Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A3BA7D2E104D271ED801DC143FD1C47E9FAAD8CA286339D67F685DFC03A5A7B/0/12E10688952241783849ADC1F70B3E3EA7C252A2.mft
File:                     12E10688952241783849ADC1F70B3E3EA7C252A2.mft (raw, json)
Hash identifier:          YMuBEhgJWbjaoN7bWu029laQAwAWJquelYZLV/JmQ20=
Subject key identifier:   67:C4:41:96:D0:96:C2:E3:62:30:BB:F9:D7:63:8B:E3:FA:E5:38:A6
Authority key identifier: 12:E1:06:88:95:22:41:78:38:49:AD:C1:F7:0B:3E:3E:A7:C2:52:A2
Certificate issuer:       /CN=12E10688952241783849ADC1F70B3E3EA7C252A2
Certificate serial:       0A85CD9CA2E34A6FDC0027249E78A30F0714C662
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12E10688952241783849ADC1F70B3E3EA7C252A2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A3BA7D2E104D271ED801DC143FD1C47E9FAAD8CA286339D67F685DFC03A5A7B/0/12E10688952241783849ADC1F70B3E3EA7C252A2.mft
Manifest number:          A7
Signing time:             Thu 30 Jan 2025 16:48:48 +0000
Manifest this update:     Thu 30 Jan 2025 16:43:48 +0000
Manifest next update:     Tue 04 Feb 2025 09:52:48 +0000
Files and hashes:         1: 12E10688952241783849ADC1F70B3E3EA7C252A2.crl (hash: UFyWfRwwNmUEyFTC50D1tB6tyMgmXYlGC/F4RGC4iZs=)
                          2: 3138362e32362e37342e302f32342d3234203d3e20323730313930.roa (hash: gyWRQlnZl+wWzCdJBV/D8KXGPg5Ku1mbBmwrREJI1iA=)
                          3: 3138362e32362e37322e302f32332d3234203d3e20323635363037.roa (hash: YFbBvgeEfoq1y5sQZCmO4nyNetAcG76wxTGau8J00ps=)
                          4: 3138362e32362e37352e302f32342d3234203d3e20323730323232.roa (hash: iW58EBjC1WXOmhjAdWOalKO7xYebbrPbtbiX9FyaiEs=)
                          5: 323830363a3363333a3a2f33322d3438203d3e20323730323232.roa (hash: lQTU+ezctWQawpOtxZv3dqQ06IHTgRxRhZBCCGU8lXQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:85:cd:9c:a2:e3:4a:6f:dc:00:27:24:9e:78:a3:0f:07:14:c6:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12E10688952241783849ADC1F70B3E3EA7C252A2
        Validity
            Not Before: Jan 30 16:43:48 2025 GMT
            Not After : Feb  4 09:52:48 2025 GMT
        Subject: CN=67C44196D096C2E36230BBF9D7638BE3FAE538A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d6:de:3a:45:c7:9f:24:3f:96:f4:c5:e2:ed:
                    ca:ff:3c:e8:ee:17:eb:69:06:43:66:89:7e:7c:69:
                    9a:27:b9:8c:ee:b1:3f:23:50:f7:71:6f:a7:10:ce:
                    4d:07:8f:ed:e9:23:b6:5d:23:02:12:e0:19:41:cd:
                    4f:5c:d0:ce:e9:00:83:62:fa:20:b9:7b:07:f5:18:
                    a7:e8:00:1a:86:01:11:22:61:64:0e:8e:3a:a4:56:
                    a8:ce:9b:b9:fd:81:2d:a5:7e:22:84:c9:23:6c:9a:
                    1f:31:94:02:73:1c:4c:63:d0:ee:81:3e:da:47:f4:
                    11:51:a3:71:da:09:e4:07:ed:71:65:03:cc:e1:6f:
                    87:2e:e4:e2:fb:ad:a8:ba:28:ab:07:6c:2f:34:07:
                    bf:50:76:25:6a:50:50:86:23:81:3e:a4:ed:8f:29:
                    d3:bb:4a:c4:77:78:5f:d4:d3:1f:75:0d:1f:53:b8:
                    53:27:e8:c6:2a:dd:b1:7d:41:8b:fa:ba:2a:08:17:
                    3c:0d:89:54:f0:8f:e0:eb:89:c4:d7:cc:71:ef:1e:
                    cb:5e:99:d2:d8:21:35:5d:6f:97:74:58:ec:67:3c:
                    d7:f8:96:9d:ac:50:3f:ab:09:e0:79:db:b6:8c:bc:
                    ed:b0:ec:04:99:86:fe:82:e5:b4:ae:0c:47:6a:b9:
                    6b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C4:41:96:D0:96:C2:E3:62:30:BB:F9:D7:63:8B:E3:FA:E5:38:A6
            X509v3 Authority Key Identifier:
                keyid:12:E1:06:88:95:22:41:78:38:49:AD:C1:F7:0B:3E:3E:A7:C2:52:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A3BA7D2E104D271ED801DC143FD1C47E9FAAD8CA286339D67F685DFC03A5A7B/0/12E10688952241783849ADC1F70B3E3EA7C252A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12E10688952241783849ADC1F70B3E3EA7C252A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A3BA7D2E104D271ED801DC143FD1C47E9FAAD8CA286339D67F685DFC03A5A7B/0/12E10688952241783849ADC1F70B3E3EA7C252A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:24:6f:04:ba:da:cb:24:b4:dd:c9:fc:14:d9:54:00:fb:3d:
         76:9c:23:1c:97:e9:69:22:93:35:6a:41:a8:3b:09:cd:50:50:
         04:78:c2:7e:16:5f:b4:7f:da:d1:38:c1:41:40:2b:4b:ab:01:
         af:71:43:24:45:b6:e4:d9:c0:8b:ac:0e:d0:97:10:c5:d2:e8:
         e9:21:e1:95:00:37:f5:fd:78:77:4b:7d:41:4b:0a:25:37:81:
         00:10:43:69:cc:46:5c:d1:20:0c:96:62:77:e1:cb:99:f3:7d:
         6d:5f:9a:ab:cf:38:2c:02:61:1b:d7:68:ed:69:aa:bc:40:55:
         f8:85:d3:9d:33:7d:2c:ad:d2:1a:67:9b:3e:b9:87:ae:4f:53:
         8d:19:ba:89:5b:d0:ff:bc:50:e8:84:0e:8c:5c:d3:53:cc:ce:
         74:9d:bb:9f:1b:59:5c:f6:a1:a6:fe:e7:71:4d:09:4f:a4:b8:
         02:37:a3:1b:07:41:f9:2d:0c:40:4d:5d:2e:3c:77:80:65:a6:
         ed:97:1d:41:74:f1:80:52:68:9e:e1:fe:db:f0:f2:06:48:41:
         57:75:5c:63:79:05:f5:5e:f1:28:67:1e:c8:ba:b0:d9:07:e6:
         74:82:ba:bb:66:89:ee:5d:2c:56:b1:d0:45:cb:88:02:fd:2b:
         c4:f8:7c:a3
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUCoXNnKLjSm/cACcknnijDwcUxmIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJFMTA2ODg5NTIyNDE3ODM4NDlBREMxRjcwQjNFM0VB
N0MyNTJBMjAeFw0yNTAxMzAxNjQzNDhaFw0yNTAyMDQwOTUyNDhaMDMxMTAvBgNV
BAMTKDY3QzQ0MTk2RDA5NkMyRTM2MjMwQkJGOUQ3NjM4QkUzRkFFNTM4QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr1t46RcefJD+W9MXi7cr/POju
F+tpBkNmiX58aZonuYzusT8jUPdxb6cQzk0Hj+3pI7ZdIwIS4BlBzU9c0M7pAINi
+iC5ewf1GKfoABqGAREiYWQOjjqkVqjOm7n9gS2lfiKEySNsmh8xlAJzHExj0O6B
PtpH9BFRo3HaCeQH7XFlA8zhb4cu5OL7rai6KKsHbC80B79QdiVqUFCGI4E+pO2P
KdO7SsR3eF/U0x91DR9TuFMn6MYq3bF9QYv6uioIFzwNiVTwj+DricTXzHHvHste
mdLYITVdb5d0WOxnPNf4lp2sUD+rCeB527aMvO2w7ASZhv6C5bSuDEdquWtLAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUZ8RBltCWwuNiMLv512OL4/rlOKYwHwYDVR0j
BBgwFoAUEuEGiJUiQXg4Sa3B9ws+PqfCUqIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTNCQTdEMkUxMDREMjcxRUQ4MDFEQzE0M0ZEMUM0N0U5
RkFBRDhDQTI4NjMzOUQ2N0Y2ODVERkMwM0E1QTdCLzAvMTJFMTA2ODg5NTIyNDE3
ODM4NDlBREMxRjcwQjNFM0VBN0MyNTJBMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMkUxMDY4ODk1MjI0MTc4Mzg0
OUFEQzFGNzBCM0UzRUE3QzI1MkEyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0EzQkE3RDJFMTA0RDI3MUVEODAxREMxNDNGRDFDNDdFOUZBQUQ4Q0Ey
ODYzMzlENjdGNjg1REZDMDNBNUE3Qi8wLzEyRTEwNjg4OTUyMjQxNzgzODQ5QURD
MUY3MEIzRTNFQTdDMjUyQTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDIJG8EutrLJLTdyfwU2VQA+z12
nCMcl+lpIpM1akGoOwnNUFAEeMJ+Fl+0f9rROMFBQCtLqwGvcUMkRbbk2cCLrA7Q
lxDF0ujpIeGVADf1/Xh3S31BSwolN4EAEENpzEZc0SAMlmJ34cuZ831tX5qrzzgs
AmEb12jtaaq8QFX4hdOdM30srdIaZ5s+uYeuT1ONGbqJW9D/vFDohA6MXNNTzM50
nbufG1lc9qGm/udxTQlPpLgCN6MbB0H5LQxATV0uPHeAZabtlx1BdPGAUmie4f7b
8PIGSEFXdVxjeQX1XvEoZx7IurDZB+Z0grq7ZonuXSxWsdBFy4gC/SvE+Hyj
-----END CERTIFICATE-----