Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC3FC7664DC1A1621E7A5D246643C20BE3DEA6345AB0EE180974D4B4D5FFFD59/0/E89EA7207524FF2AC1EC7BA9F4DB06116CC6D683.mft
File:                     E89EA7207524FF2AC1EC7BA9F4DB06116CC6D683.mft (raw, json)
Hash identifier:          oGiUIDoE14gS2CVDhQWMkoMaV+uOV6WZPWSX+lUzFCg=
Subject key identifier:   70:02:F1:67:DA:90:64:B8:2D:48:91:F9:EB:BD:0A:B8:73:48:67:03
Authority key identifier: E8:9E:A7:20:75:24:FF:2A:C1:EC:7B:A9:F4:DB:06:11:6C:C6:D6:83
Certificate issuer:       /CN=E89EA7207524FF2AC1EC7BA9F4DB06116CC6D683
Certificate serial:       452AB4E9D6A78A746DA80A96084A6A17B14B7802
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E89EA7207524FF2AC1EC7BA9F4DB06116CC6D683.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC3FC7664DC1A1621E7A5D246643C20BE3DEA6345AB0EE180974D4B4D5FFFD59/0/E89EA7207524FF2AC1EC7BA9F4DB06116CC6D683.mft
Manifest number:          CA
Signing time:             Fri 28 Mar 2025 14:48:06 +0000
Manifest this update:     Fri 28 Mar 2025 14:43:06 +0000
Manifest next update:     Wed 02 Apr 2025 00:20:06 +0000
Files and hashes:         1: 323830333a393038303a3a2f33322d3438203d3e20323632313436.roa (hash: AXIvrSHaJvR0PoPzVHYJYEp81eRjYLVrThwqycrI+vI=)
                          2: 3133382e3131372e39362e302f32322d3234203d3e20323632313436.roa (hash: 39b3Do7fljEwzUtBJU/DtBVS11uB7rEAFGwmY4sl0gA=)
                          3: E89EA7207524FF2AC1EC7BA9F4DB06116CC6D683.crl (hash: A3Za//cH5uOarBGwP1BEU3R+fyvTajUEeBoomQiAIFY=)
                          4: 3138362e39362e3235322e302f32322d3234203d3e20323632313436.roa (hash: crzS4Om1ifZeE7rpTylxHTivsbi7q6/2ne1xEnwlzag=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:2a:b4:e9:d6:a7:8a:74:6d:a8:0a:96:08:4a:6a:17:b1:4b:78:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E89EA7207524FF2AC1EC7BA9F4DB06116CC6D683
        Validity
            Not Before: Mar 28 14:43:06 2025 GMT
            Not After : Apr  2 00:20:06 2025 GMT
        Subject: CN=7002F167DA9064B82D4891F9EBBD0AB873486703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c7:f4:43:8d:6a:88:2f:71:8a:ca:d8:ee:21:
                    fb:07:6d:3e:ed:d2:1f:f8:9c:ad:ae:9c:e1:c7:d2:
                    83:ec:73:1c:1a:51:72:a9:9b:b4:76:33:17:00:71:
                    c8:4f:36:c9:87:ae:ee:48:c3:65:4d:1f:4f:74:17:
                    44:57:d5:3f:70:18:e5:bb:67:93:fa:5d:2a:b8:c9:
                    50:8d:08:f9:91:42:73:8a:99:98:7f:c9:6b:82:2a:
                    ae:d4:17:3e:57:03:de:90:fc:8f:89:74:45:be:29:
                    d8:60:24:f8:e3:36:50:a3:59:69:09:a1:2b:be:9d:
                    8a:3a:62:ca:94:88:0a:fe:9e:3b:e0:ab:f1:28:0c:
                    61:97:3a:86:c5:71:36:3e:77:6f:0b:ed:36:5c:49:
                    a1:56:35:e2:50:7c:bc:7f:e4:cd:21:14:78:61:26:
                    e1:ba:2e:af:1a:16:bd:88:e9:27:59:0c:7f:51:3c:
                    be:0d:08:9d:c6:be:52:c8:39:f5:47:a7:a5:b9:d0:
                    a1:a5:a3:44:3e:0b:9f:a9:a2:6b:fb:ef:9d:5f:42:
                    82:d7:30:f5:e1:f2:fa:c3:b9:b4:27:16:11:16:1b:
                    d4:49:bb:04:58:d9:17:45:77:be:08:a8:94:e8:23:
                    ef:2e:0b:9c:e9:ab:57:b0:4b:6b:04:73:8c:2f:d1:
                    bd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:02:F1:67:DA:90:64:B8:2D:48:91:F9:EB:BD:0A:B8:73:48:67:03
            X509v3 Authority Key Identifier:
                keyid:E8:9E:A7:20:75:24:FF:2A:C1:EC:7B:A9:F4:DB:06:11:6C:C6:D6:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC3FC7664DC1A1621E7A5D246643C20BE3DEA6345AB0EE180974D4B4D5FFFD59/0/E89EA7207524FF2AC1EC7BA9F4DB06116CC6D683.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E89EA7207524FF2AC1EC7BA9F4DB06116CC6D683.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC3FC7664DC1A1621E7A5D246643C20BE3DEA6345AB0EE180974D4B4D5FFFD59/0/E89EA7207524FF2AC1EC7BA9F4DB06116CC6D683.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:c4:88:1f:ab:bd:81:eb:97:6a:dd:ac:55:80:fe:c0:9f:fa:
         6b:7f:c2:d3:68:f0:3f:bb:bc:c2:76:27:a9:7a:6d:db:11:11:
         d4:69:df:83:ed:fb:36:bd:ae:a3:fd:93:c3:a3:f4:29:9f:72:
         47:ba:f8:3e:5b:14:c6:47:79:4e:8d:40:bc:53:a8:1d:32:99:
         4b:55:cf:cd:34:fa:cb:52:bd:78:87:45:3a:0a:b7:5a:be:b7:
         73:f7:a4:9f:d6:b6:8e:ef:03:c8:c5:1f:f0:a3:6e:ca:93:66:
         c1:7b:be:70:86:a2:e9:91:9f:b7:f5:f6:8a:17:47:01:5f:ee:
         d4:24:7a:c0:a5:10:d6:aa:16:6b:31:41:08:5a:4a:b5:3d:de:
         0a:83:a4:00:b8:37:6b:d4:42:ec:36:16:db:0f:f9:0f:e0:86:
         18:f5:e1:de:42:90:96:ed:da:df:df:d7:a8:58:ef:76:a2:47:
         9b:2a:b9:8c:12:f4:72:0a:6f:d7:82:29:95:c2:61:af:c0:e4:
         4c:c7:a5:07:6a:0c:14:d0:b8:b4:ed:d5:c0:e4:32:85:cb:f8:
         e6:4f:55:cc:24:f4:bf:9a:0a:51:ab:26:b7:cf:02:8e:17:ee:
         d1:ca:6d:d3:90:ae:20:00:35:7f:4b:82:b9:f1:94:db:d3:41:
         35:5c:77:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----