Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B996C1AF21FC5FB59BE1C349AAA90661D63D6846477746596187E432F8F5F23/0/962E09CED777E3B6E30D51D97754EF33B1DFD373.mft
File:                     962E09CED777E3B6E30D51D97754EF33B1DFD373.mft (raw, json)
Hash identifier:          QnLdaR/UHsFIR74N2YeZePE3eGBxYC/5C4wJ1Olgj98=
Subject key identifier:   D4:1E:CF:13:DD:75:A1:41:67:04:B3:84:E2:CD:F8:F9:17:3A:AD:73
Authority key identifier: 96:2E:09:CE:D7:77:E3:B6:E3:0D:51:D9:77:54:EF:33:B1:DF:D3:73
Certificate issuer:       /CN=962E09CED777E3B6E30D51D97754EF33B1DFD373
Certificate serial:       755493F5F7DD1484E64891028385C72BE8A7B66F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/962E09CED777E3B6E30D51D97754EF33B1DFD373.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B996C1AF21FC5FB59BE1C349AAA90661D63D6846477746596187E432F8F5F23/0/962E09CED777E3B6E30D51D97754EF33B1DFD373.mft
Manifest number:          CA
Signing time:             Fri 28 Mar 2025 08:04:24 +0000
Manifest this update:     Fri 28 Mar 2025 07:59:24 +0000
Manifest next update:     Wed 02 Apr 2025 19:03:24 +0000
Files and hashes:         1: 3139322e3138382e3139362e302f32342d3234203d3e203631343638.roa (hash: h9dnycYTAdoEnbn7gYFcGHL6rZq1LrBoefqpnJS58ME=)
                          2: 3139322e3138382e3139362e302f32342d3234203d3e203237393437.roa (hash: I8m96l7DHvVtPyk13zicoUsJSzHPYgBNbei+dp8EgHg=)
                          3: 962E09CED777E3B6E30D51D97754EF33B1DFD373.crl (hash: iUrvdn/eYtA3CT+VkZsNDvUjYm8pXtuDyuGYZ7RtyJg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:54:93:f5:f7:dd:14:84:e6:48:91:02:83:85:c7:2b:e8:a7:b6:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=962E09CED777E3B6E30D51D97754EF33B1DFD373
        Validity
            Not Before: Mar 28 07:59:24 2025 GMT
            Not After : Apr  2 19:03:24 2025 GMT
        Subject: CN=D41ECF13DD75A1416704B384E2CDF8F9173AAD73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:32:af:d3:ea:e2:d8:60:d0:86:4e:25:19:54:
                    d8:51:74:bb:a7:ac:bb:ac:c5:a2:17:a4:1c:a8:cc:
                    e3:ff:2f:bd:00:a7:ad:bc:00:a1:2f:98:4f:2a:fe:
                    dd:6b:f1:11:78:06:35:2b:7d:a1:4c:4c:47:65:76:
                    50:69:d1:ec:38:fd:8f:c9:ed:91:4a:be:b3:05:c2:
                    b9:ed:83:0b:6e:76:d9:f5:d1:12:36:81:8f:04:b1:
                    e6:0c:39:12:1a:7f:9a:0a:ea:13:06:63:d2:40:04:
                    e0:36:ab:6d:52:3d:d8:2e:b9:f6:75:1c:73:6e:ff:
                    c1:b7:98:9d:0a:a8:ad:4c:b3:41:82:70:f9:00:a0:
                    0c:e0:31:5d:e9:ef:3d:9c:70:7e:7f:0a:86:c5:6f:
                    7f:9c:d6:31:32:ba:ed:40:0e:26:f2:07:c7:70:13:
                    9a:e2:58:24:a8:d7:c3:99:2a:3b:7f:00:b0:a5:24:
                    1a:87:fc:d4:a8:32:2b:03:cf:5a:5e:e2:58:34:28:
                    fb:5b:1e:53:83:18:4c:79:ae:37:90:4f:8a:a0:39:
                    13:5c:8c:e0:1c:4c:a8:9a:2c:ea:ed:0c:09:52:07:
                    88:56:81:bf:85:68:24:d0:d7:d5:fb:a0:c6:2b:32:
                    fc:92:f3:84:a0:e8:07:2e:1c:25:d5:7b:a3:04:44:
                    e8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1E:CF:13:DD:75:A1:41:67:04:B3:84:E2:CD:F8:F9:17:3A:AD:73
            X509v3 Authority Key Identifier:
                keyid:96:2E:09:CE:D7:77:E3:B6:E3:0D:51:D9:77:54:EF:33:B1:DF:D3:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B996C1AF21FC5FB59BE1C349AAA90661D63D6846477746596187E432F8F5F23/0/962E09CED777E3B6E30D51D97754EF33B1DFD373.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/962E09CED777E3B6E30D51D97754EF33B1DFD373.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B996C1AF21FC5FB59BE1C349AAA90661D63D6846477746596187E432F8F5F23/0/962E09CED777E3B6E30D51D97754EF33B1DFD373.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:27:66:a2:01:f4:14:36:01:5e:1b:d6:7a:f2:7d:cc:61:8a:
         a1:76:2c:3e:ef:1f:d4:d9:7d:90:98:da:c5:4d:89:e4:12:db:
         16:ed:dd:2b:82:83:f7:65:19:ce:fd:8f:a8:52:99:81:a8:ac:
         a0:9c:52:1a:66:1e:b1:c6:53:1c:f7:27:63:7a:d4:e2:d1:6f:
         71:48:69:3e:91:49:ef:37:bc:a2:11:f9:3b:4f:8f:16:88:9e:
         84:28:9d:ea:68:17:3c:a2:ad:c8:5a:d5:79:ec:01:20:04:55:
         f7:1f:50:45:1a:46:e3:1d:1e:7b:b6:85:48:fc:d7:9b:61:05:
         dc:66:59:bc:5c:af:66:bf:2b:e0:da:93:a8:e0:20:f4:c1:35:
         74:55:ce:5a:92:bf:4b:23:99:4b:af:15:61:56:19:ba:48:71:
         47:c5:b4:b1:80:5e:4d:c4:73:2c:c1:e3:74:95:5a:7c:95:bd:
         b9:26:29:29:91:20:ed:a3:42:56:2e:7c:ac:f7:19:69:25:97:
         bb:d3:dd:ac:80:b1:b2:e6:d9:d2:bb:c7:8f:19:92:24:c9:4e:
         9b:61:0b:99:4e:4a:2e:c5:4d:6e:8b:ea:96:e6:f3:35:c7:ad:
         11:46:3e:fa:7b:20:f6:2a:4c:f4:7a:45:42:56:8d:36:ae:d0:
         b6:9d:6a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----