Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81B8FA271F836B033CA04A4A02513BBDE8656FB3993834FACC5E0C93BBF488A9/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.mft
File:                     294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.mft (raw, json)
Hash identifier:          uMO1mj+RKtPw4WwnuLi90i08AWoZ6pYYSWgVHsg8XCA=
Subject key identifier:   85:EC:BB:1D:1B:F5:CF:DF:FF:C6:70:9F:02:4B:8E:EC:A7:2A:2A:6B
Authority key identifier: 29:44:04:D5:D1:36:5B:2F:80:5F:2E:B4:08:D0:F8:D2:0B:0A:F0:E8
Certificate issuer:       /CN=294404D5D1365B2F805F2EB408D0F8D20B0AF0E8
Certificate serial:       4D82E5E9EB31ACEC83644A2AC6EC9241E7731B33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/81B8FA271F836B033CA04A4A02513BBDE8656FB3993834FACC5E0C93BBF488A9/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.mft
Manifest number:          A7
Signing time:             Thu 30 Jan 2025 13:26:45 +0000
Manifest this update:     Thu 30 Jan 2025 13:21:45 +0000
Manifest next update:     Tue 04 Feb 2025 17:45:45 +0000
Files and hashes:         1: 294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.crl (hash: tKitJC3mUWzisdu6ZbB+/Yo2THu95y90ZVdq0qAuL1I=)
                          2: 34352e3232352e3231362e302f32322d3234203d3e20323635383632.roa (hash: I4fVZOxYhwzrqsnXyUKlaklpgW9wxbCoP+IADPdPP4w=)
                          3: 34352e3232352e3231362e302f32322d3234203d3e20323635383533.roa (hash: /muC9C7W9uQoC7E3z9Plp83prgp288OvtNqY4BJEFSs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:82:e5:e9:eb:31:ac:ec:83:64:4a:2a:c6:ec:92:41:e7:73:1b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=294404D5D1365B2F805F2EB408D0F8D20B0AF0E8
        Validity
            Not Before: Jan 30 13:21:45 2025 GMT
            Not After : Feb  4 17:45:45 2025 GMT
        Subject: CN=85ECBB1D1BF5CFDFFFC6709F024B8EECA72A2A6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e8:37:c8:86:56:c2:95:ae:59:f2:bc:23:e6:
                    7e:56:6b:3c:80:56:97:8b:00:eb:b2:64:d2:d7:ec:
                    03:5a:51:36:dc:51:38:02:b6:28:6c:9f:da:fa:3c:
                    f8:f3:c3:55:36:23:da:ee:2f:c9:29:ec:b6:e6:80:
                    d8:b8:1f:04:65:a9:08:cf:6e:54:40:f6:3c:1a:56:
                    61:15:43:6a:29:ed:98:1b:cd:8a:a6:27:a3:75:96:
                    da:18:1e:83:62:97:6a:37:1f:9e:1e:37:74:55:be:
                    73:61:a8:dd:e3:e6:7a:96:1f:5b:13:a6:56:dc:ed:
                    b8:3a:27:f7:c4:45:bf:52:a3:75:2e:42:a4:71:cf:
                    4f:8e:75:68:bd:46:1d:7b:52:84:a2:2c:eb:d2:69:
                    58:ad:01:82:e0:40:f7:a9:fa:fb:36:73:a9:86:52:
                    61:9f:ca:4d:b8:2b:80:60:89:20:dd:f8:ff:6c:12:
                    ad:a6:11:ed:7c:0d:a3:d1:2d:56:20:f0:c5:b0:b9:
                    90:ed:2d:b6:64:00:2e:d4:60:98:c8:66:4e:20:0d:
                    27:05:12:7e:3f:f7:9b:a7:df:85:ee:34:c2:86:cb:
                    ba:65:79:f5:40:ed:3c:1d:c8:33:7c:c6:4a:60:49:
                    ba:be:89:2c:1c:9a:a8:c9:a4:4a:15:8a:61:90:c8:
                    27:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:EC:BB:1D:1B:F5:CF:DF:FF:C6:70:9F:02:4B:8E:EC:A7:2A:2A:6B
