Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft
File:                     DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft (raw, json)
Hash identifier:          g6sxKFeDnjyhQk7wDtVYvwhvEHZIhxnfoTCm/lHh/jo=
Subject key identifier:   7A:F9:56:EE:7A:88:36:C4:65:F2:C5:47:B6:E4:57:46:FA:B4:4F:2F
Authority key identifier: DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB
Certificate issuer:       /CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB
Certificate serial:       12DB224CBDA74DEAA2C97A03BD721646A9DE13E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft
Manifest number:          A9
Signing time:             Fri 31 Jan 2025 11:45:41 +0000
Manifest this update:     Fri 31 Jan 2025 11:40:41 +0000
Manifest next update:     Wed 05 Feb 2025 01:14:41 +0000
Files and hashes:         1: 34352e3232382e3233322e302f32342d3234203d3e20323635363834.roa (hash: l/en10Om4Si29mlufHWLN09ePz3dCvUqT4/P00O/EjI=)
                          2: 34352e3232382e3233322e302f32342d3234203d3e20323636363936.roa (hash: A2mR0o7Mi8JNtwQpM3EC7hkwENgFsz8Hc8GEtybN2cQ=)
                          3: DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl (hash: DefY7XHIrq2JhxmHZBA4BUq79+2k8eHQZf5g4GmktUo=)
                          4: 323830333a6432303a3a2f33322d3332203d3e20323636363936.roa (hash: mjrelByTXY65k+8XtzNbOMeTPkoqm96Q5yh1S+YEjo8=)
                          5: 323830333a6432303a3a2f33322d3332203d3e20323635363834.roa (hash: xvWmK9K1BpRciO+T+cR82VhgkRzdY0Pcy23PcTLKuXw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:db:22:4c:bd:a7:4d:ea:a2:c9:7a:03:bd:72:16:46:a9:de:13:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB
        Validity
            Not Before: Jan 31 11:40:41 2025 GMT
            Not After : Feb  5 01:14:41 2025 GMT
        Subject: CN=7AF956EE7A8836C465F2C547B6E45746FAB44F2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:28:c6:a7:7e:d4:4b:f4:b6:a9:94:77:cf:54:
                    ee:dc:3e:01:a8:ee:9a:05:73:71:ba:d2:28:10:72:
                    b0:6e:67:ea:6f:44:47:f8:9c:64:7f:6d:87:c7:a8:
                    3b:b9:62:dc:de:29:70:d2:83:96:d3:32:69:84:a0:
                    e9:60:87:24:a6:11:d6:11:66:22:6e:a0:71:94:e1:
                    90:13:d6:4c:4d:61:e0:98:37:7b:d5:29:c8:35:07:
                    bb:49:61:69:91:c4:c5:b2:90:1b:99:07:a1:14:1d:
                    5a:7a:04:6e:7e:17:81:db:a8:3d:28:0c:c0:f2:26:
                    76:5c:b6:03:5a:c3:b9:ea:c5:d7:37:fd:aa:8e:4b:
                    14:93:ba:2c:37:a9:1c:2c:69:30:8a:a0:c1:ed:a3:
                    69:c7:3e:6d:ea:3f:ec:a2:6a:bc:59:3b:47:ae:c2:
                    f4:ec:e3:9a:60:28:8e:84:58:e8:9a:6a:da:ef:f7:
                    ca:99:c8:fd:42:cf:cf:3f:8a:85:ea:a0:9c:81:b4:
                    c3:62:08:26:13:c0:40:89:6b:0c:6b:f7:41:8a:55:
                    b1:04:c6:08:49:98:b9:06:eb:d9:49:76:24:95:3d:
                    e0:f9:63:fd:1f:43:2a:03:33:38:74:e7:a4:4b:3d:
                    e0:27:79:0e:ff:31:d2:f9:5e:2c:06:d5:c0:52:9a:
                    8b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F9:56:EE:7A:88:36:C4:65:F2:C5:47:B6:E4:57:46:FA:B4:4F:2F
            X509v3 Authority Key Identifier:
                keyid:DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:fe:fa:1c:03:ea:52:f2:46:36:92:0e:0f:8a:db:d4:70:bb:
         70:db:ad:56:4a:bb:e1:d2:7c:e1:ae:25:e1:4c:bc:a7:48:88:
         dc:02:a3:01:b5:6e:9c:32:8f:fd:fe:04:c2:59:dd:b2:25:56:
         ee:48:54:ee:31:5f:7b:1e:3d:2d:7d:78:c4:37:d4:d1:04:f0:
         ff:20:9a:97:45:ba:3e:5f:57:81:48:9c:36:2c:e1:67:ce:44:
         7c:55:40:be:06:27:ef:ba:88:42:d0:39:4e:ec:31:e9:4f:4e:
         6e:fb:22:21:2f:0f:db:ce:83:45:46:40:64:79:6f:ba:2f:c0:
         73:24:81:c9:90:f2:40:3a:e2:69:36:eb:1b:5e:60:0a:20:b7:
         d5:b1:36:d9:35:de:a8:b9:86:8f:b5:22:5f:8d:65:dd:b4:5c:
         bb:e6:50:cc:f7:73:4d:35:cf:e2:9f:b6:56:c8:25:50:a8:a4:
         9c:b3:3c:58:68:fa:e7:80:cc:21:56:ce:4c:9f:b1:1b:57:76:
         94:5f:51:2d:eb:4f:35:4c:1d:37:18:66:6e:0a:c6:53:70:a2:
         b4:13:7d:29:d8:d7:90:8f:8d:36:28:92:46:4b:0d:67:6a:82:
         87:f1:ba:a3:70:b9:e2:fa:7c:8b:cc:a4:df:1c:c5:1d:79:2a:
         de:9a:5c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----