Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft
File:                     0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft (raw, json)
Hash identifier:          6PFT7V4QUZHfav211onBbxbrUc3q2wP05YXgbYnwEHU=
Subject key identifier:   06:8D:44:91:D2:90:C1:BF:D1:2F:63:20:9E:E5:95:98:F1:A8:A6:FF
Authority key identifier: 0D:12:3A:E8:C9:FD:ED:46:E5:F7:D3:B4:88:78:85:1E:1E:8B:74:98
Certificate issuer:       /CN=0D123AE8C9FDED46E5F7D3B48878851E1E8B7498
Certificate serial:       3EC720BB8979E13436F051E4516E4D1DE622FABD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft
Manifest number:          A9
Signing time:             Fri 31 Jan 2025 12:31:11 +0000
Manifest this update:     Fri 31 Jan 2025 12:26:11 +0000
Manifest next update:     Tue 04 Feb 2025 15:46:11 +0000
Files and hashes:         1: 3133322e3235352e362e302f32342d3234203d3e20323633363937.roa (hash: oYVROMMw4hJpvgTiJ6IT/Eb7Y0U6dEnaljYBrdVrtug=)
                          2: 3133322e3235352e372e302f32342d3234203d3e20323633373236.roa (hash: RvlR2rKVViqIBnFqn/UHOSJKl1wDHmWUOzOK5WgTWJo=)
                          3: 0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.crl (hash: 5edZRBRAsdKj2yKsTxWZWonQ9f7DCSqRxVFLT2+7IbU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c7:20:bb:89:79:e1:34:36:f0:51:e4:51:6e:4d:1d:e6:22:fa:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D123AE8C9FDED46E5F7D3B48878851E1E8B7498
        Validity
            Not Before: Jan 31 12:26:11 2025 GMT
            Not After : Feb  4 15:46:11 2025 GMT
        Subject: CN=068D4491D290C1BFD12F63209EE59598F1A8A6FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f5:e7:fd:10:3d:78:52:b4:7e:7c:c5:78:dd:
                    98:9b:17:ba:86:b2:69:92:46:11:e0:d4:4d:ef:ba:
                    ab:34:15:cc:df:31:2f:f9:5e:34:00:46:87:d0:93:
                    9f:4d:1b:47:cb:07:b1:30:60:e1:b9:69:65:1f:4e:
                    fb:ca:64:7e:8e:d8:b0:48:c4:bf:f9:7b:4e:03:b8:
                    b0:32:00:29:ae:6f:f9:94:bc:c7:6d:d5:70:3f:00:
                    86:32:c4:50:b2:87:23:7f:10:09:d2:16:ce:0f:cf:
                    1b:d0:3d:3b:28:a8:ea:b2:df:be:83:f5:15:ad:26:
                    99:53:96:b9:8f:78:f2:20:30:30:2b:c4:e6:5d:4c:
                    05:a9:71:0d:01:67:18:da:a1:5a:63:ec:45:c5:5f:
                    cf:a0:c5:f7:11:21:b9:0d:b7:44:5b:0e:4a:87:1f:
                    f5:08:eb:2d:b3:bd:98:40:12:a1:4f:0d:19:ab:7a:
                    b8:58:e3:84:ac:1d:31:06:d7:64:0b:3a:1d:c7:0d:
                    c7:4e:3f:a1:15:11:cf:a0:e7:ed:22:cd:09:7f:37:
                    47:dd:9c:27:22:74:96:05:28:c7:72:e8:43:a7:51:
                    8a:b0:57:25:d8:c3:b5:7e:95:90:14:9a:48:9a:75:
                    f2:23:4e:c0:e3:08:28:8e:7b:da:ab:5e:44:c7:74:
                    59:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8D:44:91:D2:90:C1:BF:D1:2F:63:20:9E:E5:95:98:F1:A8:A6:FF
