Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.mft
File:                     8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.mft (raw, json)
Hash identifier:          eto1S/VxkQ5sAKLVAKXftamNj4x1y9J1q7Yhl6xyAkY=
Subject key identifier:   C9:67:CD:F5:2C:42:D5:08:C9:CF:4A:30:D7:01:97:37:CD:50:E5:E9
Authority key identifier: 8F:96:41:F3:41:B3:17:82:AA:D4:4D:E4:1E:E0:CD:97:0F:F9:EC:D5
Certificate issuer:       /CN=8F9641F341B31782AAD44DE41EE0CD970FF9ECD5
Certificate serial:       0393DFD34C6F838E2A64B00A8BEC153194B6DD0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.mft
Manifest number:          AB
Signing time:             Fri 31 Jan 2025 09:39:26 +0000
Manifest this update:     Fri 31 Jan 2025 09:34:26 +0000
Manifest next update:     Thu 06 Feb 2025 00:48:26 +0000
Files and hashes:         1: 34352e3137372e3130382e302f32322d3232203d3e20323637383537.roa (hash: ojzvPaxVoyoiiUAQJgHRqRkctgTrWVxUFAMNDZlZljs=)
                          2: 8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.crl (hash: NtkKv276RHHzwB8IceyvaluY5yBRpz1fYlDlxz0nauY=)
                          3: 323830333a366136303a333a3a2f34382d3438203d3e20323632313836.roa (hash: MmHsAj+q1N6dl/8Kq67xad9+HY8KWcEdxIitMOBcdkM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:93:df:d3:4c:6f:83:8e:2a:64:b0:0a:8b:ec:15:31:94:b6:dd:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F9641F341B31782AAD44DE41EE0CD970FF9ECD5
        Validity
            Not Before: Jan 31 09:34:26 2025 GMT
            Not After : Feb  6 00:48:26 2025 GMT
        Subject: CN=C967CDF52C42D508C9CF4A30D7019737CD50E5E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:36:b1:93:a7:20:48:37:cf:71:ae:9c:b6:07:
                    b2:26:c1:22:9a:ec:df:15:18:f1:5a:97:19:2a:6a:
                    21:95:cf:ea:87:41:94:bd:ce:47:09:20:3a:54:5b:
                    ed:b0:22:ff:24:6c:53:53:18:ce:86:ac:7a:49:81:
                    3e:33:bf:60:c7:02:1e:ff:7b:ce:8a:27:88:9c:fa:
                    df:f1:69:bc:bf:b7:d3:4c:32:7b:a7:8e:60:67:12:
                    fc:d9:56:76:01:1e:86:9e:af:51:a5:a4:df:f7:49:
                    b6:1d:e2:4f:ea:ff:eb:66:6c:90:06:40:13:f2:86:
                    12:63:79:f2:78:d9:24:fc:ad:56:a6:3c:cc:b6:38:
                    27:3e:69:9a:0d:10:cd:76:0b:35:8a:4c:96:f2:ec:
                    94:f5:12:6a:62:06:7d:bb:2d:6f:22:2a:67:e3:0c:
                    55:4c:55:0b:c0:c8:f1:dd:92:8c:c5:ca:bc:ff:18:
                    67:27:1e:4d:d7:f9:61:3b:83:64:c0:19:64:c9:7e:
                    fd:45:de:07:5f:2d:db:53:58:be:25:8b:ff:f8:ba:
                    ca:d1:55:87:53:63:4d:6c:1e:3c:f6:ad:52:c8:dc:
                    bd:fa:39:83:c3:d3:66:8a:c8:ba:15:f6:8f:a0:26:
                    8b:42:83:ce:66:16:a7:37:82:c2:a0:8d:3a:da:e5:
                    d4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:67:CD:F5:2C:42:D5:08:C9:CF:4A:30:D7:01:97:37:CD:50:E5:E9
