Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0EF044215A30168BD8BAC2D9017D4EA11D7CB1E3A8BECFB0C6EB2CD5C4012271/0/CDA01748B4BE252748A16C5D80BF869A28C6D47B.mft
File:                     CDA01748B4BE252748A16C5D80BF869A28C6D47B.mft (raw, json)
Hash identifier:          9yDZdXiVaWNkpZpvYb5v9+VxGtKRzN8yeUQI5gYKwO4=
Subject key identifier:   D1:17:DA:14:2D:A5:32:C9:27:12:7C:8D:6E:6C:87:6C:0B:F7:9E:A5
Authority key identifier: CD:A0:17:48:B4:BE:25:27:48:A1:6C:5D:80:BF:86:9A:28:C6:D4:7B
Certificate issuer:       /CN=CDA01748B4BE252748A16C5D80BF869A28C6D47B
Certificate serial:       629B29BE647A6541D91B12D1DF2929F1993DB82B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDA01748B4BE252748A16C5D80BF869A28C6D47B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0EF044215A30168BD8BAC2D9017D4EA11D7CB1E3A8BECFB0C6EB2CD5C4012271/0/CDA01748B4BE252748A16C5D80BF869A28C6D47B.mft
Manifest number:          B7
Signing time:             Thu 30 Jan 2025 16:43:45 +0000
Manifest this update:     Thu 30 Jan 2025 16:38:45 +0000
Manifest next update:     Wed 05 Feb 2025 01:19:45 +0000
Files and hashes:         1: CDA01748B4BE252748A16C5D80BF869A28C6D47B.crl (hash: 5y4bFrSos+ecppHsuevj+qDG68yn8MW/gkEw/fwnciM=)
                          2: 3139302e39392e38322e302f32342d3234203d3e20323632323837.roa (hash: L1E4hmY/kkijP82dWRh5zWXNXXR+mXhkFNruSo63qJM=)
                          3: 3139302e39392e38332e302f32342d3234203d3e203634323030.roa (hash: gp5SCQttZ+k/M893uD4Jh7vmL+sYdXYDUvCIN3nVbnw=)
                          4: 3139302e39392e38302e302f32342d3234203d3e2037303138.roa (hash: no9nurSVRjO4ZJtVV4AXbyNBX+8agvOKPH11BQ93Ayc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:9b:29:be:64:7a:65:41:d9:1b:12:d1:df:29:29:f1:99:3d:b8:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDA01748B4BE252748A16C5D80BF869A28C6D47B
        Validity
            Not Before: Jan 30 16:38:45 2025 GMT
            Not After : Feb  5 01:19:45 2025 GMT
        Subject: CN=D117DA142DA532C927127C8D6E6C876C0BF79EA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b9:3c:d4:5b:04:ff:7f:f8:8f:d9:c7:0d:f2:
                    1a:f1:8f:a1:8a:36:bd:60:66:dc:ca:18:3b:81:5e:
                    4b:e7:4e:a8:c6:13:a9:1d:cc:51:b5:e4:a6:8d:07:
                    37:5a:c9:45:80:02:85:f7:66:8f:ca:ca:0d:8e:dd:
                    77:6b:4b:f7:97:6f:6d:77:b0:0e:e4:13:51:e8:09:
                    75:8a:22:4c:5d:b3:e4:02:88:79:a2:75:fd:6e:a9:
                    95:f4:88:1c:ed:f3:32:85:02:3c:38:40:3a:7a:66:
                    a2:69:b8:7f:71:cc:b1:69:85:44:98:a4:79:12:18:
                    6a:44:2e:54:fa:21:20:25:c6:2d:72:3e:af:69:f2:
                    f5:8f:eb:b5:2f:e0:5b:01:bf:90:77:e6:a7:3b:b7:
                    d3:4e:60:28:2e:7b:bf:1b:1b:f0:2e:b1:70:28:cc:
                    84:ab:57:87:27:23:7f:4a:dd:d7:e7:8e:03:a6:d5:
                    4f:bb:03:d8:0d:62:47:e1:01:df:31:60:da:f5:cd:
                    90:23:84:71:ab:c3:f9:32:61:4b:cb:25:63:32:a4:
                    96:3d:d2:61:ee:71:89:82:50:49:f3:3e:bf:b4:88:
                    3e:a3:ca:4d:56:fc:92:df:ab:c5:a3:69:1a:72:47:
                    c1:5e:48:32:d5:e1:da:63:a0:17:30:ba:8a:6f:82:
                    fe:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:17:DA:14:2D:A5:32:C9:27:12:7C:8D:6E:6C:87:6C:0B:F7:9E:A5
