Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/225B1C21B83EAF69980CC1E99712B9E6A96CE30E3C986D4AC450A5C89982E2CA/0/71F3AE5827B021987E1B993DB3B3484A8FB89C48.mft
File:                     71F3AE5827B021987E1B993DB3B3484A8FB89C48.mft (raw, json)
Hash identifier:          SvZNn0VwPlbCMVDTIQOiRFXLer3U5/cL/hK4K0T1MD4=
Subject key identifier:   8F:A4:8C:E2:28:C4:D7:DC:A9:F1:F3:42:7A:00:89:81:98:46:4D:A3
Authority key identifier: 71:F3:AE:58:27:B0:21:98:7E:1B:99:3D:B3:B3:48:4A:8F:B8:9C:48
Certificate issuer:       /CN=71F3AE5827B021987E1B993DB3B3484A8FB89C48
Certificate serial:       3DD53A71DBE96601F7B56E6FDA0FAA5D9B71062F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71F3AE5827B021987E1B993DB3B3484A8FB89C48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/225B1C21B83EAF69980CC1E99712B9E6A96CE30E3C986D4AC450A5C89982E2CA/0/71F3AE5827B021987E1B993DB3B3484A8FB89C48.mft
Manifest number:          A9
Signing time:             Fri 31 Jan 2025 18:14:45 +0000
Manifest this update:     Fri 31 Jan 2025 18:09:45 +0000
Manifest next update:     Thu 06 Feb 2025 03:08:45 +0000
Files and hashes:         1: 323830333a376631303a3a2f33322d3332203d3e20323732313239.roa (hash: oWrjijtw5f9wHpE8ZhjA4t0MxxLrs28r2mds5yv9euE=)
                          2: 71F3AE5827B021987E1B993DB3B3484A8FB89C48.crl (hash: qujhdpu0OnnwqfGDOsG4OScAPEPyA/R5hImPxYN1krI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d5:3a:71:db:e9:66:01:f7:b5:6e:6f:da:0f:aa:5d:9b:71:06:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F3AE5827B021987E1B993DB3B3484A8FB89C48
        Validity
            Not Before: Jan 31 18:09:45 2025 GMT
            Not After : Feb  6 03:08:45 2025 GMT
        Subject: CN=8FA48CE228C4D7DCA9F1F3427A00898198464DA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:60:9c:60:0f:7b:a2:22:4b:63:fd:41:22:99:
                    d1:c3:4c:f7:7e:ef:d2:de:d1:35:4e:48:1b:2b:c1:
                    d8:1a:25:bd:98:70:d2:19:31:4f:60:8e:51:8b:87:
                    0a:a9:0b:58:5f:11:04:23:9d:74:ed:41:cc:17:de:
                    d6:e1:78:72:69:95:0e:25:06:d4:8f:04:c6:d8:6b:
                    24:66:41:e4:3f:b7:d6:be:7e:c7:45:19:ca:11:52:
                    1e:7c:da:ee:51:80:d0:d9:7f:76:1c:62:af:1e:0c:
                    fd:02:f0:65:09:f8:5c:eb:31:d1:cf:b6:cb:94:7b:
                    71:9f:8f:84:fd:ae:e4:eb:de:c4:05:3a:db:56:7b:
                    e4:9b:74:b0:1a:c7:6a:75:90:c7:15:db:9a:c6:eb:
                    df:09:1a:f7:d1:3d:1e:9a:d2:f2:42:ca:5f:06:cf:
                    f3:cf:84:f2:28:94:db:2a:9a:5f:14:ef:30:be:07:
                    e4:c8:06:0e:59:0b:7e:47:80:fd:f9:59:2f:d8:7d:
                    bc:96:ac:aa:fe:b2:bb:ec:c4:98:82:37:1b:b7:3f:
                    a2:f1:ee:53:84:11:ed:c4:fc:23:e7:59:21:cb:19:
                    f0:6c:15:69:dd:de:8a:2f:01:77:22:f9:ce:b7:fd:
                    6c:c4:aa:db:48:4d:62:43:41:1e:ce:10:47:86:07:
                    21:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A4:8C:E2:28:C4:D7:DC:A9:F1:F3:42:7A:00:89:81:98:46:4D:A3
            X509v3 Authority Key Identifier:
