Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.mft
File:                     89BE1B948EADFCFCFDF457A0A903F357865A2553.mft (raw, json)
Hash identifier:          6N5/GAQ7QBOVJ2ezSW9O7B+e1TUAWs0Qt5UDtrc286I=
Subject key identifier:   3F:A7:21:7A:FB:E7:68:EB:86:EB:4A:C8:09:BC:39:27:C8:82:73:E8
Authority key identifier: 89:BE:1B:94:8E:AD:FC:FC:FD:F4:57:A0:A9:03:F3:57:86:5A:25:53
Certificate issuer:       /CN=89BE1B948EADFCFCFDF457A0A903F357865A2553
Certificate serial:       5FD2131CCCEA285FA1F3D275B25A9CFB274A5277
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.mft
Manifest number:          A3
Signing time:             Fri 31 Jan 2025 02:34:56 +0000
Manifest this update:     Fri 31 Jan 2025 02:29:56 +0000
Manifest next update:     Tue 04 Feb 2025 11:36:56 +0000
Files and hashes:         1: 3138362e36342e3130342e302f32312d3231203d3e20323632323037.roa (hash: cZcyYdlU6p40X7wEE9BNNWSf6Pp+1XRzVeiM/LAH9hU=)
                          2: 323830333a343863303a3a2f33322d3438203d3e20323632323037.roa (hash: A0xK8Vy6oheJbOIkLP/E7/Rrh1o3S++otU6QzrUc2nA=)
                          3: 89BE1B948EADFCFCFDF457A0A903F357865A2553.crl (hash: YVDcoqeG1b2uXFTSoiEbhg1T0rTPm2Fyp/PqdPVM8IQ=)
                          4: 3139302e3135312e3132382e302f32322d3232203d3e20323632323037.roa (hash: QZ6II3wBjXJc/upnVchmFmMJJT6wlfL2V9CxUdtBhMQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:d2:13:1c:cc:ea:28:5f:a1:f3:d2:75:b2:5a:9c:fb:27:4a:52:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89BE1B948EADFCFCFDF457A0A903F357865A2553
        Validity
            Not Before: Jan 31 02:29:56 2025 GMT
            Not After : Feb  4 11:36:56 2025 GMT
        Subject: CN=3FA7217AFBE768EB86EB4AC809BC3927C88273E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e4:6a:76:ff:c9:bc:3f:6d:75:b2:2b:59:81:
                    8c:68:86:89:94:ac:a4:32:aa:c5:a9:67:5d:79:11:
                    a2:0c:20:7d:80:ee:61:c1:d6:be:60:d3:75:a5:d8:
                    8d:4e:ff:2f:71:32:66:9a:7d:bc:d4:db:fa:1f:db:
                    b2:5d:7a:4d:55:8b:61:b2:13:16:34:e8:60:1e:07:
                    3a:cf:f2:74:ff:83:fe:c3:e5:44:ca:5d:b4:de:fa:
                    6d:a4:f7:5c:24:bc:50:e1:ec:34:e8:1b:d3:67:a2:
                    98:dd:e4:9f:78:0e:97:14:ba:9b:08:e0:fd:54:a8:
                    a2:50:9f:f5:62:76:af:5d:8e:aa:ca:ca:40:5a:5c:
                    5f:db:ac:38:36:3a:0f:ef:1a:67:44:38:cf:95:19:
                    be:79:5e:d8:ff:eb:55:76:38:9f:8a:4f:25:05:3b:
                    d2:af:e3:68:38:de:cb:01:0b:f2:a5:fb:72:b7:19:
                    69:62:8c:2d:56:61:fc:e7:e4:0e:e4:5e:2d:f5:26:
                    7c:08:73:3d:36:07:b7:0f:df:71:d2:ad:e9:e3:a4:
                    47:b1:58:7c:cc:d0:19:c7:21:f9:7f:4b:33:e4:81:
                    d9:b0:e3:1c:3c:23:7b:ce:c5:dc:e2:e9:0a:2e:7b:
                    28:40:5b:90:26:3b:3d:99:11:95:89:22:8e:d7:ba:
                    5b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A7:21:7A:FB:E7:68:EB:86:EB:4A:C8:09:BC:39:27:C8:82:73:E8
            X509v3 Authority Key Identifier:
                keyid:89:BE:1B:94:8E:AD:FC:FC:FD:F4:57:A0:A9:03:F3:57:86:5A:25:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f9:52:c1:73:81:52:5e:2c:5c:d4:56:dd:50:c4:db:fc:70:
         9d:41:55:46:e6:be:54:b0:20:4f:a6:7f:7b:98:04:c2:77:2a:
         1f:2f:86:6b:ef:eb:0c:fb:a6:46:16:76:3c:9d:c7:48:97:f3:
         7e:2a:32:ff:91:4f:65:3c:bf:60:24:cb:2a:09:1e:95:9f:e9:
         31:a7:17:3e:f1:84:68:15:40:28:f1:b0:8d:56:a6:a7:cd:24:
         45:a3:88:96:0f:31:8e:06:de:b9:5e:59:37:c7:75:49:c8:e2:
         02:ad:8c:79:36:fa:db:63:73:2d:a5:cb:cb:39:cc:f7:59:bf:
         65:33:f7:8c:4e:7b:1f:36:8e:bd:e5:e7:f1:7e:5e:d8:d2:83:
         4f:11:ed:03:3f:47:07:6e:e4:f9:05:ed:88:83:79:35:a9:0a:
         84:02:73:47:65:e0:64:32:c2:77:9d:0e:99:47:8a:c9:f7:61:
         65:30:97:ca:0c:70:61:ec:21:da:06:68:a4:a2:ca:68:24:bc:
         2a:7c:25:a0:3a:26:f2:35:1d:f8:da:11:61:1b:f0:fe:1c:7a:
         4b:83:f0:d3:75:1c:01:d2:18:3e:4f:9d:76:ac:ba:1c:15:b8:
         bf:08:0b:a2:45:9b:95:11:64:56:ca:45:a2:03:96:37:1f:e5:
         98:a5:13:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----