Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB309B49A19CDDFCB1555954D2BD876CAF4FB0C09505999B6BD8133567DBD124/0/FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE.mft
File:                     FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE.mft (raw, json)
Hash identifier:          2n0tOMAMscn+OT6Vrq2Vqr84uH5xxMmTguBly+F+RBw=
Subject key identifier:   B4:17:26:6E:60:83:B3:11:AD:8B:FE:F2:23:7A:9F:00:4B:8D:C6:46
Authority key identifier: FC:6D:27:F4:CD:A3:64:79:C9:BB:EE:89:89:A2:83:A3:0D:FD:BD:DE
Certificate issuer:       /CN=FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE
Certificate serial:       310B99777D5C419EF537B2075C09716CD5816047
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FB309B49A19CDDFCB1555954D2BD876CAF4FB0C09505999B6BD8133567DBD124/0/FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE.mft
Manifest number:          AB
Signing time:             Fri 31 Jan 2025 04:36:20 +0000
Manifest this update:     Fri 31 Jan 2025 04:31:20 +0000
Manifest next update:     Wed 05 Feb 2025 09:36:20 +0000
Files and hashes:         1: 3133382e3138362e3134382e302f32322d3234203d3e20323634363531.roa (hash: khj4rdrRZtmn6LiyZhvfldWdTc6UFTWjO/6nTIxikLs=)
                          2: FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE.crl (hash: Jq4OO30ucwApojukoc17++u8ZxA+pxvOtpmgEstvdso=)
                          3: 323830333a666334303a3a2f33322d3438203d3e20323634363531.roa (hash: fUCmreZbBkGhh28gKxiLjz0+m2z8Ciu3NQ9iwCBGA7g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:0b:99:77:7d:5c:41:9e:f5:37:b2:07:5c:09:71:6c:d5:81:60:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE
        Validity
            Not Before: Jan 31 04:31:20 2025 GMT
            Not After : Feb  5 09:36:20 2025 GMT
        Subject: CN=B417266E6083B311AD8BFEF2237A9F004B8DC646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a5:5a:9c:64:15:90:c5:a0:42:06:44:b8:68:
                    a1:c1:52:83:08:ca:d6:f6:9b:d7:27:af:d0:55:ef:
                    f1:9f:33:6c:23:d9:60:30:52:2b:fd:ba:ca:76:47:
                    b5:6e:7f:d9:83:42:03:4d:b6:e8:0c:af:c8:bd:70:
                    9d:25:88:79:2a:e6:e0:c8:a5:74:a4:98:1a:c3:0f:
                    a3:8f:d1:f7:85:8d:56:a3:74:ea:89:84:3f:66:7b:
                    75:a5:e6:0b:00:76:ff:43:2a:7c:38:43:84:38:39:
                    43:8a:3a:a8:82:93:8e:70:7a:1e:ab:ab:1e:91:fd:
                    7c:d5:51:22:da:d4:52:10:be:ef:ee:ea:8e:7a:c4:
                    8f:0f:00:8d:48:26:50:eb:2b:66:8b:af:f4:fe:9f:
                    5d:aa:e2:a3:91:37:12:e4:7c:2d:2b:b0:eb:dd:59:
                    d8:8d:95:5e:ff:f4:90:34:a2:0c:16:3c:e8:c6:3d:
                    de:98:8b:df:66:26:24:e4:70:a7:9f:b0:84:7d:6f:
                    c4:2a:ef:6e:4e:c4:04:39:f4:fd:25:42:13:37:ae:
                    1f:57:65:27:b7:6e:3f:2d:46:88:a5:9a:0d:df:4e:
                    5d:10:57:8f:37:44:75:7e:8a:44:80:e1:82:62:4a:
                    ee:61:bb:8b:67:55:a5:7e:d2:8c:15:f6:cb:0f:23:
                    67:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:17:26:6E:60:83:B3:11:AD:8B:FE:F2:23:7A:9F:00:4B:8D:C6:46
            X509v3 Authority Key Identifier:
                keyid:FC:6D:27:F4:CD:A3:64:79:C9:BB:EE:89:89:A2:83:A3:0D:FD:BD:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FB309B49A19CDDFCB1555954D2BD876CAF4FB0C09505999B6BD8133567DBD124/0/FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB309B49A19CDDFCB1555954D2BD876CAF4FB0C09505999B6BD8133567DBD124/0/FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:82:68:c5:e9:82:38:07:90:02:c0:18:5e:2b:34:72:71:5e:
         85:6a:42:db:33:03:22:e7:d7:f1:ac:63:36:21:3c:0b:75:04:
         45:06:1d:a8:51:2c:da:76:14:5f:6e:3d:96:a4:ab:2c:d2:2c:
         4c:b8:33:8b:a4:fd:1e:85:a7:de:77:8b:65:90:cb:a2:e4:77:
         81:2f:11:74:04:72:d0:84:a5:5f:02:8e:e6:4d:0b:06:e3:4c:
         50:93:ea:ca:d7:f8:2b:4f:41:cd:e1:92:85:d0:98:70:70:dd:
         2d:be:b0:71:71:dc:db:a9:67:1c:37:65:66:67:fe:e0:93:52:
         1b:29:07:75:81:8d:4c:29:c6:76:87:bf:12:b4:40:6a:9c:fd:
         72:22:78:f7:b5:29:71:2f:12:7e:16:c3:dd:88:ac:db:84:dd:
         c1:e5:17:e9:3a:f2:60:f5:ae:ea:66:0d:61:40:a0:8b:b9:34:
         68:46:4c:98:eb:75:bf:61:15:1d:d9:9e:54:a2:bd:e0:aa:40:
         30:79:f7:a6:24:7f:c4:f4:0e:41:2a:53:03:54:a0:a2:cd:f4:
         d2:a3:6b:4e:87:6c:0a:d9:13:28:7a:bc:fb:05:12:ce:19:d6:
         87:a0:33:67:92:23:bd:31:57:f7:a7:60:7f:2a:2a:9c:3f:91:
         8c:be:3c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----