Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft
File:                     2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft (raw, json)
Hash identifier:          1jxJ1vb5sPJQVwYM4sEzKnqtP/y9CckjdMLCQ+uRKy0=
Subject key identifier:   DC:6E:C0:20:9B:58:9B:2A:35:75:FE:76:DA:5E:8B:6B:A9:48:3A:44
Authority key identifier: 2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E
Certificate issuer:       /CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E
Certificate serial:       341C0D9A6C2769E454199DB218071EC6BA65091F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft
Manifest number:          A5
Signing time:             Fri 31 Jan 2025 05:57:14 +0000
Manifest this update:     Fri 31 Jan 2025 05:52:14 +0000
Manifest next update:     Tue 04 Feb 2025 12:53:14 +0000
Files and hashes:         1: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl (hash: 1WAfT4bnvW/Vs/wPX1oKHMKQrFAEJTCEk9FrYI1k6e0=)
                          2: 323830333a383332303a3a2f33322d3332203d3e20323636373133.roa (hash: cMQd3vQ7Wq81a9H1xw1cC5t8fM/q98/zGuNQtUkolPA=)
                          3: 34352e3233302e33362e302f32332d3234203d3e20323636373133.roa (hash: wVJX77TC1CF6SvV5gdQlc3+4BlqgZKip9GpofBLk1kA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:1c:0d:9a:6c:27:69:e4:54:19:9d:b2:18:07:1e:c6:ba:65:09:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E
        Validity
            Not Before: Jan 31 05:52:14 2025 GMT
            Not After : Feb  4 12:53:14 2025 GMT
        Subject: CN=DC6EC0209B589B2A3575FE76DA5E8B6BA9483A44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:45:7f:cc:8a:89:da:02:f3:a8:09:3a:8c:6c:
                    8a:7e:d6:dd:9e:7b:74:eb:90:f6:a4:b0:0f:b0:59:
                    d7:ba:e9:cb:33:39:f3:b5:8c:26:99:4d:00:87:76:
                    fb:e2:cd:f2:4b:10:2f:68:01:39:23:e1:49:80:83:
                    cc:16:35:af:5c:4d:1e:c3:54:f9:49:e4:71:aa:68:
                    21:be:4c:c9:71:4b:00:cf:2e:a0:de:24:3e:ba:d0:
                    0f:26:0d:91:7f:da:6a:db:72:0b:4e:e9:2e:07:39:
                    5f:4d:c9:5f:59:94:b7:f0:fc:cd:b8:1a:d0:4c:de:
                    16:f6:31:b2:ae:6a:c9:cb:26:fd:db:42:f3:1a:4a:
                    c1:bf:52:39:83:ba:c7:98:41:14:8f:1d:82:8e:35:
                    23:fb:80:af:40:88:56:de:a3:5f:71:67:13:20:0e:
                    b1:34:99:4e:6a:4f:73:2c:c0:65:fe:41:d1:b0:26:
                    79:6c:f9:c0:75:55:1e:0f:51:9e:21:e8:5f:ae:72:
                    18:5c:fe:d5:89:cb:3a:65:3e:97:70:60:13:b9:cf:
                    b5:3c:bf:65:f1:4b:98:71:cb:a7:2b:52:3f:62:fc:
                    cb:d6:85:39:d9:a5:17:62:09:78:6b:4b:49:79:43:
                    9e:3e:30:c2:37:b6:bf:91:eb:8b:bb:3f:f0:4b:35:
                    f4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:6E:C0:20:9B:58:9B:2A:35:75:FE:76:DA:5E:8B:6B:A9:48:3A:44
