Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/DC06AA51EF6432276CF284539A2DF591490740C4.mft
File:                     DC06AA51EF6432276CF284539A2DF591490740C4.mft (raw, json)
Hash identifier:          YQi+bRYTatVjqnz/B375CB2RyJQLR65U4YoW8fO+6s0=
Subject key identifier:   67:53:40:57:2B:0C:A0:4E:32:05:B7:33:4B:9F:17:6B:8E:D5:71:1C
Authority key identifier: DC:06:AA:51:EF:64:32:27:6C:F2:84:53:9A:2D:F5:91:49:07:40:C4
Certificate issuer:       /CN=DC06AA51EF6432276CF284539A2DF591490740C4
Certificate serial:       41503405DC3E1CB97786163E6EF28EB47D0C81D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC06AA51EF6432276CF284539A2DF591490740C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/DC06AA51EF6432276CF284539A2DF591490740C4.mft
Manifest number:          A8
Signing time:             Thu 30 Jan 2025 08:53:55 +0000
Manifest this update:     Thu 30 Jan 2025 08:48:55 +0000
Manifest next update:     Wed 05 Feb 2025 07:43:55 +0000
Files and hashes:         1: 34352e3233392e37382e302f32342d3234203d3e20323633313537.roa (hash: FqD/x2Y9TpXJCgKpbZtAto82NpC55VP6q4REbOYoQr8=)
                          2: 34352e3233392e37372e302f32342d3234203d3e20323633313537.roa (hash: HZ/Jnf7xxosImwPZLBcLQkBUqADmlYVP8Bfz4C6AQPs=)
                          3: 34352e3233392e37362e302f32342d3234203d3e20323633313537.roa (hash: PUFxnk/LeYIIAKLBr44YfXCrT6teH+Z5oAISEk1hKoo=)
                          4: 34352e3233392e37392e302f32342d3234203d3e20323633313537.roa (hash: DkiL0MY2eESfc/qIe2FEQWQhGdn66ncHgvpgqmXBsZo=)
                          5: DC06AA51EF6432276CF284539A2DF591490740C4.crl (hash: RLJcBKcxO6l3lngL+FqYcE+ayzqoMq47OybNjQWP+DI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:50:34:05:dc:3e:1c:b9:77:86:16:3e:6e:f2:8e:b4:7d:0c:81:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC06AA51EF6432276CF284539A2DF591490740C4
        Validity
            Not Before: Jan 30 08:48:55 2025 GMT
            Not After : Feb  5 07:43:55 2025 GMT
        Subject: CN=675340572B0CA04E3205B7334B9F176B8ED5711C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:45:28:f3:79:00:9d:b6:40:1a:4b:38:50:ff:
                    80:15:96:e1:cb:a7:9f:09:62:2b:e6:46:ac:8a:c4:
                    11:18:57:5f:9c:f0:90:6d:ec:86:af:fc:eb:7b:a9:
                    2f:81:ab:bd:b4:9c:8f:9a:f2:8c:13:b7:34:76:90:
                    c9:fb:c1:35:b4:09:a8:e7:d1:c5:f1:92:a0:f2:2e:
                    79:59:5e:74:28:8b:e0:c6:e9:28:ec:40:51:95:9c:
                    7c:2f:8f:ab:81:1a:b6:33:1d:7b:10:51:97:3f:e4:
                    36:bc:c8:9e:aa:c5:85:55:88:27:0f:20:ab:20:88:
                    80:ea:ce:c7:90:da:8c:16:50:42:ff:c5:a9:58:6e:
                    28:31:40:e8:f9:b6:e0:9e:d9:b5:a5:7d:2e:b5:e8:
                    f3:6c:b2:ae:1e:d6:bd:ec:b9:e3:e0:e0:d7:13:79:
                    41:65:de:24:99:21:83:d2:40:52:c4:a2:dc:68:77:
                    56:19:16:e9:91:8f:1e:de:a8:ec:d0:c7:24:29:f3:
                    6d:74:f8:68:ce:34:17:de:10:a2:ef:2b:20:15:63:
                    71:88:7f:61:08:34:24:a9:2a:21:36:25:ac:d3:8d:
                    df:17:09:88:c1:87:40:f3:da:36:fe:1a:ee:aa:f8:
                    d2:2a:dc:ee:cb:45:bb:95:d9:e2:61:23:18:b2:a1:
                    65:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:53:40:57:2B:0C:A0:4E:32:05:B7:33:4B:9F:17:6B:8E:D5:71:1C
            X509v3 Authority Key Identifier:
                keyid:DC:06:AA:51:EF:64:32:27:6C:F2:84:53:9A:2D:F5:91:49:07:40:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/DC06AA51EF6432276CF284539A2DF591490740C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC06AA51EF6432276CF284539A2DF591490740C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/DC06AA51EF6432276CF284539A2DF591490740C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:61:fa:f1:15:df:1a:c0:17:e5:77:d6:24:e5:61:07:5e:6f:
         f1:d8:67:40:d2:df:d0:15:40:60:c2:96:b6:a4:ae:b8:03:46:
         dc:94:39:4c:f2:02:b5:fc:ea:7d:e5:04:b7:27:ae:e6:2a:fa:
         90:3f:cf:46:a3:c1:ae:ed:9d:7c:0a:11:96:cd:56:b1:37:a2:
         43:8c:c9:07:65:41:ba:bd:de:73:ba:2c:ea:5c:2a:23:41:41:
         b1:d0:fb:b3:3c:eb:2f:f5:12:b9:1b:28:c9:2a:78:3c:c9:4e:
         02:c4:53:a1:34:26:87:89:7f:17:e5:f3:eb:de:a1:b4:4c:27:
         e4:a5:b7:76:29:34:3d:c2:f7:fc:ea:88:f1:91:36:2d:d8:1f:
         b1:bd:6f:ed:cc:e7:af:f6:d8:0e:ec:28:60:14:00:b5:8e:e6:
         0c:a0:4f:88:92:70:f9:45:b1:6d:ed:65:69:4f:6b:0b:1c:1e:
         b5:0b:01:de:01:fe:d0:24:af:33:60:82:a2:c0:63:72:33:0d:
         d4:52:11:e3:38:7f:cc:17:17:97:3d:f7:42:87:64:dc:5b:c1:
         f1:ae:5e:08:7f:6e:4c:c3:dd:6c:37:2c:f7:91:c8:ab:b0:35:
         29:3f:35:18:8d:e2:cc:8b:c1:8b:74:25:a8:e4:63:72:cf:48:
         de:58:8d:8a
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUQVA0Bdw+HLl3hhY+bvKOtH0MgdgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMwNkFBNTFFRjY0MzIyNzZDRjI4NDUzOUEyREY1OTE0
OTA3NDBDNDAeFw0yNTAxMzAwODQ4NTVaFw0yNTAyMDUwNzQzNTVaMDMxMTAvBgNV
BAMTKDY3NTM0MDU3MkIwQ0EwNEUzMjA1QjczMzRCOUYxNzZCOEVENTcxMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsRSjzeQCdtkAaSzhQ/4AVluHL
p58JYivmRqyKxBEYV1+c8JBt7Iav/Ot7qS+Bq720nI+a8owTtzR2kMn7wTW0Cajn
0cXxkqDyLnlZXnQoi+DG6SjsQFGVnHwvj6uBGrYzHXsQUZc/5Da8yJ6qxYVViCcP
IKsgiIDqzseQ2owWUEL/xalYbigxQOj5tuCe2bWlfS616PNssq4e1r3suePg4NcT
eUFl3iSZIYPSQFLEotxod1YZFumRjx7eqOzQxyQp8210+GjONBfeEKLvKyAVY3GI
f2EINCSpKiE2JazTjd8XCYjBh0Dz2jb+Gu6q+NIq3O7LRbuV2eJhIxiyoWVvAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUZ1NAVysMoE4yBbczS58Xa47VcRwwHwYDVR0j
BBgwFoAU3AaqUe9kMids8oRTmi31kUkHQMQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRjk0NjQ1NUQ2OTA4QjhGQzU0RERBNDM2MEI5QUM4QjVE
QTJCOTZEQTkzMzQ5NzVBOUE5NUFDRDg5NDUyOTQ5LzAvREMwNkFBNTFFRjY0MzIy
NzZDRjI4NDUzOUEyREY1OTE0OTA3NDBDNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQzA2QUE1MUVGNjQzMjI3NkNG
Mjg0NTM5QTJERjU5MTQ5MDc0MEM0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUY5NDY0NTVENjkwOEI4RkM1NEREQTQzNjBCOUFDOEI1REEyQjk2REE5
MzM0OTc1QTlBOTVBQ0Q4OTQ1Mjk0OS8wL0RDMDZBQTUxRUY2NDMyMjc2Q0YyODQ1
MzlBMkRGNTkxNDkwNzQwQzQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQALYfrxFd8awBfld9Yk5WEHXm/x
2GdA0t/QFUBgwpa2pK64A0bclDlM8gK1/Op95QS3J67mKvqQP89Go8Gu7Z18ChGW
zVaxN6JDjMkHZUG6vd5zuizqXCojQUGx0PuzPOsv9RK5GyjJKng8yU4CxFOhNCaH
iX8X5fPr3qG0TCfkpbd2KTQ9wvf86ojxkTYt2B+xvW/tzOev9tgO7ChgFAC1juYM
oE+IknD5RbFt7WVpT2sLHB61CwHeAf7QJK8zYIKiwGNyMw3UUhHjOH/MFxeXPfdC
h2TcW8Hxrl4If25Mw91sNyz3kcirsDUpPzUYjeLMi8GLdCWo5GNyz0jeWI2K
-----END CERTIFICATE-----