Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F795901C2F5F3693F09B6D80474803E659E531BBB6756D9FBC48A26AA5604BCE/0/845A11C928BFE1E8ED4CA40A68A609BC4386CBE1.mft
File:                     845A11C928BFE1E8ED4CA40A68A609BC4386CBE1.mft (raw, json)
Hash identifier:          Qt/bKwazA/vFJtW6x5KiNmA66QsQaev/jMchxh0XQIo=
Subject key identifier:   A4:40:DB:92:B7:B7:46:A6:2A:B8:6A:05:3A:81:CC:53:FC:7D:2E:5E
Authority key identifier: 84:5A:11:C9:28:BF:E1:E8:ED:4C:A4:0A:68:A6:09:BC:43:86:CB:E1
Certificate issuer:       /CN=845A11C928BFE1E8ED4CA40A68A609BC4386CBE1
Certificate serial:       7E4BABE1DEBBD0C7296EA94F1F8A7F95EE93957B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/845A11C928BFE1E8ED4CA40A68A609BC4386CBE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F795901C2F5F3693F09B6D80474803E659E531BBB6756D9FBC48A26AA5604BCE/0/845A11C928BFE1E8ED4CA40A68A609BC4386CBE1.mft
Manifest number:          AB
Signing time:             Thu 30 Jan 2025 00:33:53 +0000
Manifest this update:     Thu 30 Jan 2025 00:28:53 +0000
Manifest next update:     Tue 04 Feb 2025 03:00:53 +0000
Files and hashes:         1: 323830333a3339303a3a2f33322d3332203d3e20323733303131.roa (hash: rQogkq9ynNYUsFTaNgRhIfkBoR7Q34/YXjQinsqk3HE=)
                          2: 323830333a3339303a636163303a3a2f34342d3434203d3e20323733303131.roa (hash: O28/v4Onmd7lAvPvuqeE7zAMzXaBudUn99lLxY4pI14=)
                          3: 845A11C928BFE1E8ED4CA40A68A609BC4386CBE1.crl (hash: Y9SQQ3LQvhnEaJNh5ziz9hyLd47GMFMbya63ETgdQ/w=)
                          4: 323830333a3339303a636363303a3a2f34342d3434203d3e20323733303131.roa (hash: uu3JRaeLnrgCq6F5XTbCNdvHy9pd6wzK79jgqX+iG60=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:4b:ab:e1:de:bb:d0:c7:29:6e:a9:4f:1f:8a:7f:95:ee:93:95:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845A11C928BFE1E8ED4CA40A68A609BC4386CBE1
        Validity
            Not Before: Jan 30 00:28:53 2025 GMT
            Not After : Feb  4 03:00:53 2025 GMT
        Subject: CN=A440DB92B7B746A62AB86A053A81CC53FC7D2E5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:79:53:1f:1e:b9:7c:33:2b:9e:14:70:97:2d:
                    cb:34:96:e6:76:0c:20:51:f9:f0:a9:71:f0:8c:e6:
                    dc:57:33:b3:60:24:1a:d7:de:18:05:bd:f2:86:bc:
                    94:6e:ef:62:51:90:67:d5:76:74:fc:ae:f9:47:fd:
                    f7:dd:2b:88:df:04:0e:07:5b:3a:18:27:62:b6:11:
                    27:77:9e:dc:db:c4:d0:e3:be:de:4a:1c:06:17:9d:
                    38:ae:b0:53:b6:32:1f:8b:77:0c:d7:51:f9:35:6b:
                    bd:1f:e8:8c:32:cc:4c:2b:7d:91:67:3c:61:96:5a:
                    9b:1a:f2:56:b6:cb:7c:b7:4c:90:e3:b6:9b:5e:c2:
                    a5:f4:d3:dc:64:1c:7e:88:57:c7:26:d7:0c:ad:6c:
                    7b:63:10:c0:67:ac:11:a8:75:3c:f4:0a:2d:21:94:
                    3a:f7:c0:bc:23:c7:d8:8a:e1:b9:ed:68:0c:a7:33:
                    ba:5e:fa:1c:5d:98:15:66:f6:d6:80:0e:fc:15:66:
                    74:51:06:c7:74:06:c8:37:00:34:e8:ae:62:42:7f:
                    56:3a:cf:86:e0:1b:a3:70:ab:fc:66:47:7f:3b:ac:
                    48:91:44:2e:d7:b6:7b:d3:09:d2:66:c5:2a:76:7c:
                    5f:34:28:32:bf:be:20:75:de:1a:fe:85:42:65:b3:
                    5f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:40:DB:92:B7:B7:46:A6:2A:B8:6A:05:3A:81:CC:53:FC:7D:2E:5E
