Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5F64129A3275E11FC5E33280C6B65D077E07295A2F49025888B3722B709E6FE/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.mft
File:                     DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.mft (raw, json)
Hash identifier:          VLRdtHSZHKQwciQxBX/MuH9j7X3DBaiGMSPTOItVAGQ=
Subject key identifier:   FB:FF:90:35:C3:34:EE:09:E8:78:36:A3:11:0D:18:4A:1E:D0:4A:73
Authority key identifier: DE:0E:9C:48:41:E7:FD:1E:40:27:86:DB:D8:A1:B3:5F:69:AD:C5:E1
Certificate issuer:       /CN=DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1
Certificate serial:       2DF156FAA9167EBDC2ED2C72DF77FCA6FEFDF010
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5F64129A3275E11FC5E33280C6B65D077E07295A2F49025888B3722B709E6FE/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.mft
Manifest number:          C2
Signing time:             Fri 28 Mar 2025 07:18:55 +0000
Manifest this update:     Fri 28 Mar 2025 07:13:55 +0000
Manifest next update:     Thu 03 Apr 2025 06:29:55 +0000
Files and hashes:         1: 34352e3232352e34302e302f32332d3234203d3e20323635383432.roa (hash: heCGGKyW/gmM3IDCwc13DTKdiZH1eYbLsIIObF7mS3M=)
                          2: 323830333a393232303a3a2f33322d3332203d3e20323635383432.roa (hash: XE3kaW+blwgcYVHdS3o9IXl+7XERYfqccAiQJVKC9AA=)
                          3: DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.crl (hash: 32d+nVrCepjrBVfOUta5a1voNXorj+qlELPEkrWubjg=)
                          4: 34352e3232342e3230332e302f32342d3234203d3e20323635383432.roa (hash: R/jMla9Sf/fYR+tZNDM9DDMl1Ojy3yLPRQPwU/wzA/g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f1:56:fa:a9:16:7e:bd:c2:ed:2c:72:df:77:fc:a6:fe:fd:f0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1
        Validity
            Not Before: Mar 28 07:13:55 2025 GMT
            Not After : Apr  3 06:29:55 2025 GMT
        Subject: CN=FBFF9035C334EE09E87836A3110D184A1ED04A73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3e:37:b0:75:84:f2:70:d9:3f:9b:d4:d5:87:
                    69:51:fb:0a:29:21:80:20:f9:f4:2e:ea:ca:27:a1:
                    3d:bc:f9:27:a9:8e:18:87:24:06:0d:e3:fb:64:bf:
                    71:b7:e3:5e:43:5c:35:cc:50:bc:8f:07:2b:eb:eb:
                    ac:26:34:a3:d6:0c:f5:31:3e:e8:aa:86:b9:8d:21:
                    89:7b:7a:8d:4f:eb:1c:3a:bf:02:2d:12:d0:6e:e9:
                    74:79:a9:77:6b:3c:37:88:6b:62:e2:cd:01:38:9e:
                    36:e4:6f:6e:7f:4c:b5:20:f1:f9:99:f3:91:36:5b:
                    df:60:d2:59:17:eb:35:0a:a3:0e:65:1c:f1:60:ea:
                    40:fe:d6:17:aa:1d:7e:ea:8d:a9:f6:fc:e8:7b:42:
                    0d:33:04:57:03:f5:e7:d1:4f:34:a1:55:12:b2:2c:
                    3f:0a:c4:2b:15:28:58:c3:28:5f:1c:d9:3a:c0:a0:
                    75:f8:dc:2f:6d:fb:f9:2c:da:e7:6b:dd:f6:f6:ff:
                    49:d4:f2:67:b0:5d:a7:d2:8b:53:4e:0b:ec:3c:ba:
                    dc:b0:fa:12:9a:2a:be:8e:37:da:4a:b7:3c:39:bd:
                    01:e7:33:d9:54:e2:c6:ad:de:99:00:6b:d0:41:24:
                    d1:ba:f2:02:8b:a6:be:7b:cb:ae:1f:9c:3a:0c:ff:
                    87:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:FF:90:35:C3:34:EE:09:E8:78:36:A3:11:0D:18:4A:1E:D0:4A:73
            X509v3 Authority Key Identifier:
                keyid:DE:0E:9C:48:41:E7:FD:1E:40:27:86:DB:D8:A1:B3:5F:69:AD:C5:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5F64129A3275E11FC5E33280C6B65D077E07295A2F49025888B3722B709E6FE/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5F64129A3275E11FC5E33280C6B65D077E07295A2F49025888B3722B709E6FE/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c8:0c:9f:d1:b4:48:54:4c:26:68:57:e0:fd:c8:65:ef:c5:
         92:80:21:3f:34:60:5c:62:05:7a:ed:e9:c9:a2:4b:d6:81:ae:
         11:ba:51:3d:08:c4:b5:37:36:80:b8:d3:dd:3f:b0:ce:3a:d2:
         97:79:a9:24:f4:13:e4:21:b1:ad:75:54:73:f8:a2:b8:e4:9a:
         21:18:ac:c0:c2:e7:76:ad:3e:bf:56:72:e6:78:d7:57:bb:9f:
         5b:56:17:df:ce:68:b2:fa:08:0b:f5:8f:af:1f:66:ba:c5:91:
         d7:21:ef:59:c3:11:83:f8:7f:b1:78:21:83:17:2e:41:1a:d4:
         7c:d9:5a:26:99:f5:27:ac:8c:6c:a8:d8:3a:b8:96:97:73:23:
         39:f1:cf:6c:1e:87:e1:bf:63:2f:84:ba:30:16:aa:36:bf:2d:
         cd:70:1a:fa:5a:9c:61:c7:b7:31:9c:40:6c:dc:88:c7:69:d7:
         fb:ab:4f:74:71:1d:7b:1f:cf:eb:d7:22:c2:d3:25:aa:74:9a:
         35:8b:d8:e0:6c:95:0e:e1:38:54:68:2c:47:70:82:84:6b:88:
         e9:bd:a8:de:02:85:a9:b1:67:fa:53:4f:37:52:83:b4:35:7c:
         af:50:a5:55:78:b7:d7:a3:b6:72:17:85:ea:a3:e2:42:9d:08:
         e4:8d:03:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----