Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.mft
File:                     6C7F5FF558448E94BE5C9035CCB3AACE6543C218.mft (raw, json)
Hash identifier:          yIKyCkJ4qdTQ6hSAUxUqnkHIqs+aVqKWW0IgPj3HmL4=
Subject key identifier:   F4:31:CC:4D:36:C1:9F:D7:62:F1:79:B9:C5:37:BC:21:45:2E:D5:D7
Authority key identifier: 6C:7F:5F:F5:58:44:8E:94:BE:5C:90:35:CC:B3:AA:CE:65:43:C2:18
Certificate issuer:       /CN=6C7F5FF558448E94BE5C9035CCB3AACE6543C218
Certificate serial:       39DC2A516AE59DC66DAEF27C1E3D8916045209C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.mft
Manifest number:          A3
Signing time:             Wed 29 Jan 2025 17:59:58 +0000
Manifest this update:     Wed 29 Jan 2025 17:54:58 +0000
Manifest next update:     Mon 03 Feb 2025 19:17:58 +0000
Files and hashes:         1: 3139302e3231312e38302e302f32312d3234203d3e20323632313837.roa (hash: Ic81IoXbrZeCP0fJ5uDJ+dTFztfiTayDkSVc0H+8ZsI=)
                          2: 6C7F5FF558448E94BE5C9035CCB3AACE6543C218.crl (hash: NhqVlbFh6ooOTYTU5T4dDyGwoiXBa7wHj7j1cTduNzw=)
                          3: 3139302e3231312e38382e302f32322d3234203d3e20323632313837.roa (hash: ZONVfEOesm13f3wREsGM5ucD/a3MbXYElBFiQWVikvE=)
                          4: 323830303a6133303a3a2f33322d3438203d3e20323632313837.roa (hash: 2tI7rbrc5XOqZZO7xM8rDkalrG7ZaMQY/OMRMMNKHNg=)
                          5: 3133312e3130302e3138302e302f32322d3234203d3e20323632313837.roa (hash: BhQyjY13xaN7urVS2bjAk0hYtz//FJbrGTSsqcuXGOY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:dc:2a:51:6a:e5:9d:c6:6d:ae:f2:7c:1e:3d:89:16:04:52:09:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C7F5FF558448E94BE5C9035CCB3AACE6543C218
        Validity
            Not Before: Jan 29 17:54:58 2025 GMT
            Not After : Feb  3 19:17:58 2025 GMT
        Subject: CN=F431CC4D36C19FD762F179B9C537BC21452ED5D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a5:58:dd:62:9b:dc:d9:cf:a3:71:f0:77:a1:
                    58:b7:77:5d:ec:71:40:e2:3b:bc:f1:ed:2f:b5:9d:
                    4e:fe:d6:9f:5f:33:f2:33:df:39:2f:90:b9:32:aa:
                    7c:73:b4:cc:94:33:9c:5f:e1:1f:78:17:ba:13:fa:
                    86:55:ee:66:b6:f4:41:31:26:ff:8c:3a:6e:ae:d3:
                    a0:ad:2a:7e:b4:89:b5:c9:5f:43:c7:49:db:8f:9d:
                    5e:11:a1:17:62:89:e3:03:14:fd:cb:4a:ef:b4:df:
                    61:d6:a4:4d:df:5c:fd:34:e5:10:b2:c7:e9:77:30:
                    29:f2:15:ca:c3:93:53:5e:70:38:34:78:52:4c:a1:
                    00:c9:3a:35:74:7d:92:2d:28:67:b1:a4:bc:4f:0a:
                    8c:58:b3:f7:ff:f2:27:1e:61:a6:f1:f7:2e:58:1f:
                    cf:d3:7f:27:70:c8:56:a0:bf:71:95:5e:4c:e6:09:
                    17:ad:fc:38:53:5b:13:33:02:13:2a:6e:64:c9:4a:
                    2d:ca:13:f5:77:40:70:d0:80:f9:7b:6b:3b:a7:70:
                    c3:eb:7f:98:a3:28:bb:64:4c:36:f8:7e:81:aa:a6:
                    1a:e6:fc:ed:8d:80:fa:a8:84:8c:5e:fd:84:d0:cb:
                    28:a5:74:d5:47:c0:2a:01:7a:f2:12:aa:b7:02:3d:
