203532333435.roa (hash: rosiGVLpDzDY+RsjeLZzg4fjRfmI3x/2ST0IzogbZ5E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:87:a9:96:dd:08:e0:1f:52:fe:4d:19:cb:c8:76:15:ed:67:d9:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E
        Validity
            Not Before: Jan 30 06:27:28 2025 GMT
            Not After : Feb  4 05:00:28 2025 GMT
        Subject: CN=DE1C039561CDF49FA5EEC0B1AA133BE413C1100D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:64:3f:e6:00:07:ce:8d:f9:1e:71:4e:ef:c1:
                    3a:4e:c5:29:e3:79:c9:45:38:72:0b:11:8b:c4:84:
                    60:00:36:ea:1a:55:21:03:d5:27:4b:9d:26:e0:78:
                    73:37:67:99:e5:64:c2:b8:8e:d7:9a:3b:0c:9c:01:
                    45:d3:c1:f8:f4:91:8e:2c:70:ce:cd:06:99:69:73:
                    2c:4a:de:25:fa:f4:27:36:1b:58:16:5e:1b:ed:2d:
                    7d:c2:ed:22:a9:b8:28:fa:84:ae:1e:4a:e8:80:d8:
                    af:79:12:c2:3c:63:da:52:38:83:db:a5:66:93:3e:
                    02:0d:08:04:e9:08:70:02:26:9f:4d:ab:ca:5d:1e:
                    ea:78:95:44:74:7c:01:47:4d:98:6a:94:04:5b:49:
                    ea:50:98:72:b9:97:df:f8:98:a4:1b:f3:7c:9e:ff:
                    78:f1:40:75:49:a9:f3:ee:d1:27:d7:de:a3:e3:20:
                    90:c1:d3:f5:7b:c6:e3:31:33:92:95:7e:d0:8e:81:
                    10:69:a9:67:94:c1:fc:c7:77:30:1a:87:44:69:f8:
                    75:d5:8e:88:0a:0e:b7:0c:b6:7e:55:3f:7d:6f:bd:
                    c3:8b:b9:69:a2:18:21:35:a4:ae:93:dd:ae:d2:83:
                    f4:3f:5c:b1:cd:02:26:c0:2d:f8:e3:03:15:2e:c8:
                    82:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:1C:03:95:61:CD:F4:9F:A5:EE:C0:B1:AA:13:3B:E4:13:C1:10:0D
            X509v3 Authority Key Identifier:
                keyid:37:D2:C6:C6:B6:FD:FA:40:03:FD:3E:FD:D2:AE:F4:0B:FA:93:CB:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:a7:43:9f:9c:d1:f6:aa:c9:7c:2a:61:35:15:14:68:9e:c9:
         46:da:8a:6a:fc:d6:66:14:3f:65:fb:0d:c4:60:74:f9:6a:f4:
         d1:99:05:10:75:fe:65:c4:c7:6c:1d:a0:77:9f:e4:7e:e3:cf:
         88:02:70:02:cf:02:7b:cd:7a:e6:bc:88:5f:01:92:5f:96:8c:
         cf:b1:b7:59:a2:5b:da:d3:bb:c9:f5:2a:d8:a9:00:ee:c2:28:
         0f:10:13:91:6c:49:dd:c9:70:d8:35:2f:38:9e:ac:a6:29:fc:
         38:06:e8:63:21:fc:f0:fc:3c:fe:80:67:15:17:6a:ed:d8:3e:
         68:be:84:12:96:6f:bb:95:13:cc:d4:c0:e8:ca:60:5f:fd:1e:
         57:51:2b:b9:f7:78:b9:ce:ea:d4:b4:b1:45:13:fb:3a:b0:76:
         b6:e7:6d:43:79:d8:4f:5c:05:cb:1d:4d:9d:2d:f5:6f:db:d4:
         f5:81:5f:4e:f5:37:bd:fc:a9:ac:1a:80:c8:38:99:e5:cd:ac:
         3a:bd:f9:c7:be:20:6e:ef:e7:5b:a6:a0:59:ae:dc:c8:e0:32:
         5f:10:e3:8a:c9:45:b1:81:d7:fa:b8:c6:cd:35:f4:b4:26:76:
         38:cc:5f:7d:64:ef:7d:a3:07:59:6a:08:1d:6d:01:bb:78:9a:
         4c:99:57:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----