Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.mft
File:                     6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.mft (raw, json)
Hash identifier:          6fub5B3Hi66yKPFDS1V+584pXfM3UxlyOPEc1F3eTsY=
Subject key identifier:   17:6D:3C:1D:44:BB:89:89:DD:48:C8:FA:EA:7F:8A:97:58:63:C9:88
Authority key identifier: 6D:3F:C3:D1:EF:14:97:B6:50:EA:4B:8F:23:8C:71:F2:42:CC:D8:8A
Certificate issuer:       /CN=6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A
Certificate serial:       3F9DDEECEB858680495BBD21F75C257699C11891
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.mft
Manifest number:          CC
Signing time:             Fri 28 Mar 2025 23:28:14 +0000
Manifest this update:     Fri 28 Mar 2025 23:23:14 +0000
Manifest next update:     Wed 02 Apr 2025 15:45:14 +0000
Files and hashes:         1: 6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.crl (hash: au5FCXKC+hA5krWJKg0tLRGWbdVpCR4Tlja45SBEiCg=)
                          2: 3133382e302e3138342e302f32322d3234203d3e20323633373336.roa (hash: LreV3pWxeKKCikUJg8gOiT+QcUPi7aBmdK7BJoLjxII=)
                          3: 323830333a333738303a3a2f33322d3438203d3e20323633373336.roa (hash: JsfkzHgd62PLshMgZRGVLPzkv986/0klf+PAgJXraxY=)
                          4: 3137302e3233392e3132382e302f32322d3234203d3e20323633373336.roa (hash: ZjuXBLq6kh06FNk3nUx9QMlVljFchcVqsd6haxB6b9U=)
                          5: 3134332e3133372e32302e302f32322d3234203d3e20323633373336.roa (hash: KDXCOis003itqjsQnqa89/YB7rkYgCnu5yCRyjBrmdM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:9d:de:ec:eb:85:86:80:49:5b:bd:21:f7:5c:25:76:99:c1:18:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A
        Validity
            Not Before: Mar 28 23:23:14 2025 GMT
            Not After : Apr  2 15:45:14 2025 GMT
        Subject: CN=176D3C1D44BB8989DD48C8FAEA7F8A975863C988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b2:53:1d:54:1f:2a:41:58:a8:df:3d:43:65:
                    af:e9:42:68:32:93:04:72:fd:1e:33:74:5f:da:1f:
                    f9:3a:66:5d:17:b5:0d:b3:ae:67:75:e3:ee:28:0e:
                    13:f3:1e:cc:84:e6:f1:f0:96:ae:4b:4f:e1:ca:04:
                    20:7f:24:2f:a5:a6:4c:4b:53:6c:d8:e5:45:41:95:
                    8a:a6:77:ba:e5:71:a0:62:91:28:00:a4:8c:41:60:
                    ba:bf:02:dc:01:58:eb:bb:8a:7c:50:0f:12:06:24:
                    e8:b8:e5:4e:f3:d2:2e:df:6c:fd:ab:25:ae:df:d0:
                    ac:fb:bb:40:26:f3:91:15:bd:68:52:78:02:94:b3:
                    da:7f:f5:78:5d:ec:eb:a1:b1:55:97:0e:c9:b7:e7:
                    a0:ba:cb:7c:43:31:d1:d6:b9:37:13:92:58:04:ba:
                    23:bc:77:a4:e8:ae:0b:f0:7e:05:b5:0f:a2:59:e9:
                    c3:47:35:ad:64:00:14:d9:d1:b3:66:b2:ca:10:5d:
                    e0:86:17:48:e4:29:af:1a:2d:28:f9:78:2b:99:c5:
                    23:93:1a:31:58:d3:6c:0c:34:01:7a:1d:70:9f:6d:
                    5e:e5:7e:b3:86:02:99:be:d2:b2:42:73:d4:62:0d:
                    b9:d0:5d:ba:6a:50:ab:86:7d:05:d0:df:11:d3:8f:
                    ab:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6D:3C:1D:44:BB:89:89:DD:48:C8:FA:EA:7F:8A:97:58:63:C9:88
            X509v3 Authority Key Identifier:
                keyid:6D:3F:C3:D1:EF:14:97:B6:50:EA:4B:8F:23:8C:71:F2:42:CC:D8:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:68:6a:90:cc:a8:15:00:f4:2d:49:cc:d7:c4:72:2c:27:b6:
         e3:30:d0:91:55:c2:cb:b5:26:0c:d9:a5:aa:83:8e:65:45:3b:
         95:a9:f0:6c:6d:c8:a0:28:40:3e:2f:26:cd:f0:43:49:e8:9c:
         92:0f:a8:09:43:90:83:8a:c3:c9:62:57:b3:53:a6:78:89:e0:
         cf:3d:11:7f:fd:6c:78:b2:05:5e:b4:e9:74:77:e3:46:74:90:
         fc:a5:ef:bc:72:93:e9:44:fc:b2:5a:b7:0d:79:e5:12:35:38:
         23:7b:09:41:13:ee:74:ac:c6:e5:41:5f:0a:e8:06:d9:79:34:
         82:03:ce:b3:2e:12:92:3a:67:8d:b3:a4:eb:53:2a:fe:5d:94:
         b3:8d:fd:a4:38:80:ad:52:4f:72:e8:cb:70:bb:e0:29:42:ca:
         0f:9a:11:72:a2:db:2d:b3:60:25:6d:fa:91:32:b0:12:64:d9:
         63:9c:d4:06:78:b2:38:d6:a9:c6:15:eb:81:44:ac:ae:b6:d1:
         eb:3b:f4:0b:c5:e2:ae:fb:49:89:c5:f8:26:2b:bd:6a:68:dd:
         b8:31:cd:6c:02:08:fb:63:62:3f:78:62:d3:c0:49:85:d7:9e:
         e8:1c:a4:87:26:e4:21:d1:db:d2:a1:1f:81:6c:0c:26:67:eb:
         7a:17:6c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----