Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.mft
File:                     FA8F9FC9E2490D527653EF7CE847173F9CD08833.mft (raw, json)
Hash identifier:          UJZZroEJNSLCz01CGPB3itBzInDy8EjGcaEHyxA1/xI=
Subject key identifier:   9B:0C:F5:6B:4F:D6:48:24:3C:96:4A:2D:AC:E7:39:7D:38:07:C8:A0
Authority key identifier: FA:8F:9F:C9:E2:49:0D:52:76:53:EF:7C:E8:47:17:3F:9C:D0:88:33
Certificate issuer:       /CN=FA8F9FC9E2490D527653EF7CE847173F9CD08833
Certificate serial:       298F2CD271AC1F71E60AABE5AC979C4801E72B0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.mft
Manifest number:          A5
Signing time:             Wed 29 Jan 2025 15:33:24 +0000
Manifest this update:     Wed 29 Jan 2025 15:28:24 +0000
Manifest next update:     Tue 04 Feb 2025 11:55:24 +0000
Files and hashes:         1: 3230302e362e31372e302f32342d3234203d3e203233303331.roa (hash: XEAMkgrGaHU2ai24vkp05HvOuX8MO0Qa7D5jORcDw0E=)
                          2: FA8F9FC9E2490D527653EF7CE847173F9CD08833.crl (hash: XBf1IpgHN+IG6GRtrcCIT586QYdb+YwH1UjDLpG+9CA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:8f:2c:d2:71:ac:1f:71:e6:0a:ab:e5:ac:97:9c:48:01:e7:2b:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA8F9FC9E2490D527653EF7CE847173F9CD08833
        Validity
            Not Before: Jan 29 15:28:24 2025 GMT
            Not After : Feb  4 11:55:24 2025 GMT
        Subject: CN=9B0CF56B4FD648243C964A2DACE7397D3807C8A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:26:b5:86:ab:4f:d8:2b:5b:55:30:f6:72:
                    33:76:d7:a4:46:aa:fb:6f:17:dd:71:bd:6f:51:0f:
                    f4:36:de:c8:95:1a:dc:f7:86:dc:95:3d:1c:7c:56:
                    c1:27:c8:e9:d4:3d:88:5d:93:05:ed:91:b1:45:c1:
                    1b:22:e5:3d:d0:ab:34:0e:e8:01:45:3f:4f:5f:6e:
                    ba:a1:8a:a6:f1:46:90:e5:b8:80:97:29:f4:d3:4f:
                    34:1a:0b:60:0a:77:05:08:7a:e2:c6:23:34:06:49:
                    ec:f0:2a:61:b5:ff:ca:d4:41:e6:f3:30:dd:d8:e0:
                    7b:17:60:41:42:14:9b:8a:0e:3f:99:17:5a:8b:96:
                    13:a3:ec:d0:a3:c4:5a:cc:0f:09:ac:91:d5:5b:53:
                    f5:b0:2a:33:19:4b:18:11:e9:03:7b:4f:33:bb:e5:
                    b0:0c:bb:b1:6a:44:31:5b:39:38:02:3b:34:ae:9c:
                    18:2f:57:4c:a2:07:f3:25:90:72:7f:2f:53:c8:a8:
                    06:af:c1:6f:51:f2:2b:96:b4:40:76:d0:fa:c4:67:
                    63:65:c4:5a:31:33:2d:20:28:c7:c9:43:72:f1:d7:
                    f0:8f:fd:ed:ea:c5:48:66:8e:bc:1f:d7:38:43:04:
                    d5:0f:32:50:a8:eb:28:7c:29:12:63:ad:5e:c8:bf:
                    82:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0C:F5:6B:4F:D6:48:24:3C:96:4A:2D:AC:E7:39:7D:38:07:C8:A0
            X509v3 Authority Key Identifier:
                keyid:FA:8F:9F:C9:E2:49:0D:52:76:53:EF:7C:E8:47:17:3F:9C:D0:88:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:75:3b:27:45:0b:16:97:30:d2:74:d7:15:e1:2c:bd:7e:21:
         96:e4:cb:d4:1a:92:da:56:e5:75:65:ed:1a:1f:07:59:9c:de:
         52:f0:c8:09:24:d2:34:13:73:b1:fd:cb:fc:09:d0:72:ab:d3:
         1c:e1:5f:a7:3c:34:29:4f:15:79:f5:5d:3f:16:29:dd:bc:74:
         0d:6c:b2:b2:85:92:04:42:98:e9:d0:c8:b2:f2:14:c1:7b:5a:
         a3:93:09:3c:91:8b:4a:55:11:6d:c1:c7:b6:84:a9:d8:bc:cf:
         3b:44:c0:1f:f1:f2:d0:58:bb:d3:14:4d:2e:9f:2a:9a:ec:1c:
         6c:88:ba:e2:03:0d:ae:f6:99:f5:bc:90:f6:36:62:26:d1:e2:
         cc:0e:01:47:0a:1c:b8:5e:48:6a:66:6a:63:56:0d:64:91:46:
         53:c8:45:7a:06:e1:27:18:8c:42:54:61:63:ca:1f:9f:be:d0:
         68:98:80:cd:f9:d5:b4:9e:f8:2a:5e:f3:67:d9:51:39:6a:ce:
         29:7d:94:4c:57:c6:68:47:20:b2:f0:41:e2:90:ec:f2:ab:ab:
         28:93:35:ee:fa:34:24:7b:29:80:05:ca:dc:1b:2a:ce:1a:26:
         41:d7:0e:eb:eb:90:ff:49:00:f3:7c:1f:9a:1e:e3:04:2a:40:
         e6:18:a1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----