Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/839E6565384F85C294751388EE8A204384064042CFC6A40832C695670AA7E54F/0/9AF6F7454394FA95451475548870C004D4158E0D.mft
File:                     9AF6F7454394FA95451475548870C004D4158E0D.mft (raw, json)
Hash identifier:          BI2auKRm6n7wVIHOxCGz3V/fWpboPzAbDjE5/uEc/yc=
Subject key identifier:   52:31:EB:C9:FE:D3:07:BD:A5:EE:36:F4:9C:F6:26:8C:78:57:4A:73
Authority key identifier: 9A:F6:F7:45:43:94:FA:95:45:14:75:54:88:70:C0:04:D4:15:8E:0D
Certificate issuer:       /CN=9AF6F7454394FA95451475548870C004D4158E0D
Certificate serial:       2A4979178D0438A90DCD434BC1218DFAD726F7CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AF6F7454394FA95451475548870C004D4158E0D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/839E6565384F85C294751388EE8A204384064042CFC6A40832C695670AA7E54F/0/9AF6F7454394FA95451475548870C004D4158E0D.mft
Manifest number:          C8
Signing time:             Thu 27 Mar 2025 11:01:52 +0000
Manifest this update:     Thu 27 Mar 2025 10:56:52 +0000
Manifest next update:     Tue 01 Apr 2025 13:21:52 +0000
Files and hashes:         1: 34352e3232392e3234382e302f32322d3234203d3e20323636373037.roa (hash: nWp/xKJ7guRjv7dv+RXJ9JPlZSpCRZSIuMFEG0F4d1M=)
                          2: 323830333a336432303a3a2f33322d3332203d3e20323636373037.roa (hash: PcmD+RUwbOPxao2gJgWAbVSC+Aw7Tw1p7ht9aReWq4w=)
                          3: 9AF6F7454394FA95451475548870C004D4158E0D.crl (hash: eQ4b/3jYht4mfze4TBn/HeVpUTWhWf0LBssiRaGt+ww=)
                          4: 34352e3232392e3235302e302f32332d3233203d3e20323636373037.roa (hash: x9l6/w+wC7pmn8uV/raklVFCxp4NGK7UuMtAkLsA3/A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:49:79:17:8d:04:38:a9:0d:cd:43:4b:c1:21:8d:fa:d7:26:f7:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AF6F7454394FA95451475548870C004D4158E0D
        Validity
            Not Before: Mar 27 10:56:52 2025 GMT
            Not After : Apr  1 13:21:52 2025 GMT
        Subject: CN=5231EBC9FED307BDA5EE36F49CF6268C78574A73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:64:77:50:9b:f1:17:d1:c7:00:3a:a2:69:95:
                    79:4b:44:b5:58:b5:57:74:42:09:c9:f6:a3:3c:a2:
                    82:20:7c:ef:ef:92:16:7a:19:bd:09:c9:70:64:9c:
                    95:56:a7:ca:fc:2f:1f:41:02:b5:29:f8:ac:f5:bc:
                    ba:e8:1b:c1:91:7d:96:82:52:8c:f0:7c:d6:75:7c:
                    e6:49:1f:79:92:a4:4b:3d:ce:a2:81:63:9a:bc:5d:
                    1f:6e:ed:d6:da:af:eb:56:d7:dd:2e:90:4d:3f:6e:
                    1c:ce:26:da:bd:38:a8:14:8e:f4:4b:37:77:01:0e:
                    19:7f:56:38:b7:7d:22:e6:f1:90:4b:7d:53:72:9c:
                    92:48:30:ba:0a:a7:1d:cb:03:ea:6d:7e:91:91:21:
                    49:7c:b5:55:05:94:e8:4f:ab:20:9b:f3:37:c9:b9:
                    72:91:36:ec:17:ba:4a:0d:d5:43:b2:e9:9f:75:bc:
                    9b:78:6d:f8:4c:21:da:64:f7:87:49:ad:92:59:42:
                    92:9f:e3:8e:74:46:7f:db:13:77:b1:dd:92:6b:f6:
                    51:7e:ef:ce:c8:7d:60:e0:64:10:70:a9:8b:35:b1:
                    e0:47:70:44:9a:16:d3:c0:8f:d1:52:81:6c:3b:f9:
                    37:98:ec:ed:0f:b0:ea:51:b1:47:f5:97:e6:77:88:
                    69:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:31:EB:C9:FE:D3:07:BD:A5:EE:36:F4:9C:F6:26:8C:78:57:4A:73
            X509v3 Authority Key Identifier:
                keyid:9A:F6:F7:45:43:94:FA:95:45:14:75:54:88:70:C0:04:D4:15:8E:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/839E6565384F85C294751388EE8A204384064042CFC6A40832C695670AA7E54F/0/9AF6F7454394FA95451475548870C004D4158E0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AF6F7454394FA95451475548870C004D4158E0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/839E6565384F85C294751388EE8A204384064042CFC6A40832C695670AA7E54F/0/9AF6F7454394FA95451475548870C004D4158E0D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:c6:3b:c1:b7:e8:ff:2d:ad:85:eb:e7:aa:9e:be:f4:0d:60:
         c0:19:48:26:c4:b8:73:d6:6f:40:ab:16:bb:75:c1:f4:27:23:
         12:e4:cd:2c:cd:1b:0f:d2:86:03:22:0f:69:63:bb:d4:9c:7e:
         e9:f2:e3:37:0f:d7:e9:b8:1d:f3:3f:e3:80:d1:51:86:8d:cb:
         07:1f:93:8f:ae:5f:ff:ce:37:0e:9e:48:da:d7:8d:a0:9b:88:
         aa:e1:c5:59:d3:b8:8f:df:98:8e:23:ee:ed:5d:a5:f4:09:6c:
         f8:54:64:a9:eb:0c:98:b4:80:39:ba:29:4b:09:d4:9e:f0:9d:
         af:a0:38:8d:8f:34:94:4f:ab:ab:6c:81:6f:7e:c2:c6:34:0b:
         06:00:4f:1c:95:3d:c5:80:c3:5f:f6:a2:3f:9d:82:59:e0:ee:
         e0:56:13:43:a9:49:0b:e1:6a:44:a0:97:23:4e:22:c2:f0:11:
         a3:4f:7f:2a:88:d2:91:86:f6:35:7e:a1:04:a7:79:ff:c4:21:
         d9:a1:5a:6a:cd:cb:cc:d8:af:28:cd:93:c6:f7:86:7e:46:df:
         2d:e4:1f:88:4c:f2:11:d9:a1:d3:e7:94:32:2e:9a:38:0d:79:
         f9:8f:ab:f4:30:0f:39:5a:77:ba:3c:de:5a:a4:33:3b:d0:68:
         2f:de:cf:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----