            X509v3 Authority Key Identifier:
                keyid:CD:A0:17:48:B4:BE:25:27:48:A1:6C:5D:80:BF:86:9A:28:C6:D4:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0EF044215A30168BD8BAC2D9017D4EA11D7CB1E3A8BECFB0C6EB2CD5C4012271/0/CDA01748B4BE252748A16C5D80BF869A28C6D47B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDA01748B4BE252748A16C5D80BF869A28C6D47B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0EF044215A30168BD8BAC2D9017D4EA11D7CB1E3A8BECFB0C6EB2CD5C4012271/0/CDA01748B4BE252748A16C5D80BF869A28C6D47B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:6d:d6:c7:89:08:c1:c3:cc:26:39:64:83:5d:1b:ce:d2:72:
         7f:29:0c:65:f9:9b:43:4a:df:19:11:c7:81:9d:a1:51:de:c2:
         47:1f:13:42:b2:2b:2f:88:0e:86:e7:8b:70:9c:b2:62:dd:f9:
         8b:75:ac:7b:18:92:09:63:49:ec:35:3f:33:8c:2d:ca:b6:d4:
         6b:a6:e5:f7:d4:19:b8:95:fc:5b:f7:e0:2e:2d:f1:5a:85:fd:
         a4:40:a0:c3:16:6a:f0:84:d8:2c:b3:fe:3a:fa:03:63:e0:1e:
         c4:6f:fb:08:c8:02:35:18:ff:e7:eb:f4:b1:7a:96:95:63:20:
         c1:92:51:33:fc:1f:bb:35:a4:de:d7:f5:5f:e8:b7:f6:cf:96:
         bf:1a:88:b2:50:5c:c2:5c:d6:db:83:08:f8:ea:b7:6a:4a:08:
         ff:cc:2c:65:66:a7:2c:c0:49:89:19:91:ba:71:5f:05:c3:35:
         61:3f:ba:e5:2c:4b:23:b1:a1:70:b3:4b:b5:71:aa:86:19:d4:
         56:be:6a:5b:e4:30:7f:68:55:cf:36:f4:02:53:d8:70:4e:46:
         26:d8:02:5f:e4:f0:11:5e:f2:ff:75:9b:8d:4f:52:ea:e0:9d:
         be:fe:e1:f4:da:2d:7c:e3:e3:8e:b1:4e:77:8d:72:54:91:b8:
         2d:9f:06:d1
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUYpspvmR6ZUHZGxLR3ykp8Zk9uCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0RBMDE3NDhCNEJFMjUyNzQ4QTE2QzVEODBCRjg2OUEy
OEM2RDQ3QjAeFw0yNTAxMzAxNjM4NDVaFw0yNTAyMDUwMTE5NDVaMDMxMTAvBgNV
BAMTKEQxMTdEQTE0MkRBNTMyQzkyNzEyN0M4RDZFNkM4NzZDMEJGNzlFQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtuTzUWwT/f/iP2ccN8hrxj6GK
Nr1gZtzKGDuBXkvnTqjGE6kdzFG15KaNBzdayUWAAoX3Zo/Kyg2O3XdrS/eXb213
sA7kE1HoCXWKIkxds+QCiHmidf1uqZX0iBzt8zKFAjw4QDp6ZqJpuH9xzLFphUSY
pHkSGGpELlT6ISAlxi1yPq9p8vWP67Uv4FsBv5B35qc7t9NOYCgue78bG/AusXAo
zISrV4cnI39K3dfnjgOm1U+7A9gNYkfhAd8xYNr1zZAjhHGrw/kyYUvLJWMypJY9
0mHucYmCUEnzPr+0iD6jyk1W/JLfq8WjaRpyR8FeSDLV4dpjoBcwuopvgv6hAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU0RfaFC2lMsknEnyNbmyHbAv3nqUwHwYDVR0j
BBgwFoAUzaAXSLS+JSdIoWxdgL+GmijG1HswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRUYwNDQyMTVBMzAxNjhCRDhCQUMyRDkwMTdENEVBMTFE
N0NCMUUzQThCRUNGQjBDNkVCMkNENUM0MDEyMjcxLzAvQ0RBMDE3NDhCNEJFMjUy
NzQ4QTE2QzVEODBCRjg2OUEyOEM2RDQ3Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DREEwMTc0OEI0QkUyNTI3NDhB
MTZDNUQ4MEJGODY5QTI4QzZENDdCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEVGMDQ0MjE1QTMwMTY4QkQ4QkFDMkQ5MDE3RDRFQTExRDdDQjFFM0E4
QkVDRkIwQzZFQjJDRDVDNDAxMjI3MS8wL0NEQTAxNzQ4QjRCRTI1Mjc0OEExNkM1
RDgwQkY4NjlBMjhDNkQ0N0IubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLbdbHiQjBw8wmOWSDXRvO0nJ/
KQxl+ZtDSt8ZEceBnaFR3sJHHxNCsisviA6G54twnLJi3fmLdax7GJIJY0nsNT8z
jC3KttRrpuX31Bm4lfxb9+AuLfFahf2kQKDDFmrwhNgss/46+gNj4B7Eb/sIyAI1
GP/n6/SxepaVYyDBklEz/B+7NaTe1/Vf6Lf2z5a/GoiyUFzCXNbbgwj46rdqSgj/
zCxlZqcswEmJGZG6cV8FwzVhP7rlLEsjsaFws0u1caqGGdRWvmpb5DB/aFXPNvQC
U9hwTkYm2AJf5PARXvL/dZuNT1Lq4J2+/uH02i184+OOsU53jXJUkbgtnwbR
-----END CERTIFICATE-----