            X509v3 Authority Key Identifier:
                keyid:84:5A:11:C9:28:BF:E1:E8:ED:4C:A4:0A:68:A6:09:BC:43:86:CB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F795901C2F5F3693F09B6D80474803E659E531BBB6756D9FBC48A26AA5604BCE/0/845A11C928BFE1E8ED4CA40A68A609BC4386CBE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/845A11C928BFE1E8ED4CA40A68A609BC4386CBE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F795901C2F5F3693F09B6D80474803E659E531BBB6756D9FBC48A26AA5604BCE/0/845A11C928BFE1E8ED4CA40A68A609BC4386CBE1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ce:f3:23:1a:f6:bd:ac:bd:3c:8a:a7:25:93:0b:39:fd:6b:
         e2:35:4f:ae:ce:43:10:82:d7:4e:3b:94:5b:1b:bf:b5:26:0f:
         e2:c2:7a:52:51:90:e0:70:a2:60:80:74:f5:c0:cf:47:11:62:
         0f:5b:11:96:0a:e9:f6:49:cd:f9:9d:26:a9:42:28:cc:86:7c:
         ef:c5:db:68:e2:65:8b:da:63:78:b2:06:90:de:99:ee:f1:8f:
         7d:1a:4e:5f:a3:e5:b8:dc:a7:6e:02:41:50:39:4a:64:3d:42:
         79:85:1f:0f:cc:f2:0d:c8:a8:2d:2a:68:13:10:e9:29:eb:51:
         0a:6a:31:ac:ec:e2:f8:b0:fd:f1:a5:a1:f1:1e:2e:2b:a9:c5:
         cf:cb:c2:55:3e:2a:07:7f:7a:fb:52:5e:43:7b:20:b5:81:6c:
         ff:d2:07:b7:b8:a6:c9:ff:3e:fa:8d:9a:7a:b6:ed:1c:36:a8:
         a7:49:e8:a7:cb:62:39:df:92:cd:0c:a4:d0:26:14:31:4c:4e:
         2f:9e:a9:cd:e1:40:6a:f7:e1:22:a5:53:46:19:89:ae:97:0f:
         8e:f4:fb:f9:29:2d:62:5d:3b:b7:e6:72:2a:75:ea:e7:60:49:
         cb:27:16:4c:d3:78:27:17:28:94:62:08:d5:35:49:4a:08:66:
         5a:73:ab:15
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUfkur4d670McpbqlPH4p/le6TlXswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ1QTExQzkyOEJGRTFFOEVENENBNDBBNjhBNjA5QkM0
Mzg2Q0JFMTAeFw0yNTAxMzAwMDI4NTNaFw0yNTAyMDQwMzAwNTNaMDMxMTAvBgNV
BAMTKEE0NDBEQjkyQjdCNzQ2QTYyQUI4NkEwNTNBODFDQzUzRkM3RDJFNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCveVMfHrl8MyueFHCXLcs0luZ2
DCBR+fCpcfCM5txXM7NgJBrX3hgFvfKGvJRu72JRkGfVdnT8rvlH/ffdK4jfBA4H
WzoYJ2K2ESd3ntzbxNDjvt5KHAYXnTiusFO2Mh+LdwzXUfk1a70f6IwyzEwrfZFn
PGGWWpsa8la2y3y3TJDjtptewqX009xkHH6IV8cm1wytbHtjEMBnrBGodTz0Ci0h
lDr3wLwjx9iK4bntaAynM7pe+hxdmBVm9taADvwVZnRRBsd0Bsg3ADTormJCf1Y6
z4bgG6Nwq/xmR387rEiRRC7XtnvTCdJmxSp2fF80KDK/viB13hr+hUJls1/5AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUpEDbkre3RqYquGoFOoHMU/x9Ll4wHwYDVR0j
BBgwFoAUhFoRySi/4ejtTKQKaKYJvEOGy+EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzk1OTAxQzJGNUYzNjkzRjA5QjZEODA0NzQ4MDNFNjU5
RTUzMUJCQjY3NTZEOUZCQzQ4QTI2QUE1NjA0QkNFLzAvODQ1QTExQzkyOEJGRTFF
OEVENENBNDBBNjhBNjA5QkM0Mzg2Q0JFMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NDVBMTFDOTI4QkZFMUU4RUQ0
Q0E0MEE2OEE2MDlCQzQzODZDQkUxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjc5NTkwMUMyRjVGMzY5M0YwOUI2RDgwNDc0ODAzRTY1OUU1MzFCQkI2
NzU2RDlGQkM0OEEyNkFBNTYwNEJDRS8wLzg0NUExMUM5MjhCRkUxRThFRDRDQTQw
QTY4QTYwOUJDNDM4NkNCRTEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBbzvMjGva9rL08iqclkws5/Wvi
NU+uzkMQgtdOO5RbG7+1Jg/iwnpSUZDgcKJggHT1wM9HEWIPWxGWCun2Sc35nSap
QijMhnzvxdto4mWL2mN4sgaQ3pnu8Y99Gk5fo+W43KduAkFQOUpkPUJ5hR8PzPIN
yKgtKmgTEOkp61EKajGs7OL4sP3xpaHxHi4rqcXPy8JVPioHf3r7Ul5DeyC1gWz/
0ge3uKbJ/z76jZp6tu0cNqinSeiny2I535LNDKTQJhQxTE4vnqnN4UBq9+EipVNG
GYmulw+O9Pv5KS1iXTu35nIqdernYEnLJxZM03gnFyiUYgjVNUlKCGZac6sV
-----END CERTIFICATE-----