                keyid:71:F3:AE:58:27:B0:21:98:7E:1B:99:3D:B3:B3:48:4A:8F:B8:9C:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/225B1C21B83EAF69980CC1E99712B9E6A96CE30E3C986D4AC450A5C89982E2CA/0/71F3AE5827B021987E1B993DB3B3484A8FB89C48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71F3AE5827B021987E1B993DB3B3484A8FB89C48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/225B1C21B83EAF69980CC1E99712B9E6A96CE30E3C986D4AC450A5C89982E2CA/0/71F3AE5827B021987E1B993DB3B3484A8FB89C48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:9b:0c:8e:e5:10:ce:9c:3f:1b:b4:f0:76:50:4c:fc:d4:b2:
         bc:bd:40:be:d6:6d:72:74:15:78:ad:cd:62:64:6c:6d:d3:80:
         ea:78:0e:ba:d5:e8:e1:da:c6:70:6e:e3:4f:51:80:a5:a7:4d:
         34:67:f3:e0:25:e3:2f:1b:98:a2:f4:41:f6:3e:e5:01:0d:a8:
         39:fb:b1:85:79:b7:95:a0:64:67:1c:c1:a5:31:ef:98:f8:cc:
         52:20:46:b7:db:bf:6c:a6:7f:2c:b1:45:b7:9c:db:4a:eb:b5:
         35:66:c6:48:5f:95:33:69:83:0e:44:b3:d4:d4:19:5a:9f:6e:
         bf:1a:ea:b1:b4:3b:12:24:a3:38:a1:b5:90:f6:f1:32:06:fa:
         ff:b4:87:71:95:be:fc:67:70:35:74:c4:05:45:60:1e:65:03:
         90:52:d1:fd:c9:a9:82:83:ac:3a:6b:88:38:a8:6a:76:2a:83:
         8c:84:22:39:2f:cd:8f:4f:b5:68:40:e2:f7:63:03:19:f5:f6:
         4d:6d:4b:63:83:b5:ea:6d:92:c5:15:0b:be:b5:98:33:46:f6:
         ca:93:2d:91:3b:76:e9:ef:95:0f:25:b0:bc:f0:69:0a:e6:1a:
         4d:20:fd:b4:29:6e:e3:32:76:5b:18:08:79:38:e4:de:c1:8a:
         85:c4:62:67
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUPdU6cdvpZgH3tW5v2g+qXZtxBi8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFGM0FFNTgyN0IwMjE5ODdFMUI5OTNEQjNCMzQ4NEE4
RkI4OUM0ODAeFw0yNTAxMzExODA5NDVaFw0yNTAyMDYwMzA4NDVaMDMxMTAvBgNV
BAMTKDhGQTQ4Q0UyMjhDNEQ3RENBOUYxRjM0MjdBMDA4OTgxOTg0NjREQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeYJxgD3uiIktj/UEimdHDTPd+
79Le0TVOSBsrwdgaJb2YcNIZMU9gjlGLhwqpC1hfEQQjnXTtQcwX3tbheHJplQ4l
BtSPBMbYayRmQeQ/t9a+fsdFGcoRUh582u5RgNDZf3YcYq8eDP0C8GUJ+FzrMdHP
tsuUe3Gfj4T9ruTr3sQFOttWe+SbdLAax2p1kMcV25rG698JGvfRPR6a0vJCyl8G
z/PPhPIolNsqml8U7zC+B+TIBg5ZC35HgP35WS/YfbyWrKr+srvsxJiCNxu3P6Lx
7lOEEe3E/CPnWSHLGfBsFWnd3oovAXci+c63/WzEqttITWJDQR7OEEeGByELAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUj6SM4ijE19yp8fNCegCJgZhGTaMwHwYDVR0j
BBgwFoAUcfOuWCewIZh+G5k9s7NISo+4nEgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMjVCMUMyMUI4M0VBRjY5OTgwQ0MxRTk5NzEyQjlFNkE5
NkNFMzBFM0M5ODZENEFDNDUwQTVDODk5ODJFMkNBLzAvNzFGM0FFNTgyN0IwMjE5
ODdFMUI5OTNEQjNCMzQ4NEE4RkI4OUM0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MUYzQUU1ODI3QjAyMTk4N0Ux
Qjk5M0RCM0IzNDg0QThGQjg5QzQ4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjI1QjFDMjFCODNFQUY2OTk4MENDMUU5OTcxMkI5RTZBOTZDRTMwRTND
OTg2RDRBQzQ1MEE1Qzg5OTgyRTJDQS8wLzcxRjNBRTU4MjdCMDIxOTg3RTFCOTkz
REIzQjM0ODRBOEZCODlDNDgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAmmwyO5RDOnD8btPB2UEz81LK8
vUC+1m1ydBV4rc1iZGxt04DqeA661ejh2sZwbuNPUYClp000Z/PgJeMvG5ii9EH2
PuUBDag5+7GFebeVoGRnHMGlMe+Y+MxSIEa3279spn8ssUW3nNtK67U1ZsZIX5Uz
aYMORLPU1Blan26/GuqxtDsSJKM4obWQ9vEyBvr/tIdxlb78Z3A1dMQFRWAeZQOQ
UtH9yamCg6w6a4g4qGp2KoOMhCI5L82PT7VoQOL3YwMZ9fZNbUtjg7XqbZLFFQu+
tZgzRvbKky2RO3bp75UPJbC88GkK5hpNIP20KW7jMnZbGAh5OOTewYqFxGJn
-----END CERTIFICATE-----