                    63:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:31:CC:4D:36:C1:9F:D7:62:F1:79:B9:C5:37:BC:21:45:2E:D5:D7
            X509v3 Authority Key Identifier:
                keyid:6C:7F:5F:F5:58:44:8E:94:BE:5C:90:35:CC:B3:AA:CE:65:43:C2:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:5c:b2:a2:fe:26:ea:f7:f8:1e:e2:09:46:89:80:d1:0e:d4:
         53:1f:fb:5c:ee:d6:41:7f:97:d4:63:98:d1:9d:e2:e9:9c:a0:
         ed:e7:67:64:20:a4:4e:74:a7:75:49:ce:2e:55:2d:e3:11:f5:
         7e:43:ea:ce:02:06:01:71:0e:fe:6d:22:e6:80:d3:e5:f4:cf:
         f4:12:d2:e9:04:04:f9:87:77:b3:9e:5b:57:71:32:7d:80:5c:
         e8:38:56:d8:81:6e:2c:a6:de:c4:66:09:b6:e3:e7:84:56:ce:
         49:a5:fb:c0:47:d4:e5:33:d8:2b:83:67:4b:8f:4c:ef:42:63:
         04:95:26:32:a9:37:79:07:6f:bf:4a:3b:4c:4a:04:30:9f:19:
         08:e6:04:ce:dd:be:6c:90:34:37:35:5f:e0:d5:67:25:d6:83:
         cc:cb:ba:24:e7:c8:fa:0e:69:bc:a6:ed:eb:4b:9d:43:41:77:
         16:6b:9d:16:cb:cb:53:87:c3:25:90:71:42:3f:4c:17:bf:92:
         5c:05:2c:f0:8f:b5:32:c2:4f:90:20:d7:50:42:34:47:7c:3a:
         87:eb:df:2b:1a:31:7e:94:14:81:48:5b:4e:17:63:9a:f9:34:
         3c:e6:73:a5:fe:28:3d:f7:5a:7a:5d:60:b2:e5:1d:aa:fc:bb:
         82:1e:56:3c
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUOdwqUWrlncZtrvJ8Hj2JFgRSCcIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM3RjVGRjU1ODQ0OEU5NEJFNUM5MDM1Q0NCM0FBQ0U2
NTQzQzIxODAeFw0yNTAxMjkxNzU0NThaFw0yNTAyMDMxOTE3NThaMDMxMTAvBgNV
BAMTKEY0MzFDQzREMzZDMTlGRDc2MkYxNzlCOUM1MzdCQzIxNDUyRUQ1RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRpVjdYpvc2c+jcfB3oVi3d13s
cUDiO7zx7S+1nU7+1p9fM/Iz3zkvkLkyqnxztMyUM5xf4R94F7oT+oZV7ma29EEx
Jv+MOm6u06CtKn60ibXJX0PHSduPnV4RoRdiieMDFP3LSu+032HWpE3fXP005RCy
x+l3MCnyFcrDk1NecDg0eFJMoQDJOjV0fZItKGexpLxPCoxYs/f/8iceYabx9y5Y
H8/TfydwyFagv3GVXkzmCRet/DhTWxMzAhMqbmTJSi3KE/V3QHDQgPl7azuncMPr
f5ijKLtkTDb4foGqphrm/O2NgPqohIxe/YTQyyildNVHwCoBevISqrcCPWNFAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU9DHMTTbBn9di8Xm5xTe8IUUu1dcwHwYDVR0j
BBgwFoAUbH9f9VhEjpS+XJA1zLOqzmVDwhgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zODUwQzg0NUFBOEIyMUFCRjUyQ0ZFRTIyMzhGRDhBQTBG
MDJGREU1Njg5NkE1MzIyNTlGMUQyMEE0QUQwMUEyLzAvNkM3RjVGRjU1ODQ0OEU5
NEJFNUM5MDM1Q0NCM0FBQ0U2NTQzQzIxOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QzdGNUZGNTU4NDQ4RTk0QkU1
QzkwMzVDQ0IzQUFDRTY1NDNDMjE4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzg1MEM4NDVBQThCMjFBQkY1MkNGRUUyMjM4RkQ4QUEwRjAyRkRFNTY4
OTZBNTMyMjU5RjFEMjBBNEFEMDFBMi8wLzZDN0Y1RkY1NTg0NDhFOTRCRTVDOTAz
NUNDQjNBQUNFNjU0M0MyMTgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC7XLKi/ibq9/ge4glGiYDRDtRT
H/tc7tZBf5fUY5jRneLpnKDt52dkIKROdKd1Sc4uVS3jEfV+Q+rOAgYBcQ7+bSLm
gNPl9M/0EtLpBAT5h3eznltXcTJ9gFzoOFbYgW4spt7EZgm24+eEVs5JpfvAR9Tl
M9grg2dLj0zvQmMElSYyqTd5B2+/SjtMSgQwnxkI5gTO3b5skDQ3NV/g1Wcl1oPM
y7ok58j6Dmm8pu3rS51DQXcWa50Wy8tTh8MlkHFCP0wXv5JcBSzwj7Uywk+QINdQ
QjRHfDqH698rGjF+lBSBSFtOF2Oa+TQ85nOl/ig991p6XWCy5R2q/LuCHlY8
-----END CERTIFICATE-----