            X509v3 Authority Key Identifier:
                keyid:0D:12:3A:E8:C9:FD:ED:46:E5:F7:D3:B4:88:78:85:1E:1E:8B:74:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:8f:e0:54:48:eb:f1:cd:58:62:e7:38:56:41:d7:57:1e:74:
         57:de:8f:26:cf:39:cb:0c:13:87:a8:ba:a4:78:a2:79:aa:38:
         01:34:8d:cc:63:be:30:59:97:47:1b:1a:47:cd:b0:96:9a:25:
         44:7b:ee:f2:27:3b:55:5b:4a:6b:1d:1f:63:34:8f:4e:ba:a9:
         ba:f6:52:6e:3e:ee:0f:76:4c:8a:29:21:d7:db:22:e9:0e:25:
         fe:45:91:71:d6:4a:89:92:25:7f:05:1f:23:a3:84:d9:56:c1:
         9f:89:80:84:4b:26:45:a2:b4:3e:0a:3d:70:c7:ee:93:be:f4:
         34:07:b4:ad:6c:6b:de:32:96:8a:5b:c6:13:6b:a1:43:dc:0f:
         19:69:22:01:36:b2:7e:eb:11:24:90:bc:4d:d0:b7:bf:87:42:
         24:fe:67:26:34:a3:46:a6:02:01:f8:28:80:cd:9c:bc:56:cf:
         5d:4e:86:69:f5:6f:36:e4:d1:7f:db:a3:30:5d:fb:fb:4a:8f:
         40:63:24:7b:d0:ce:c4:a6:c6:00:2f:16:51:07:3e:cd:89:95:
         3a:69:f8:79:7e:a1:8a:ff:0f:01:af:14:0d:93:28:9a:36:25:
         b1:c6:9f:fa:c2:7b:01:0d:bc:2f:10:e6:80:15:f7:84:b0:62:
         a3:f6:2a:91
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUPscgu4l54TQ28FHkUW5NHeYi+r0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQxMjNBRThDOUZERUQ0NkU1RjdEM0I0ODg3ODg1MUUx
RThCNzQ5ODAeFw0yNTAxMzExMjI2MTFaFw0yNTAyMDQxNTQ2MTFaMDMxMTAvBgNV
BAMTKDA2OEQ0NDkxRDI5MEMxQkZEMTJGNjMyMDlFRTU5NTk4RjFBOEE2RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc9ef9ED14UrR+fMV43ZibF7qG
smmSRhHg1E3vuqs0FczfMS/5XjQARofQk59NG0fLB7EwYOG5aWUfTvvKZH6O2LBI
xL/5e04DuLAyACmub/mUvMdt1XA/AIYyxFCyhyN/EAnSFs4PzxvQPTsoqOqy376D
9RWtJplTlrmPePIgMDArxOZdTAWpcQ0BZxjaoVpj7EXFX8+gxfcRIbkNt0RbDkqH
H/UI6y2zvZhAEqFPDRmrerhY44SsHTEG12QLOh3HDcdOP6EVEc+g5+0izQl/N0fd
nCcidJYFKMdy6EOnUYqwVyXYw7V+lZAUmkiadfIjTsDjCCiOe9qrXkTHdFnLAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUBo1EkdKQwb/RL2MgnuWVmPGopv8wHwYDVR0j
BBgwFoAUDRI66Mn97Ubl99O0iHiFHh6LdJgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CM0QzOTlDM0I3NzYyMjQwRDMzQzZENEYzRjIxM0E2NkUw
NjFBQ0FFMjc4QjQ0MTUwREMyNEM5NzhDMDBFMEY4LzAvMEQxMjNBRThDOUZERUQ0
NkU1RjdEM0I0ODg3ODg1MUUxRThCNzQ5OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDEyM0FFOEM5RkRFRDQ2RTVG
N0QzQjQ4ODc4ODUxRTFFOEI3NDk4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjNEMzk5QzNCNzc2MjI0MEQzM0M2RDRGM0YyMTNBNjZFMDYxQUNBRTI3
OEI0NDE1MERDMjRDOTc4QzAwRTBGOC8wLzBEMTIzQUU4QzlGREVENDZFNUY3RDNC
NDg4Nzg4NTFFMUU4Qjc0OTgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBjj+BUSOvxzVhi5zhWQddXHnRX
3o8mzznLDBOHqLqkeKJ5qjgBNI3MY74wWZdHGxpHzbCWmiVEe+7yJztVW0prHR9j
NI9Ouqm69lJuPu4PdkyKKSHX2yLpDiX+RZFx1kqJkiV/BR8jo4TZVsGfiYCESyZF
orQ+Cj1wx+6TvvQ0B7StbGveMpaKW8YTa6FD3A8ZaSIBNrJ+6xEkkLxN0Le/h0Ik
/mcmNKNGpgIB+CiAzZy8Vs9dToZp9W825NF/26MwXfv7So9AYyR70M7EpsYALxZR
Bz7NiZU6afh5fqGK/w8BrxQNkyiaNiWxxp/6wnsBDbwvEOaAFfeEsGKj9iqR
-----END CERTIFICATE-----