Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.mft
File:                     65D543688C82CC80ED68DF2A93441C295C9FA3E2.mft (raw, json)
Hash identifier:          /DrkYxtXBjT3tJHE8rbMk73nemwu1DalDD03XNADa2M=
Subject key identifier:   00:F0:E2:CA:C7:14:55:CE:5E:6C:EE:CA:93:B7:54:C3:E6:EC:1C:87
Authority key identifier: 65:D5:43:68:8C:82:CC:80:ED:68:DF:2A:93:44:1C:29:5C:9F:A3:E2
Certificate issuer:       /CN=65D543688C82CC80ED68DF2A93441C295C9FA3E2
Certificate serial:       63962CB5CF30D0DCCFB17021CEA615DDB6FCB8AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.mft
Manifest number:          63
Signing time:             Fri 31 Jan 2025 02:29:52 +0000
Manifest this update:     Fri 31 Jan 2025 02:24:52 +0000
Manifest next update:     Thu 06 Feb 2025 00:57:52 +0000
Files and hashes:         1: 34352e3138322e3132382e302f32322d3234203d3e20323639373438.roa (hash: /q9LQAh8yR6HjcVfiJNg/40NirI8lBf8EDIEIPMs288=)
                          2: 323830333a373936303a3a2f33322d3438203d3e20323639373438.roa (hash: e21QvDl990ypUCrdvf/AQjM4eQbi1L/COrznev4gDg4=)
                          3: 65D543688C82CC80ED68DF2A93441C295C9FA3E2.crl (hash: NcR0I3tJfCuxtf4VNHRfBEOAB+3Dxqw+lZuuLPCecUk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:96:2c:b5:cf:30:d0:dc:cf:b1:70:21:ce:a6:15:dd:b6:fc:b8:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65D543688C82CC80ED68DF2A93441C295C9FA3E2
        Validity
            Not Before: Jan 31 02:24:52 2025 GMT
            Not After : Feb  6 00:57:52 2025 GMT
        Subject: CN=00F0E2CAC71455CE5E6CEECA93B754C3E6EC1C87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:34:f7:7c:a8:05:fd:49:0e:1f:f0:6c:1f:7f:
                    06:e9:c2:29:b7:c4:c9:08:54:60:79:ce:74:cf:fa:
                    31:3a:f5:36:ad:b9:30:56:d3:a3:01:81:55:3f:b2:
                    cc:4d:8f:94:13:24:0a:2b:d6:ca:35:10:46:c8:2a:
                    a9:7e:81:57:86:e0:93:e5:42:70:04:bf:e1:60:02:
                    6b:89:b1:7f:82:54:39:e3:8c:f7:39:67:23:62:76:
                    8f:b9:e5:36:8a:c4:4c:42:c8:f1:80:e4:89:d1:b4:
                    b4:52:dd:09:95:95:52:9e:79:78:af:32:4e:98:2d:
                    3f:ac:f3:00:1d:ac:80:55:92:27:4c:d6:98:71:df:
                    e7:98:11:94:11:35:ea:97:cd:14:a8:12:4f:bd:bc:
                    17:e8:e0:cb:81:21:5a:08:98:54:7b:d3:e7:a5:e5:
                    aa:e7:96:ae:b2:c3:a9:b5:79:33:f6:d5:14:db:74:
                    33:4e:0d:67:df:c7:ab:22:f0:f8:ac:0a:73:c7:70:
                    fa:dc:a6:ce:13:9e:34:1f:4e:e0:09:08:f4:ef:cd:
                    b7:52:77:b8:65:a3:9f:cf:cf:3d:5c:3c:34:d7:c7:
                    68:70:9c:da:1e:37:8b:56:97:60:d8:9f:90:7e:db:
                    90:43:57:b9:a5:a6:f0:0d:e4:c3:82:dc:05:08:e4:
                    12:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F0:E2:CA:C7:14:55:CE:5E:6C:EE:CA:93:B7:54:C3:E6:EC:1C:87
