Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68CFB0FCBC226AFC08760338ADBF84DD9A5B072396FBCE375EB0685B506A99FB/0/9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E.mft
File:                     9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E.mft (raw, json)
Hash identifier:          VQ8Y0eF21cu0s5J4Mqql9aJxmDjQJbnjjdeP8H9FJ4w=
Subject key identifier:   8A:6A:68:14:A6:41:8D:24:1E:C0:F5:26:8F:38:13:5D:BE:0C:93:32
Authority key identifier: 9F:8E:C7:CE:66:A6:7C:20:F1:A2:4E:22:0E:07:01:A4:B8:12:9C:9E
Certificate issuer:       /CN=9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E
Certificate serial:       20C56126B6D7F9AC1E4A68473EEE1D8A3C0E60AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68CFB0FCBC226AFC08760338ADBF84DD9A5B072396FBCE375EB0685B506A99FB/0/9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E.mft
Manifest number:          A3
Signing time:             Wed 29 Jan 2025 11:56:06 +0000
Manifest this update:     Wed 29 Jan 2025 11:51:06 +0000
Manifest next update:     Mon 03 Feb 2025 20:34:06 +0000
Files and hashes:         1: 3136342e3136332e3132382e302f32322d3234203d3e20323635373338.roa (hash: FQRex5rASCtrcfFJz5Mz/bWfUwQJwAsnTqYMU9TdFbQ=)
                          2: 3133382e39392e3232302e302f32322d3234203d3e20323635373338.roa (hash: dX+3X59ABUxc8Z/24n6rn6vAHMh73m8E3klyw/hYvyE=)
                          3: 9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E.crl (hash: O/ArfVaFmheT28rWP1yGTLAYfcNgJb8erE6cqCYJ618=)
                          4: 34352e372e3234382e302f32322d3234203d3e20323635373338.roa (hash: ujueqMRI/INqOBdJozxX3B7o1/I1TRUiE4uhl6r//SU=)
                          5: 323830333a363363303a3a2f33322d3438203d3e20323635373338.roa (hash: aGeD6e3DgxpifddZh+l8tROKpbfCvnhpLHuaW4w23jQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c5:61:26:b6:d7:f9:ac:1e:4a:68:47:3e:ee:1d:8a:3c:0e:60:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E
        Validity
            Not Before: Jan 29 11:51:06 2025 GMT
            Not After : Feb  3 20:34:06 2025 GMT
        Subject: CN=8A6A6814A6418D241EC0F5268F38135DBE0C9332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:57:c7:19:80:6f:13:5e:20:05:32:83:ec:bb:
                    96:9e:18:96:db:77:13:77:0d:57:4e:6e:7f:56:7e:
                    7c:a0:aa:d6:c1:49:9f:85:54:2f:76:46:8d:1c:1c:
                    7b:dc:8f:70:a5:c4:38:17:b4:02:5e:63:29:e7:f4:
                    3a:ec:6a:7a:05:7b:e3:20:64:e3:e0:5d:60:09:32:
                    24:43:04:e1:16:d6:30:97:ee:f0:30:96:ca:ad:d6:
                    11:29:c2:93:65:70:86:0d:de:49:18:28:b5:f3:2a:
                    bc:58:07:0f:4a:99:61:88:a7:f0:d8:30:e2:bd:f1:
                    96:73:51:12:35:38:d6:55:fe:42:13:3b:16:9e:a9:
                    b1:27:a7:af:bd:e0:ba:64:82:0d:52:7a:8b:1b:f5:
                    8e:ad:7b:df:e8:db:f3:4b:5c:2a:c4:21:64:dd:cd:
                    26:82:96:5f:22:07:28:be:4e:ee:30:c3:d1:3d:4b:
                    d9:3e:7a:77:30:d8:13:7d:83:d3:ed:ac:7f:d9:4a:
                    86:60:83:b8:cd:52:c1:2a:57:27:a9:95:d5:9b:39:
                    02:79:fa:cc:ae:27:0f:88:06:e1:f1:72:55:f3:f6:
                    75:d8:cf:b0:a6:df:fb:9d:f2:05:5c:4c:7d:57:f0:
                    25:0c:72:7e:e2:f0:22:dd:fb:be:16:0a:6a:2c:a7:
                    56:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6A:68:14:A6:41:8D:24:1E:C0:F5:26:8F:38:13:5D:BE:0C:93:32
            X509v3 Authority Key Identifier:
                keyid:9F:8E:C7:CE:66:A6:7C:20:F1:A2:4E:22:0E:07:01:A4:B8:12:9C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68CFB0FCBC226AFC08760338ADBF84DD9A5B072396FBCE375EB0685B506A99FB/0/9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68CFB0FCBC226AFC08760338ADBF84DD9A5B072396FBCE375EB0685B506A99FB/0/9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:fc:da:ca:6c:ef:1a:63:eb:e5:31:4e:f2:1b:26:09:37:0f:
         c3:50:5a:4d:2f:bb:00:75:fa:1a:5b:81:f2:e7:3e:12:19:18:
         59:13:ce:38:c4:ac:40:0c:0d:f3:b7:3c:90:41:7d:29:bf:a4:
         16:48:1e:66:0e:04:53:00:75:28:db:e2:fa:e2:ac:bb:37:a3:
         09:8f:e7:b4:fc:f2:16:fe:b8:02:a2:b7:4e:c5:48:e5:44:b5:
         ee:3d:f3:8e:34:ad:fe:89:14:c5:d4:d0:45:94:d5:23:58:3d:
         3f:35:d3:65:b1:c5:1a:33:ea:2a:0b:0e:d5:75:74:18:7d:c3:
         7f:a8:d9:0a:68:e3:7e:83:a0:c3:62:9a:fa:9b:53:c7:93:77:
         67:eb:5e:e8:4f:0a:a7:f1:03:3d:45:c4:45:3d:00:14:b5:7f:
         27:0d:73:a8:c8:f8:e4:8d:b9:23:e3:87:07:47:5f:77:0a:24:
         0f:69:8e:51:77:dd:31:98:04:09:9f:2e:9e:b3:70:24:5a:ce:
         31:60:ad:ac:53:a5:1a:30:02:07:cb:5e:4f:28:5b:e3:87:b0:
         67:b4:30:a8:2d:e2:2e:6f:23:ae:a3:17:65:ed:b4:5b:a4:69:
         57:84:b7:85:e5:c9:9a:ef:91:fe:68:a6:20:7c:a4:ac:7c:fb:
         fb:53:fc:c0
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUIMVhJrbX+aweSmhHPu4dijwOYK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY4RUM3Q0U2NkE2N0MyMEYxQTI0RTIyMEUwNzAxQTRC
ODEyOUM5RTAeFw0yNTAxMjkxMTUxMDZaFw0yNTAyMDMyMDM0MDZaMDMxMTAvBgNV
BAMTKDhBNkE2ODE0QTY0MThEMjQxRUMwRjUyNjhGMzgxMzVEQkUwQzkzMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoV8cZgG8TXiAFMoPsu5aeGJbb
dxN3DVdObn9WfnygqtbBSZ+FVC92Ro0cHHvcj3ClxDgXtAJeYynn9DrsanoFe+Mg
ZOPgXWAJMiRDBOEW1jCX7vAwlsqt1hEpwpNlcIYN3kkYKLXzKrxYBw9KmWGIp/DY
MOK98ZZzURI1ONZV/kITOxaeqbEnp6+94Lpkgg1Seosb9Y6te9/o2/NLXCrEIWTd
zSaCll8iByi+Tu4ww9E9S9k+encw2BN9g9PtrH/ZSoZgg7jNUsEqVyepldWbOQJ5
+syuJw+IBuHxclXz9nXYz7Cm3/ud8gVcTH1X8CUMcn7i8CLd+74WCmosp1anAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUimpoFKZBjSQewPUmjzgTXb4MkzIwHwYDVR0j
BBgwFoAUn47HzmamfCDxok4iDgcBpLgSnJ4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82OENGQjBGQ0JDMjI2QUZDMDg3NjAzMzhBREJGODRERDlB
NUIwNzIzOTZGQkNFMzc1RUIwNjg1QjUwNkE5OUZCLzAvOUY4RUM3Q0U2NkE2N0My
MEYxQTI0RTIyMEUwNzAxQTRCODEyOUM5RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RjhFQzdDRTY2QTY3QzIwRjFB
MjRFMjIwRTA3MDFBNEI4MTI5QzlFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjhDRkIwRkNCQzIyNkFGQzA4NzYwMzM4QURCRjg0REQ5QTVCMDcyMzk2
RkJDRTM3NUVCMDY4NUI1MDZBOTlGQi8wLzlGOEVDN0NFNjZBNjdDMjBGMUEyNEUy
MjBFMDcwMUE0QjgxMjlDOUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA2/NrKbO8aY+vlMU7yGyYJNw/D
UFpNL7sAdfoaW4Hy5z4SGRhZE844xKxADA3ztzyQQX0pv6QWSB5mDgRTAHUo2+L6
4qy7N6MJj+e0/PIW/rgCordOxUjlRLXuPfOONK3+iRTF1NBFlNUjWD0/NdNlscUa
M+oqCw7VdXQYfcN/qNkKaON+g6DDYpr6m1PHk3dn617oTwqn8QM9RcRFPQAUtX8n
DXOoyPjkjbkj44cHR193CiQPaY5Rd90xmAQJny6es3AkWs4xYK2sU6UaMAIHy15P
KFvjh7BntDCoLeIubyOuoxdl7bRbpGlXhLeF5cma75H+aKYgfKSsfPv7U/zA
-----END CERTIFICATE-----