Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.mft
File:                     34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.mft (raw, json)
Hash identifier:          VwQAVIqhqdp81uzNGS3/x77bMZPsrR+0hwpA6L1QMeI=
Subject key identifier:   34:22:27:CD:F2:48:B1:59:5E:8E:AF:BE:4D:7F:A5:1F:82:55:74:82
Authority key identifier: 34:A3:5E:8B:BB:E1:76:F3:5E:A6:FD:0D:BF:54:6E:AF:6E:B8:A3:8F
Certificate issuer:       /CN=34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F
Certificate serial:       1AF5421310CD44644F7B888691918150B3364427
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.mft
Manifest number:          AA
Signing time:             Fri 31 Jan 2025 04:00:51 +0000
Manifest this update:     Fri 31 Jan 2025 03:55:51 +0000
Manifest next update:     Thu 06 Feb 2025 03:46:51 +0000
Files and hashes:         1: 34352e3136392e35322e302f32332d3234203d3e20323637373431.roa (hash: ZaxjV8q5FcaKidPvQ5y/YZqdXwSiCPtxOD7mESo+BWI=)
                          2: 34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.crl (hash: aO7378hqwXCPAZDVqk57cf82G+Dch2Bi80UL9f/6zQA=)
                          3: 34352e3136382e38302e302f32342d3234203d3e20323637373431.roa (hash: i8mSudcT2yrmAVxYgdFwfsFJ1N28ITLunFawVLrx0Pg=)
                          4: 323830333a396461303a3a2f33322d3438203d3e20323637373431.roa (hash: djOYGiSqXulZsLyJ+Wid0mIqnr048u9z+fnYpQd5F/4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f5:42:13:10:cd:44:64:4f:7b:88:86:91:91:81:50:b3:36:44:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F
        Validity
            Not Before: Jan 31 03:55:51 2025 GMT
            Not After : Feb  6 03:46:51 2025 GMT
        Subject: CN=342227CDF248B1595E8EAFBE4D7FA51F82557482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f2:28:eb:cf:2b:c2:36:26:ac:09:82:fa:9a:
                    9d:41:46:0c:53:2f:70:35:75:13:58:20:11:b5:92:
                    99:d4:cf:11:17:0f:54:38:fc:c9:66:b7:40:e5:bf:
                    c5:8e:db:a1:9b:23:0b:5e:1d:6d:c5:f9:83:94:aa:
                    02:78:b7:d2:77:30:5c:bf:93:dd:79:bf:b6:ca:46:
                    1f:5f:1f:8f:a1:96:64:d1:d4:24:55:13:a3:81:cb:
                    8a:18:70:b1:5e:85:1b:1d:ea:fd:41:f8:ac:d5:f2:
                    b2:51:10:cc:b5:81:f4:c2:2f:90:8b:31:d1:c6:a8:
                    42:cf:94:cc:53:12:72:70:2d:74:d4:f4:ee:a1:63:
                    14:7b:29:c7:83:db:3e:99:3b:cf:ac:94:a4:d4:dc:
                    17:ba:6c:99:b1:56:a3:dd:3c:04:cf:ea:bc:69:f9:
                    52:f5:44:e8:16:e7:be:4f:c0:ec:11:99:a7:d8:e8:
                    c3:09:32:b6:b4:3c:79:eb:86:2f:3d:48:f2:e8:78:
                    6c:11:64:d8:0c:34:53:c2:2f:bc:e8:2b:24:b9:63:
                    ba:bd:10:08:e0:67:9e:98:5f:84:f0:3a:31:ae:d3:
                    63:33:95:a3:3f:b4:6f:23:6f:5f:a8:60:46:cd:f6:
                    b2:be:a8:b8:9c:be:62:e4:b3:96:b4:49:8d:2f:0b:
                    34:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:22:27:CD:F2:48:B1:59:5E:8E:AF:BE:4D:7F:A5:1F:82:55:74:82
            X509v3 Authority Key Identifier:
                keyid:34:A3:5E:8B:BB:E1:76:F3:5E:A6:FD:0D:BF:54:6E:AF:6E:B8:A3:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:9d:09:ed:0f:4f:88:69:86:61:e4:a2:97:4d:0d:9d:43:ab:
         c3:73:0f:59:05:b4:99:e4:bc:3a:cf:2c:b8:b7:3c:b9:fc:bd:
         09:5f:52:e4:ac:f8:a6:3f:3f:2b:10:b6:ff:4a:93:56:77:21:
         d8:7d:8a:37:d3:6a:09:6b:e5:23:06:82:8e:2c:fe:c3:3e:d3:
         f9:46:67:ac:09:d4:de:03:e2:19:b3:1f:0d:d6:ba:5f:89:df:
         da:fb:ba:22:30:0a:bd:1f:62:17:fd:43:b5:b0:d2:b0:66:97:
         54:a2:77:66:df:3c:3e:bb:ca:1a:2d:ff:e3:9c:1d:6d:c6:86:
         46:f1:74:86:36:a4:05:09:73:59:2f:54:8d:2e:3f:80:fa:63:
         75:6f:b2:a6:9e:3d:78:13:27:c2:ac:34:d7:7f:2d:47:69:8b:
         4f:7c:d6:d4:4a:f1:f5:95:6d:62:9f:ba:dd:46:10:3f:a4:56:
         1a:bc:c9:6d:4b:d6:f8:31:bc:dc:6f:09:30:cc:16:5f:09:c8:
         30:05:f5:3f:88:d6:29:0d:a2:aa:db:23:30:be:20:d7:20:48:
         62:cc:6b:5c:f8:31:0b:e6:0f:de:4a:23:31:91:9e:48:68:90:
         d4:c8:43:92:f9:0c:a4:25:51:e5:34:81:f7:ee:1d:0d:b3:87:
         44:11:81:02
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUGvVCExDNRGRPe4iGkZGBULM2RCcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzRBMzVFOEJCQkUxNzZGMzVFQTZGRDBEQkY1NDZFQUY2
RUI4QTM4RjAeFw0yNTAxMzEwMzU1NTFaFw0yNTAyMDYwMzQ2NTFaMDMxMTAvBgNV
BAMTKDM0MjIyN0NERjI0OEIxNTk1RThFQUZCRTREN0ZBNTFGODI1NTc0ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm8ijrzyvCNiasCYL6mp1BRgxT
L3A1dRNYIBG1kpnUzxEXD1Q4/Mlmt0Dlv8WO26GbIwteHW3F+YOUqgJ4t9J3MFy/
k915v7bKRh9fH4+hlmTR1CRVE6OBy4oYcLFehRsd6v1B+KzV8rJREMy1gfTCL5CL
MdHGqELPlMxTEnJwLXTU9O6hYxR7KceD2z6ZO8+slKTU3Be6bJmxVqPdPATP6rxp
+VL1ROgW575PwOwRmafY6MMJMra0PHnrhi89SPLoeGwRZNgMNFPCL7zoKyS5Y7q9
EAjgZ56YX4TwOjGu02MzlaM/tG8jb1+oYEbN9rK+qLicvmLks5a0SY0vCzTpAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUNCInzfJIsVlejq++TX+lH4JVdIIwHwYDVR0j
BBgwFoAUNKNei7vhdvNepv0Nv1Rur264o48wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82ODRBMTYzMDYxQjhCMzdFMUU1MERDRTlBNzJCMkQ1NDQ3
NTJEOUI2MkU4NjM3NzcyRUJFQzk5MDQ1RTcxNDAzLzAvMzRBMzVFOEJCQkUxNzZG
MzVFQTZGRDBEQkY1NDZFQUY2RUI4QTM4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNEEzNUU4QkJCRTE3NkYzNUVB
NkZEMERCRjU0NkVBRjZFQjhBMzhGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjg0QTE2MzA2MUI4QjM3RTFFNTBEQ0U5QTcyQjJENTQ0NzUyRDlCNjJF
ODYzNzc3MkVCRUM5OTA0NUU3MTQwMy8wLzM0QTM1RThCQkJFMTc2RjM1RUE2RkQw
REJGNTQ2RUFGNkVCOEEzOEYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAnnQntD0+IaYZh5KKXTQ2dQ6vD
cw9ZBbSZ5Lw6zyy4tzy5/L0JX1LkrPimPz8rELb/SpNWdyHYfYo302oJa+UjBoKO
LP7DPtP5RmesCdTeA+IZsx8N1rpfid/a+7oiMAq9H2IX/UO1sNKwZpdUondm3zw+
u8oaLf/jnB1txoZG8XSGNqQFCXNZL1SNLj+A+mN1b7Kmnj14EyfCrDTXfy1HaYtP
fNbUSvH1lW1in7rdRhA/pFYavMltS9b4MbzcbwkwzBZfCcgwBfU/iNYpDaKq2yMw
viDXIEhizGtc+DEL5g/eSiMxkZ5IaJDUyEOS+QykJVHlNIH37h0Ns4dEEYEC
-----END CERTIFICATE-----