Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D986FF7194FB2000A64C23C93E048A61F1672C1CD6C5FB29EAD37980641AFCA7/0/0A72DC25D420B15DD00FF3323CB446E7A055F3BE.mft
File:                     0A72DC25D420B15DD00FF3323CB446E7A055F3BE.mft (raw, json)
Hash identifier:          jWVsMyRtXzFVviGabsg/Fm5tPxrmEGyMG01begb3yD0=
Subject key identifier:   3B:CA:B9:54:09:4C:E5:5B:77:00:47:17:0F:F6:58:82:89:97:A4:B6
Authority key identifier: 0A:72:DC:25:D4:20:B1:5D:D0:0F:F3:32:3C:B4:46:E7:A0:55:F3:BE
Certificate issuer:       /CN=0A72DC25D420B15DD00FF3323CB446E7A055F3BE
Certificate serial:       2223566C236B39729AC3DBD318766D6989F58AF1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A72DC25D420B15DD00FF3323CB446E7A055F3BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D986FF7194FB2000A64C23C93E048A61F1672C1CD6C5FB29EAD37980641AFCA7/0/0A72DC25D420B15DD00FF3323CB446E7A055F3BE.mft
Manifest number:          A7
Signing time:             Fri 31 Jan 2025 02:14:44 +0000
Manifest this update:     Fri 31 Jan 2025 02:09:44 +0000
Manifest next update:     Thu 06 Feb 2025 01:10:44 +0000
Files and hashes:         1: 3139302e3137312e37362e302f32322d3234203d3e20323731373932.roa (hash: 3Ov7iKIA5gfiAVEP0lGpdCMrZz++KCPHxSH8V1MvGTk=)
                          2: 323830333a666665303a3a2f33322d3332203d3e20323731373932.roa (hash: mEt43U7FRj8fXeeJlqDK9YA21KXRONzxwN1z59Nay9M=)
                          3: 0A72DC25D420B15DD00FF3323CB446E7A055F3BE.crl (hash: 3n7lnfJAbgdQ5DZCogMw7Bz0oXbgvNtlOKEYCiTfYM4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:23:56:6c:23:6b:39:72:9a:c3:db:d3:18:76:6d:69:89:f5:8a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A72DC25D420B15DD00FF3323CB446E7A055F3BE
        Validity
            Not Before: Jan 31 02:09:44 2025 GMT
            Not After : Feb  6 01:10:44 2025 GMT
        Subject: CN=3BCAB954094CE55B770047170FF658828997A4B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:79:8b:02:70:4f:5f:83:b0:f7:e4:76:58:1d:
                    c4:e7:07:8e:fb:7f:d8:20:31:58:15:98:13:aa:27:
                    53:03:1d:2f:48:a4:3c:b6:6e:b4:f1:b1:ac:3d:8c:
                    df:d1:bc:0b:21:56:1e:f8:c6:01:2a:be:12:11:d3:
                    68:a8:07:1c:c2:a4:bd:d4:b2:81:52:8c:fe:d6:be:
                    a0:ba:58:49:7a:61:ba:4b:e2:e6:22:3c:15:22:0c:
                    2e:be:fd:b6:79:f4:7b:bf:e6:62:cc:e1:7c:40:07:
                    30:d7:94:ca:ef:38:d2:6d:3a:c3:5d:a8:f1:4f:fa:
                    e6:3f:8b:aa:38:79:60:9d:90:c8:0e:b0:ad:3f:9a:
                    7a:63:c0:44:c5:e0:82:b7:58:fe:50:af:9f:fa:87:
                    45:66:2a:8d:c5:2d:d1:1e:91:40:d4:4a:01:6a:0f:
                    01:b8:62:09:cc:0e:be:b2:70:a2:9c:27:49:66:3c:
                    8a:3e:e1:c0:54:07:46:50:c5:52:9d:c8:3a:09:30:
                    35:91:e4:09:cc:e4:03:a7:da:e3:a3:1e:d9:3c:ab:
                    d5:82:f8:f2:34:a9:c3:2a:95:1b:0d:8f:26:17:87:
                    8a:5b:f1:ab:d2:84:41:dc:7c:88:fb:fc:28:ae:f1:
                    8a:d5:ab:cc:b3:d9:98:be:27:1f:f3:ff:a6:a2:68:
                    1b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:CA:B9:54:09:4C:E5:5B:77:00:47:17:0F:F6:58:82:89:97:A4:B6
            X509v3 Authority Key Identifier:
                keyid:0A:72:DC:25:D4:20:B1:5D:D0:0F:F3:32:3C:B4:46:E7:A0:55:F3:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D986FF7194FB2000A64C23C93E048A61F1672C1CD6C5FB29EAD37980641AFCA7/0/0A72DC25D420B15DD00FF3323CB446E7A055F3BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A72DC25D420B15DD00FF3323CB446E7A055F3BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D986FF7194FB2000A64C23C93E048A61F1672C1CD6C5FB29EAD37980641AFCA7/0/0A72DC25D420B15DD00FF3323CB446E7A055F3BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:d7:d4:f8:3a:4e:c0:f8:7f:e0:67:6d:2f:57:fe:98:b1:bb:
         d0:2f:0a:bd:62:32:ae:16:86:57:b5:22:fa:ec:a7:dd:10:4f:
         4b:55:16:ce:d0:19:23:e6:76:36:a3:5e:00:85:ed:d4:18:ee:
         e2:f0:69:7f:cd:15:b0:0c:a8:05:02:70:46:7b:d5:e7:54:0f:
         ea:44:bb:2b:b2:42:62:03:40:54:f1:cf:05:a5:78:5b:0c:9e:
         61:f4:32:4c:74:72:77:2c:cf:a0:ff:e4:05:30:09:dd:e3:6f:
         09:71:f2:4b:16:40:61:37:b9:db:3f:9b:73:27:ef:08:bb:63:
         bf:3d:6a:3a:3d:de:25:59:98:e3:ed:3e:32:e4:ac:30:3b:28:
         6e:86:9c:b3:48:74:52:31:bf:66:64:2a:81:a8:66:d1:4c:73:
         2c:db:f1:8b:f6:65:1d:a0:bd:10:48:c6:0d:f2:35:db:3f:f4:
         94:8b:5f:54:f2:c8:16:e9:48:03:ba:e6:3f:4a:40:e0:c7:1a:
         54:63:3f:82:c6:2e:09:87:6c:61:9c:a6:04:eb:45:c0:f9:ab:
         0c:c4:4d:f1:af:74:e1:70:9b:58:31:89:d6:b5:c6:93:9f:ce:
         b5:6f:a1:fb:a6:eb:fb:f5:64:07:31:96:15:63:ed:29:56:9c:
         b9:c0:95:31
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUIiNWbCNrOXKaw9vTGHZtaYn1ivEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEE3MkRDMjVENDIwQjE1REQwMEZGMzMyM0NCNDQ2RTdB
MDU1RjNCRTAeFw0yNTAxMzEwMjA5NDRaFw0yNTAyMDYwMTEwNDRaMDMxMTAvBgNV
BAMTKDNCQ0FCOTU0MDk0Q0U1NUI3NzAwNDcxNzBGRjY1ODgyODk5N0E0QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCneYsCcE9fg7D35HZYHcTnB477
f9ggMVgVmBOqJ1MDHS9IpDy2brTxsaw9jN/RvAshVh74xgEqvhIR02ioBxzCpL3U
soFSjP7WvqC6WEl6YbpL4uYiPBUiDC6+/bZ59Hu/5mLM4XxABzDXlMrvONJtOsNd
qPFP+uY/i6o4eWCdkMgOsK0/mnpjwETF4IK3WP5Qr5/6h0VmKo3FLdEekUDUSgFq
DwG4YgnMDr6ycKKcJ0lmPIo+4cBUB0ZQxVKdyDoJMDWR5AnM5AOn2uOjHtk8q9WC
+PI0qcMqlRsNjyYXh4pb8avShEHcfIj7/Ciu8YrVq8yz2Zi+Jx/z/6aiaBv5AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUO8q5VAlM5Vt3AEcXD/ZYgomXpLYwHwYDVR0j
BBgwFoAUCnLcJdQgsV3QD/MyPLRG56BV874wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOTg2RkY3MTk0RkIyMDAwQTY0QzIzQzkzRTA0OEE2MUYx
NjcyQzFDRDZDNUZCMjlFQUQzNzk4MDY0MUFGQ0E3LzAvMEE3MkRDMjVENDIwQjE1
REQwMEZGMzMyM0NCNDQ2RTdBMDU1RjNCRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQTcyREMyNUQ0MjBCMTVERDAw
RkYzMzIzQ0I0NDZFN0EwNTVGM0JFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDk4NkZGNzE5NEZCMjAwMEE2NEMyM0M5M0UwNDhBNjFGMTY3MkMxQ0Q2
QzVGQjI5RUFEMzc5ODA2NDFBRkNBNy8wLzBBNzJEQzI1RDQyMEIxNUREMDBGRjMz
MjNDQjQ0NkU3QTA1NUYzQkUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCZ19T4Ok7A+H/gZ20vV/6YsbvQ
Lwq9YjKuFoZXtSL67KfdEE9LVRbO0Bkj5nY2o14Ahe3UGO7i8Gl/zRWwDKgFAnBG
e9XnVA/qRLsrskJiA0BU8c8FpXhbDJ5h9DJMdHJ3LM+g/+QFMAnd428JcfJLFkBh
N7nbP5tzJ+8Iu2O/PWo6Pd4lWZjj7T4y5KwwOyhuhpyzSHRSMb9mZCqBqGbRTHMs
2/GL9mUdoL0QSMYN8jXbP/SUi19U8sgW6UgDuuY/SkDgxxpUYz+Cxi4Jh2xhnKYE
60XA+asMxE3xr3ThcJtYMYnWtcaTn861b6H7puv79WQHMZYVY+0pVpy5wJUx
-----END CERTIFICATE-----