Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.mft
File:                     3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.mft (raw, json)
Hash identifier:          NAEkAfNGMPEvaMfZ0/ZP1agfdmZOKEMwN/YIgfzk5yw=
Subject key identifier:   B5:07:66:9D:94:96:9C:FD:20:34:67:EF:E9:EC:5D:AC:76:08:AF:58
Authority key identifier: 34:32:C5:0F:EB:B6:FB:57:D8:AC:4E:D4:C0:5D:F2:0C:89:FE:6D:70
Certificate issuer:       /CN=3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70
Certificate serial:       0A68764B619513320F049D392FCA894761E2D577
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.mft
Manifest number:          BB
Signing time:             Thu 27 Mar 2025 16:35:13 +0000
Manifest this update:     Thu 27 Mar 2025 16:30:13 +0000
Manifest next update:     Tue 01 Apr 2025 16:33:13 +0000
Files and hashes:         1: 323830333a356439303a3a2f33322d3536203d3e20323733303030.roa (hash: 0OoP3A238IuGlM9478CrBEi+3xgJKgMmBk2U8Rug3mA=)
                          2: 3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.crl (hash: yKhBhSXnD2KiVOHDkr+XiPYG/sPuNMJInpBwHJFl/No=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:68:76:4b:61:95:13:32:0f:04:9d:39:2f:ca:89:47:61:e2:d5:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70
        Validity
            Not Before: Mar 27 16:30:13 2025 GMT
            Not After : Apr  1 16:33:13 2025 GMT
        Subject: CN=B507669D94969CFD203467EFE9EC5DAC7608AF58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:84:f6:6a:79:86:36:b9:c0:88:a9:fd:75:8c:
                    be:b3:45:af:8a:ca:fd:ae:bd:8b:7b:c9:0f:c6:da:
                    2b:09:f4:3a:a6:e1:f8:11:73:3b:08:48:be:c0:ec:
                    a6:19:bd:b4:73:40:d0:1d:19:28:3d:1a:48:c2:8c:
                    4d:82:e1:4f:45:66:2a:50:80:06:96:01:a5:00:34:
                    1f:53:12:b6:3c:6f:53:05:6a:eb:68:67:91:65:aa:
                    14:37:36:09:2a:09:d8:fc:6e:a2:71:69:1a:1c:64:
                    c6:2b:d9:b2:1b:be:7d:6e:e5:6f:5b:12:63:b1:47:
                    ce:67:4a:d4:d1:37:2f:c6:ff:5f:8b:7b:aa:de:a2:
                    ee:2a:f5:e0:e9:9d:b6:09:a3:e4:05:ac:c6:ff:89:
                    69:e4:aa:e6:38:f2:15:5d:ac:1e:c6:92:fc:7a:ad:
                    cd:06:d3:b7:10:d0:1e:f4:79:34:ac:64:6c:e3:6c:
                    1b:d7:dc:f7:8d:a0:97:b1:71:76:fd:e7:f5:2f:58:
                    e6:83:d2:a5:91:56:25:1c:3f:0c:9f:66:59:a4:a0:
                    14:72:01:e4:d1:86:bd:c1:fa:8a:53:27:1b:8e:b7:
                    61:f8:20:d8:15:10:97:fa:1c:13:f4:6b:0c:cb:ca:
                    a5:fa:c4:25:58:3a:2e:3b:6b:cf:2d:ac:b7:d9:1d:
                    64:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:07:66:9D:94:96:9C:FD:20:34:67:EF:E9:EC:5D:AC:76:08:AF:58
            X509v3 Authority Key Identifier:
                keyid:34:32:C5:0F:EB:B6:FB:57:D8:AC:4E:D4:C0:5D:F2:0C:89:FE:6D:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:82:cb:2c:92:18:9b:11:2d:98:5b:44:3b:bf:ed:83:0f:aa:
         78:85:a3:0c:4c:88:ad:5c:3e:26:ab:78:c7:f7:8f:4d:ab:0e:
         35:44:33:a5:b0:b1:ab:9f:73:96:ea:d6:45:0e:a7:a1:c8:f8:
         07:ab:b4:7a:b7:62:b4:a0:3f:d1:f6:b2:90:a7:69:a9:a8:b3:
         36:13:b7:e1:6d:39:59:7a:ae:fd:af:b1:e5:4d:0d:8c:04:a8:
         06:29:39:61:55:6d:ba:74:25:a8:67:73:a9:32:bb:e1:3c:b3:
         7d:73:99:5e:1f:af:86:e9:49:8b:d4:e6:73:88:73:60:f6:a5:
         a7:cf:c9:87:ce:a1:72:b2:56:80:37:0c:f2:71:9d:f7:75:b2:
         84:14:05:80:f5:b3:4e:97:1b:66:63:62:47:08:8b:82:d5:12:
         29:c2:d6:ac:e4:af:12:77:7d:0c:db:a4:4a:88:46:86:a4:5e:
         6f:64:39:cc:75:12:ee:ff:90:8f:63:11:82:bd:6b:9b:10:6c:
         f9:e6:0f:ad:d7:8d:81:ef:c8:0c:ce:e7:09:4b:94:5c:9e:40:
         15:a6:9f:5e:ae:03:62:02:07:be:56:ab:d7:5b:f2:20:f2:e6:
         60:0c:19:4f:16:41:1a:49:aa:5c:7f:9b:42:3d:55:2f:bc:a0:
         0d:f6:6c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----