Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.mft
File:                     3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.mft (raw, json)
Hash identifier:          nt/grOrEVb69udF0/vL0cH+Po3bHPz8yJRxcJJOrcv4=
Subject key identifier:   80:0C:25:B5:4C:1E:00:E4:46:24:83:68:50:35:26:6A:D0:B4:13:66
Authority key identifier: 3C:94:AC:DC:43:86:59:F2:0D:2A:C8:CD:39:93:4A:1C:C0:EF:E3:A0
Certificate issuer:       /CN=3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0
Certificate serial:       4D1DDE3F2B2493C427367A8FDFDA1FDA829A7D0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.mft
Manifest number:          CA
Signing time:             Sat 29 Mar 2025 05:52:22 +0000
Manifest this update:     Sat 29 Mar 2025 05:47:22 +0000
Manifest next update:     Thu 03 Apr 2025 14:34:22 +0000
Files and hashes:         1: 323830313a3163343a3a2f34342d3434203d3e20323632353839.roa (hash: lorZn9/vXoPIp0R8IKOORdaOFAbwOZuk9eFtFCf+UjY=)
                          2: 3230312e3133302e31362e302f32322d3232203d3e203138373437.roa (hash: aCEuWPwxzM5miQ6J66DZuLEoJ9AwlqmH6ztDrGFWzIE=)
                          3: 3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.crl (hash: HfyCpWGpqAzkFTXD5dWoDZMSSHTPFO+/Q3D6QM5NKyM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:1d:de:3f:2b:24:93:c4:27:36:7a:8f:df:da:1f:da:82:9a:7d:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0
        Validity
            Not Before: Mar 29 05:47:22 2025 GMT
            Not After : Apr  3 14:34:22 2025 GMT
        Subject: CN=800C25B54C1E00E4462483685035266AD0B41366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2e:ed:bf:08:67:c7:d7:1d:f5:53:36:b2:7d:
                    cc:64:92:25:ca:8f:77:e8:4b:50:33:bf:4c:ac:b8:
                    5a:c5:63:39:5a:24:d7:2e:bb:a1:8b:86:40:4d:2f:
                    72:88:e5:bd:37:0e:b0:59:b1:9b:8e:7c:68:a9:96:
                    7e:c8:08:40:74:67:c5:e3:c7:ed:fb:1c:69:c3:aa:
                    3d:5e:8e:61:d3:3b:a4:57:d5:ee:37:92:2f:20:84:
                    38:01:e7:31:4b:85:0d:84:d7:02:fc:c7:d2:ca:e4:
                    05:1d:10:98:ef:97:4e:d2:89:91:02:2d:44:95:55:
                    93:b1:60:56:3d:12:03:d2:68:84:c9:ee:83:c2:95:
                    53:bd:c2:71:b6:8f:cd:94:f8:59:13:92:fc:7a:5a:
                    c1:09:d0:bf:54:be:4b:28:34:5a:e0:e6:1f:b1:46:
                    ba:5b:38:8f:9f:c9:98:84:83:81:3e:bb:dc:73:32:
                    0d:7c:6d:f9:f2:7c:e3:93:27:11:d2:2e:d4:bb:79:
                    03:50:fa:aa:ca:ce:1f:65:92:c4:92:b8:09:fb:c8:
                    a9:dd:bd:45:29:3c:97:8d:31:1e:bc:44:71:72:cd:
                    0c:e4:cb:18:d4:fa:16:5b:f7:f8:c9:43:2c:70:8f:
                    05:5f:68:14:d2:50:f4:0c:8a:fb:fc:6f:e0:ca:8f:
                    97:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:0C:25:B5:4C:1E:00:E4:46:24:83:68:50:35:26:6A:D0:B4:13:66
            X509v3 Authority Key Identifier:
                keyid:3C:94:AC:DC:43:86:59:F2:0D:2A:C8:CD:39:93:4A:1C:C0:EF:E3:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ae:10:04:c9:07:5a:f4:8f:ca:7c:84:dd:23:12:b9:9f:5f:
         fc:61:30:86:1e:30:1c:ce:e6:d9:f2:5d:42:10:e9:53:b5:66:
         78:9d:d7:1d:6a:5a:0f:e2:e9:4d:99:d6:62:11:4a:53:81:77:
         30:b3:85:2d:3b:0d:87:92:fa:0b:93:c0:f5:91:2e:9f:4f:e1:
         f7:79:4b:15:a1:4c:4b:18:52:58:f6:d3:9d:35:df:ee:1a:5c:
         bb:c4:f4:6f:ae:1d:e5:c9:30:6f:1e:f6:7d:bd:bd:ed:42:11:
         98:33:59:fb:24:2a:20:a3:36:7b:3a:d2:87:e1:b1:26:f0:3d:
         17:0f:6d:84:15:06:f7:81:14:c9:48:71:d3:e3:d7:9d:3d:a3:
         cc:f5:38:2d:ec:99:49:57:6c:ab:b0:86:82:ff:58:10:19:11:
         00:17:35:db:ad:c4:1a:90:dc:a8:05:2f:0c:ed:cf:0a:9b:73:
         ff:ed:0f:4b:17:94:78:74:ff:d4:c4:8a:a4:b3:ad:8d:53:84:
         e5:a2:e8:52:31:74:d0:bd:94:16:14:55:d8:ef:49:fa:90:91:
         41:91:a4:ae:cb:61:ba:c9:a7:57:4b:e8:03:58:c0:ad:2b:90:
         61:ef:82:cd:de:25:63:19:39:fb:a0:67:fd:9d:06:ce:78:db:
         5d:0f:ba:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----