            X509v3 Authority Key Identifier:
                keyid:2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:7e:ea:49:a3:58:97:bc:d9:fd:bc:92:7e:eb:bf:e9:e7:af:
         f6:4b:8e:b2:bb:f1:03:93:35:91:22:76:88:ec:8d:46:fa:fd:
         f4:aa:5d:51:e5:36:f1:22:19:a6:80:0a:65:64:37:e6:4e:85:
         a2:ba:e9:40:97:3a:33:de:a7:5b:66:f3:36:cc:c4:b3:3d:7e:
         cc:1d:b0:cc:86:0b:ae:6e:9e:ee:75:56:be:b1:f1:9d:76:2d:
         6a:c7:ec:4e:f9:5e:42:b1:08:b6:f8:90:73:6f:5c:3f:24:70:
         08:be:5c:58:8d:18:2b:2e:dc:ab:d7:69:6d:cc:2d:bc:1a:95:
         70:bf:05:9b:1a:ce:fc:ec:81:5a:d4:71:23:5a:bf:34:9d:a3:
         71:e2:95:6d:62:d6:b1:8a:97:d4:1b:ae:0f:60:72:29:54:75:
         7a:a7:83:12:62:84:2f:72:07:3b:b4:20:f6:c8:4e:c1:5d:8a:
         32:20:b8:06:ab:23:32:f9:3e:0b:1e:2a:2b:42:0d:b1:e8:e2:
         63:cd:51:81:f2:ed:b4:c0:67:71:7e:24:ef:73:8b:8e:a2:87:
         61:85:da:64:79:d1:5d:cd:e3:67:60:4e:f8:95:7a:f1:bc:7d:
         3f:1d:84:f5:65:ff:06:87:2c:bc:e7:81:cf:46:c0:f0:98:81:
         05:1b:96:53
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUNBwNmmwnaeRUGZ2yGAcexrplCR8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkRGOEJBOThFQjIxNEJFQUFCMzBDMUJGREVEMTg1RUUy
QTBGODY5RTAeFw0yNTAxMzEwNTUyMTRaFw0yNTAyMDQxMjUzMTRaMDMxMTAvBgNV
BAMTKERDNkVDMDIwOUI1ODlCMkEzNTc1RkU3NkRBNUU4QjZCQTk0ODNBNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQRX/MionaAvOoCTqMbIp+1t2e
e3TrkPaksA+wWde66cszOfO1jCaZTQCHdvvizfJLEC9oATkj4UmAg8wWNa9cTR7D
VPlJ5HGqaCG+TMlxSwDPLqDeJD660A8mDZF/2mrbcgtO6S4HOV9NyV9ZlLfw/M24
GtBM3hb2MbKuasnLJv3bQvMaSsG/UjmDuseYQRSPHYKONSP7gK9AiFbeo19xZxMg
DrE0mU5qT3MswGX+QdGwJnls+cB1VR4PUZ4h6F+uchhc/tWJyzplPpdwYBO5z7U8
v2XxS5hxy6crUj9i/MvWhTnZpRdiCXhrS0l5Q54+MMI3tr+R64u7P/BLNfThAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU3G7AIJtYmyo1df522l6La6lIOkQwHwYDVR0j
BBgwFoAULfi6mOshS+qrMMG/3tGF7ioPhp4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MDA5QTFGNEQxQkMwRkZFMDZCODcyM0NDRjEzRkQyQzc5
MTQwNEIyOUY0NkMyRDc2NkQ0MjM1MDA1OURFQkQ4LzAvMkRGOEJBOThFQjIxNEJF
QUFCMzBDMUJGREVEMTg1RUUyQTBGODY5RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yREY4QkE5OEVCMjE0QkVBQUIz
MEMxQkZERUQxODVFRTJBMEY4NjlFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTAwOUExRjREMUJDMEZGRTA2Qjg3MjNDQ0YxM0ZEMkM3OTE0MDRCMjlG
NDZDMkQ3NjZENDIzNTAwNTlERUJEOC8wLzJERjhCQTk4RUIyMTRCRUFBQjMwQzFC
RkRFRDE4NUVFMkEwRjg2OUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAZfupJo1iXvNn9vJJ+67/p56/2
S46yu/EDkzWRInaI7I1G+v30ql1R5TbxIhmmgAplZDfmToWiuulAlzoz3qdbZvM2
zMSzPX7MHbDMhguubp7udVa+sfGddi1qx+xO+V5CsQi2+JBzb1w/JHAIvlxYjRgr
Ltyr12ltzC28GpVwvwWbGs787IFa1HEjWr80naNx4pVtYtaxipfUG64PYHIpVHV6
p4MSYoQvcgc7tCD2yE7BXYoyILgGqyMy+T4LHiorQg2x6OJjzVGB8u20wGdxfiTv
c4uOoodhhdpkedFdzeNnYE74lXrxvH0/HYT1Zf8Ghyy854HPRsDwmIEFG5ZT
-----END CERTIFICATE-----