Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECE2B09953305E0EDD80B1558121ADE40CD64C4A80183C09BE0315B9BFA55A42/0/98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31.mft
File:                     98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31.mft (raw, json)
Hash identifier:          S3OBH3AzLyu9PgXA39nfU7sNZrsNWWr23Ww4wargA18=
Subject key identifier:   BA:61:98:FE:F0:AF:47:94:E2:CE:91:38:D8:DB:60:70:E4:B0:C1:88
Authority key identifier: 98:B2:2D:5F:5F:19:79:94:0E:0B:2C:1F:A5:A6:6A:E7:28:1B:FB:31
Certificate issuer:       /CN=98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31
Certificate serial:       7EEBF3F7F36EA6066D198FC374C4E3DF51496125
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECE2B09953305E0EDD80B1558121ADE40CD64C4A80183C09BE0315B9BFA55A42/0/98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31.mft
Manifest number:          AB
Signing time:             Thu 30 Jan 2025 11:25:27 +0000
Manifest this update:     Thu 30 Jan 2025 11:20:27 +0000
Manifest next update:     Tue 04 Feb 2025 15:28:27 +0000
Files and hashes:         1: 3138362e36352e38342e302f32322d3234203d3e203532333830.roa (hash: NaJtmjJKGN10Sld/oNNhmYCWqSueozYC4eo3qu3XPHA=)
                          2: 98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31.crl (hash: S5lT9hJCHo0YiPYP8RGxb0PNW9FyaGRn3eKyE9QfhlU=)
                          3: 3137392e36302e3135322e302f32312d3234203d3e203532333830.roa (hash: W83eQx7BSj21fHxAfggpFgu4Bl4OA+VfA79q4dkES7s=)
                          4: 323830333a656130303a3a2f33322d313238203d3e203532333830.roa (hash: A7hnzp61+ZUjEoXk38e3ATSuVcKFFPxcPxg/J5a9ndc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:eb:f3:f7:f3:6e:a6:06:6d:19:8f:c3:74:c4:e3:df:51:49:61:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31
        Validity
            Not Before: Jan 30 11:20:27 2025 GMT
            Not After : Feb  4 15:28:27 2025 GMT
        Subject: CN=BA6198FEF0AF4794E2CE9138D8DB6070E4B0C188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e3:1a:bd:f4:4f:d4:7b:28:56:7e:8f:5d:ab:
                    03:a3:46:bb:70:fc:3d:a6:00:93:e2:8c:59:b2:2a:
                    3c:0f:c0:61:f5:96:f7:23:e7:3c:e8:5c:9c:7c:d3:
                    78:1b:fb:a7:17:95:d4:54:4a:b8:9f:db:7c:0e:c8:
                    73:72:98:df:80:bf:4c:ee:64:57:40:8c:e3:e6:29:
                    9d:c0:ad:d4:16:54:ff:97:9c:3a:f0:ca:e7:36:31:
                    68:5f:c8:91:0f:75:8d:1f:1e:0b:f5:53:3c:28:8c:
                    2e:dc:40:7d:e9:f9:ab:ee:18:37:0b:33:56:7b:5e:
                    ca:03:e3:ba:9d:04:c6:43:f6:98:7f:4c:e5:b2:ea:
                    a4:7d:dd:61:b9:50:f1:9b:ee:09:54:c1:4f:7e:8d:
                    9a:5c:84:db:76:ce:98:37:1a:30:b0:10:00:20:33:
                    26:06:59:09:68:bd:44:fa:2f:e9:14:e1:a2:aa:a3:
                    0b:b0:35:a8:a2:eb:84:98:7f:f8:55:1b:cc:c2:d3:
                    fa:6c:8d:8d:d5:b5:23:5c:17:28:1c:0d:b9:a3:22:
                    e6:e7:b7:19:80:c2:59:0a:47:80:ed:76:d7:9e:19:
                    91:74:d6:bc:81:70:ec:c9:40:21:6c:7a:55:a5:9a:
                    37:f2:da:5a:25:7b:09:1b:12:3d:c8:e0:84:42:10:
