Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CEA7D74FE761070910FDBF9BBC72FEF6AC4776CFE236633F4F33C241E813BED6/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.mft
File:                     D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.mft (raw, json)
Hash identifier:          x1r2i4qDTTI7qwUWDfsDXV6rprYEpmXb4lk53KgNUWQ=
Subject key identifier:   7F:55:88:95:C1:73:92:4D:03:76:DC:9E:7C:0D:B3:40:31:68:13:E0
Authority key identifier: D9:04:39:A5:3A:2E:3B:C9:0D:B0:1B:EC:E2:6E:7C:08:88:E4:7E:F5
Certificate issuer:       /CN=D90439A53A2E3BC90DB01BECE26E7C0888E47EF5
Certificate serial:       5F781AAAFB2274C5FBE2C1C2851BF8DDA3DE9554
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CEA7D74FE761070910FDBF9BBC72FEF6AC4776CFE236633F4F33C241E813BED6/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.mft
Manifest number:          9E
Signing time:             Thu 30 Jan 2025 23:38:09 +0000
Manifest this update:     Thu 30 Jan 2025 23:33:09 +0000
Manifest next update:     Tue 04 Feb 2025 09:01:09 +0000
Files and hashes:         1: 323830313a31353a373030303a3a2f34382d3438203d3e20323639383637.roa (hash: EdwmYYEeiGxDTqHcWl/UhE1mbgalsarueU4CRrHT6Z8=)
                          2: 34352e3138392e3131392e302f32342d3234203d3e20323639383637.roa (hash: ughb9aaBFQ34lNupBbLnaCDcmelOgSxE1aystLImDYk=)
                          3: D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.crl (hash: u8w8fizEuEPC18/lOE8jtolP/3ByCwF+zG+Lr7o2Zn8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:78:1a:aa:fb:22:74:c5:fb:e2:c1:c2:85:1b:f8:dd:a3:de:95:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D90439A53A2E3BC90DB01BECE26E7C0888E47EF5
        Validity
            Not Before: Jan 30 23:33:09 2025 GMT
            Not After : Feb  4 09:01:09 2025 GMT
        Subject: CN=7F558895C173924D0376DC9E7C0DB340316813E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:97:d3:3c:1a:a5:e5:bd:d1:a2:bd:e9:26:a1:
                    b2:b7:ef:62:bd:c1:03:bc:c8:64:d7:bb:f2:4b:ee:
                    d6:51:89:65:74:b3:61:27:02:1f:25:fb:a9:ae:d3:
                    6c:56:a1:bf:6c:d4:46:7e:f2:4f:e2:0e:ca:0c:bc:
                    91:63:77:3d:6b:9a:a1:54:30:29:f8:ad:1a:f2:ad:
                    8f:92:bb:5a:14:52:fb:a8:47:1d:e2:93:39:08:aa:
                    2e:b6:bd:9e:5d:44:75:bc:1f:c9:15:85:37:80:ff:
                    9a:56:a5:3f:9d:92:30:4e:ba:07:fc:91:fb:47:c3:
                    47:77:3d:19:62:a3:0b:74:85:df:26:e4:d1:8c:de:
                    f4:dd:8b:a5:b8:10:92:d5:f5:f0:df:7a:db:97:84:
                    74:9e:ce:2d:27:2d:81:a0:fe:82:6c:b6:f4:63:20:
                    97:11:99:ec:2d:dd:30:db:8d:28:0e:02:ae:9d:aa:
                    f5:95:a6:ef:02:a1:e6:58:c8:3e:29:bc:44:e4:23:
                    2a:58:27:7d:d0:99:9c:1c:92:43:4c:3e:8b:c8:47:
                    a7:80:2a:72:63:c4:04:15:11:5b:d0:ab:0f:cc:66:
                    67:78:37:fe:4e:4e:eb:0d:fc:9a:bd:8d:8f:2a:b5:
                    62:43:e6:4a:75:67:ff:74:c2:9e:19:66:95:fc:e7:
                    89:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:55:88:95:C1:73:92:4D:03:76:DC:9E:7C:0D:B3:40:31:68:13:E0
            X509v3 Authority Key Identifier:
                keyid:D9:04:39:A5:3A:2E:3B:C9:0D:B0:1B:EC:E2:6E:7C:08:88:E4:7E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CEA7D74FE761070910FDBF9BBC72FEF6AC4776CFE236633F4F33C241E813BED6/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CEA7D74FE761070910FDBF9BBC72FEF6AC4776CFE236633F4F33C241E813BED6/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:82:f7:04:e1:33:dd:24:76:62:7b:33:b2:f6:ff:59:64:85:
         ef:e1:00:03:e7:47:82:29:32:a2:66:51:57:d8:73:9d:2f:c3:
         fb:9c:39:1d:61:19:ca:70:b2:72:78:fc:47:ac:c0:ee:2c:d3:
         e2:a0:61:d4:da:dd:33:bf:2f:ab:88:35:6b:b1:5c:91:f2:51:
         a1:ac:64:f9:63:6f:be:91:9c:17:b1:43:24:b0:29:72:73:7c:
         89:03:e2:a3:a5:0b:b3:46:52:8d:02:96:86:a9:44:da:83:87:
         c9:fd:58:86:8c:22:64:fa:56:66:1e:82:24:6a:e9:3c:aa:dd:
         c6:6a:e5:58:2c:29:33:2b:07:24:64:43:23:50:23:7c:61:6f:
         68:02:9a:3a:57:84:67:fb:89:aa:59:0b:06:a7:12:74:1a:21:
         3f:0e:76:0e:75:e4:7e:6c:9f:9b:79:49:99:18:f9:5c:fc:28:
         e7:3f:a7:99:85:77:8a:0a:76:3b:c9:84:84:f9:bd:4b:03:d8:
         86:93:fd:e2:cb:58:d0:e6:06:de:e8:b1:be:88:55:d5:f5:91:
         41:fa:25:c2:f7:b7:b2:86:35:7c:87:00:22:22:e5:fb:e9:dd:
         f9:0e:71:56:c2:49:b0:f8:30:1e:54:c3:0a:67:ec:ef:55:84:
         54:53:e3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----