            X509v3 Authority Key Identifier:
                keyid:8F:96:41:F3:41:B3:17:82:AA:D4:4D:E4:1E:E0:CD:97:0F:F9:EC:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:a5:7f:94:f8:c0:17:ee:69:79:73:ca:a5:7c:d0:bb:fd:ff:
         70:2d:3e:52:ca:c5:e1:7e:bb:53:bf:98:f8:a5:79:0a:28:bf:
         86:17:29:70:6d:48:fe:40:30:46:03:80:5b:da:d8:3d:52:75:
         5c:94:51:92:50:3e:42:3b:84:12:ed:9e:33:92:98:5c:33:2c:
         4f:2c:b2:67:4c:89:87:bf:63:a9:78:81:70:b6:fe:c0:9e:be:
         cb:3a:ac:3b:c9:cc:56:1c:f6:d1:1c:fe:fd:6a:64:a6:19:6d:
         71:a6:48:b1:92:b8:dc:9d:41:01:3f:df:b5:0a:0d:08:78:35:
         73:b0:6c:b4:5d:2d:e4:f6:6c:88:33:6e:b6:27:e3:be:6e:f0:
         df:49:d7:fa:0a:03:d0:7a:4d:89:ee:a4:73:36:2f:e9:01:7d:
         dd:e1:16:b5:05:54:ce:9f:16:97:bd:58:ec:46:75:d6:a1:da:
         aa:4e:b9:86:dd:c3:00:56:c8:74:ed:88:5f:a4:76:bd:06:dc:
         3f:91:70:11:96:3c:a9:b3:81:13:69:c3:da:00:ef:b4:92:85:
         6b:de:2a:03:ab:65:54:6e:35:5c:ed:f7:f6:c6:84:72:be:37:
         45:a5:85:90:2a:00:60:17:da:6d:66:ab:2d:3e:46:af:7c:ad:
         c3:6f:4e:f4
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUA5Pf00xvg44qZLAKi+wVMZS23QswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY5NjQxRjM0MUIzMTc4MkFBRDQ0REU0MUVFMENEOTcw
RkY5RUNENTAeFw0yNTAxMzEwOTM0MjZaFw0yNTAyMDYwMDQ4MjZaMDMxMTAvBgNV
BAMTKEM5NjdDREY1MkM0MkQ1MDhDOUNGNEEzMEQ3MDE5NzM3Q0Q1MEU1RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaNrGTpyBIN89xrpy2B7ImwSKa
7N8VGPFalxkqaiGVz+qHQZS9zkcJIDpUW+2wIv8kbFNTGM6GrHpJgT4zv2DHAh7/
e86KJ4ic+t/xaby/t9NMMnunjmBnEvzZVnYBHoaer1GlpN/3SbYd4k/q/+tmbJAG
QBPyhhJjefJ42ST8rVamPMy2OCc+aZoNEM12CzWKTJby7JT1EmpiBn27LW8iKmfj
DFVMVQvAyPHdkozFyrz/GGcnHk3X+WE7g2TAGWTJfv1F3gdfLdtTWL4li//4usrR
VYdTY01sHjz2rVLI3L36OYPD02aKyLoV9o+gJotCg85mFqc3gsKgjTra5dSdAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUyWfN9SxC1QjJz0ow1wGXN81Q5ekwHwYDVR0j
BBgwFoAUj5ZB80GzF4Kq1E3kHuDNlw/57NUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CM0QzOUJBNEI4MUEzQzAyQjg1NENDMjQ3RjRDRkU1MzUy
NUJGMjQyM0YyOThCOEM1MzVBMDY1QkJGMDkxOTkwLzAvOEY5NjQxRjM0MUIzMTc4
MkFBRDQ0REU0MUVFMENEOTcwRkY5RUNENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84Rjk2NDFGMzQxQjMxNzgyQUFE
NDRERTQxRUUwQ0Q5NzBGRjlFQ0Q1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjNEMzlCQTRCODFBM0MwMkI4NTRDQzI0N0Y0Q0ZFNTM1MjVCRjI0MjNG
Mjk4QjhDNTM1QTA2NUJCRjA5MTk5MC8wLzhGOTY0MUYzNDFCMzE3ODJBQUQ0NERF
NDFFRTBDRDk3MEZGOUVDRDUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA+pX+U+MAX7ml5c8qlfNC7/f9w
LT5SysXhfrtTv5j4pXkKKL+GFylwbUj+QDBGA4Bb2tg9UnVclFGSUD5CO4QS7Z4z
kphcMyxPLLJnTImHv2OpeIFwtv7Anr7LOqw7ycxWHPbRHP79amSmGW1xpkixkrjc
nUEBP9+1Cg0IeDVzsGy0XS3k9myIM262J+O+bvDfSdf6CgPQek2J7qRzNi/pAX3d
4Ra1BVTOnxaXvVjsRnXWodqqTrmG3cMAVsh07YhfpHa9Btw/kXARljyps4ETacPa
AO+0koVr3ioDq2VUbjVc7ff2xoRyvjdFpYWQKgBgF9ptZqstPkavfK3Db070
-----END CERTIFICATE-----