Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.mft
File:                     8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.mft (raw, json)
Hash identifier:          dDO7BV3e6hbGqx+HTL3qtLMZqMKgTvmyzEq4kYgFBuM=
Subject key identifier:   1E:8B:45:08:42:F0:6D:99:D5:A1:66:C5:72:B7:60:B3:33:31:B6:9B
Authority key identifier: 8F:96:41:F3:41:B3:17:82:AA:D4:4D:E4:1E:E0:CD:97:0F:F9:EC:D5
Certificate issuer:       /CN=8F9641F341B31782AAD44DE41EE0CD970FF9ECD5
Certificate serial:       19E99DFC7DC786807C719C2F7A16E753E4E86DC1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.mft
Manifest number:          C7
Signing time:             Thu 27 Mar 2025 06:44:25 +0000
Manifest this update:     Thu 27 Mar 2025 06:39:25 +0000
Manifest next update:     Tue 01 Apr 2025 14:15:25 +0000
Files and hashes:         1: 8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.crl (hash: NlPZUTsPMRbmHfSFtbj63I+cJ+lXSmJGb65gvLtEBpA=)
                          2: 323830333a366136303a333a3a2f34382d3438203d3e20323632313836.roa (hash: KIEkSXBUvkmvlZFj8qpbSneQUu3idX7opP395FmRaIQ=)
                          3: 34352e3137372e3130382e302f32322d3232203d3e20323637383537.roa (hash: dK0ZOcwm4mSkAKng8Xq5m5MB2wuFDc+iTwV96ZrpQYY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e9:9d:fc:7d:c7:86:80:7c:71:9c:2f:7a:16:e7:53:e4:e8:6d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F9641F341B31782AAD44DE41EE0CD970FF9ECD5
        Validity
            Not Before: Mar 27 06:39:25 2025 GMT
            Not After : Apr  1 14:15:25 2025 GMT
        Subject: CN=1E8B450842F06D99D5A166C572B760B33331B69B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f9:c6:b7:bc:15:db:70:fc:7d:01:06:b8:6d:
                    92:64:f2:d1:ec:33:52:55:18:39:ed:0e:67:51:3b:
                    7a:ce:cd:14:85:1d:c1:0f:9a:54:56:01:4b:84:9d:
                    b1:b6:6f:32:b5:95:b0:59:f1:8d:92:8f:d1:30:12:
                    6e:d1:b7:e0:a9:db:f0:b3:d1:74:05:52:1e:4c:71:
                    d7:f8:ec:e8:7d:4d:77:43:ab:e9:44:d7:08:4a:4e:
                    45:bd:2f:e8:b7:1f:fa:a7:1f:7a:83:d1:77:c8:97:
                    a3:64:f8:8f:6e:57:7b:b5:24:a0:8f:6c:f3:97:93:
                    05:cf:74:33:bd:2d:2e:d5:b4:ea:3c:d8:33:1f:e8:
                    1c:36:3e:ca:4a:72:f6:90:e8:9c:7c:30:23:7f:8a:
                    ca:9a:2c:de:56:88:cd:6b:48:22:a7:8f:34:11:32:
                    dd:85:b0:2a:ac:e7:b0:f4:de:2e:d7:5d:fd:6d:b6:
                    48:a7:1e:75:50:b4:e0:e6:45:23:77:18:3e:75:3d:
                    ad:38:77:53:3f:3b:f5:28:30:b1:d4:4a:63:59:5b:
                    4b:11:04:d3:d0:b6:39:8d:4a:0f:20:2b:2a:7f:52:
                    b0:23:fa:22:d9:4e:3b:89:54:2e:5f:d2:2e:70:ad:
                    b4:02:60:6a:72:46:b9:e5:8c:79:38:86:9c:80:9d:
                    ce:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:8B:45:08:42:F0:6D:99:D5:A1:66:C5:72:B7:60:B3:33:31:B6:9B
            X509v3 Authority Key Identifier:
                keyid:8F:96:41:F3:41:B3:17:82:AA:D4:4D:E4:1E:E0:CD:97:0F:F9:EC:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:92:02:38:a4:8f:2f:6b:fa:9e:9f:ab:22:15:50:55:de:0b:
         84:dc:03:fa:c8:1b:fe:66:12:b1:24:13:82:e7:0a:cc:4c:64:
         63:2c:7e:81:14:b0:13:86:c0:a5:6b:1e:86:33:cd:ab:ec:22:
         d2:df:b6:f6:f1:f7:2a:70:ab:83:78:37:10:a3:7d:60:84:5b:
         2d:7c:8f:49:75:e3:79:46:47:11:d4:8d:6c:a6:9e:c5:c6:12:
         87:0a:5a:b3:b2:2d:4f:c3:3a:b7:1a:39:3f:bb:47:22:28:96:
         40:37:3c:82:df:28:ba:bb:bb:ed:3b:05:35:fb:b2:27:96:a3:
         a4:53:2b:1a:72:72:64:dd:47:b7:56:5a:c6:cb:31:6c:b8:76:
         77:b9:31:3c:b4:29:4b:c7:4a:68:e3:e1:a5:03:12:b3:62:bd:
         9b:8d:e3:1e:7f:11:28:61:b3:bb:c5:16:8b:03:71:67:5d:64:
         ed:34:58:b1:b1:05:c1:15:d4:ce:27:05:51:fd:9b:ef:b0:f2:
         87:8a:da:78:16:55:48:28:2e:80:a2:a8:8c:51:26:4c:37:e2:
         d2:4b:1e:6d:02:7d:a1:e1:a8:ee:37:a9:f7:4c:9d:35:2d:c2:
         21:dc:4e:22:c6:49:59:f5:45:8e:77:c0:3b:5c:33:05:27:f9:
         c5:76:ef:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----