Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.mft
File:                     CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.mft (raw, json)
Hash identifier:          59Nx1TT6n/EeSpZ2xEudnl5mDbtqcDjXjAKnpNuYX7c=
Subject key identifier:   DF:3B:DB:DA:C9:FC:E6:39:90:27:10:5F:22:D2:D1:82:8B:26:57:B0
Authority key identifier: CD:3C:D6:2A:62:CA:FB:D9:9D:1A:C6:CB:B6:E0:73:A5:51:84:5F:27
Certificate issuer:       /CN=CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27
Certificate serial:       6A40FBDA312598574B5A4D4498DCE42A946C187B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.mft
Manifest number:          C8
Signing time:             Sat 29 Mar 2025 09:44:30 +0000
Manifest this update:     Sat 29 Mar 2025 09:39:30 +0000
Manifest next update:     Thu 03 Apr 2025 20:09:30 +0000
Files and hashes:         1: 3230302e31312e33332e302f32342d3234203d3e20323730303238.roa (hash: wK3oeno74goU9D7+c/b55vzwIp59oFbD0eZNt8h6ig0=)
                          2: 323830313a3133613a3a2f34342d3434203d3e20323730303238.roa (hash: Q1TLNayYAd06cStRkVHP3ITO3rEv1WH9iz5ULgyaMCM=)
                          3: CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.crl (hash: 5hfxGUIoCZw5g2op4XUZ/ketqETd7YPR7C2eN1SmMBo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:40:fb:da:31:25:98:57:4b:5a:4d:44:98:dc:e4:2a:94:6c:18:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27
        Validity
            Not Before: Mar 29 09:39:30 2025 GMT
            Not After : Apr  3 20:09:30 2025 GMT
        Subject: CN=DF3BDBDAC9FCE6399027105F22D2D1828B2657B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7b:2f:ec:0c:2b:14:1e:8e:0b:ef:43:20:7e:
                    9e:9d:3b:09:2d:6d:53:23:f1:65:d3:cc:84:6a:47:
                    23:b6:8e:1d:4f:63:f0:ed:b5:b1:9a:a8:57:c4:9b:
                    e7:3b:ce:0f:93:b2:a4:4a:1c:d9:5d:d7:3a:99:58:
                    39:a7:61:c1:71:5c:54:ff:bc:72:0f:23:98:22:0c:
                    c2:34:0f:ec:11:7e:c2:c9:0a:eb:f5:4f:ec:24:8c:
                    44:cb:78:0e:fb:75:50:dd:f7:61:1f:d2:16:70:d8:
                    7b:e4:94:11:c2:ae:87:e3:bc:75:f6:63:1a:03:3e:
                    0e:30:16:14:df:84:dc:ac:74:1e:7a:77:b4:f2:bf:
                    a7:fe:04:64:d9:e6:dc:5b:3c:30:ff:b0:45:57:e9:
                    44:10:52:6d:44:7b:95:26:db:4b:82:b7:8f:6f:57:
                    13:7e:d1:fd:97:74:02:66:a5:05:3f:80:4c:54:fa:
                    ea:5c:c3:8a:7c:a3:d8:1a:3e:4e:17:c3:56:87:ee:
                    4f:7e:eb:aa:69:2b:62:0a:77:38:d2:8b:16:32:0e:
                    0b:cb:2e:9a:15:ab:2d:49:d8:b2:0a:c3:fc:8f:2f:
                    fe:4e:79:e8:c5:c2:a5:f6:7e:4d:25:05:3f:2f:0d:
                    f3:4a:ab:31:48:0b:63:d0:7f:d2:13:65:9a:82:64:
                    ac:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3B:DB:DA:C9:FC:E6:39:90:27:10:5F:22:D2:D1:82:8B:26:57:B0
            X509v3 Authority Key Identifier:
                keyid:CD:3C:D6:2A:62:CA:FB:D9:9D:1A:C6:CB:B6:E0:73:A5:51:84:5F:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:1b:f4:e9:64:4a:fd:b3:33:bc:f1:3d:f8:9e:07:2d:bb:7e:
         63:11:34:75:6d:5a:3c:cf:1e:c8:ff:d6:42:a1:dd:7f:c4:02:
         43:d4:aa:f0:71:b5:33:c9:a9:d0:1d:fb:91:0d:9c:ff:f2:61:
         b9:ef:82:5e:7f:be:e5:9c:38:3a:11:29:eb:22:fb:bc:b3:52:
         e3:49:1b:68:b5:8f:a1:b8:8c:95:a4:a8:89:0c:54:cf:a1:48:
         90:3e:9d:b3:d9:96:be:c3:f0:0f:6d:3b:9a:6c:93:83:1d:12:
         55:bb:cd:01:f4:6b:05:93:61:b7:fb:04:8a:2e:50:18:fc:69:
         ef:75:5c:9a:bc:7d:cd:59:99:18:29:0d:f2:e7:d7:d1:0c:23:
         f9:8f:34:8e:d3:f5:1c:82:fe:a7:cb:e4:2f:79:29:af:0a:2e:
         bd:32:6d:0a:d2:b5:cf:c2:87:7b:bf:c8:e4:5c:9d:64:6f:0f:
         f7:17:85:a2:9a:8c:7f:28:31:a7:ec:b9:0f:75:94:e1:f4:1b:
         29:36:de:b9:ce:17:40:7d:ce:71:f5:ec:e7:9b:36:27:94:68:
         e7:ea:db:c5:97:d7:7c:71:4e:e4:be:40:ca:65:bf:0e:6e:1c:
         45:d5:f8:97:b7:11:de:3f:c2:94:7f:4c:59:35:39:64:73:14:
         67:af:5f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----