Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.mft
File:                     591291A5B3618648A8E1B8E7D3149BC8D25D71BD.mft (raw, json)
Hash identifier:          UOjnnLmsegJ1Hcaf39OXpROcOvZRYcnb+EiyPwHbaPE=
Subject key identifier:   FE:7C:2D:B4:00:A9:14:C1:6F:2B:1F:EF:3C:0C:5D:82:C3:DE:23:89
Authority key identifier: 59:12:91:A5:B3:61:86:48:A8:E1:B8:E7:D3:14:9B:C8:D2:5D:71:BD
Certificate issuer:       /CN=591291A5B3618648A8E1B8E7D3149BC8D25D71BD
Certificate serial:       1DDFD367796A423CDF0E078387847562FB5D10D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.mft
Manifest number:          A7
Signing time:             Fri 31 Jan 2025 01:39:21 +0000
Manifest this update:     Fri 31 Jan 2025 01:34:21 +0000
Manifest next update:     Wed 05 Feb 2025 01:44:21 +0000
Files and hashes:         1: 323830333a626138303a3a2f33322d3634203d3e20323632393332.roa (hash: BYOtVkmTECrZwernSTDrgDW1o9uCHiKACMNuOlixmHM=)
                          2: 591291A5B3618648A8E1B8E7D3149BC8D25D71BD.crl (hash: biNgecIdSX8wg7gmN9RaMGW9buU5JJUp4ACAx9fZ/Uk=)
                          3: 3137302e3135302e36342e302f32322d3234203d3e20323632393332.roa (hash: UnDu5oS8zp/eYe/OJei+5uEP+YLiqBqnG6ByhB+aeog=)
                          4: 3139312e3130332e39362e302f32302d3234203d3e20323632393332.roa (hash: 6ywDjLeZkQwLoD81XA1VmTLgWnt4OZiUxU0Fd2IKD8I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:df:d3:67:79:6a:42:3c:df:0e:07:83:87:84:75:62:fb:5d:10:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=591291A5B3618648A8E1B8E7D3149BC8D25D71BD
        Validity
            Not Before: Jan 31 01:34:21 2025 GMT
            Not After : Feb  5 01:44:21 2025 GMT
        Subject: CN=FE7C2DB400A914C16F2B1FEF3C0C5D82C3DE2389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:94:4a:b7:7a:c3:2f:ca:ba:81:42:fb:bd:f0:
                    f9:d1:4c:e1:3c:46:4c:f3:ae:a0:eb:bf:58:5a:16:
                    f4:25:38:a2:98:3b:14:39:d9:2d:e9:61:ec:d4:48:
                    31:8d:19:c0:07:a0:d2:01:ca:b6:59:df:83:d4:b4:
                    10:4d:a0:85:97:54:dc:2b:bf:a0:e0:a3:b6:01:cf:
                    32:53:6b:18:c8:16:c9:9d:41:2e:d9:9d:0d:30:ff:
                    ed:c5:b3:7f:ce:3f:e6:24:cb:5d:a4:6b:65:83:8a:
                    16:3b:2d:fc:7f:2f:3c:f4:42:46:74:e4:ff:54:a5:
                    f1:3b:e2:ef:18:94:ff:ec:44:4f:58:7f:b3:e2:35:
                    1c:98:98:44:a8:3f:06:dd:1b:3b:18:4b:8d:88:de:
                    fa:cc:07:de:48:04:bd:8f:b2:1f:04:70:43:c5:b9:
                    ed:ff:49:76:92:87:ef:bd:95:1b:26:d1:d6:11:af:
                    f5:d0:68:aa:e0:01:9e:2f:a3:ae:b3:ef:42:6a:6f:
                    54:66:40:d6:2c:5d:98:a6:94:51:8a:d5:56:d3:33:
                    2c:c7:87:ca:f8:0a:72:85:aa:5f:c1:fe:db:84:d0:
                    a1:a5:a3:1d:e9:24:9e:c6:27:e6:d6:80:5c:7a:e8:
                    87:0a:35:03:ef:1d:d5:61:f4:15:ad:b9:14:1d:9e:
