Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.mft
File:                     8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.mft (raw, json)
Hash identifier:          3LKsSd70TuTZ1m75lLLsycbgFOMQbnsPCW1j7BsMzD8=
Subject key identifier:   77:B0:37:8F:BD:DE:F5:C8:C7:A7:A4:31:DC:23:02:10:6C:6B:B8:6E
Authority key identifier: 82:25:D5:85:11:74:DA:30:BC:CC:AA:6A:CF:25:AB:C8:BB:FE:92:B7
Certificate issuer:       /CN=8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7
Certificate serial:       58313FD69F29651212AFA5DCD2306EC7B2F2D8A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.mft
Manifest number:          A1
Signing time:             Thu 30 Jan 2025 15:43:07 +0000
Manifest this update:     Thu 30 Jan 2025 15:38:07 +0000
Manifest next update:     Wed 05 Feb 2025 05:17:07 +0000
Files and hashes:         1: 323830333a363431303a3a2f33322d3430203d3e20323731383535.roa (hash: 5dJBZRg1BrGUv146UeQdLumwOwJ4U63YZ2cnCAJF35w=)
                          2: 8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.crl (hash: 5wCmA0dEVj/JlNeKIOico7wZ+mlCm7lrIk1XoP4NNac=)
                          3: 3138312e3139312e3232342e302f32322d3234203d3e20323731383535.roa (hash: DVmw+iYm1oA92UXy8A+0cn2pbJE/jctDKdy5FiTgHW8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:31:3f:d6:9f:29:65:12:12:af:a5:dc:d2:30:6e:c7:b2:f2:d8:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7
        Validity
            Not Before: Jan 30 15:38:07 2025 GMT
            Not After : Feb  5 05:17:07 2025 GMT
        Subject: CN=77B0378FBDDEF5C8C7A7A431DC2302106C6BB86E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:48:6e:70:60:18:b1:08:06:38:86:99:e8:0d:
                    f3:2c:a8:6f:15:bd:84:a2:3c:b3:ee:f2:60:9b:75:
                    49:7d:8b:79:5e:c2:73:9f:24:48:43:83:83:20:78:
                    60:d6:fd:32:cc:3c:30:55:83:d5:7b:80:a4:23:07:
                    01:80:30:ee:a6:91:16:e3:d2:97:5c:09:96:dd:80:
                    5b:26:64:b4:3d:47:68:82:68:6e:6d:7a:19:56:a8:
                    29:31:00:74:a4:5e:f5:75:51:ef:74:77:df:18:1f:
                    35:08:33:e0:fa:31:e9:dd:8f:d1:f9:3c:03:62:4c:
                    24:78:ad:64:8d:9a:95:b8:94:a9:af:83:22:14:f4:
                    5f:eb:cb:3f:2c:73:c8:76:d6:6b:6b:7e:2a:0e:cc:
                    db:11:df:46:2b:a2:66:08:9e:91:75:3a:10:a9:29:
                    9b:b3:04:2b:a6:1f:1d:5b:69:fe:e9:e2:70:ae:22:
                    7a:db:c2:ab:ca:fb:db:11:c1:37:8c:18:47:e9:12:
                    14:90:cd:b7:fc:3e:7a:06:20:23:88:ea:80:75:7b:
                    8f:91:14:73:9e:0f:db:ed:5e:d3:f3:47:29:ff:b0:
                    2f:35:0b:14:94:10:81:d3:90:f2:a5:82:23:eb:1d:
                    f8:e1:e9:a2:26:58:3d:b2:bb:19:6c:00:3a:43:af:
                    46:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B0:37:8F:BD:DE:F5:C8:C7:A7:A4:31:DC:23:02:10:6C:6B:B8:6E
            X509v3 Authority Key Identifier:
                keyid:82:25:D5:85:11:74:DA:30:BC:CC:AA:6A:CF:25:AB:C8:BB:FE:92:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:3b:79:5b:f5:1b:0b:f1:9b:4d:73:b3:e5:d8:b1:6e:b5:9a:
         d3:a9:7f:dd:3b:e9:55:0e:de:af:1b:9e:d0:c1:17:3f:40:d7:
         16:3b:32:d2:f6:6e:3a:ec:24:6b:db:8f:02:6e:73:4c:70:33:
         33:83:3c:26:8c:2e:91:f5:21:38:8e:49:1b:c5:6c:42:55:35:
         d5:96:83:14:10:09:11:a8:e9:b9:15:c3:78:96:93:49:ed:47:
         06:86:14:9f:66:d6:e9:e9:9f:da:2e:81:68:a1:b0:f5:94:34:
         42:b7:a9:3d:a3:15:f1:f7:3a:02:6e:6b:80:34:21:3e:78:32:
         e3:61:66:a2:c0:bc:31:30:56:30:d6:ca:23:b8:79:43:a2:d7:
         c5:ab:6b:f2:bb:4b:0e:19:b5:39:a5:c7:b3:98:4e:70:ea:ec:
         16:91:3a:b4:a0:ec:ba:68:3f:17:38:3d:d7:d0:9c:7a:48:4a:
         f9:f8:c6:0a:77:57:9b:87:72:bf:f0:36:ec:4e:0c:74:58:36:
         91:8b:04:f7:d4:47:bf:d4:78:0d:d3:ef:17:f1:0f:f8:f3:de:
         39:29:f8:83:13:7d:1b:59:d2:d5:91:a8:45:81:b9:b1:4d:e2:
         dd:18:40:df:57:73:12:3a:bc:8c:8d:4a:7d:59:9b:84:1d:fa:
         ab:11:5f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----