Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5F64129A3275E11FC5E33280C6B65D077E07295A2F49025888B3722B709E6FE/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.mft
File:                     DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.mft (raw, json)
Hash identifier:          Jpj/teyAnpqvTGj7LcP/viBdPwDLlmtyk5cFYlsGkxU=
Subject key identifier:   57:31:16:FF:74:AC:24:C9:AF:0B:27:1C:6B:79:81:20:36:A3:9B:3C
Authority key identifier: DE:0E:9C:48:41:E7:FD:1E:40:27:86:DB:D8:A1:B3:5F:69:AD:C5:E1
Certificate issuer:       /CN=DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1
Certificate serial:       16EEDCF3C1C6B87E28576C7ECE61EFE389238932
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5F64129A3275E11FC5E33280C6B65D077E07295A2F49025888B3722B709E6FE/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.mft
Manifest number:          A4
Signing time:             Fri 31 Jan 2025 13:11:36 +0000
Manifest this update:     Fri 31 Jan 2025 13:06:36 +0000
Manifest next update:     Wed 05 Feb 2025 22:13:36 +0000
Files and hashes:         1: 323830333a393232303a3a2f33322d3332203d3e20323635383432.roa (hash: cvz0jAYQSeUPsgGZty1Ko7nr4uiuusDkjfOJj+ajngs=)
                          2: 34352e3232342e3230332e302f32342d3234203d3e20323635383432.roa (hash: CzxmbwGW1lwNE1+GPr15v2s2TyxLah+emEQLp8n+M6M=)
                          3: DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.crl (hash: B98luPOxcPM075uqpjCkyp6vWdNLyzb0BYFA7n5CC1w=)
                          4: 34352e3232352e34302e302f32332d3234203d3e20323635383432.roa (hash: Hkn0U/8xggYCYwqi5piBKvyk08wrPXVBPIxMAbJGTRc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ee:dc:f3:c1:c6:b8:7e:28:57:6c:7e:ce:61:ef:e3:89:23:89:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1
        Validity
            Not Before: Jan 31 13:06:36 2025 GMT
            Not After : Feb  5 22:13:36 2025 GMT
        Subject: CN=573116FF74AC24C9AF0B271C6B79812036A39B3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:76:b9:96:72:61:6b:b4:12:d7:42:de:8b:77:
                    2b:18:f6:8a:dc:1d:83:5e:28:35:f8:c8:69:b6:99:
                    eb:ba:5c:68:dd:27:2a:c9:42:86:c4:25:7a:cd:77:
                    12:73:e4:5a:cf:92:1a:2f:8d:f9:56:44:f6:3c:4d:
                    bb:b5:4a:9f:73:b5:47:7f:1e:08:c5:ee:ce:4f:b0:
                    dc:2c:6e:84:c7:34:3a:df:9a:3e:2e:c4:92:16:63:
                    45:e9:26:f3:ad:8d:0b:fc:30:a1:63:46:26:a7:eb:
                    83:41:ea:5b:46:3e:84:e7:72:88:81:a7:84:3d:46:
                    22:b7:a4:3e:0d:54:bc:2d:8e:69:b9:60:95:fa:4e:
                    0f:e6:ec:14:5e:de:bb:0b:3d:9c:ab:a4:36:7d:a1:
                    1a:2d:79:1d:d4:72:fc:6e:2b:cd:61:57:95:ab:35:
                    8a:1d:ab:f0:84:50:4e:89:1f:a4:06:33:06:c6:02:
                    01:b1:e7:fc:12:e5:57:87:6d:d5:b9:35:77:be:d7:
                    c8:77:13:34:47:e3:d8:b0:9c:8a:af:e8:32:b8:bb:
                    5b:2b:39:8a:41:48:2f:2a:43:92:70:9a:41:6f:0f:
                    e1:7c:c5:84:73:63:8d:b2:c5:ca:81:f3:84:7a:77:
                    a6:97:ab:13:95:66:30:36:7e:a2:79:c9:b2:d4:b4:
                    69:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:31:16:FF:74:AC:24:C9:AF:0B:27:1C:6B:79:81:20:36:A3:9B:3C
            X509v3 Authority Key Identifier:
                keyid:DE:0E:9C:48:41:E7:FD:1E:40:27:86:DB:D8:A1:B3:5F:69:AD:C5:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5F64129A3275E11FC5E33280C6B65D077E07295A2F49025888B3722B709E6FE/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5F64129A3275E11FC5E33280C6B65D077E07295A2F49025888B3722B709E6FE/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:47:ea:fb:71:21:92:c9:12:12:5f:01:a6:6e:01:44:72:d4:
         0c:13:2d:57:4b:64:f4:9e:3a:f8:ca:14:cb:86:6b:52:c0:46:
         1d:63:b5:76:c8:69:fc:67:0f:94:4c:5d:0d:b3:40:65:57:3e:
         8d:b8:b5:7f:24:1b:43:f4:84:30:ea:d0:90:dd:fd:82:bc:49:
         95:de:96:2e:df:a7:8a:56:f7:8b:d8:7e:35:51:79:b6:24:1f:
         81:bf:d0:fd:b4:42:ab:bf:73:27:ba:b6:94:84:4e:2b:24:9d:
         42:32:0c:a4:52:c2:f1:b5:c9:09:bf:e4:bd:2a:61:ee:06:e2:
         96:54:a8:53:0b:58:dc:27:10:d9:d9:4a:00:52:d6:fa:8e:c6:
         55:7c:f0:3b:2e:3c:4d:c1:3b:09:02:c4:e6:9d:ae:de:4e:2d:
         37:5b:19:ea:f5:0d:d5:ce:88:c7:ec:5f:af:8b:f1:32:ae:81:
         52:55:0d:ac:3a:47:41:cc:94:ab:b7:f8:32:7d:fd:e6:c8:3a:
         77:97:25:5d:92:f0:1b:dc:ec:c6:80:b6:17:4d:67:aa:d0:9d:
         11:1b:3c:7d:c6:60:70:36:ad:9e:db:82:c4:f2:3e:87:6e:f3:
         3b:f1:f3:b9:7f:65:34:27:db:f1:f8:5f:cb:58:4e:de:f2:33:
         59:f2:8a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----