            X509v3 Authority Key Identifier:
                keyid:65:D5:43:68:8C:82:CC:80:ED:68:DF:2A:93:44:1C:29:5C:9F:A3:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:7e:6c:d0:58:b1:34:d1:0e:6f:8f:c1:dd:3e:e9:ba:8a:dd:
         1f:eb:fe:ff:56:43:30:07:c9:6a:5a:7b:d3:e8:20:13:0f:e3:
         17:9c:e0:39:c0:77:35:34:07:15:5e:28:c6:53:33:ca:29:ed:
         8d:a6:08:05:7d:b6:36:3d:ae:59:cb:c5:15:5e:83:c3:9e:a4:
         41:f0:1d:d8:bd:54:c7:a3:8d:c9:2d:7f:3c:1d:4e:fe:10:50:
         f1:7e:cc:14:57:26:22:60:a8:57:49:83:c6:b2:c8:cf:07:c3:
         c5:22:96:53:63:c9:fb:54:f3:4a:7d:1c:82:00:61:a1:16:3a:
         00:75:f0:2d:4b:56:ae:e9:b1:87:01:98:de:62:63:a9:41:88:
         9c:ad:ae:eb:4a:cb:f8:c0:28:0a:87:30:57:81:9c:67:f1:91:
         e6:a1:82:df:12:91:80:65:54:82:e2:af:88:65:f3:f5:9b:19:
         25:8a:49:6f:ed:c4:7f:b3:a8:3a:07:e7:d0:ee:ff:11:2b:d8:
         53:5a:e7:d7:e9:d8:3c:df:56:6c:1e:05:fd:b7:a3:e5:ca:d1:
         f0:81:06:2d:0a:fd:87:98:ef:2e:6e:c2:91:ba:fe:94:03:10:
         94:84:de:f4:d1:79:4c:6e:10:37:da:10:10:b4:a9:16:70:2d:
         0e:17:56:a4
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUY5Ystc8w0NzPsXAhzqYV3bb8uK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjVENTQzNjg4QzgyQ0M4MEVENjhERjJBOTM0NDFDMjk1
QzlGQTNFMjAeFw0yNTAxMzEwMjI0NTJaFw0yNTAyMDYwMDU3NTJaMDMxMTAvBgNV
BAMTKDAwRjBFMkNBQzcxNDU1Q0U1RTZDRUVDQTkzQjc1NEMzRTZFQzFDODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3NPd8qAX9SQ4f8Gwffwbpwim3
xMkIVGB5znTP+jE69TatuTBW06MBgVU/ssxNj5QTJAor1so1EEbIKql+gVeG4JPl
QnAEv+FgAmuJsX+CVDnjjPc5ZyNido+55TaKxExCyPGA5InRtLRS3QmVlVKeeXiv
Mk6YLT+s8wAdrIBVkidM1phx3+eYEZQRNeqXzRSoEk+9vBfo4MuBIVoImFR70+el
5arnlq6yw6m1eTP21RTbdDNODWffx6si8PisCnPHcPrcps4TnjQfTuAJCPTvzbdS
d7hlo5/Pzz1cPDTXx2hwnNoeN4tWl2DYn5B+25BDV7mlpvAN5MOC3AUI5BKJAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUAPDiyscUVc5ebO7Kk7dUw+bsHIcwHwYDVR0j
BBgwFoAUZdVDaIyCzIDtaN8qk0QcKVyfo+IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NDNCQzA2NjdDRDY2RTcwODQ4MDdEN0NFNTgyNzIzMkYz
RkQxQzlFMkFFMDRENjlEMTlBMjI3OEZGRDIzMjZCLzAvNjVENTQzNjg4QzgyQ0M4
MEVENjhERjJBOTM0NDFDMjk1QzlGQTNFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NUQ1NDM2ODhDODJDQzgwRUQ2
OERGMkE5MzQ0MUMyOTVDOUZBM0UyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDQzQkMwNjY3Q0Q2NkU3MDg0ODA3RDdDRTU4MjcyMzJGM0ZEMUM5RTJB
RTA0RDY5RDE5QTIyNzhGRkQyMzI2Qi8wLzY1RDU0MzY4OEM4MkNDODBFRDY4REYy
QTkzNDQxQzI5NUM5RkEzRTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBvfmzQWLE00Q5vj8HdPum6it0f
6/7/VkMwB8lqWnvT6CATD+MXnOA5wHc1NAcVXijGUzPKKe2NpggFfbY2Pa5Zy8UV
XoPDnqRB8B3YvVTHo43JLX88HU7+EFDxfswUVyYiYKhXSYPGssjPB8PFIpZTY8n7
VPNKfRyCAGGhFjoAdfAtS1au6bGHAZjeYmOpQYicra7rSsv4wCgKhzBXgZxn8ZHm
oYLfEpGAZVSC4q+IZfP1mxkliklv7cR/s6g6B+fQ7v8RK9hTWufX6dg831ZsHgX9
t6PlytHwgQYtCv2HmO8ubsKRuv6UAxCUhN700XlMbhA32hAQtKkWcC0OF1ak
-----END CERTIFICATE-----