                    3a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:61:98:FE:F0:AF:47:94:E2:CE:91:38:D8:DB:60:70:E4:B0:C1:88
            X509v3 Authority Key Identifier:
                keyid:98:B2:2D:5F:5F:19:79:94:0E:0B:2C:1F:A5:A6:6A:E7:28:1B:FB:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECE2B09953305E0EDD80B1558121ADE40CD64C4A80183C09BE0315B9BFA55A42/0/98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECE2B09953305E0EDD80B1558121ADE40CD64C4A80183C09BE0315B9BFA55A42/0/98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:c3:92:37:e7:2f:cc:bf:e1:c4:01:4a:86:4b:c7:17:72:5e:
         a6:5a:19:6f:0d:b3:41:de:a0:b3:a6:f8:c0:d6:7e:97:d0:87:
         68:65:da:f4:2f:d8:0e:f5:66:bf:6e:b5:e6:cc:d4:71:4d:52:
         d4:44:39:93:2c:29:67:c2:61:3a:23:37:8b:12:e9:8e:c2:f7:
         fc:e1:bf:59:b8:ca:d5:0b:95:9d:4d:82:8d:ed:3f:fc:dc:6f:
         de:da:ae:df:bc:dd:15:18:68:d4:e7:ac:36:5d:56:8b:81:14:
         3f:c9:5f:3b:78:d2:6a:81:cc:05:e5:ec:1d:46:8d:4f:a4:0f:
         eb:e9:02:32:04:5e:b9:20:c6:75:d0:58:e2:1b:a1:8e:50:ad:
         21:63:7b:b7:00:4f:0a:48:84:69:4d:9d:84:dc:9b:30:6e:fd:
         af:c1:ee:38:92:67:a4:dc:55:a2:a6:7c:c7:2d:9b:29:5f:54:
         e8:57:22:4c:ad:9d:a8:11:db:12:5f:3e:10:22:ff:3c:6f:3b:
         db:56:7e:6d:74:c7:d5:e9:bf:5b:65:24:2c:6f:2e:3e:f6:8b:
         90:54:23:11:f4:7e:53:19:98:16:bf:d3:6d:60:d6:33:95:41:
         0e:24:72:b2:13:96:5e:94:7e:d7:d7:97:e2:97:e8:60:b7:5b:
         e3:db:c0:9f
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUfuvz9/NupgZtGY/DdMTj31FJYSUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThCMjJENUY1RjE5Nzk5NDBFMEIyQzFGQTVBNjZBRTcy
ODFCRkIzMTAeFw0yNTAxMzAxMTIwMjdaFw0yNTAyMDQxNTI4MjdaMDMxMTAvBgNV
BAMTKEJBNjE5OEZFRjBBRjQ3OTRFMkNFOTEzOEQ4REI2MDcwRTRCMEMxODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg4xq99E/UeyhWfo9dqwOjRrtw
/D2mAJPijFmyKjwPwGH1lvcj5zzoXJx803gb+6cXldRUSrif23wOyHNymN+Av0zu
ZFdAjOPmKZ3ArdQWVP+XnDrwyuc2MWhfyJEPdY0fHgv1UzwojC7cQH3p+avuGDcL
M1Z7XsoD47qdBMZD9ph/TOWy6qR93WG5UPGb7glUwU9+jZpchNt2zpg3GjCwEAAg
MyYGWQlovUT6L+kU4aKqowuwNaii64SYf/hVG8zC0/psjY3VtSNcFygcDbmjIubn
txmAwlkKR4DtdteeGZF01ryBcOzJQCFselWlmjfy2lolewkbEj3I4IRCEDpzAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUumGY/vCvR5TizpE42NtgcOSwwYgwHwYDVR0j
BBgwFoAUmLItX18ZeZQOCywfpaZq5ygb+zEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQ0UyQjA5OTUzMzA1RTBFREQ4MEIxNTU4MTIxQURFNDBD
RDY0QzRBODAxODNDMDlCRTAzMTVCOUJGQTU1QTQyLzAvOThCMjJENUY1RjE5Nzk5
NDBFMEIyQzFGQTVBNjZBRTcyODFCRkIzMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OEIyMkQ1RjVGMTk3OTk0MEUw
QjJDMUZBNUE2NkFFNzI4MUJGQjMxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUNFMkIwOTk1MzMwNUUwRUREODBCMTU1ODEyMUFERTQwQ0Q2NEM0QTgw
MTgzQzA5QkUwMzE1QjlCRkE1NUE0Mi8wLzk4QjIyRDVGNUYxOTc5OTQwRTBCMkMx
RkE1QTY2QUU3MjgxQkZCMzEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCnw5I35y/Mv+HEAUqGS8cXcl6m
WhlvDbNB3qCzpvjA1n6X0IdoZdr0L9gO9Wa/brXmzNRxTVLURDmTLClnwmE6IzeL
EumOwvf84b9ZuMrVC5WdTYKN7T/83G/e2q7fvN0VGGjU56w2XVaLgRQ/yV87eNJq
gcwF5ewdRo1PpA/r6QIyBF65IMZ10FjiG6GOUK0hY3u3AE8KSIRpTZ2E3Jswbv2v
we44kmek3FWipnzHLZspX1ToVyJMrZ2oEdsSXz4QIv88bzvbVn5tdMfV6b9bZSQs
by4+9ouQVCMR9H5TGZgWv9NtYNYzlUEOJHKyE5ZelH7X15fil+hgt1vj28Cf
-----END CERTIFICATE-----