Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.mft
File:                     089B798E1BD051786195E5F9D02238D550A5EAD7.mft (raw, json)
Hash identifier:          8bQjl2/rfJpUjsfTxiYfPc8OxO1bPzBDtELXDa+K2is=
Subject key identifier:   E5:65:61:B2:52:DF:C7:66:4A:9B:78:68:F3:69:16:BD:0C:F3:0E:E0
Authority key identifier: 08:9B:79:8E:1B:D0:51:78:61:95:E5:F9:D0:22:38:D5:50:A5:EA:D7
Certificate issuer:       /CN=089B798E1BD051786195E5F9D02238D550A5EAD7
Certificate serial:       453185C92DAACF3C79ACF9B26707CEE34A2A9339
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.mft
Manifest number:          C3
Signing time:             Sat 29 Mar 2025 04:46:39 +0000
Manifest this update:     Sat 29 Mar 2025 04:41:39 +0000
Manifest next update:     Fri 04 Apr 2025 04:04:39 +0000
Files and hashes:         1: 089B798E1BD051786195E5F9D02238D550A5EAD7.crl (hash: 75uHIn3R5dY0OLLg0nQ4i2xc68AfZo8X652uJ7pBQZM=)
                          2: 3137302e3234342e3230382e302f32322d3234203d3e203532343638.roa (hash: vJuqMo3FOvAjQjUwkJLglGJUvssmWIzn1UeqJnPQlog=)
                          3: 3137302e3234342e3230382e302f32342d3234203d3e20323731383832.roa (hash: 0OSFx27uPB3bloHdY+39EBrnzcliZh0QgvjmUJFBajI=)
                          4: 323830333a396163303a3a2f33322d3438203d3e20323731383832.roa (hash: PC7+F+5JF8mUNajEjRVajzRUMEmcXPL1R8ZIt3aWZoA=)
                          5: 3137302e3234342e3230382e302f32322d3234203d3e20323634363638.roa (hash: nnmiLoLd7bkCU1RUw5Od28HoP+sxRHWZc3jttiVT4pA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:31:85:c9:2d:aa:cf:3c:79:ac:f9:b2:67:07:ce:e3:4a:2a:93:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=089B798E1BD051786195E5F9D02238D550A5EAD7
        Validity
            Not Before: Mar 29 04:41:39 2025 GMT
            Not After : Apr  4 04:04:39 2025 GMT
        Subject: CN=E56561B252DFC7664A9B7868F36916BD0CF30EE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:41:36:c4:6b:a7:b7:bf:89:73:d7:4a:cf:cc:
                    c1:6e:d5:e3:0d:56:52:cc:8a:e5:a5:b3:8c:91:e0:
                    4f:dd:d9:1e:b1:ff:4e:80:47:53:b4:99:41:e2:b2:
                    5e:39:50:87:d4:80:93:6d:2b:1d:5c:88:e4:85:9a:
                    29:7e:3d:40:23:f4:a9:e3:55:7b:de:ea:5b:3f:2e:
                    64:23:f5:28:22:ad:42:27:c4:14:d0:7b:f9:ac:b5:
                    ec:6b:20:01:52:3c:04:5f:69:8f:f2:48:8d:1a:28:
                    23:7e:5a:77:47:88:82:05:a1:a1:a6:d3:d1:a8:22:
                    81:c1:da:ae:d5:3e:02:64:20:24:bf:29:78:b5:24:
                    c4:38:33:ea:d0:e2:13:6c:3e:55:9c:66:c4:08:2d:
                    ea:c1:bd:53:ac:e1:1f:3e:6d:11:a9:da:48:8c:bd:
                    1a:66:bb:1c:b9:94:c5:90:e4:47:72:32:e1:b0:d6:
                    7c:87:3d:85:85:d8:eb:8d:cb:61:8c:38:d4:91:d9:
                    83:be:93:0f:74:00:18:d4:3a:57:50:89:3a:c3:87:
                    03:fa:80:f7:e4:81:cd:a3:1e:56:c4:42:5d:5b:53:
                    93:7e:08:f5:be:0c:a5:38:f6:47:19:f0:2a:71:41:
                    20:5d:de:24:5b:62:20:8f:3a:73:e4:cd:1d:04:5c:
                    9d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:65:61:B2:52:DF:C7:66:4A:9B:78:68:F3:69:16:BD:0C:F3:0E:E0
            X509v3 Authority Key Identifier:
                keyid:08:9B:79:8E:1B:D0:51:78:61:95:E5:F9:D0:22:38:D5:50:A5:EA:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:98:c8:db:0a:e3:b9:88:9b:26:20:ee:22:8a:8c:6b:c7:02:
         9b:8b:80:5a:4c:5d:7b:95:83:b1:5a:b4:c0:f2:eb:22:5b:e3:
         c6:20:bf:6f:b8:f7:90:84:c6:1b:ec:c1:b6:1c:d8:9e:f1:ef:
         5e:26:d7:3e:a0:fd:d2:4d:86:6d:de:31:00:d8:de:84:26:6c:
         d2:70:84:27:8e:18:35:35:3a:db:1b:01:11:44:ea:14:af:da:
         9b:b1:ab:1b:ef:18:1f:2f:9b:9b:6c:9e:f9:f8:0f:5f:51:f2:
         59:37:5d:ad:3e:2c:18:65:25:0e:19:15:6d:7b:2c:dd:53:df:
         cd:08:00:75:01:12:8f:a9:64:03:b5:36:b1:de:c3:37:cd:9e:
         46:82:bf:e0:b3:1b:ac:bc:63:2c:77:cc:4b:68:36:f0:39:73:
         cc:55:7a:ff:38:62:a9:c2:b8:c4:3b:12:2d:41:6f:8e:d7:6f:
         e9:49:c6:ee:8d:90:0a:ed:8a:56:89:4d:ce:98:ef:a5:a8:fe:
         0b:b4:c9:8b:b7:f8:2a:68:ef:92:9c:01:2b:43:67:79:1a:6f:
         15:6b:19:84:2a:60:01:2d:17:93:84:91:41:43:ba:d1:fa:de:
         a8:ea:6b:d9:c2:73:87:f5:f0:59:34:dc:e6:7c:b4:3f:77:45:
         09:97:db:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----