                    30:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7C:2D:B4:00:A9:14:C1:6F:2B:1F:EF:3C:0C:5D:82:C3:DE:23:89
            X509v3 Authority Key Identifier:
                keyid:59:12:91:A5:B3:61:86:48:A8:E1:B8:E7:D3:14:9B:C8:D2:5D:71:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:45:5a:51:b6:6f:d7:47:f0:a8:81:c9:d1:13:19:87:d3:d7:
         14:d8:6b:8d:e5:12:d1:01:12:94:ca:e9:c7:15:21:ac:d9:a9:
         2b:31:33:94:73:0a:94:8b:85:13:23:6d:65:db:7c:8c:b2:30:
         ac:b8:00:bc:3e:b7:27:e5:09:59:f7:a2:88:f9:95:17:0f:f2:
         33:82:20:f7:f9:33:27:ef:2b:60:f3:bc:6f:08:8c:6f:c3:08:
         78:19:d6:5a:fd:3f:bc:d4:ca:28:f6:96:e4:ac:65:13:19:94:
         26:23:16:d2:34:41:95:6b:88:2b:57:ba:f6:86:a9:d7:3e:2f:
         65:1b:e4:e4:6d:fa:15:40:e7:bb:03:da:7a:ce:5d:5c:71:57:
         98:5f:2f:f2:2d:32:0a:9c:14:48:f9:70:d0:4b:ff:44:94:bd:
         43:60:bb:a0:eb:6e:25:36:c0:6d:39:89:8b:18:4d:6c:2c:ce:
         c2:c4:ec:45:db:fb:7d:59:3a:e5:3a:67:a5:d6:b5:78:cf:f1:
         d6:1a:f5:84:84:22:7d:1f:a9:0b:72:17:61:bc:e8:4a:09:8e:
         ed:cc:7b:09:79:7b:50:a5:99:cc:d4:94:e0:db:91:10:f0:24:
         74:3c:52:7e:32:d9:56:6b:9d:3c:55:51:1c:cc:fd:9c:e5:fd:
         fb:99:dc:49
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUHd/TZ3lqQjzfDgeDh4R1YvtdENcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTkxMjkxQTVCMzYxODY0OEE4RTFCOEU3RDMxNDlCQzhE
MjVENzFCRDAeFw0yNTAxMzEwMTM0MjFaFw0yNTAyMDUwMTQ0MjFaMDMxMTAvBgNV
BAMTKEZFN0MyREI0MDBBOTE0QzE2RjJCMUZFRjNDMEM1RDgyQzNERTIzODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJlEq3esMvyrqBQvu98PnRTOE8
RkzzrqDrv1haFvQlOKKYOxQ52S3pYezUSDGNGcAHoNIByrZZ34PUtBBNoIWXVNwr
v6Dgo7YBzzJTaxjIFsmdQS7ZnQ0w/+3Fs3/OP+Yky12ka2WDihY7Lfx/Lzz0QkZ0
5P9UpfE74u8YlP/sRE9Yf7PiNRyYmESoPwbdGzsYS42I3vrMB95IBL2Psh8EcEPF
ue3/SXaSh++9lRsm0dYRr/XQaKrgAZ4vo66z70Jqb1RmQNYsXZimlFGK1VbTMyzH
h8r4CnKFql/B/tuE0KGlox3pJJ7GJ+bWgFx66IcKNQPvHdVh9BWtuRQdnjAZAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU/nwttACpFMFvKx/vPAxdgsPeI4kwHwYDVR0j
BBgwFoAUWRKRpbNhhkio4bjn0xSbyNJdcb0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMUJEREEzMTdBQTVERjlENTc2NDI1NTM0MDY4QTJCMzM2
Q0VCNUNEN0I1RENGMjU1RUFEQzM5NDZGM0M4MjUwLzAvNTkxMjkxQTVCMzYxODY0
OEE4RTFCOEU3RDMxNDlCQzhEMjVENzFCRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OTEyOTFBNUIzNjE4NjQ4QThF
MUI4RTdEMzE0OUJDOEQyNUQ3MUJELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjFCRERBMzE3QUE1REY5RDU3NjQyNTUzNDA2OEEyQjMzNkNFQjVDRDdC
NURDRjI1NUVBREMzOTQ2RjNDODI1MC8wLzU5MTI5MUE1QjM2MTg2NDhBOEUxQjhF
N0QzMTQ5QkM4RDI1RDcxQkQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAiRVpRtm/XR/CogcnRExmH09cU
2GuN5RLRARKUyunHFSGs2akrMTOUcwqUi4UTI21l23yMsjCsuAC8Prcn5QlZ96KI
+ZUXD/IzgiD3+TMn7ytg87xvCIxvwwh4GdZa/T+81Moo9pbkrGUTGZQmIxbSNEGV
a4grV7r2hqnXPi9lG+TkbfoVQOe7A9p6zl1ccVeYXy/yLTIKnBRI+XDQS/9ElL1D
YLug624lNsBtOYmLGE1sLM7CxOxF2/t9WTrlOmel1rV4z/HWGvWEhCJ9H6kLchdh
vOhKCY7tzHsJeXtQpZnM1JTg25EQ8CR0PFJ+MtlWa508VVEczP2c5f37mdxJ
-----END CERTIFICATE-----