Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3C3F79F48292FED8066255DCDF35ADE753C735A5565AF1D4DF2D81DAD96C1618/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.mft
File:                     65886C5BD66D87F36CE0A14E138941C8AC70F2C9.mft (raw, json)
Hash identifier:          qi4Jxoky4QzD8xbC4BO6+9Sv09OtSZwApk7G4aij6ho=
Subject key identifier:   3D:2D:81:93:12:9A:CA:D4:90:14:AE:DF:A4:67:F3:5B:5D:D3:FB:8D
Authority key identifier: 65:88:6C:5B:D6:6D:87:F3:6C:E0:A1:4E:13:89:41:C8:AC:70:F2:C9
Certificate issuer:       /CN=65886C5BD66D87F36CE0A14E138941C8AC70F2C9
Certificate serial:       238F0AD3CBEFFCEF81D18AC8FE1FBC326FAF3068
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3C3F79F48292FED8066255DCDF35ADE753C735A5565AF1D4DF2D81DAD96C1618/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.mft
Manifest number:          CB
Signing time:             Fri 28 Mar 2025 02:51:01 +0000
Manifest this update:     Fri 28 Mar 2025 02:46:01 +0000
Manifest next update:     Wed 02 Apr 2025 10:31:01 +0000
Files and hashes:         1: 65886C5BD66D87F36CE0A14E138941C8AC70F2C9.crl (hash: jg8UXbyHSdeg/NvF8SY1/7tJkTstIf9Sl2vxGe56hxM=)
                          2: 3133382e3230342e3136302e302f32322d3234203d3e20323633383131.roa (hash: zLlfQ3vYVHQBvsVnaxHNJv0/xPNBuyhNcogtF4v0qgI=)
                          3: 323830333a643234303a3a2f33322d3438203d3e20323633383131.roa (hash: x81vkwSG57QSoznsQ+v6aeXylTdDBZKiZSIyl+kcKgc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:8f:0a:d3:cb:ef:fc:ef:81:d1:8a:c8:fe:1f:bc:32:6f:af:30:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65886C5BD66D87F36CE0A14E138941C8AC70F2C9
        Validity
            Not Before: Mar 28 02:46:01 2025 GMT
            Not After : Apr  2 10:31:01 2025 GMT
        Subject: CN=3D2D8193129ACAD49014AEDFA467F35B5DD3FB8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:77:7a:88:ee:9a:49:6d:f5:9a:b0:ed:af:11:
                    ae:f9:84:08:51:40:83:4d:f3:c3:35:ef:9e:cf:48:
                    a0:31:00:fd:8f:5a:54:e6:91:a3:c6:9c:2b:b3:d7:
                    69:39:b3:21:7d:ea:3e:10:7e:83:05:3e:29:04:e6:
                    3a:2f:20:a7:68:2b:fa:b9:01:e9:94:02:cb:1b:00:
                    55:69:c5:80:f3:aa:15:60:ff:51:39:4d:ef:f7:07:
                    49:b4:d0:fa:79:ee:cd:df:ad:d4:20:30:bc:0d:4b:
                    44:68:d4:ef:6c:a1:55:21:ac:1b:38:95:b3:a7:ad:
                    9d:52:8b:a6:ff:aa:d7:c8:da:59:86:f1:f7:82:d6:
                    f2:8c:f9:98:86:84:1c:ea:e4:ac:5b:7b:4b:93:91:
                    af:1d:76:fc:63:2a:ae:67:4d:bb:44:4a:6f:71:af:
                    a0:9e:38:f8:ed:c3:3d:51:e3:72:31:47:78:a0:6f:
                    81:23:9f:89:94:f6:49:dc:dd:8e:d2:6a:47:c5:1a:
                    44:fb:a4:9c:dc:5f:af:59:62:46:49:b8:2f:b7:ba:
                    1c:4e:9c:d7:f7:a5:eb:fa:06:9f:76:15:db:f6:39:
                    28:f8:80:07:82:c8:ac:c8:81:69:cd:9b:b6:d6:e1:
                    0d:10:54:2c:e5:8b:fc:40:09:b0:6c:38:3b:12:55:
                    f7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:2D:81:93:12:9A:CA:D4:90:14:AE:DF:A4:67:F3:5B:5D:D3:FB:8D
            X509v3 Authority Key Identifier:
                keyid:65:88:6C:5B:D6:6D:87:F3:6C:E0:A1:4E:13:89:41:C8:AC:70:F2:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3C3F79F48292FED8066255DCDF35ADE753C735A5565AF1D4DF2D81DAD96C1618/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3C3F79F48292FED8066255DCDF35ADE753C735A5565AF1D4DF2D81DAD96C1618/0/65886C5BD66D87F36CE0A14E138941C8AC70F2C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:7c:27:47:a8:64:f3:31:e6:37:6a:5a:5d:a3:6b:c5:2c:70:
         d9:9a:f1:21:93:2e:ac:0a:6e:79:02:dc:13:9e:81:ea:b4:ed:
         37:62:09:6a:78:b5:2d:6a:b9:77:1d:25:5d:d8:10:12:a0:1a:
         a1:ba:cb:9f:5d:f2:53:88:6f:3b:27:8b:90:8d:84:5e:20:57:
         01:da:73:ed:68:45:10:36:c1:aa:aa:01:0d:56:82:b4:7a:13:
         39:6b:16:9a:89:74:f6:e8:3d:ab:92:4f:39:90:12:5d:27:77:
         0d:d6:a6:c1:30:1f:b8:6b:9b:98:20:60:8d:aa:5f:fd:9a:56:
         fe:be:8f:b6:98:23:89:36:b7:02:a0:bb:68:f3:b8:2e:60:82:
         da:e1:83:ff:74:c5:ec:1e:2e:34:01:f7:97:5a:7a:8a:ad:b3:
         4d:98:b1:30:02:78:88:74:fb:87:43:6e:ce:50:77:ea:c4:75:
         32:51:41:7c:8e:77:e5:3b:4c:86:69:9a:42:e0:70:44:d5:db:
         df:8f:8f:96:de:9c:81:df:95:6f:cb:5c:e1:42:e6:4c:64:1a:
         32:5e:89:7b:6c:e0:8e:c6:b0:01:99:ea:03:a9:d9:81:bd:9b:
         86:b5:73:28:54:5f:e1:3b:38:01:a7:91:86:ec:ae:68:40:fd:
         b9:15:8a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----