Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE44675593FCB5620100439CC864F19C4086343D21B20C9EF4279C8CB5059060/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.mft
File:                     D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.mft (raw, json)
Hash identifier:          PO2vdBmzNipEd4uKaS02j0rkeJKDE66eBeY1XP7DV3o=
Subject key identifier:   7A:6A:83:35:73:50:74:68:92:A6:77:47:C0:81:EC:98:E0:1A:46:27
Authority key identifier: D6:4A:11:A9:A7:7E:52:98:D6:96:72:8C:67:96:EF:7B:7B:2D:E7:D0
Certificate issuer:       /CN=D64A11A9A77E5298D696728C6796EF7B7B2DE7D0
Certificate serial:       1B8FBC76E4C472745D3B68163026C78FF4B37D74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE44675593FCB5620100439CC864F19C4086343D21B20C9EF4279C8CB5059060/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.mft
Manifest number:          A3
Signing time:             Fri 31 Jan 2025 08:43:54 +0000
Manifest this update:     Fri 31 Jan 2025 08:38:54 +0000
Manifest next update:     Tue 04 Feb 2025 10:36:54 +0000
Files and hashes:         1: 323830333a623831303a3a2f33322d3332203d3e20323731393733.roa (hash: a2vhpQB5GpUaPVP2siE1NJw9bRpT2CAKJdU6DLAjXek=)
                          2: D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.crl (hash: TG5fG9CIl0TgEadM3qFlIuvo039QV044AUnTgPDcmhc=)
                          3: 3230312e3232322e34332e302f32342d3234203d3e20323731393733.roa (hash: fobldIFvOPrIWg3W0rR9zQkXyOmgB2LW5dl1fJxHLSQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:8f:bc:76:e4:c4:72:74:5d:3b:68:16:30:26:c7:8f:f4:b3:7d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D64A11A9A77E5298D696728C6796EF7B7B2DE7D0
        Validity
            Not Before: Jan 31 08:38:54 2025 GMT
            Not After : Feb  4 10:36:54 2025 GMT
        Subject: CN=7A6A83357350746892A67747C081EC98E01A4627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:39:0c:27:7f:d6:79:9c:78:93:5c:9f:de:00:
                    13:a7:1a:4a:56:0d:52:de:69:90:5a:53:d5:97:05:
                    b5:80:32:dd:b9:a1:f3:06:a8:27:db:5a:c2:ff:cc:
                    8e:54:44:48:17:e2:53:31:2a:a6:f3:ff:1d:95:ad:
                    59:16:1e:96:a1:60:e0:df:33:53:67:dd:1b:ed:58:
                    23:2a:58:76:6e:31:33:3b:61:54:66:4e:e6:48:f7:
                    33:ff:22:dd:ce:a1:b8:80:76:31:74:59:7a:4d:78:
                    36:b7:00:11:f1:7b:f2:c5:3d:b7:36:3e:1e:6a:4b:
                    c9:c3:38:03:af:8e:e5:9d:46:7e:1b:e8:58:26:74:
                    d4:bc:09:16:51:e7:95:c6:16:de:74:1f:24:f6:c1:
                    ec:5f:7c:14:39:3f:f9:c7:cd:e2:cb:af:d0:fb:33:
                    6a:fd:83:6c:2a:05:83:21:22:7f:c9:84:97:11:72:
                    05:17:44:3e:11:df:a1:d6:61:99:6d:66:2f:87:8e:
                    35:23:4b:90:0f:2d:36:a3:1f:6f:31:22:9f:51:ac:
                    96:35:c1:f0:8b:10:11:d3:4d:d4:25:99:c6:5f:e3:
                    3a:64:2d:63:3e:cf:ff:17:d1:38:7f:8c:c7:cd:4f:
                    e9:3d:3f:78:f2:d6:c3:c2:aa:a6:d9:2d:28:e1:44:
                    ef:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6A:83:35:73:50:74:68:92:A6:77:47:C0:81:EC:98:E0:1A:46:27
            X509v3 Authority Key Identifier:
                keyid:D6:4A:11:A9:A7:7E:52:98:D6:96:72:8C:67:96:EF:7B:7B:2D:E7:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE44675593FCB5620100439CC864F19C4086343D21B20C9EF4279C8CB5059060/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE44675593FCB5620100439CC864F19C4086343D21B20C9EF4279C8CB5059060/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:52:e9:3d:ed:81:25:c8:b8:2f:87:45:a8:5a:72:e5:23:05:
         bd:96:93:c1:18:2e:f1:5d:bd:4a:de:6a:0c:79:06:07:54:cc:
         d3:07:48:1f:3b:e3:d2:42:ff:27:37:68:2b:2c:b1:c2:4d:98:
         8b:c3:0e:50:d4:97:6e:ac:74:9d:70:c0:c7:53:91:30:fd:1c:
         b0:25:dd:1a:34:65:f9:e9:ec:84:fb:2d:fc:2f:e1:7c:7d:27:
         ad:29:9c:52:b4:21:d6:3e:e0:ca:33:94:57:33:3c:20:7c:5c:
         27:d2:7b:7f:2f:e5:43:48:d4:3d:a7:59:e7:33:51:54:39:66:
         8a:92:c0:b6:7e:ea:62:10:f5:53:5b:0c:ab:98:ea:b6:c3:a9:
         a7:da:2f:c2:27:71:c9:4a:43:0d:95:35:1b:eb:af:79:c3:31:
         7b:ca:8a:6a:9d:4a:33:00:a5:12:90:7a:b4:34:1b:b3:eb:86:
         4a:5a:45:87:0c:94:f8:9b:6c:dd:ca:19:61:a6:93:f0:08:6b:
         ed:21:2b:89:6e:06:ba:84:80:73:4c:99:ed:a0:be:71:65:1a:
         16:11:26:cb:6b:1d:c3:76:d4:74:7a:66:8c:28:f8:f3:38:dd:
         b0:14:f1:4f:fb:6a:3e:ea:13:d4:4c:53:f1:57:e1:e2:e0:a7:
         da:6e:b3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----