Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EF40A7B2FE0C4A9C6A1F449401FA3F64271CCD6FBDF05E956FD69A3039460964/0/FA4526A5B6F94A3A0BF19B48F854C37AF4E9788D.mft
File:                     FA4526A5B6F94A3A0BF19B48F854C37AF4E9788D.mft (raw, json)
Hash identifier:          1wQXm2aUNrcxg4qnRAP1ejwi4mUEeGqQNGF0++1yv2k=
Subject key identifier:   21:13:61:79:F6:F3:5D:88:12:8B:7D:73:EB:22:35:6A:B1:24:D8:2D
Authority key identifier: FA:45:26:A5:B6:F9:4A:3A:0B:F1:9B:48:F8:54:C3:7A:F4:E9:78:8D
Certificate issuer:       /CN=FA4526A5B6F94A3A0BF19B48F854C37AF4E9788D
Certificate serial:       16953A1640A989F03C1A516F9502C28D98E743A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA4526A5B6F94A3A0BF19B48F854C37AF4E9788D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EF40A7B2FE0C4A9C6A1F449401FA3F64271CCD6FBDF05E956FD69A3039460964/0/FA4526A5B6F94A3A0BF19B48F854C37AF4E9788D.mft
Manifest number:          012B
Signing time:             Tue 07 Oct 2025 16:22:14 +0000
Manifest this update:     Tue 07 Oct 2025 16:17:14 +0000
Manifest next update:     Sun 12 Oct 2025 19:26:14 +0000
Files and hashes:         1: 34352e3137392e3235352e302f32342d3234203d3e20323636373834.roa (hash: ccqiKSZAr6QJqGJZrNH1BqJD+qFNCeTC9o2cV4L03qk=)
                          2: FA4526A5B6F94A3A0BF19B48F854C37AF4E9788D.crl (hash: uG32FxROLWeEtbZkw6Mtlcl9C7+dZ5wSM6U4NOIruDY=)
                          3: 34352e3137392e3235342e302f32332d3233203d3e20323636373834.roa (hash: JQDk9fZbJPw3tp6L+9u5FxU3dBa3hrsU1zGmLQu1IAk=)
                          4: 34352e3137392e3235342e302f32342d3234203d3e20323636373834.roa (hash: Wpt1yi7hbNPc32qY7zjIQGXkkzPD3wJOeYzfjQLZpWE=)
                          5: 323830333a343136303a3a2f33322d3332203d3e20323636373834.roa (hash: +U0cVGUo7/rQ4ACkr0hrhdVTpjwPgf5a0CGMoeVW0oY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:95:3a:16:40:a9:89:f0:3c:1a:51:6f:95:02:c2:8d:98:e7:43:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA4526A5B6F94A3A0BF19B48F854C37AF4E9788D
        Validity
            Not Before: Oct  7 16:17:14 2025 GMT
            Not After : Oct 12 19:26:14 2025 GMT
        Subject: CN=21136179F6F35D88128B7D73EB22356AB124D82D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5d:45:41:96:18:6b:a2:0a:b0:3c:8f:86:e5:
                    46:b5:fd:6c:9a:b6:f4:b0:a2:96:58:fb:65:62:cd:
                    93:e9:84:e0:26:c1:cb:31:53:27:ac:c4:95:24:68:
                    54:50:99:13:9a:ce:7b:1a:f0:f5:5f:4f:06:17:49:
                    48:4e:72:24:ed:f9:9c:dc:c4:a4:47:7b:11:d0:f4:
                    2f:11:43:67:a6:eb:e1:18:4f:dc:b6:8b:a9:ea:95:
                    69:73:a8:03:f2:9a:f1:ca:2a:9d:eb:3a:4e:dc:bd:
                    95:57:83:64:bf:6a:4b:89:99:b9:cf:b2:81:82:c7:
                    37:08:e1:09:a8:1e:0b:d7:6b:55:11:f5:a1:72:58:
                    20:88:ab:4d:5e:57:fb:73:e9:37:41:c4:ca:83:0f:
                    ef:b5:e3:83:84:09:e1:e1:d2:cb:ae:14:7f:d0:a7:
                    92:ee:c0:df:09:35:36:07:bc:e8:58:06:64:3c:6e:
                    f5:bc:01:1f:6f:34:3b:6f:e9:84:f3:53:78:bd:b1:
                    92:52:0a:6d:4b:7c:6b:f0:dc:be:96:34:b8:46:91:
                    6a:a3:d5:74:84:b3:f0:eb:97:d8:7c:d0:89:c1:ff:
                    76:df:b9:13:ba:d1:9d:dd:52:f6:42:c1:01:13:c6:
                    a9:0e:43:2d:f5:6f:f4:a5:36:89:3f:2f:75:8a:56:
                    cc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:13:61:79:F6:F3:5D:88:12:8B:7D:73:EB:22:35:6A:B1:24:D8:2D
            X509v3 Authority Key Identifier:
                keyid:FA:45:26:A5:B6:F9:4A:3A:0B:F1:9B:48:F8:54:C3:7A:F4:E9:78:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EF40A7B2FE0C4A9C6A1F449401FA3F64271CCD6FBDF05E956FD69A3039460964/0/FA4526A5B6F94A3A0BF19B48F854C37AF4E9788D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA4526A5B6F94A3A0BF19B48F854C37AF4E9788D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EF40A7B2FE0C4A9C6A1F449401FA3F64271CCD6FBDF05E956FD69A3039460964/0/FA4526A5B6F94A3A0BF19B48F854C37AF4E9788D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:57:a8:cf:40:53:6a:62:6b:8b:6f:2b:7f:5a:93:15:93:77:
         c5:fb:e1:66:15:86:f1:70:d0:d8:1c:88:f1:15:43:57:70:96:
         4c:08:36:39:25:f9:a6:e2:9b:8d:c3:97:75:ae:77:5f:79:f9:
         ee:39:e0:76:e2:6c:0f:85:3d:0d:14:4c:32:fb:5e:46:b1:ee:
         92:ae:a1:ec:47:cd:7c:c3:16:0c:27:6a:70:17:d4:13:21:d0:
         3a:39:4e:40:43:41:f4:a2:ba:f4:63:73:75:b5:46:2f:db:3a:
         1a:90:5a:25:76:e5:99:95:1e:91:06:83:e1:cb:39:df:48:65:
         50:02:55:c3:5e:9e:0a:d9:2d:85:01:9c:b1:e5:bc:fd:f8:5d:
         a7:7c:f9:36:8b:30:7b:13:09:f7:ed:02:55:d7:b3:4d:3f:3a:
         40:2b:ed:13:50:57:af:44:6a:78:d3:6f:ce:65:fc:01:7c:24:
         1e:30:f1:30:94:be:9c:81:5a:a7:98:da:34:e5:bd:21:08:67:
         f1:56:87:82:33:d4:bd:ff:fe:7a:03:d2:36:14:1c:17:c7:8b:
         3a:56:8d:39:01:b0:f9:cd:87:a2:a8:e2:68:01:0e:b8:53:9d:
         10:ca:be:9a:23:32:61:a1:3f:a6:29:78:bf:a3:f6:ce:69:ee:
         86:68:d3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----