Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.mft
File:                     84EB5F447148428DC5D38B48E432E07FB136ACAD.mft (raw, json)
Hash identifier:          5orZ1JREMXfufKmVQgEKNLnA4pur/sYZjVdnwjkCLVc=
Subject key identifier:   C5:C7:B3:2E:10:6A:1D:FE:65:41:06:F4:BB:84:54:4F:2D:A8:E2:E5
Authority key identifier: 84:EB:5F:44:71:48:42:8D:C5:D3:8B:48:E4:32:E0:7F:B1:36:AC:AD
Certificate issuer:       /CN=84EB5F447148428DC5D38B48E432E07FB136ACAD
Certificate serial:       36B8173BAA940FF243020BFFF07B7F850440492B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.mft
Manifest number:          36
Signing time:             Fri 31 Jan 2025 04:36:21 +0000
Manifest this update:     Fri 31 Jan 2025 04:31:21 +0000
Manifest next update:     Wed 05 Feb 2025 19:43:21 +0000
Files and hashes:         1: 3137372e37332e3235342e302f32332d3234203d3e20323730303639.roa (hash: k2gYmDHrfh4/U/p+Ganv+ITZuqzvl9ndpD5kegDg0Jo=)
                          2: 84EB5F447148428DC5D38B48E432E07FB136ACAD.crl (hash: 4zBrvKSQ7zpZ/EdQ3GVXfiSIEr1tR/Zz5B28J/Q0uTY=)
                          3: 323830333a363365303a3a2f33322d3332203d3e20323730303639.roa (hash: tgdLkPHEyHt77st18k2tG+lxGW9xL69QFD50FiH3qbc=)
                          4: 3137372e37332e3235342e302f32332d3233203d3e20323730303639.roa (hash: zQ1hpdf0nDAf3H9upywUYHANr91JjNeMBhWFuyBeXUs=)
                          5: 3137372e36372e3235302e302f32342d3234203d3e20323730303639.roa (hash: 3JsTiu5iJlIuGUn782yUY2Fcmn6XhlGDz6AXu2QNBGY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b8:17:3b:aa:94:0f:f2:43:02:0b:ff:f0:7b:7f:85:04:40:49:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84EB5F447148428DC5D38B48E432E07FB136ACAD
        Validity
            Not Before: Jan 31 04:31:21 2025 GMT
            Not After : Feb  5 19:43:21 2025 GMT
        Subject: CN=C5C7B32E106A1DFE654106F4BB84544F2DA8E2E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:45:fc:fc:28:35:3e:85:39:3a:2c:f6:ca:f8:
                    4e:78:34:a4:53:37:02:92:c5:b1:a3:24:a6:08:78:
                    46:f3:bb:29:43:4e:29:62:5e:c5:d8:37:c1:98:9b:
                    36:bb:d4:1e:27:d8:dd:71:7e:1f:92:ca:4a:c4:e0:
                    2a:2b:15:8b:94:c6:67:61:50:15:61:04:1b:63:58:
                    b0:d1:c2:70:c6:cd:dd:60:39:34:6a:12:bd:a6:32:
                    5a:54:2d:90:09:d2:66:07:66:f5:61:69:35:ba:50:
                    27:ca:5d:ea:5e:d1:c6:ef:11:fb:77:d0:88:d5:a5:
                    89:23:14:cf:f2:32:8d:a1:80:44:60:85:30:dd:71:
                    bf:e6:a0:cf:ee:64:6e:43:0f:1a:2b:01:4a:65:4d:
                    96:b2:e6:26:17:c5:58:08:99:04:e1:45:b6:83:58:
                    c6:1d:32:d4:de:e4:42:fd:95:fe:fb:ba:09:88:2d:
                    13:2d:c5:69:8f:b9:e5:f1:00:02:81:f7:ba:9b:5c:
                    70:ea:d0:eb:34:84:90:5b:fc:5d:29:db:c3:52:ad:
                    e7:18:e0:4e:48:f9:e5:90:75:3d:cd:7e:31:66:c6:
                    71:24:68:05:2a:81:74:6d:da:4d:ed:d9:a2:6d:d9:
                    fb:d4:1a:1e:fc:0b:96:be:d8:91:33:65:0c:d0:b2:
                    34:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C7:B3:2E:10:6A:1D:FE:65:41:06:F4:BB:84:54:4F:2D:A8:E2:E5
            X509v3 Authority Key Identifier:
                keyid:84:EB:5F:44:71:48:42:8D:C5:D3:8B:48:E4:32:E0:7F:B1:36:AC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:84:a9:da:49:f6:ab:23:aa:ea:d0:ad:49:4f:c9:5c:58:9a:
         ca:20:e1:2a:19:44:98:1b:56:db:e8:55:07:26:56:dc:99:00:
         f1:c3:a9:c0:6b:24:fd:3e:73:70:18:d7:7c:8c:8c:ee:60:f0:
         c2:80:32:7d:ed:04:19:58:c0:6e:18:62:9e:97:54:21:f9:a9:
         50:3e:4c:b2:ac:6d:17:54:6f:2e:94:82:2d:69:d9:1d:96:7e:
         8d:3b:e5:f7:48:0a:c7:8b:80:54:38:ae:31:6b:d5:f4:a6:00:
         92:95:53:00:92:f1:a6:80:7e:6d:6e:8c:58:d6:80:2d:78:40:
         a4:92:4a:20:a4:f4:83:74:4e:4a:38:dc:a7:e1:32:ec:2c:6e:
         c9:26:29:73:82:22:bd:47:7b:84:dd:c5:58:0e:72:9c:79:6f:
         19:26:55:55:c5:30:3d:73:db:52:dc:7d:d6:f4:e7:ae:8e:b6:
         b0:02:89:eb:44:50:c6:42:38:bc:be:72:1e:f3:f6:70:42:98:
         ee:e2:e1:d0:f1:d9:48:76:3b:36:8a:1b:64:c0:45:62:3b:4a:
         9a:d0:c6:4f:87:d4:87:95:26:3a:5e:65:f6:69:d3:c5:c0:4d:
         48:8b:71:ee:a2:55:75:cc:9d:a5:67:ff:d6:17:5b:10:ee:3f:
         ae:88:6b:0f
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUNrgXO6qUD/JDAgv/8Ht/hQRASSswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODRFQjVGNDQ3MTQ4NDI4REM1RDM4QjQ4RTQzMkUwN0ZC
MTM2QUNBRDAeFw0yNTAxMzEwNDMxMjFaFw0yNTAyMDUxOTQzMjFaMDMxMTAvBgNV
BAMTKEM1QzdCMzJFMTA2QTFERkU2NTQxMDZGNEJCODQ1NDRGMkRBOEUyRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuRfz8KDU+hTk6LPbK+E54NKRT
NwKSxbGjJKYIeEbzuylDTiliXsXYN8GYmza71B4n2N1xfh+SykrE4CorFYuUxmdh
UBVhBBtjWLDRwnDGzd1gOTRqEr2mMlpULZAJ0mYHZvVhaTW6UCfKXepe0cbvEft3
0IjVpYkjFM/yMo2hgERghTDdcb/moM/uZG5DDxorAUplTZay5iYXxVgImQThRbaD
WMYdMtTe5EL9lf77ugmILRMtxWmPueXxAAKB97qbXHDq0Os0hJBb/F0p28NSrecY
4E5I+eWQdT3NfjFmxnEkaAUqgXRt2k3t2aJt2fvUGh78C5a+2JEzZQzQsjRlAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUxcezLhBqHf5lQQb0u4RUTy2o4uUwHwYDVR0j
BBgwFoAUhOtfRHFIQo3F04tI5DLgf7E2rK0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RDhFRjhDODc2NDBDQjc3OTAxMEE5OTg1NkUzQzc1NzIy
MzA3RTExRUI4MTBBMkIyQTNFNjY2QzdEMTU2NENFLzAvODRFQjVGNDQ3MTQ4NDI4
REM1RDM4QjQ4RTQzMkUwN0ZCMTM2QUNBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NEVCNUY0NDcxNDg0MjhEQzVE
MzhCNDhFNDMyRTA3RkIxMzZBQ0FELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0Q4RUY4Qzg3NjQwQ0I3NzkwMTBBOTk4NTZFM0M3NTcyMjMwN0UxMUVC
ODEwQTJCMkEzRTY2NkM3RDE1NjRDRS8wLzg0RUI1RjQ0NzE0ODQyOERDNUQzOEI0
OEU0MzJFMDdGQjEzNkFDQUQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA9hKnaSfarI6rq0K1JT8lcWJrK
IOEqGUSYG1bb6FUHJlbcmQDxw6nAayT9PnNwGNd8jIzuYPDCgDJ97QQZWMBuGGKe
l1Qh+alQPkyyrG0XVG8ulIItadkdln6NO+X3SArHi4BUOK4xa9X0pgCSlVMAkvGm
gH5tboxY1oAteECkkkogpPSDdE5KONyn4TLsLG7JJilzgiK9R3uE3cVYDnKceW8Z
JlVVxTA9c9tS3H3W9OeujrawAonrRFDGQji8vnIe8/ZwQpju4uHQ8dlIdjs2ihtk
wEViO0qa0MZPh9SHlSY6XmX2adPFwE1Ii3HuolV1zJ2lZ//WF1sQ7j+uiGsP
-----END CERTIFICATE-----