Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.mft
File:                     C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.mft (raw, json)
Hash identifier:          1Wyr5BlIE3ZlLI2aDaTSOKWHKvh1jTGBz3bZ/yR2ic8=
Subject key identifier:   66:76:7E:A4:1B:2C:1B:43:D3:23:B7:92:9E:3B:74:7C:D9:41:77:F9
Authority key identifier: C4:B9:5F:E3:CE:8C:D6:14:37:89:32:4F:89:D2:79:1D:AB:BB:5A:D8
Certificate issuer:       /CN=C4B95FE3CE8CD6143789324F89D2791DABBB5AD8
Certificate serial:       1DDE711B8E2888AF79A77701E8EE77E81F5BF341
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.mft
Manifest number:          C9
Signing time:             Fri 28 Mar 2025 12:06:37 +0000
Manifest this update:     Fri 28 Mar 2025 12:01:37 +0000
Manifest next update:     Tue 01 Apr 2025 12:12:37 +0000
Files and hashes:         1: 323830313a3137323a3a2f34382d3438203d3e203134303830.roa (hash: mGXnjOmUkivco7UWNXNOXRqozorBrbTRwCXCle8sZ60=)
                          2: 323830313a3137323a323a3a2f34382d3438203d3e203237393531.roa (hash: Rb9y9DwnR6tHMoVEq1jQr1oPiLPO/N9wM0q5+pYQLp8=)
                          3: C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.crl (hash: bLOz2FJoTgALx1NvS4gd1TpKLaQx1bYzM8f/58mrNpo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:de:71:1b:8e:28:88:af:79:a7:77:01:e8:ee:77:e8:1f:5b:f3:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4B95FE3CE8CD6143789324F89D2791DABBB5AD8
        Validity
            Not Before: Mar 28 12:01:37 2025 GMT
            Not After : Apr  1 12:12:37 2025 GMT
        Subject: CN=66767EA41B2C1B43D323B7929E3B747CD94177F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ff:fb:78:d2:d4:d7:eb:d7:44:f1:51:68:73:
                    9e:3b:2a:13:bc:06:66:c3:17:35:11:27:bb:db:80:
                    73:ac:db:d9:af:d4:81:07:4c:ab:b3:c3:f1:0b:92:
                    2f:0f:35:9c:e8:ec:5d:f5:1f:c8:09:c7:14:b4:7c:
                    6a:af:e9:7e:1a:b1:95:3f:5d:37:bc:f9:87:7e:e2:
                    d5:0e:db:85:bb:bf:7a:8e:11:05:2b:20:7a:c1:9c:
                    a5:6d:52:05:6a:da:6c:15:cb:d8:56:18:a7:ff:e6:
                    85:e1:42:5b:17:3c:e4:95:8d:ee:e2:ac:62:4d:e4:
                    a5:a9:12:2f:62:e9:6d:f1:57:12:09:1d:8a:d0:e1:
                    f2:b8:49:e4:d6:12:87:76:9b:96:46:c0:57:12:97:
                    82:dc:e7:aa:b5:26:f6:27:df:7f:6d:d7:6f:06:94:
                    f6:53:11:49:79:76:1f:4c:3f:19:e2:c6:27:a4:ae:
                    9b:20:17:22:de:8a:33:c8:10:13:c5:17:7c:17:4a:
                    fa:f3:ad:db:e4:70:c6:63:93:86:af:ec:f2:37:55:
                    ca:cc:1d:e7:57:ad:4d:de:2a:f7:81:bb:9b:55:5a:
                    0f:40:3c:40:dc:e1:0c:3c:d3:fc:44:2d:f9:66:d5:
                    0d:4e:7f:a2:86:11:82:d5:5c:0b:4b:a1:76:95:6a:
                    50:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:76:7E:A4:1B:2C:1B:43:D3:23:B7:92:9E:3B:74:7C:D9:41:77:F9
            X509v3 Authority Key Identifier:
                keyid:C4:B9:5F:E3:CE:8C:D6:14:37:89:32:4F:89:D2:79:1D:AB:BB:5A:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:69:54:c8:ad:45:4f:05:56:5e:e3:ce:c3:56:18:14:5b:98:
         1a:63:c3:9f:2e:bb:48:2c:da:db:90:2a:29:22:30:22:52:9e:
         78:59:b4:8d:01:f8:1a:b5:fb:d6:92:cd:9e:6f:03:dd:26:83:
         ae:41:d7:ea:dc:e4:fe:51:4e:e4:84:a7:32:5f:65:e0:2f:b6:
         30:40:38:04:29:e6:26:2b:26:57:7f:4f:ad:64:83:b5:2c:0a:
         84:7b:bd:77:3b:10:1c:43:14:dd:d4:dd:4a:7c:16:c2:77:a8:
         9a:66:56:83:b9:b1:ff:b4:04:8e:0c:75:e9:5a:04:cb:eb:1b:
         eb:5a:2d:ee:cd:dd:a4:e9:42:87:0a:d5:be:7b:75:3c:bf:5d:
         0e:09:75:03:96:3b:a1:6a:8d:06:b1:2b:fb:84:69:1a:29:14:
         9c:e1:11:81:c5:23:fe:a3:c3:e3:a3:34:9d:e1:c0:02:31:3f:
         ec:5b:aa:48:26:1f:d8:f9:33:29:c3:a4:f3:91:0b:85:ec:f0:
         54:10:eb:67:fb:34:a2:8b:40:a6:68:85:8f:d4:d1:8a:0d:21:
         6d:00:71:d4:18:22:01:72:66:58:da:92:5f:f5:f4:74:ad:5d:
         af:67:c3:db:63:07:4c:df:f2:73:65:d2:4c:dc:c6:83:82:22:
         e5:84:50:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----