Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.mft
File:                     D8C9477CA5BF1155ABF51707970EA81CFE44EA88.mft (raw, json)
Hash identifier:          9pXMJ7Y6B6kNpodSvVb8MMhT+v2wmjA3WrX8RHItNko=
Subject key identifier:   B8:16:5D:98:2E:2F:2A:80:9F:91:2B:C4:34:C3:2B:93:26:27:A6:3D
Authority key identifier: D8:C9:47:7C:A5:BF:11:55:AB:F5:17:07:97:0E:A8:1C:FE:44:EA:88
Certificate issuer:       /CN=D8C9477CA5BF1155ABF51707970EA81CFE44EA88
Certificate serial:       4CD9F2E644AC0D5E62D45A80B39C5024145FD944
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.mft
Manifest number:          AD
Signing time:             Thu 30 Jan 2025 17:44:28 +0000
Manifest this update:     Thu 30 Jan 2025 17:39:27 +0000
Manifest next update:     Tue 04 Feb 2025 00:18:27 +0000
Files and hashes:         1: 34352e3137392e3139322e302f32322d3234203d3e20323637393230.roa (hash: keG/uursg+qB5a+iYxQLXQxFetWp0fPe+rpX2ekXCHk=)
                          2: D8C9477CA5BF1155ABF51707970EA81CFE44EA88.crl (hash: NUf5p0f5iyNKI8nPnAoEC2OtoavUlPW95pu8tAhvCPk=)
                          3: 323830333a326536303a3a2f33322d3430203d3e20323637393230.roa (hash: qslbZUkURry6Mvw7ps01CfTShjdCv5NxBjwMjH16Wrs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d9:f2:e6:44:ac:0d:5e:62:d4:5a:80:b3:9c:50:24:14:5f:d9:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8C9477CA5BF1155ABF51707970EA81CFE44EA88
        Validity
            Not Before: Jan 30 17:39:27 2025 GMT
            Not After : Feb  4 00:18:27 2025 GMT
        Subject: CN=B8165D982E2F2A809F912BC434C32B932627A63D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f3:80:a7:f3:9d:e2:53:bd:7b:fa:1b:7b:59:
                    2a:27:c8:8d:fa:c9:45:f4:c7:f7:1e:4c:c7:8f:c1:
                    71:19:f5:13:a3:8b:27:34:d6:dc:46:d8:85:8c:4b:
                    b1:8d:57:71:49:ec:7c:9f:12:1a:50:7a:ee:a4:37:
                    00:95:72:d6:09:2b:ad:6f:74:44:5a:d3:b1:eb:8f:
                    26:85:1f:42:46:82:d9:e7:bd:42:13:f7:59:da:eb:
                    95:d4:df:00:b8:89:bd:03:cd:31:48:5a:43:43:af:
                    54:8a:f1:b9:82:4e:ff:47:55:11:28:49:98:15:18:
                    fe:f9:da:68:40:d8:59:08:1c:fd:f3:06:46:07:10:
                    da:97:82:0d:ec:ba:ad:79:f9:cf:25:0c:4f:19:b4:
                    4b:b8:2e:7e:8d:50:09:83:da:b3:40:33:b8:f5:20:
                    ab:ce:97:02:ca:29:d1:93:9f:2d:0c:8c:b2:89:6f:
                    43:80:21:5d:a7:85:8c:13:86:4b:c4:81:77:43:5f:
                    bc:d5:70:63:b2:9a:4e:4d:5e:3d:68:2a:b9:39:f3:
                    35:eb:bf:87:27:6c:81:d7:40:ca:e3:6b:de:1c:34:
                    5e:cb:34:83:56:a9:71:10:d4:c3:14:91:b6:67:81:
                    8a:01:a4:39:18:75:59:d2:1f:63:f2:ac:f9:8a:2e:
                    cc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:16:5D:98:2E:2F:2A:80:9F:91:2B:C4:34:C3:2B:93:26:27:A6:3D
            X509v3 Authority Key Identifier:
                keyid:D8:C9:47:7C:A5:BF:11:55:AB:F5:17:07:97:0E:A8:1C:FE:44:EA:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:43:1c:3a:38:9f:b4:2a:7f:23:22:cf:8b:0c:57:d6:7b:74:
         27:09:42:ef:c3:a1:d1:ef:e0:0b:59:43:27:a1:81:23:dc:d0:
         c9:1e:ab:f3:ef:ae:c0:6f:d1:cc:e1:1d:6c:62:d2:82:0c:79:
         b9:0e:92:93:b6:ec:44:15:89:94:a9:77:b6:1d:b7:58:87:ac:
         ad:72:c0:dd:1f:4c:80:f3:2c:30:b8:16:42:8d:1b:44:2a:b1:
         fb:af:84:8b:81:36:37:f4:26:b4:1a:4d:1f:72:0d:d4:93:29:
         ae:f0:93:20:5b:2b:01:b9:3f:13:89:9d:83:63:4a:2b:fd:ba:
         6e:ed:c6:5d:7b:b8:9f:cd:31:8e:8d:04:b5:39:9e:b4:bf:62:
         40:f0:5b:75:3f:ff:4e:cd:49:5c:c7:93:43:49:68:1e:21:a8:
         d8:36:4b:96:80:de:8f:bf:34:28:72:41:b0:51:db:c4:94:35:
         2f:b6:90:bb:df:60:d9:36:f9:69:15:43:96:3e:2b:5b:6c:86:
         24:98:c8:b0:2e:a4:47:87:cc:bb:44:1b:78:a8:25:af:bd:cb:
         be:6d:db:10:53:e9:a3:b9:b9:9f:8b:13:5c:bc:1b:28:d6:2d:
         71:0f:58:17:48:83:b8:9a:b3:fd:4d:5d:2e:26:30:fc:09:bf:
         46:36:ac:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----