Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AD6BDD22E9F3DB31890AF596FB95F5737BAB8202CDF99CEDC3890B710EF52702/0/F4D4857F016A86FBFBD60566A3AEA9CE93B4CD5E.mft
File:                     F4D4857F016A86FBFBD60566A3AEA9CE93B4CD5E.mft (raw, json)
Hash identifier:          9q5gN8Yt57b7qFo5QxriJOWhfRQFuVAJOYauNmU8Olc=
Subject key identifier:   2E:4B:64:E0:E8:CF:00:36:57:BF:C8:6D:99:6C:56:05:94:04:23:3A
Authority key identifier: F4:D4:85:7F:01:6A:86:FB:FB:D6:05:66:A3:AE:A9:CE:93:B4:CD:5E
Certificate issuer:       /CN=F4D4857F016A86FBFBD60566A3AEA9CE93B4CD5E
Certificate serial:       4CCACEBDCB7C302B7E977B995FCBD1E3A65F1934
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4D4857F016A86FBFBD60566A3AEA9CE93B4CD5E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AD6BDD22E9F3DB31890AF596FB95F5737BAB8202CDF99CEDC3890B710EF52702/0/F4D4857F016A86FBFBD60566A3AEA9CE93B4CD5E.mft
Manifest number:          C9
Signing time:             Sat 29 Mar 2025 06:07:27 +0000
Manifest this update:     Sat 29 Mar 2025 06:02:27 +0000
Manifest next update:     Wed 02 Apr 2025 09:49:27 +0000
Files and hashes:         1: 3136382e3132312e35362e302f32322d3232203d3e20323634363735.roa (hash: lP7D+gl1NriPTGvd70r1G+TOMld8JH3+Qq9Q2NMbKYc=)
                          2: F4D4857F016A86FBFBD60566A3AEA9CE93B4CD5E.crl (hash: V0nrXxHn0iESZkDLjRzajS9oOqFJ5JAyBM64N+kKMpo=)
                          3: 3136382e3132312e35362e302f32322d3234203d3e20323634363735.roa (hash: bUIKu1/rDe8TdEVflBU9mK5ywr2U1DR4O9UPMUyGGnw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ca:ce:bd:cb:7c:30:2b:7e:97:7b:99:5f:cb:d1:e3:a6:5f:19:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4D4857F016A86FBFBD60566A3AEA9CE93B4CD5E
        Validity
            Not Before: Mar 29 06:02:27 2025 GMT
            Not After : Apr  2 09:49:27 2025 GMT
        Subject: CN=2E4B64E0E8CF003657BFC86D996C56059404233A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b5:41:1a:4f:2f:94:da:7b:53:17:55:5b:10:
                    cb:f6:da:05:ca:e8:e2:aa:52:1f:fe:df:41:af:c8:
                    b8:4d:fa:26:90:2d:b5:f1:e8:6f:e5:85:7b:d7:d1:
                    9e:d6:5b:b2:48:2b:3b:f1:33:0f:ad:fa:ac:25:20:
                    cf:30:8e:cc:49:5e:e7:cc:43:94:9d:b9:20:f5:4e:
                    58:47:76:97:94:46:47:4e:f2:a1:bf:d8:c1:e2:b7:
                    5d:54:18:31:6e:d3:fc:04:53:a1:b1:de:2e:c6:65:
                    29:b7:ab:93:19:d5:35:60:fe:5c:71:00:e4:8e:e9:
                    4d:f0:21:b4:75:ec:bc:08:42:dd:14:fa:18:cc:e6:
                    62:e1:9e:b8:a2:70:9e:25:9c:82:a8:90:23:aa:c6:
                    f3:f9:d1:52:7c:94:83:0d:8f:9b:91:c1:09:87:a7:
                    80:f4:50:f6:a5:fe:76:e0:94:17:d4:a0:3c:8c:98:
                    5a:bd:45:d4:0c:5f:a3:e6:52:f3:b8:7c:55:b6:69:
                    8b:d9:59:2b:3b:c9:75:cd:bf:08:ae:30:b7:8d:4a:
                    d7:36:42:39:9f:03:fa:37:79:34:cf:dc:fb:a2:46:
                    f4:46:93:aa:ca:25:d3:03:e2:82:3c:25:3e:c7:aa:
                    af:ce:5d:44:92:72:62:5c:19:bf:f9:ed:84:c9:81:
                    88:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4B:64:E0:E8:CF:00:36:57:BF:C8:6D:99:6C:56:05:94:04:23:3A
            X509v3 Authority Key Identifier:
                keyid:F4:D4:85:7F:01:6A:86:FB:FB:D6:05:66:A3:AE:A9:CE:93:B4:CD:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AD6BDD22E9F3DB31890AF596FB95F5737BAB8202CDF99CEDC3890B710EF52702/0/F4D4857F016A86FBFBD60566A3AEA9CE93B4CD5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4D4857F016A86FBFBD60566A3AEA9CE93B4CD5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AD6BDD22E9F3DB31890AF596FB95F5737BAB8202CDF99CEDC3890B710EF52702/0/F4D4857F016A86FBFBD60566A3AEA9CE93B4CD5E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ad:11:89:7e:a7:d9:1d:6a:ce:a5:b0:00:38:66:bb:e1:16:
         47:ba:91:f4:8b:d3:3e:d7:61:61:c7:4f:31:50:18:e3:38:fe:
         e7:16:69:8b:86:30:4e:84:4d:e9:3b:f1:4e:bf:b7:b0:c9:fb:
         1a:ec:0c:f4:82:c4:62:1a:ca:67:ce:8a:07:bb:d0:4b:a5:61:
         93:b4:ed:7c:1e:fe:79:80:92:a6:e7:4b:30:1e:67:e5:b1:ae:
         7b:ea:1f:27:6f:f0:54:56:31:06:73:fa:f2:93:4a:e8:8a:dd:
         8c:4d:4d:ae:90:b9:53:08:ae:3c:2f:ad:00:67:10:6d:b2:6b:
         d3:9f:0e:ac:2f:1c:7a:39:a4:ad:11:80:21:47:0c:12:97:50:
         8c:7a:a4:27:e6:14:73:64:8f:92:4e:04:07:43:8b:5a:52:ce:
         72:e1:46:f5:5b:28:60:57:b4:56:cb:36:d2:bb:e0:fa:2d:52:
         76:0c:bb:dd:79:3b:55:27:e3:1f:8f:41:14:eb:13:3e:61:b3:
         68:99:ee:56:cf:c7:97:53:93:e9:ab:84:fa:2b:c8:41:88:40:
         b1:b0:6e:93:b4:14:ae:b1:39:5d:b8:99:25:00:e1:17:6f:04:
         9a:96:bc:71:9f:e4:f3:c9:f7:dc:c6:5f:84:dd:10:e6:c3:d7:
         d0:fa:6c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----