            X509v3 Authority Key Identifier:
                keyid:29:44:04:D5:D1:36:5B:2F:80:5F:2E:B4:08:D0:F8:D2:0B:0A:F0:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/81B8FA271F836B033CA04A4A02513BBDE8656FB3993834FACC5E0C93BBF488A9/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81B8FA271F836B033CA04A4A02513BBDE8656FB3993834FACC5E0C93BBF488A9/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:fd:aa:71:77:9b:34:70:9b:14:4f:76:c8:b4:a7:ee:58:6b:
         ef:39:2a:26:92:e4:f1:18:55:b1:53:ca:dc:9a:14:9c:91:bd:
         1e:3b:00:4b:95:1d:00:e2:34:6d:cb:bd:80:d4:bf:21:f7:b2:
         c8:29:2c:d6:5a:cc:fc:46:a7:32:6b:61:69:f1:8d:27:29:58:
         aa:5d:bd:c1:dc:47:79:a5:67:e6:9a:a4:29:e3:70:d5:1b:2b:
         f4:a9:a9:31:cb:52:2a:b4:d0:10:1f:b2:ed:6a:ab:93:08:8e:
         c1:2e:9c:19:52:f2:51:e2:f1:65:55:7b:1a:5a:92:ec:32:0f:
         dd:0d:8b:0d:04:4a:2d:72:12:f5:90:23:a5:29:0e:c2:eb:6c:
         c1:1f:35:8f:5f:4c:cb:09:b8:47:a0:28:00:2f:54:ce:2e:be:
         34:5b:3c:61:5e:15:74:83:7e:95:d7:3f:bc:88:95:d4:1c:64:
         ab:3f:8b:0d:7a:08:9d:99:ec:e0:27:17:da:7e:74:88:23:bd:
         50:5c:17:a9:1c:77:76:b2:06:e2:e5:5a:b8:2f:c8:99:9c:b2:
         8b:6b:5b:ca:2e:74:8a:8b:5d:71:ef:f8:91:4f:d2:9f:b0:67:
         ec:9a:60:76:dd:26:57:d4:e1:07:23:72:5b:79:e3:c2:02:43:
         73:81:9b:3c
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUTYLl6esxrOyDZEoqxuySQedzGzMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk0NDA0RDVEMTM2NUIyRjgwNUYyRUI0MDhEMEY4RDIw
QjBBRjBFODAeFw0yNTAxMzAxMzIxNDVaFw0yNTAyMDQxNzQ1NDVaMDMxMTAvBgNV
BAMTKDg1RUNCQjFEMUJGNUNGREZGRkM2NzA5RjAyNEI4RUVDQTcyQTJBNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx6DfIhlbCla5Z8rwj5n5WazyA
VpeLAOuyZNLX7ANaUTbcUTgCtihsn9r6PPjzw1U2I9ruL8kp7LbmgNi4HwRlqQjP
blRA9jwaVmEVQ2op7ZgbzYqmJ6N1ltoYHoNil2o3H54eN3RVvnNhqN3j5nqWH1sT
plbc7bg6J/fERb9So3UuQqRxz0+OdWi9Rh17UoSiLOvSaVitAYLgQPep+vs2c6mG
UmGfyk24K4BgiSDd+P9sEq2mEe18DaPRLVYg8MWwuZDtLbZkAC7UYJjIZk4gDScF
En4/95un34XuNMKGy7plefVA7TwdyDN8xkpgSbq+iSwcmqjJpEoVimGQyCfzAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUhey7HRv1z9//xnCfAkuO7KcqKmswHwYDVR0j
BBgwFoAUKUQE1dE2Wy+AXy60CND40gsK8OgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MUI4RkEyNzFGODM2QjAzM0NBMDRBNEEwMjUxM0JCREU4
NjU2RkIzOTkzODM0RkFDQzVFMEM5M0JCRjQ4OEE5LzAvMjk0NDA0RDVEMTM2NUIy
RjgwNUYyRUI0MDhEMEY4RDIwQjBBRjBFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTQ0MDRENUQxMzY1QjJGODA1
RjJFQjQwOEQwRjhEMjBCMEFGMEU4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODFCOEZBMjcxRjgzNkIwMzNDQTA0QTRBMDI1MTNCQkRFODY1NkZCMzk5
MzgzNEZBQ0M1RTBDOTNCQkY0ODhBOS8wLzI5NDQwNEQ1RDEzNjVCMkY4MDVGMkVC
NDA4RDBGOEQyMEIwQUYwRTgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDX/apxd5s0cJsUT3bItKfuWGvv
OSomkuTxGFWxU8rcmhSckb0eOwBLlR0A4jRty72A1L8h97LIKSzWWsz8Rqcya2Fp
8Y0nKViqXb3B3Ed5pWfmmqQp43DVGyv0qakxy1IqtNAQH7LtaquTCI7BLpwZUvJR
4vFlVXsaWpLsMg/dDYsNBEotchL1kCOlKQ7C62zBHzWPX0zLCbhHoCgAL1TOLr40
WzxhXhV0g36V1z+8iJXUHGSrP4sNegidmezgJxfafnSII71QXBepHHd2sgbi5Vq4
L8iZnLKLa1vKLnSKi11x7/iRT9KfsGfsmmB23SZX1OEHI3JbeePCAkNzgZs8
-----END CERTIFICATE-----