Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.mft
File:                     291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.mft (raw, json)
Hash identifier:          ntZUzuEWHL6jG+MGZgqgYePVsDnE08DEy8KLU+RpV90=
Subject key identifier:   89:15:DB:66:86:FB:58:74:D0:1E:06:75:AD:C4:F1:3A:8C:D2:C1:51
Authority key identifier: 29:1B:F2:64:E3:DF:BE:29:A5:D5:2A:E2:4C:E1:24:3D:F6:F3:98:C2
Certificate issuer:       /CN=291BF264E3DFBE29A5D52AE24CE1243DF6F398C2
Certificate serial:       1952FFAC057C6FB826D13B4A25F40CABDA2C3264
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.mft
Manifest number:          A7
Signing time:             Fri 31 Jan 2025 12:05:59 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:59 +0000
Manifest next update:     Wed 05 Feb 2025 02:59:59 +0000
Files and hashes:         1: 34352e3136342e3130382e302f32322d3234203d3e20323730313733.roa (hash: ENfleCJ/D5JxqX/cGqekK5qmtgdgw47EMVMqmhStZwo=)
                          2: 323830363a3330633a3a2f33322d3438203d3e20323730313733.roa (hash: FSTzGfppWXcqbpna4EyWFB1ZxPqAsJz3SyvWPSgUbCM=)
                          3: 323830363a3330633a3a2f33322d3332203d3e203238343431.roa (hash: batDC4HlrKn+lHkgaJY8ue6x1pe+8diQ6CuU3sfPbp0=)
                          4: 291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.crl (hash: Mc9sFqLOleWDNAx2F7TGoG94WS5TlKix2kg683UCxRE=)
                          5: 34352e3136342e3130382e302f32322d3234203d3e203238343431.roa (hash: Y7bFSPIjpMdwP76tDYXiZ2BPYcIlqt3w5+9sV6gd8y0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:52:ff:ac:05:7c:6f:b8:26:d1:3b:4a:25:f4:0c:ab:da:2c:32:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291BF264E3DFBE29A5D52AE24CE1243DF6F398C2
        Validity
            Not Before: Jan 31 12:00:59 2025 GMT
            Not After : Feb  5 02:59:59 2025 GMT
        Subject: CN=8915DB6686FB5874D01E0675ADC4F13A8CD2C151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e0:84:97:58:39:1b:77:05:17:e7:62:bc:62:
                    3e:05:50:25:dc:b5:50:06:a1:94:f0:71:0b:71:7d:
                    a0:0f:ff:91:f4:89:35:91:27:d5:49:e9:65:94:bb:
                    04:c1:16:01:da:ef:50:58:ab:eb:dc:f0:69:46:92:
                    32:bf:a2:0d:cf:cc:e3:57:77:a0:6d:d9:d5:dd:7b:
                    49:86:0c:a6:b6:a5:d8:26:9e:c3:5a:ce:bc:84:64:
                    ee:09:51:b9:fa:39:8d:7c:d8:91:be:12:ec:db:7a:
                    e1:52:62:5c:e8:28:2b:22:8e:e8:b6:7d:f4:d1:a9:
                    39:bc:60:20:59:18:76:27:21:aa:41:e0:c4:e9:17:
                    7e:91:82:2c:5c:3a:7e:91:d0:24:21:1f:2a:7d:ee:
                    6d:bd:65:0d:0c:b2:d5:c7:21:91:84:8b:f0:ea:c7:
                    fc:58:7e:c3:ba:32:56:ef:d7:da:39:91:cd:fe:a8:
                    f8:9c:a9:69:ea:f3:11:24:4e:5a:86:f4:38:a5:e4:
                    07:16:63:95:37:d1:7c:07:26:b4:8a:72:48:69:38:
                    d3:1e:e1:cd:cb:ea:a5:ce:51:eb:23:58:90:c7:2f:
                    4e:db:68:46:93:95:76:58:b5:b5:3d:94:b8:0d:a0:
                    a2:94:28:85:df:9a:98:54:c3:e6:57:d3:bd:49:32:
                    eb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:15:DB:66:86:FB:58:74:D0:1E:06:75:AD:C4:F1:3A:8C:D2:C1:51
            X509v3 Authority Key Identifier:
                keyid:29:1B:F2:64:E3:DF:BE:29:A5:D5:2A:E2:4C:E1:24:3D:F6:F3:98:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:1c:37:e7:c9:d9:d2:b8:90:49:2e:2f:e0:60:4d:e1:f8:64:
         f3:f8:92:32:89:a3:9c:b3:fd:d2:41:bd:72:5e:0e:32:46:03:
         91:d9:16:c2:5e:18:23:1e:4b:20:04:bf:28:01:b1:2a:ff:b0:
         4d:1c:0d:f6:9a:27:ab:67:1e:c8:e9:53:6c:aa:83:2e:04:f4:
         4a:77:fd:0a:8d:f0:64:4d:b6:67:14:7a:03:33:65:0c:61:ac:
         00:ee:2a:c1:f6:68:a2:d4:01:4a:45:e3:e6:da:8a:33:a0:37:
         b1:2e:2e:0e:40:3b:ef:53:71:99:a5:b5:f1:ce:5e:c7:fc:cb:
         11:68:b7:57:3a:73:1d:e7:3f:66:5a:c8:99:b0:d3:a9:aa:c2:
         60:4c:3f:0b:15:b4:4f:b9:28:ca:96:70:48:b1:bc:ff:c9:93:
         d3:d2:63:98:7a:0c:86:ae:b6:14:d2:f8:ad:e3:57:ea:4a:45:
         9e:6e:15:a1:d3:87:55:d7:c3:60:3e:a5:8b:ab:2a:c9:c6:57:
         69:f6:c6:4c:47:b1:d4:a1:13:cc:75:ff:2f:62:2f:20:3a:e6:
         4f:2f:63:01:1e:25:a3:e7:44:d6:d8:a6:22:2a:fb:88:dd:cd:
         a4:48:3b:f2:c5:40:e9:30:c6:fe:03:82:36:a5:b6:3b:e1:67:
         e0:ca:23:7a
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUGVL/rAV8b7gm0TtKJfQMq9osMmQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjkxQkYyNjRFM0RGQkUyOUE1RDUyQUUyNENFMTI0M0RG
NkYzOThDMjAeFw0yNTAxMzExMjAwNTlaFw0yNTAyMDUwMjU5NTlaMDMxMTAvBgNV
BAMTKDg5MTVEQjY2ODZGQjU4NzREMDFFMDY3NUFEQzRGMTNBOENEMkMxNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT4ISXWDkbdwUX52K8Yj4FUCXc
tVAGoZTwcQtxfaAP/5H0iTWRJ9VJ6WWUuwTBFgHa71BYq+vc8GlGkjK/og3PzONX
d6Bt2dXde0mGDKa2pdgmnsNazryEZO4JUbn6OY182JG+EuzbeuFSYlzoKCsijui2
ffTRqTm8YCBZGHYnIapB4MTpF36RgixcOn6R0CQhHyp97m29ZQ0MstXHIZGEi/Dq
x/xYfsO6Mlbv19o5kc3+qPicqWnq8xEkTlqG9Dil5AcWY5U30XwHJrSKckhpONMe
4c3L6qXOUesjWJDHL07baEaTlXZYtbU9lLgNoKKUKIXfmphUw+ZX071JMuslAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUiRXbZob7WHTQHgZ1rcTxOozSwVEwHwYDVR0j
BBgwFoAUKRvyZOPfviml1SriTOEkPfbzmMIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRkE3NzEzNzdBMzUzMDgxODg4MURDMjIyNjcwNUE1OEIx
OTVCRDZFQzAzNTEwMzgyMTE3RTkyRUU5NjFEM0E5LzAvMjkxQkYyNjRFM0RGQkUy
OUE1RDUyQUUyNENFMTI0M0RGNkYzOThDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTFCRjI2NEUzREZCRTI5QTVE
NTJBRTI0Q0UxMjQzREY2RjM5OEMyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0ZBNzcxMzc3QTM1MzA4MTg4ODFEQzIyMjY3MDVBNThCMTk1QkQ2RUMw
MzUxMDM4MjExN0U5MkVFOTYxRDNBOS8wLzI5MUJGMjY0RTNERkJFMjlBNUQ1MkFF
MjRDRTEyNDNERjZGMzk4QzIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAfHDfnydnSuJBJLi/gYE3h+GTz
+JIyiaOcs/3SQb1yXg4yRgOR2RbCXhgjHksgBL8oAbEq/7BNHA32mierZx7I6VNs
qoMuBPRKd/0KjfBkTbZnFHoDM2UMYawA7irB9mii1AFKRePm2oozoDexLi4OQDvv
U3GZpbXxzl7H/MsRaLdXOnMd5z9mWsiZsNOpqsJgTD8LFbRPuSjKlnBIsbz/yZPT
0mOYegyGrrYU0vit41fqSkWebhWh04dV18NgPqWLqyrJxldp9sZMR7HUoRPMdf8v
Yi8gOuZPL2MBHiWj50TW2KYiKvuI3c2kSDvyxUDpMMb+A4I2pbY74WfgyiN6
-----END CERTIFICATE-----