Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.mft
File:                     991D588A86F87B224C9CDAEAF9C96C6555E8038E.mft (raw, json)
Hash identifier:          SHUidq/A0XfGOZM5DmU1VK+G1wT6ORmh/7VT98HrQvo=
Subject key identifier:   2C:C3:71:E0:2C:B0:E8:B2:A9:1C:A5:34:D1:B8:9B:61:16:29:9B:17
Authority key identifier: 99:1D:58:8A:86:F8:7B:22:4C:9C:DA:EA:F9:C9:6C:65:55:E8:03:8E
Certificate issuer:       /CN=991D588A86F87B224C9CDAEAF9C96C6555E8038E
Certificate serial:       410E49D857B164541548EC30F761B5B6E5C04DFB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.mft
Manifest number:          C0
Signing time:             Sat 29 Mar 2025 08:33:52 +0000
Manifest this update:     Sat 29 Mar 2025 08:28:52 +0000
Manifest next update:     Thu 03 Apr 2025 00:26:52 +0000
Files and hashes:         1: 991D588A86F87B224C9CDAEAF9C96C6555E8038E.crl (hash: nlJURqHkdL2YczGdXOQeYVmUyKdhHAivFGwjUKHTGTI=)
                          2: 3137392e302e32322e36342f32362d3236203d3e203635313035.roa (hash: R6mtpzoUA60V397hZKWJBQadz8Qws4PYXH9aRFRMeKs=)
                          3: 3137392e302e32312e3132382f32362d3236203d3e203635313034.roa (hash: 7e7SjP+DzRspvItk28lOzGdL+gXXXte2TT99PaBgJ3w=)
                          4: 3137392e302e32302e302f32322d3330203d3e203532343730.roa (hash: 8rUcU657m71mniNtmrWC6Tz2lvD/AWBUWeAsHChNH+0=)
                          5: 3137392e302e32302e302f32342d3235203d3e203635313035.roa (hash: FietV4nbBzl7X/sLCaoYfKb5JaXsEimaJMWPWhtL+mA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:0e:49:d8:57:b1:64:54:15:48:ec:30:f7:61:b5:b6:e5:c0:4d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991D588A86F87B224C9CDAEAF9C96C6555E8038E
        Validity
            Not Before: Mar 29 08:28:52 2025 GMT
            Not After : Apr  3 00:26:52 2025 GMT
        Subject: CN=2CC371E02CB0E8B2A91CA534D1B89B6116299B17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:39:e3:70:70:a5:3d:c4:35:73:2a:a1:d9:d8:
                    e1:1a:ad:39:b9:a2:10:a7:d2:28:33:50:c4:8e:0a:
                    bf:24:c7:0a:97:8b:44:1a:23:e0:66:80:8e:ea:0d:
                    70:01:cd:7b:06:c1:e6:93:a3:06:e2:76:46:fc:4e:
                    a9:8a:ce:1f:9e:32:e0:d6:32:93:e8:bc:a8:80:68:
                    97:46:f2:68:dd:80:e6:9e:e2:bf:5c:9e:93:6c:b3:
                    87:14:c3:27:48:e4:3f:0e:e5:54:32:f8:54:26:fd:
                    74:09:6e:39:a9:cc:ff:c1:9c:70:02:91:71:6e:f1:
                    6d:3d:bc:bc:84:e7:fd:9f:db:62:7e:8d:95:69:ff:
                    71:32:b7:92:26:b9:2a:35:5b:5f:bb:00:dc:8e:f9:
                    06:39:0d:36:68:2c:32:1c:7e:03:54:12:51:f1:d2:
                    7f:dc:e3:f6:0c:ba:01:a6:be:56:1b:60:3d:71:a2:
                    37:0b:11:55:f9:db:39:1d:34:e8:15:10:88:06:05:
                    ce:17:3b:67:5a:42:01:98:84:f6:53:d7:8b:a9:fb:
                    65:71:4c:9e:33:80:3f:96:36:eb:62:87:0d:d8:86:
                    1e:84:00:c0:4f:40:8c:8f:10:04:54:c6:15:83:95:
                    a2:40:1d:e7:a9:da:7d:ee:4b:62:75:2c:66:88:f2:
                    72:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C3:71:E0:2C:B0:E8:B2:A9:1C:A5:34:D1:B8:9B:61:16:29:9B:17
            X509v3 Authority Key Identifier:
                keyid:99:1D:58:8A:86:F8:7B:22:4C:9C:DA:EA:F9:C9:6C:65:55:E8:03:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:30:75:33:ed:c9:eb:51:34:30:4f:6d:6d:9a:b0:9c:3d:bf:
         a7:dc:29:12:07:5c:12:33:ef:30:f1:4c:ed:06:05:5a:9a:da:
         a5:63:fb:e4:c8:53:1b:1b:a6:be:27:f0:93:c7:b8:bb:88:3f:
         4e:46:0f:d1:87:a7:79:2a:76:46:1c:2c:8c:d6:26:67:8b:a9:
         fa:22:d7:a5:c5:ac:53:02:d5:15:46:7e:58:47:1a:d6:92:9a:
         68:1e:16:52:4a:2f:c0:7e:06:32:08:b6:a6:af:fb:46:ea:51:
         08:80:4a:cc:4a:0b:c3:c9:de:72:a2:f8:33:1c:31:92:90:22:
         c0:d7:cf:c5:75:6c:9c:18:57:4e:0d:ea:af:ad:df:47:dd:b0:
         d8:67:db:db:59:9f:8a:a0:c2:b0:6e:2e:cc:8c:16:7b:c5:2d:
         76:c1:77:e0:77:5d:a2:61:f6:4f:b1:ea:61:5a:a1:44:c9:fb:
         48:f0:28:4e:7c:3c:75:78:ea:3a:0b:2c:51:ad:06:7a:4c:d3:
         0c:30:d7:29:f3:69:80:c7:eb:6d:0f:fc:07:80:25:b4:29:e3:
         4c:75:af:57:55:e8:f6:fa:49:1d:91:f9:9b:43:7d:9b:66:ee:
         02:15:43:9c:98:b2:f0:4c:1b:9a:24:0c:60:18:2a:06:e4:30:
         d8:6c:02:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----